heimdall_tools 1.3.31 → 1.3.32

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (9) hide show
  1. checksums.yaml +4 -4
  2. data/README.md +18 -0
  3. data/lib/data/cwe-nist-mapping.csv +8 -4
  4. data/lib/heimdall_tools.rb +1 -0
  5. data/lib/heimdall_tools/cli.rb +14 -0
  6. data/lib/heimdall_tools/help/snyk_mapper.md +7 -0
  7. data/lib/heimdall_tools/snyk_mapper.rb +161 -0
  8. metadata +4 -3
  9. data/CHANGELOG.md +0 -285
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 1587fb5ef791c957076dc7864b026672d2c77a602ceba619087bf680a7ac79f2
4
- data.tar.gz: f5209e76e38bc08d68699e1239a88618b0332fc34b25b3b54ca647529556c851
3
+ metadata.gz: ba19125388e2eaa3aad2b463ee44c3345ce5ed7e0387da28ff1aea3337a633ca
4
+ data.tar.gz: dfcad55b16393918ff0d29017749a492c8c129045287cba87e33d54ac0ab20d6
5
5
  SHA512:
6
- metadata.gz: 85f84e6ab53e0e04f397957fec62b87f04ec1dc31465aace772345de7648077d5a7480a7ccf0163309bc997e5f2b95d8ab79936f66779652a33c46f75b34e63b
7
- data.tar.gz: 051ff77b344b0ba3123fedbe7d97692bf6311aec791236ccaabbd2a56b76a82f0d1fae7e9013b82c9041a42d436985bffe968eb763573d219e67d4b34b9a6245
6
+ metadata.gz: b0559ce058bf85ad8df3dc05520d0a59d63e8a2d384e1ff9f16fe71f2c66555920da5a9ab38fff129faaa6ba487c1dd4026bad29dd32e29610cf8e0608ef1cf8
7
+ data.tar.gz: 83f3806be04a555640f70b5ad3a97ffc5a2088e3736fdce4a74263c859d1e16313d39f01497438ea9c01d8862f54d6330b0880ac6ff38ab4f19671ce6a0f0135
data/README.md CHANGED
@@ -10,6 +10,7 @@ HeimdallTools supplies several methods to convert output from various tools to "
10
10
  - **zap_mapper** - OWASP ZAP - open-source dynamic code analysis tool
11
11
  - **burpsuite_mapper** - commercial dynamic analysis tool
12
12
  - **nessus_mapper** - commercial vulnerability scanner
13
+ - **snyk_mapper** - commercial package vulnerability scanner
13
14
 
14
15
  Ruby 2.4 or higher (check using "ruby -v")
15
16
 
@@ -145,6 +146,23 @@ FLAGS:
145
146
  example: heimdall_tools nessus_mapper -x nessus-results.xml -o test-env
146
147
  ```
147
148
 
149
+ ## snyk_mapper
150
+
151
+ snyk_mapper translates an Snyk results JSON file into HDF format json to be viewable in Heimdall
152
+
153
+ Note: A separate HDF JSON is generated for each project reported in the Snyk Report.
154
+
155
+ ```
156
+ USAGE: heimdall_tools snyk_mapper [OPTIONS] -x <snyk-results-json> -o <hdf-file-prefix>
157
+
158
+ FLAGS:
159
+ -j <snyk_results_jsonl> : path to Snyk results JSON file.
160
+ -o --output_prefix <prefix> : path to output scan-results json.
161
+ -V --verbose : verbose run [optional].
