add --all flag for socket fix and make it incompatible with --id
#967
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
implicitly use `--all` if no `--id` but warn that this is deprecated in local mode
jdalton
approved these changes
Dec 8, 2025
jdalton
deleted the
jfblaa/rea-327-add-explicit-all-for-socket-fix-local-mode
branch
jdalton
added a commit
that referenced
this pull request
Dec 9, 2025
Ported from v1.x commit da83fa1 (#967) - Add --all flag to process all discovered vulnerabilities in local mode - Make --all incompatible with --id (mutually exclusive) - Add deprecation warning when neither --all nor --id provided in local mode - Update shouldDiscoverGhsaIds logic to check all || !ghsas.length - Pass all flag through cmd-fix -> handle-fix -> coana-fix - Update test fixtures to include all parameter Based on PR #967
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
implicitly use
--allif no--idbut warn that this is deprecated in local modeNote
Adds
--alltosocket fix(cannot be combined with--id), warns in local mode when neither is provided, and threads the flag through CLI, logic, types, and tests.socket fixCLI--allflag to process all discovered vulnerabilities in local mode; update help text.--alland--idwith input validation.--id, but log deprecation warning if--allnot provided.allthroughcmd-fix.mts→handle-fix.mts→coana-fix.mtsandtypes.mts.all || !ghsas.length.--allacceptance, incompatibility with--id, and use with--ecosystems.1.1.43and updateCHANGELOG.md.Written by Cursor Bugbot for commit 5494efb. Configure here.