Reachability e2e tests (#968)

* use proper tmp directory in fix e2e tests

* rename fixture to simple-npm

* create e2e tests for the socket scan reach and socket scan reach --reach-exclude-paths commands

* e2e test --reach-ecosystems

* add requirements.txt fixture

* assert correct recahability structure in one of the e2e tests

* fix lint issues

* add reachability e2e tests to test the --cwd option and target argument

* upgrade @coana-tech/cli to v14.12.117

* fix typo

* ignore all fixtures

* upgrade coana to version 14.12.118

* increase e2e test timeout

Author: mtorp

.github/workflows/test.yml

@@ -2,10 +2,10 @@ name: Tests
 
 on:
   push:
-    branches: [main]
+    branches: [main, v1.x]
     tags: ['*']
   pull_request:
-    branches: [main]
+    branches: [main, v1.x]
   workflow_dispatch:
 
 permissions:

CHANGELOG.md

@@ -3,6 +3,10 @@
 All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
+## [1.1.44](https://github.com/SocketDev/socket-cli/releases/tag/v1.1.43) - 2025-12-09
+
+### Changed
+- Updated the Coana CLI to v `14.12.118`.
 
 ## [1.1.43](https://github.com/SocketDev/socket-cli/releases/tag/v1.1.43) - 2025-12-08
 

package.json

@@ -1,6 +1,6 @@
 {
   "name": "socket",
-  "version": "1.1.43",
+  "version": "1.1.44",
   "description": "CLI for Socket.dev",
   "homepage": "https://github.com/SocketDev/socket-cli",
   "license": "MIT AND OFL-1.1",
@@ -94,7 +94,7 @@
     "@babel/preset-typescript": "7.27.1",
     "@babel/runtime": "7.28.4",
     "@biomejs/biome": "2.2.4",
-    "@coana-tech/cli": "14.12.113",
+    "@coana-tech/cli": "14.12.118",
     "@cyclonedx/cdxgen": "11.11.0",
     "@dotenvx/dotenvx": "1.49.0",
     "@eslint/compat": "1.3.2",

pnpm-lock.yaml

@@ -1,4 +1,4 @@
 version: 2
 
 projectIgnorePaths:
-  - "test/fixtures/commands/fix"
+  - "test/fixtures/"

socket.yml

@@ -1,4 +1,6 @@
+import { randomUUID } from 'node:crypto'
 import { existsSync, promises as fs } from 'node:fs'
+import { tmpdir } from 'node:os'
 import path from 'node:path'
 
 import { describe, expect } from 'vitest'
@@ -9,6 +11,7 @@ import { cmdit, spawnSocketCli, testPath } from '../../../test/utils.mts'
 import constants, { FLAG_ID } from '../../constants.mts'
 
 const fixtureBaseDir = path.join(testPath, 'fixtures/commands/fix')
+const systemTmpDir = tmpdir()
 
 /**
  * Get environment variables for E2E test subprocess.
@@ -30,24 +33,29 @@ function getTestEnv(apiToken: string): Record<string, string | undefined> {
 /**
  * Create a temporary copy of a fixture directory for testing.
  * This allows tests to modify the fixture without affecting the original.
+ * Uses system temp directory with a unique identifier.
  */
 async function createTempFixtureCopy(
   fixtureName: string,
-): Promise<{ path: string; cleanup: () => Promise<void> }> {
+): Promise<{ cleanup: () => Promise<void>; path: string }> {
   const sourceDir = path.join(fixtureBaseDir, fixtureName)
-  const tempDir = path.join(fixtureBaseDir, `${fixtureName}-temp-${Date.now()}`)
+  const uniqueId = randomUUID()
+  const tempDir = path.join(
+    systemTmpDir,
+    `socket-cli-e2e-${fixtureName}-${uniqueId}`,
+  )
 
   await fs.cp(sourceDir, tempDir, { recursive: true })
 
   return {
-    path: tempDir,
     cleanup: async () => {
       try {
         await fs.rm(tempDir, { force: true, recursive: true })
       } catch (e) {
         logger.warn(`Failed to clean up temp dir ${tempDir}:`, e)
       }
     },
+    path: tempDir,
   }
 }
 