162
+
163
+ example: heimdall_tools snyk_mapper -j snyk_results.json -o output-file-prefix
164
+ ```
165
+
148
166
  ## version
149
167
 
150
168
  Prints out the gem version
data/lib/data/cwe-nist-mapping.csv CHANGED
@@ -46,6 +46,7 @@
46
46
  170, Improper Null Termination,SI-10,4,Information Input Validation
47
47
  176, Improper Handling of Unicode Encoding,,4,
48
48
  185, Incorrect Regular Expression,,4,
49
+ 189, Numeric Errors,SA-11,4,Developer Security Testing and Evaluation
49
50
  190, Integer Overflow or Wraparound,SI-10,4,Information Input Validation
50
51
  195, Signed to Unsigned Conversion Error,,4,
51
52
  200, Information Exposure,SC-8,4,Transmission Confidentiality and Integrity
@@ -79,6 +80,7 @@
79
80
  305, Authentication Bypass by Primary Weakness,IA-8,4,Identification and Authentication (Non-Organizational Users)
80
81
  306, Missing Authentication for Critical Function,AC-3,4,Access Enforcement
81
82
  307, Improper Restriction of Excessive Authentication Attempts,AC-7,4,Unsuccessful Logon Attempts
83
+ 310, Cryptographic Issues,SC-13,4,Cryptographic Protection
82
84
  311, Missing Encryption of Sensitive Data,SC-8,4,Transmission Confidentiality and Integrity
83
85
  321, Use of Hard-coded Cryptographic Key,SC-12,4,Cryptographic Key Establishment and Management
84
86
  325, Missing Required Cryptographic Step,SC-13,4,Cryptographic Protection
@@ -113,15 +115,16 @@
113
115
  401, Improper Release of Memory Before Removing Last Reference,,4,
114
116
  404, Improper Resource Shutdown or Release,,4,
115
117
  415, Double Free,,4,
116
- 416, Use after Free,,4,
118
+ 416, Use after Free,SC-4,4,Information in Shared Resources
117
119
  434, Unrestricted Upload of File with Dangerous Type,AC-6,4,Least Privilege: Privilege Levels for Code Execution
120
+ 444, Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling'),SI-10,4,Information Input Validation
118
121
  457, Use of Uninitialized Variable,,4,
119
122
  466, Return of Pointer Value Outside of Expected Range,,4,
120
123
  470, Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection'),SI-10,4,Information Input Validation
121
124
  471, Modification of Assumed-Immutable DATA (MAID),AC-3,4,Access Enforcement
122
125
  474, Use of Function with Inconsistent Implementations,,4,
123
126
  475, Undefined Behavior for Input to API,,4,
124
- 476, NULL Pointer Dereference,,4,
127
+ 476, NULL Pointer Dereference,SI-10,4,Information Input Validation
125
128
  477, Use of Obsolete Functions,,4,
126
129
  478, Missing Default Case in Switch Statement,,4,
127
130
  492, Use of Inner Class Containing Sensitive Data,AC-3,4,Access Enforcement
@@ -130,6 +133,7 @@
130
133
  495, Private Array-Typed Field Returned From A Public Method,AC-3,4,Access Enforcement
131
134
  497, Exposure of System Data to an Unauthorized Control Sphere,SI-11,4,Error Handling
132
135
  501, Trust Boundary Violation,SI-10,4,Information Input Validation
136
+ 502, Deserialization of Untrusted Data,SI-10,4,Information Input Validation
133
137
  521, Weak Password Requirements,IA-5,4,Authenticator Management : -1 Password-based Authentication
134
138
  522, Insufficiently Protected Credentials,SC-8,4,Transmission Confidentiality and Integrity
135
139
  539, Information Exposure Through Persistent Cookies,SC-23,4,Session Authenticity
@@ -159,7 +163,7 @@
