fix(code): Fix hash mismatch when uploading binaries

PeterSchafer · CatalinSnyk · commit 33d33e92bba7 · 2025-05-05T12:24:15.000+03:00
diff --git a/cliv2/go.mod b/cliv2/go.mod
@@ -16,7 +16,7 @@ require (
 	github.com/snyk/cli-extension-sbom v0.0.0-20250422133603-a5ae6fdf0934
 	github.com/snyk/container-cli v0.0.0-20250321132345-1e2e01681dd7
 	github.com/snyk/error-catalog-golang-public v0.0.0-20250429130542-564b0605020e
-	github.com/snyk/go-application-framework v0.0.0-20250430064233-182d2c5dc53a
+	github.com/snyk/go-application-framework v0.0.0-20250505092137-65a591adf20f
 	github.com/snyk/go-httpauth v0.0.0-20240307114523-1f5ea3f55c65
 	github.com/snyk/snyk-iac-capture v0.6.5
 	github.com/snyk/snyk-ls v0.0.0-20250430123225-137c0037fe26
@@ -179,7 +179,7 @@ require (
 	github.com/shirou/gopsutil v3.21.11+incompatible // indirect
 	github.com/sirupsen/logrus v1.9.3 // indirect
 	github.com/skeema/knownhosts v1.3.1 // indirect
-	github.com/snyk/code-client-go v1.21.2 // indirect
+	github.com/snyk/code-client-go v1.21.3 // indirect
 	github.com/snyk/policy-engine v0.33.2 // indirect
 	github.com/sourcegraph/conc v0.3.0 // indirect
 	github.com/sourcegraph/go-lsp v0.0.0-20240223163137-f80c5dd31dfd // indirect
diff --git a/cliv2/go.sum b/cliv2/go.sum
@@ -802,14 +802,14 @@ github.com/snyk/cli-extension-iac-rules v0.0.0-20250227121450-6e14346dbd1a h1:SJ
 github.com/snyk/cli-extension-iac-rules v0.0.0-20250227121450-6e14346dbd1a/go.mod h1:IqfQCIkyC26mkwa+aM6d6yxIh5+tCm4fSQG+Ogq3Qbc=
 github.com/snyk/cli-extension-sbom v0.0.0-20250422133603-a5ae6fdf0934 h1:0RCTH9C0zaTrnqpKLaLXTmP7suwWEHBNVwQSaR8Aifo=
 github.com/snyk/cli-extension-sbom v0.0.0-20250422133603-a5ae6fdf0934/go.mod h1:Q8dmRgcpHTk711dkLVtpkTF5RvLkQVcExGuv1cyx/zU=
-github.com/snyk/code-client-go v1.21.2 h1:6SnfB/abNyzbgs3A7RhZHOfx0Ng3FKTdS9NrUsBGUUs=
-github.com/snyk/code-client-go v1.21.2/go.mod h1:WH6lNkJc785hfXmwhixxWHix3O6z+1zwz40oK8vl/zg=
+github.com/snyk/code-client-go v1.21.3 h1:2+HPXCA9FGn3gaI1Jw1C4Ifn/NRAbSnmohFUvz4GC4I=
+github.com/snyk/code-client-go v1.21.3/go.mod h1:WH6lNkJc785hfXmwhixxWHix3O6z+1zwz40oK8vl/zg=
 github.com/snyk/container-cli v0.0.0-20250321132345-1e2e01681dd7 h1:/2+2piwQtB9fEJCkXEOjboZjY+77lQfnvqBZ/60xNHk=
 github.com/snyk/container-cli v0.0.0-20250321132345-1e2e01681dd7/go.mod h1:38w+dcAQp9eG3P5t2eNS9eG0reut10AeJjLv5lJ5lpM=
 github.com/snyk/error-catalog-golang-public v0.0.0-20250429130542-564b0605020e h1:XFGkHDWA8JTPLr82QzoKVqGytofEYBf68VqoUq8yvXk=
 github.com/snyk/error-catalog-golang-public v0.0.0-20250429130542-564b0605020e/go.mod h1:Ytttq7Pw4vOCu9NtRQaOeDU2dhBYUyNBe6kX4+nIIQ4=
-github.com/snyk/go-application-framework v0.0.0-20250430064233-182d2c5dc53a h1:cxh5DtyXAFOyQVE+eQSDuv0iCswR3a+2TnSdM9So13g=
-github.com/snyk/go-application-framework v0.0.0-20250430064233-182d2c5dc53a/go.mod h1:1QAWcdnzXVz7OLZjtfuEwLFShJJyGA1H6fu63+RJyB4=
+github.com/snyk/go-application-framework v0.0.0-20250505092137-65a591adf20f h1:L3B/8mDqRayNAiWf2cx2nhirQQI9x9yMfxDqpA+SwcE=
+github.com/snyk/go-application-framework v0.0.0-20250505092137-65a591adf20f/go.mod h1:Hy8dugDhTPRPe99Bf4mG7zeh7+OobdWfX5dzhbeQQsU=
 github.com/snyk/go-httpauth v0.0.0-20240307114523-1f5ea3f55c65 h1:CEQuYv0Go6MEyRCD3YjLYM2u3Oxkx8GpCpFBd4rUTUk=
 github.com/snyk/go-httpauth v0.0.0-20240307114523-1f5ea3f55c65/go.mod h1:88KbbvGYlmLgee4OcQ19yr0bNpXpOr2kciOthaSzCAg=
 github.com/snyk/policy-engine v0.33.2 h1:ZxD6/RQ4vqUAXa64V72SsGjZ8vmnBgZNGYQxMIqctYo=
diff --git a/test/jest/acceptance/snyk-code/snyk-code-user-journey.spec.ts b/test/jest/acceptance/snyk-code/snyk-code-user-journey.spec.ts
@@ -7,6 +7,7 @@ import { execSync } from 'child_process';
 import { runCommand } from '../../util/runCommand';
 import * as fs from 'fs-extra';
 import { makeTmpDirectory } from '../../../utils';
+import * as crypto from 'crypto';
 
