v1.91.135.0 fix(cso-eval): producer artifact inventory recognizes dependency-closure file names (#3265)

* fix(cso-eval): producer artifact inventory recognizes dependency-closure file names

* v1.91.135.0 stamp
This commit is contained in:
Garry Tan authored and GitHub committed 2026-10-18 09:12:41 +00:00
1 parent a2a6cabfa6
commit 25dbe34f42
6 files changed
+16 -5

No files matched your search

+2 -2
View File
@@ -179,8 +179,8 @@ function emptyArtifactInventory(): ProducerArtifactInventory {
return { ...base, identityHash: producerArtifactInventoryHash(base) };
}
/** A whole path component that is one of the helper's own identifiers: `<epoch ms>-<hex>` run and replay IDs, retired runs, and hex artifact IDs with an optional lowercase-word prefix (`gitleaks-<hex>-<hex>.json`). */
const HELPER_ID_COMPONENT = /^(?:\d{13}-[a-f0-9]{16}|\.retired-\d{13}-[a-f0-9]{16}-[a-f0-9]{32}|(?:[a-z]+-)*[a-f0-9]{16,64}(?:-[a-f0-9]{16})*(?:\.[a-z]+)?)$/;
/** A whole path component that is one of the helper's own identifiers: `<epoch ms>-<hex>` run and replay IDs, retired runs, hex artifact IDs with an optional lowercase-word prefix (`gitleaks-<hex>-<hex>.json`), and dependency-closure files (`<finding id>-before|after-<plan hash>.json`). */
const HELPER_ID_COMPONENT = /^(?:\d{13}-[a-f0-9]{16}|\.retired-\d{13}-[a-f0-9]{16}-[a-f0-9]{32}|(?:[a-z]+-)*[a-f0-9]{16,64}(?:-[a-f0-9]{16})*(?:\.[a-z]+)?|[a-f0-9]{64}-(?:before|after)-[a-f0-9]{16}\.json)$/;
/**
* Helper artifact paths are `<repoId>/<runId>/...` plus the helper's public-cache/ and legacy-imports/. Components that