audit.xml

<?xml version="1.0"?>

<!-- 
  This program and the accompanying materials are
  made available under the terms of the Eclipse Public License v2.0 which accompanies
  this distribution, and is available at https://www.eclipse.org/legal/epl-v20.html
  
  SPDX-License-Identifier: EPL-2.0
  
  Copyright Contributors to the Zowe Project.
-->
<project default="traverse" xmlns:if="ant:if" xmlns:unless="ant:unless">
  <record name="build.log" loglevel="info"/>
  <import file="common.xml"/>
  <property name="traverseTarget" value="audit"/>
  
  <condition property="isWindows">
    <os family="windows"/>
  </condition>

  <condition property="isUnix">
    <os family="unix"/>
  </condition>

  <condition property="isZos">
    <os family="z/os"/>
  </condition>
  
  <target name="audit">
    <mkdir dir="${build}/artifacts/audit"/>
    <antcall target="generate_audit_report">
      <param name="packagejson.Location" value="${pluginDir}/${plugin}"/>
    </antcall>
    
    <for param="subfolder">
      <path>
        <dirset dir="${pluginDir}/${plugin}" includes="*"/>
      </path>
      <sequential>
        <antcall target="generate_audit_report">
          <param name="packagejson.Location" value="@{subfolder}"/>
        </antcall>
      </sequential>
    </for>
    
  </target>
  
  <target name="generate_audit_report" depends="package.jsonExists" if="package.jsonPresent">
    <exec executable="cmd" 
          dir="${packagejson.Location}" 
          osfamily="windows" 
          resultproperty="rc"
          searchpath="true"
          output="${build}/artifacts/audit/${plugin_id}_audit.log">
      <arg line="/c npm audit"/>
    </exec>
    <exec executable="npm" 
          dir="${packagejson.Location}" 
          osfamily="unix"  
          resultproperty="rc"
          searchpath="true"
          output="${build}/artifacts/audit/${plugin_id}_audit.log">
      <arg line="audit"/>
    </exec>
  </target>
  
  <target name="package.jsonExists">
    <available file="${packagejson.Location}/package.json" property="package.jsonPresent"/>
  </target>
</project>
<!-- 
  This program and the accompanying materials are
  made available under the terms of the Eclipse Public License v2.0 which accompanies
  this distribution, and is available at https://www.eclipse.org/legal/epl-v20.html
  
  SPDX-License-Identifier: EPL-2.0
  
  Copyright Contributors to the Zowe Project.
-->