Skip to content

codeintel/lockfiles: Introduce yarn.lock parser

Warren Gifford requested to merge ts/yarn-lockfile-parser into main

Created by: tsenart

Background

This commit introduces a yarn.lock parser and refactors the existing package-lock.json parser to reuse github.com/aquasecurity/go-dep-parser. As part of this PR, we also introduce support for sub repo permissions checking by using git.LsFiles.

Test plan

Unit and integration tests.

Merge request reports