WorkflowScripts\AutoSecWorkflowTests.cs (8)
846private const string LockVersion20 = " \"version\": \"4.17.20\",\n \"resolved\": \"" + NpmRegistry + "lodash/-/lodash-4.17.20.tgz\"";
847private const string LockVersion21 = " \"version\": \"4.17.21\",\n \"resolved\": \"" + NpmRegistry + "lodash/-/lodash-4.17.21.tgz\"";
848private const string YarnVersion20 = " version \"4.17.20\"\n resolved \"" + NpmRegistry + "lodash/-/lodash-4.17.20.tgz#abc\"";
849private const string YarnVersion21 = " version \"4.17.21\"\n resolved \"" + NpmRegistry + "lodash/-/lodash-4.17.21.tgz#abc\"";
861[InlineData("extension/package-lock.json", PackageLockBase, LockVersion20, " \"version\": \"4.17.21\",\n \"resolved\": \"" + NpmRegistry + "evil/-/evil-1.0.0.tgz\"", "workspace", "unbound-lockfile-artifact")]
862[InlineData("app/yarn.lock", YarnLockBase, YarnVersion20, " version \"4.17.21\"\n resolved \"" + NpmRegistry + "lodash/-/lodash-4.17.21.tgz#abc\" # alert 42", "workspace", "lockfile-comment")]
864[InlineData("extension/package-lock.json", PackageLockBase, LockVersion20, " \"version\": \"4.17.21\",\n \"note\": \"GHSA-xxxx\",\n \"resolved\": \"" + NpmRegistry + "lodash/-/lodash-4.17.21.tgz\"", "workspace", "forbidden-public-text")]
865[InlineData("extension/package-lock.json", PackageLockBase, LockVersion20, " \"version\": \"4.17.21\",\n \"note\": \"alert 42: prototype pollution in lodash\",\n \"resolved\": \"" + NpmRegistry + "lodash/-/lodash-4.17.21.tgz\"", "workspace", "unsupported-lockfile-text")]