 expect.extend(matchers);
 jest.setTimeout(1000 * 120);
@@ -78,7 +79,8 @@ async function ensureUniqueBundleIsUsed(path: string): Promise<string> {
   }
 
   // add a random file to ensure a new bundle is created
-  fs.writeFileSync(`${newPath}/tmp.java`, `test${Math.random().toString(36)}`);
+  const randomBytes: Buffer = crypto.randomBytes(100);
+  fs.writeFileSync(`${newPath}/tmp.java`, randomBytes, { encoding: 'binary' });
   return newPath;
 }
 

Original file line number	Diff line number	Diff line change
`@@ -7,6 +7,7 @@ import { execSync } from 'child_process';`
`7`	`7`	`import { runCommand } from '../../util/runCommand';`
`8`	`8`	`import * as fs from 'fs-extra';`
`9`	`9`	`import { makeTmpDirectory } from '../../../utils';`
	`10`	`+import * as crypto from 'crypto';`
`10`	`11`
`11`	`12`	`expect.extend(matchers);`
`12`	`13`	`jest.setTimeout(1000 * 120);`
`@@ -78,7 +79,8 @@ async function ensureUniqueBundleIsUsed(path: string): Promise<string> {`
`78`	`79`	`}`
`79`	`80`
`80`	`81`	`// add a random file to ensure a new bundle is created`
`81`		- fs.writeFileSync(`${newPath}/tmp.java`, `test${Math.random().toString(36)}`);
	`82`	`+ const randomBytes: Buffer = crypto.randomBytes(100);`
	`83`	+ fs.writeFileSync(`${newPath}/tmp.java`, randomBytes, { encoding: 'binary' });
`82`	`84`	`return newPath;`
`83`	`85`	`}`
`84`	`86`