add package manager symlinks to denylist (#4921)

DataDog · Nov 21, 2024 · 76c6783 · 76c6783
1 parent 1a55134
commit 76c6783
Show file tree

Hide file tree

Showing 2 changed files with 43 additions and 1 deletion.
diff --git a/.gitlab/requirements_block.json b/.gitlab/requirements_block.json
@@ -6,6 +6,9 @@
   {"name": "unsupported 2.x.x glibc x64","filepath": "/some/path", "args": [], "envars": [], "host": {"os": "linux", "arch": "arm64", "libc": "glibc:2.16.9"}},
   {"name": "unsupported 2.x.x glibc x86","filepath": "/some/path", "args": [], "envars": [], "host": {"os": "linux", "arch": "x86", "libc": "glibc:2.17"}},
   {"name": "npm","filepath": "/pathto/node", "args": ["/pathto/node", "/pathto/npm-cli.js"], "envars": [], "host": {"os": "linux", "arch": "x64", "libc": "glibc:2.40"}},
+  {"name": "npm-symlink","filepath": "/pathto/node", "args": ["/pathto/node", "/pathto/npm"], "envars": [], "host": {"os": "linux", "arch": "x64", "libc": "glibc:2.40"}},
   {"name": "yarn","filepath": "/pathto/node", "args": ["/pathto/node", "/pathto/yarn.js"], "envars": [], "host": {"os": "linux", "arch": "x64", "libc": "glibc:2.40"}},
-  {"name": "pnpm","filepath": "/pathto/node", "args": ["/pathto/node", "/pathto/pnpm.cjs"], "envars": [], "host": {"os": "linux", "arch": "x64", "libc": "glibc:2.40"}}
+  {"name": "yarn-symlink","filepath": "/pathto/node", "args": ["/pathto/node", "/pathto/yarn"], "envars": [], "host": {"os": "linux", "arch": "x64", "libc": "glibc:2.40"}},
+  {"name": "pnpm","filepath": "/pathto/node", "args": ["/pathto/node", "/pathto/pnpm.cjs"], "envars": [], "host": {"os": "linux", "arch": "x64", "libc": "glibc:2.40"}},
+  {"name": "pnpm-symlink","filepath": "/pathto/node", "args": ["/pathto/node", "/pathto/pnpm"], "envars": [], "host": {"os": "linux", "arch": "x64", "libc": "glibc:2.40"}}
 ]
diff --git a/requirements.json b/requirements.json
@@ -55,6 +55,19 @@
       "args": [{ "args":  ["*/npm-cli.js"], "position": 1}],
       "envars": null
     },
+    {
+      "id": "npm_symlink",
+      "description": "Ignore the npm CLI",
+      "os": null,
+      "cmds": [
+        "**/node",
+        "**/nodejs",
+        "**/ts-node",
+        "**/ts-node-*"
+      ],
+      "args": [{ "args":  ["*/npm"], "position": 1}],
+      "envars": null
+    },
     {
       "id": "yarn",
       "description": "Ignore the yarn CLI",
@@ -68,6 +81,19 @@
       "args": [{ "args":  ["*/yarn.js"], "position": 1}],
       "envars": null
     },
+    {
+      "id": "yarn_symlink",
+      "description": "Ignore the yarn CLI",
+      "os": null,
+      "cmds": [
+        "**/node",
+        "**/nodejs",
+        "**/ts-node",
+        "**/ts-node-*"
+      ],
+      "args": [{ "args":  ["*/yarn"], "position": 1}],
+      "envars": null
+    },
     {
       "id": "pnpm",
       "description": "Ignore the pnpm CLI",
@@ -80,6 +106,19 @@
       ],
       "args": [{ "args":  ["*/pnpm.cjs"], "position": 1}],
       "envars": null
+    },
+    {
+      "id": "pnpm_symlink",
+      "description": "Ignore the pnpm CLI",
+      "os": null,
+      "cmds": [
+        "**/node",
+        "**/nodejs",
+        "**/ts-node",
+        "**/ts-node-*"
+      ],
+      "args": [{ "args":  ["*/pnpm"], "position": 1}],
+      "envars": null
     }
   ]
 }