milliways-infosec/AikidoSec-safe-chain
7
0
Fork 0
mirror of https://github.com/AikidoSec/safe-chain.git synced 2026-05-26 12:10:49 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Add verbose logging setting + setup buffering of logs to prevent interleaving logs with the package manager.

Browse source
This commit is contained in:
Sander Declerck 2025-10-27 17:09:28 +01:00
parent 0b393eeb5f
commit c5e25f4813
No known key found for this signature in database
4 changed files with 64 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

7
packages/safe-chain/src/scanning/audit/index.js
View file

@ -1,3 +1,4 @@
import { ui } from "../../environment/userInteraction.js";
import {
MALWARE_STATUS_MALWARE,
openMalwareDatabase,
@ -19,8 +20,14 @@ export async function auditChanges(changes) {
);
if (malwarePackage) {
ui.writeVerboseInformation(
`Safe-chain: Package ${change.name}@${change.version} is marked as malware: ${malwarePackage.status}`
);
disallowedChanges.push({ ...change, reason: malwarePackage.status });
} else {
ui.writeVerboseInformation(
`Safe-chain: Package ${change.name}@${change.version} is clean`
);
allowedChanges.push(change);
}
}