XRAY-144147 - Onboard Yarn V4 for jf curation-audit

Author: gauriy-tech

.github/workflows/analysis.yml

@@ -48,6 +48,9 @@ jobs:
       - name: Run golangci linter
         uses: jfrog/.github/actions/golangci-lint@main
 
+      - name: Check AI help coverage
+        uses: jfrog/.github/actions/ai-help-coverage@main
+
   Go-Sec:
     runs-on: ubuntu-latest
     steps:

artifactory_test.go

@@ -225,6 +225,13 @@ func clearOrRedirectLocalCacheIfNeeded(t *testing.T, projectType project.Project
 			envVarCallbackFunc()
 			createTempDirCallback()
 		}
+	case project.Poetry:
+		poetryTempCachePath, createTempDirCallback := coreTests.CreateTempDirWithCallbackAndAssert(t)
+		envVarCallbackFunc := clientTests.SetEnvWithCallbackAndAssert(t, "POETRY_CACHE_DIR", poetryTempCachePath)
+		callbackFunc = func() {
+			envVarCallbackFunc()
+			createTempDirCallback()
+		}
 	}
 	return
 }

cli/docs/flags.go

@@ -317,7 +317,7 @@ var flagsMap = map[string]components.Flag{
 	WorkingDirs:         components.NewStringFlag(WorkingDirs, "A comma-separated(,) list of relative working directories, to determine the audit targets locations. If flag isn't provided, a recursive scan is triggered from the root directory of the project."),
 	OutputDir:           components.NewStringFlag(OutputDir, "Target directory to save partial results to.", components.SetHiddenStrFlag()),
 	UploadRepoPath:      components.NewStringFlag(UploadRepoPath, "Artifactory repository name or path to upload the cyclonedx file to. If no name or path are provided, a local generic repository will be created which will automatically be indexed by Xray.", components.WithStrDefaultValue("import-cdx-scan-results")),
-	SkipAutoInstall:     components.NewBoolFlag(SkipAutoInstall, "Set to true to skip auto-install of dependencies in un-built modules. Currently supported only for some package managers.", components.SetHiddenBoolFlag()),
+	SkipAutoInstall:     components.NewBoolFlag(SkipAutoInstall, "Set to true to skip auto-install of dependencies in un-built modules. Currently supported for Yarn, NPM, Pip, and Poetry.", components.SetHiddenBoolFlag()),
 	AllowPartialResults: components.NewBoolFlag(AllowPartialResults, "Set to true to allow partial results and continuance of the scan in case of certain errors.", components.SetHiddenBoolFlag()),
 	ExclusionsAudit: components.NewStringFlag(
 		Exclusions,