search

RetireJS / retire.js

scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.
https://retirejs.github.io/retire.js/
Other
3.6k stars 412 forks source link

Require Support #418

Closed 0xAmal closed 10 months ago

0xAmal commented 10 months ago

I am reaching out to seek your assistance regarding an issue we are facing while attempting to integrate Retire.js into our Jenkins Pipeline. output only showing as below <?xml version="1.0"?>

                        RetireJS            retire.js            4.3.1                 
eoftedal commented 10 months ago

What problem are you experiencing?

0xAmal commented 10 months ago

after running it showing no issues image

eoftedal commented 10 months ago

And what do you expect it to show?

0xAmal commented 10 months ago

i'm scanning inside a folder it required to show vulnerable js dependencies

eoftedal commented 10 months ago

You can use -v and it will print the dependencies it finds. Note that retire.js is not intended as a replacement for npm audit. npm has better coverage for node.js packages.

eoftedal commented 10 months ago

It’s hard to determine if this is a bug when we don’t know what is in your source code folder and you don’t mention what is there and what you expect to be found.

0xAmal commented 10 months ago

let me check and update

eoftedal commented 10 months ago

Any update?

eoftedal commented 10 months ago

Closing this for now. Feel free to reopen if you have new information