snyk-delta

import { getCodeDelta } from 'snyk-delta'; import * as fs from 'fs'; import * as path from 'path'; const SNYK_TOKEN = process.env.SNYK_TOKEN ?? ''; // Ensure SNYK_TOKEN is set const ORG_ID = process.env.SNYK_ORG_ID ?? 'YOUR_SNYK_ORG_ID'; // Replace with your Snyk Organization ID async function compareSnykCodeResults() { if (!SNYK_TOKEN || ORG_ID === 'YOUR_SNYK_ORG_ID') { console.error('Error: Please set SNYK_TOKEN and SNYK_ORG_ID environment variables or replace placeholder.'); process.exit(1); } // Create dummy SARIF files for demonstration if they don't exist const baselineSarifPath = path.join(__dirname, 'baseline.sarif.json'); const currentSarifPath = path.join(__dirname, 'current.sarif.json'); if (!fs.existsSync(baselineSarifPath)) { fs.writeFileSync(baselineSarifPath, JSON.stringify({"runs": []}, null, 2)); } if (!fs.existsSync(currentSarifPath)) { // In a real scenario, this would be generated by `snyk code test --sarif > current.sarif.json` fs.writeFileSync(currentSarifPath, JSON.stringify({"runs": []}, null, 2)); } try { const options = { baselineOrg: ORG_ID, // Optional: target a specific baseline project, otherwise `snyk-delta` attempts to find one // baselineProject: 'your-baseline-project-uuid', // Optional: recommended for Code Analysis projects // projectName: 'owner/repo', // targetReference: 'main', // api: 'https://api.snyk.io/api/v1', // Snyk API endpoint, default value }; console.log('Comparing Snyk Code results...'); const deltaReport = await getCodeDelta(baselineSarifPath, currentSarifPath, options, SNYK_TOKEN); if (deltaReport.newFindings.length > 0) { console.log(`\nFound ${deltaReport.newFindings.length} new code findings:\n`); deltaReport.newFindings.forEach(finding => { const location = finding.locations[0]?.physicalLocation; const filePath = location?.artifactLocation?.uri || 'unknown file'; const lineNumber = location?.region?.startLine || 'unknown line'; console.log(` - [${finding.ruleId}] ${finding.message.text} (${filePath}:${lineNumber})`); }); process.exit(1); // Exit with 1 if new findings are present } else { console.log('\nNo new code findings introduced. Exiting with 0.'); process.exit(0); // Exit with 0 if no new findings } } catch (error) { console.error('An error occurred during delta comparison:', error); process.exit(2); // Exit with 2 on error } } compareSnykCodeResults();