b2c-crm-sync icon indicating copy to clipboard operation
b2c-crm-sync copied to clipboard

High Vulnerabilities found -

Open neeraj-jain01 opened this issue 3 years ago • 13 comments

When running npm install step, it reported 76 vulnerabilities (2 low, 69 moderate, 5 high). Is it normal ? I ran npm audit fix. The number and type of vulnerabilities remained same. I went ahead with the deployment instructions but in step 14 (Deploy the b2c-crm-sync Application Code to Your Salesforce Org) , deployment fails :

npm run crm-sync:sf:org:deploy ....

-- deploying the base meta-data to the specified Salesforce Org; please standby ,----------------------------------------------------------------------. | | | | | 88888888888 88 | | 88 88 | | 88 88 | | 88aaaaa 8b,dPPYba, 8b,dPPYba, ,adPPYba, 8b,dPPYba, 88 | | 88"“”"” 88P’ “Y8 88P’ “Y8 a8” “8a 88P’ “Y8 88 | | 88 88 88 8b d8 88 “” | | 88 88 88 “8a, ,a8" 88 aa | | 88888888888 88 88 “YbbdP”' 88 88 | | | | | | Oh no! Not one of these :( | | | | It looks like you’ve run into an error or exception. | | Please log an issue via | | https://github.com/SalesforceCommerceCloud/b2c-crm-sync/issues. | | That’s the best way to engage us. Thank you for your support! | | | ----------------------------------------------------------------------' [ { “stack”: “DeployFailed: Deploy failed.\n at DeployResultFormatter.display (/Users/neeraj.jain/b2c-crm-sync-master/node_modules/@salesforce/plugin-source/lib/formatters/deployResultFormatter.js:61:19)\n at Deploy.formatResult (/Users/neeraj.jain/b2c-crm-sync-master/node_modules/@salesforce/plugin-source/lib/commands/force/source/deploy.js:127:23)\n at Deploy.run (/Users/neeraj.jain/b2c-crm-sync-master/node_modules/@salesforce/plugin-source/lib/commands/force/source/deploy.js:40:21)\n at processTicksAndRejections (node:internal/process/task_queues:93:5)\n at async Deploy._run (/Users/neeraj.jain/b2c-crm-sync-master/node_modules/@salesforce/command/lib/sfdxCommand.js:81:40)“, “message”: “Deploy failed.“, “name”: “DeployFailed”, “exitCode”: 1, “commandName”: “Deploy”, “code”: “Error” } ]

Thanks Neeraj

neeraj-jain01 avatar Jan 10 '22 05:01 neeraj-jain01

It's a valid issue. Better to get high vulnerabilities fixed. All highs are related to glob-parent https://github.com/advisories/GHSA-896r-f27r-55mw. You can manually update the package-lock file for the glob-parent version and get rid of high vulnerability but it may end up in conflict or other dependencies issues. I tried but need to do the setup to test the build and deployment. image

For the error (deployResultFormatter), Can you please check if your nodejs version is as per the recommendation?

Cheers

chandanrjit avatar Jan 10 '22 09:01 chandanrjit

Hi @chandanrjit ,

The nodejs version is 15.2.1. I reran the steps from beginning and again failed at the same step. The failure message is not helpful. I can run through the process with you if it helps in resolving the issue.

Thanks

Neeraj

neeraj-jain01 avatar Jan 11 '22 02:01 neeraj-jain01

Hi @neeraj-jain01 , Let's connect on this. Cheers

chandanrjit avatar Jan 12 '22 07:01 chandanrjit

Hi @chandanrjit ,

I am based in Melbourne, Australia. Current time is 1.30 AM. Let me know as to what time suits you ?

Thanks Neeraj

neeraj-jain01 avatar Jan 12 '22 14:01 neeraj-jain01

Hey @neeraj-jain01 , Let's do it tomorrow (15th Jan around 14:00 PM AEDT). google hangout [email protected]

chandanrjit avatar Jan 13 '22 22:01 chandanrjit

Hi @chandanrjit , I will be available from 2PM to 3.30 PM. Let us try to identify and resolve the issue. Thanks Neeraj

neeraj-jain01 avatar Jan 14 '22 15:01 neeraj-jain01

Hi @chandanrjit ,

I am available now. I have sent you a meeting invite to your hotmail email address. Please Join.

Thanks Neeraj

neeraj-jain01 avatar Jan 15 '22 02:01 neeraj-jain01

Hi @chandanrjit ,

It appears that you are busy elsewhere. I am signing off from Google Meet Session. Please let me know as to when you are avlbl this weekend or Monday. Thanks

Neeraj

neeraj-jain01 avatar Jan 15 '22 03:01 neeraj-jain01

I missing your invite @neeraj-jain01 . Can you send the invite for tomorrow 6PM NZ time?

chandanrjit avatar Jan 15 '22 03:01 chandanrjit

Hi @chandanrjit ,

Should I send the invite to [email protected] or any other email address ?

Thanks Neeraj

neeraj-jain01 avatar Jan 15 '22 03:01 neeraj-jain01

@chandanrjit , I have sent you an invite for 6 PM NZ time tomorrow. The link is provided below : meet.google.com/sus-qaeb-hom Thanks Neeraj

neeraj-jain01 avatar Jan 15 '22 04:01 neeraj-jain01

Hi @chandanrjit ,

Seems you are busy today. I am signing off from Google Meet. Please let me know the time we can catch up and continue from where we left on Sunday.

Thanks Neeraj

neeraj-jain01 avatar Jan 17 '22 06:01 neeraj-jain01

Hi @chandanrjit ,

Can we start back on this issue and deploy b2c CRM sync in my environment?

Thanks Neeraj

neeraj-jain01 avatar Feb 09 '22 05:02 neeraj-jain01