src/commands/fix/cmd-fix.e2e.test.mts

@@ -306,7 +306,7 @@ describe('socket scan create', async () => {
       'create',
       FLAG_ORG,
       'fakeOrg',
-      'test/fixtures/commands/scan/reach',
+      'test/fixtures/commands/scan/simple-npm',
       FLAG_DRY_RUN,
       '--repo',
       'xyz',
@@ -371,7 +371,7 @@ describe('socket scan create', async () => {
       'create',
       FLAG_ORG,
       'fakeOrg',
-      'test/fixtures/commands/scan/reach',
+      'test/fixtures/commands/scan/simple-npm',
       FLAG_DRY_RUN,
       '--repo',
       'xyz',
@@ -406,7 +406,7 @@ describe('socket scan create', async () => {
       'create',
       FLAG_ORG,
       'fakeOrg',
-      'test/fixtures/commands/scan/reach',
+      'test/fixtures/commands/scan/simple-npm',
       FLAG_DRY_RUN,
       '--repo',
       'xyz',
@@ -435,7 +435,7 @@ describe('socket scan create', async () => {
       'create',
       FLAG_ORG,
       'fakeOrg',
-      'test/fixtures/commands/scan/reach',
+      'test/fixtures/commands/scan/simple-npm',
       FLAG_DRY_RUN,
       '--repo',
       'xyz',
@@ -528,7 +528,7 @@ describe('socket scan create', async () => {
       'create',
       FLAG_ORG,
       'fakeOrg',
-      'test/fixtures/commands/scan/reach',
+      'test/fixtures/commands/scan/simple-npm',
       FLAG_DRY_RUN,
       '--repo',
       'xyz',
@@ -596,7 +596,7 @@ describe('socket scan create', async () => {
       'create',
       FLAG_ORG,
       'fakeOrg',
-      'test/fixtures/commands/scan/reach',
+      'test/fixtures/commands/scan/simple-npm',
       FLAG_DRY_RUN,
       '--repo',
       'xyz',
@@ -622,7 +622,7 @@ describe('socket scan create', async () => {
       'create',
       FLAG_ORG,
       'fakeOrg',
-      'test/fixtures/commands/scan/reach',
+      'test/fixtures/commands/scan/simple-npm',
       FLAG_DRY_RUN,
       '--repo',
       'xyz',
@@ -648,7 +648,7 @@ describe('socket scan create', async () => {
       'create',
       FLAG_ORG,
       'fakeOrg',
-      'test/fixtures/commands/scan/reach',
+      'test/fixtures/commands/scan/simple-npm',
       FLAG_DRY_RUN,
       '--repo',
       'xyz',
@@ -678,7 +678,7 @@ describe('socket scan create', async () => {
       'create',
       FLAG_ORG,
       'fakeOrg',
-      'test/fixtures/commands/scan/reach',
+      'test/fixtures/commands/scan/simple-npm',
       FLAG_DRY_RUN,
       '--repo',
       'xyz',
@@ -711,7 +711,7 @@ describe('socket scan create', async () => {
       'create',
       FLAG_ORG,
       'fakeOrg',
-      'test/fixtures/commands/scan/reach',
+      'test/fixtures/commands/scan/simple-npm',
       FLAG_DRY_RUN,
       '--repo',
       'xyz',
@@ -736,7 +736,7 @@ describe('socket scan create', async () => {
       'create',
       FLAG_ORG,
       'fakeOrg',
-      'test/fixtures/commands/scan/reach',
+      'test/fixtures/commands/scan/simple-npm',
       FLAG_DRY_RUN,
       '--repo',
       'xyz',
@@ -761,7 +761,7 @@ describe('socket scan create', async () => {
       'create',
       FLAG_ORG,
       'fakeOrg',
-      'test/fixtures/commands/scan/reach',
+      'test/fixtures/commands/scan/simple-npm',
       FLAG_DRY_RUN,
       '--repo',
       'xyz',
@@ -791,7 +791,7 @@ describe('socket scan create', async () => {
       'create',
       FLAG_ORG,
       'fakeOrg',
-      'test/fixtures/commands/scan/reach',
+      'test/fixtures/commands/scan/simple-npm',
       FLAG_DRY_RUN,
       '--repo',
       'xyz',