[AppSec] esbuild support for IAST (esm) (#6821)

Author: CarlesDD

integration-tests/appsec/iast-esbuild/app.js renamed to integration-tests/appsec/iast-esbuild-cjs/app.js

@@ -0,0 +1,13 @@
+import './init.mjs'
+
+import express from 'express'
+
+import iastRouter from './iast/index.mjs'
+
+const app = express()
+
+app.use('/iast', iastRouter)
+
+const server = app.listen(0, () => {
+  process.send?.({ port: server.address().port })
+})

integration-tests/appsec/iast-esbuild/esbuild-no-iast.js renamed to integration-tests/appsec/iast-esbuild-cjs/esbuild-no-iast.js

@@ -0,0 +1,20 @@
+/* eslint-disable no-console */
+
+import path from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+import esbuild from 'esbuild'
+
+import esbuildCommonConfig from './esbuild.common-config.mjs'
+
+const __dirname = path.dirname(fileURLToPath(import.meta.url))
+const outfile = path.join(__dirname, 'build', 'iast-disabled.mjs')
+
+esbuild.build({
+  ...esbuildCommonConfig,
+  outfile,
+  sourcemap: false
+}).catch((err) => {
+  console.error(err)
+  process.exit(1)
+})

integration-tests/appsec/iast-esbuild/esbuild.common-config.js renamed to integration-tests/appsec/iast-esbuild-cjs/esbuild.common-config.js

@@ -0,0 +1,27 @@
+import path from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+import ddPlugin from 'dd-trace/esbuild.js'
+
+const __dirname = path.dirname(fileURLToPath(import.meta.url))
+const entryPoint = path.join(__dirname, 'app.mjs')
+
+export default {
+  entryPoints: [entryPoint],
+  bundle: true,
+  minify: false,
+  format: 'esm',
+  plugins: [ddPlugin],
+  platform: 'node',
+  target: ['node18'],
+  external: [
+    '@datadog/native-iast-taint-tracking',
+    '@datadog/wasm-js-rewriter',
+
+    // required if you encounter graphql errors during the build step
+    // see https://docs.datadoghq.com/tracing/trace_collection/automatic_instrumentation/dd_libraries/nodejs/#bundling
+    'graphql/language/visitor',
+    'graphql/language/printer',
+    'graphql/utilities'
+  ]
+}