WorkflowScripts\AutoSecWorkflowTests.cs (7)
856[InlineData("extension/package-lock.json", PackageLockBase, LockVersion20, LockVersion21, "workspace", "")]
859[InlineData("extension/package-lock.json", PackageLockBase, " \"version\": \"4.17.20\",", " \"version\": \"4.17.21\",", "workspace", "unbound-lockfile-artifact")]
861[InlineData("extension/package-lock.json", PackageLockBase, LockVersion20, " \"version\": \"4.17.21\",\n \"resolved\": \"" + NpmRegistry + "evil/-/evil-1.0.0.tgz\"", "workspace", "unbound-lockfile-artifact")]
864[InlineData("extension/package-lock.json", PackageLockBase, LockVersion20, " \"version\": \"4.17.21\",\n \"note\": \"GHSA-xxxx\",\n \"resolved\": \"" + NpmRegistry + "lodash/-/lodash-4.17.21.tgz\"", "workspace", "forbidden-public-text")]
865[InlineData("extension/package-lock.json", PackageLockBase, LockVersion20, " \"version\": \"4.17.21\",\n \"note\": \"alert 42: prototype pollution in lodash\",\n \"resolved\": \"" + NpmRegistry + "lodash/-/lodash-4.17.21.tgz\"", "workspace", "unsupported-lockfile-text")]
873[InlineData("extension/package-lock.json", PackageLockBase, LockVersion20, " \"version\": \"4.17.21\",\n \"resolved\": \"https://evil.example/lodash/-/lodash-4.17.21.tgz\"", "workspace", "new-package-source")]
874[InlineData("extension/package-lock.json", PackageLockBase, LockVersion20, " \"version\": \"4.17.21\",\n \"resolved\": \"https://evil.example/lodash/-/lodash-4.17.21.tgz\"", "workspace-with-stale-branch", "new-package-source")]