159
163
  601, URL Redirection to Untrusted Site ('Open Redirect'),SI-10,4,Information Input Validation
160
164
  607, Public Static Final Field References Mutable Object,,4,
161
165
  609, Double-Checked Locking,,4,
162
- 611, Improper Restriction of XML External Entity Reference ('XXE'),,4,
166
+ 611, Improper Restriction of XML External Entity Reference ('XXE'),SI-10,4,Information Input Validation
163
167
  613, Insufficient Session Expiration,AC-12,4,Session Termination
164
168
  614, Sensitive Cookie in HTTPS Session Without 'Secure' Attribute,SC-8,4,Transmission Confidentiality and Integrity
165
169
  615, Information Exposure Through Comments,AC-3,4,Access Enforcement : -5 Security-Relevant Information
@@ -192,4 +196,4 @@
192
196
  863, Incorrect Authorization,AC-3,4,Access Enforcement
193
197
  915, Improperly Controlled Modification of Dynamically-Determined Object Attributes,SI-10,4,Information Input Validation
194
198
  916, Use of Password Hash With Insufficient Computational Effort,SC-13,4,Cryptographic Protection
195
- 918, Server-Side Request Forgery (SSRF),SI-10,4,Information Input Validation
199
+ 918, Server-Side Request Forgery (SSRF),SI-10,4,Information Input Validation
data/lib/heimdall_tools.rb CHANGED
@@ -10,4 +10,5 @@ module HeimdallTools
10
10
  autoload :SonarQubeMapper, 'heimdall_tools/sonarqube_mapper'
11
11
  autoload :BurpSuiteMapper, 'heimdall_tools/burpsuite_mapper'
12
12
  autoload :NessusMapper, 'heimdall_tools/nessus_mapper'
13
+ autoload :SnykMapper, 'heimdall_tools/snyk_mapper'
13
14
  end
data/lib/heimdall_tools/cli.rb CHANGED
@@ -61,6 +61,20 @@ module HeimdallTools
61
61
 
62
62
  end
63
63
 
64
+ desc 'snyk_mapper', 'snyk_mapper translates Synk results Json to HDF format Json be viewed on Heimdall'
65
+ long_desc Help.text(:fortify_mapper)
66
+ option :json, required: true, aliases: '-j'
67
+ option :output_prefix, required: true, aliases: '-o'
68
+ option :verbose, type: :boolean, aliases: '-V'
69
+ def snyk_mapper
70
+ hdfs = HeimdallTools::SnykMapper.new(File.read(options[:json]), options[:name]).to_hdf
71
+ puts "\r\HDF Generated:\n"
72
+ hdfs.keys.each do | host |
73
+ File.write("#{options[:output_prefix]}-#{host}.json", hdfs[host])
74
+ puts "#{options[:output_prefix]}-#{host}.json"
75
+ end
76
+ end
77
+
64
78
  desc 'version', 'prints version'
65
79
  def version
66
80
  puts VERSION
data/lib/heimdall_tools/help/snyk_mapper.md ADDED
@@ -0,0 +1,7 @@
1
+ snyk_mapper translates an Snyk results JSON file into HDF format json to be viewable in Heimdall
2
+
3
+ A separate HDF JSON is generated for each project reported in the Snyk Report.
4
+
5
+ Examples:
6
+
7
+ heimdall_tools snyk_mapper -j snyk_results.json -o output-file-prefix
data/lib/heimdall_tools/snyk_mapper.rb ADDED
@@ -0,0 +1,161 @@
1
+ require 'json'
2
+ require 'csv'
3
+ require 'heimdall_tools/hdf'
4
+ require 'utilities/xml_to_hash'
5
+
6
+ RESOURCE_DIR = Pathname.new(__FILE__).join('../../data')
7
+
8
+ CWE_NIST_MAPPING_FILE = File.join(RESOURCE_DIR, 'cwe-nist-mapping.csv')
9
+
10
+ IMPACT_MAPPING = {
11
+ high: 0.7,
12
+ medium: 0.5,
13
+ low: 0.3,
14
+ }.freeze
15
+
16
+ SNYK_VERSION_REGEX = 'v(\d+.)(\d+.)(\d+)'.freeze
17
+
18
+ DEFAULT_NIST_TAG = ["SA-11", "RA-5"].freeze
19
+
20
+ # Loading spinner sign
21
+ $spinner = Enumerator.new do |e|
22
+ loop do
23
+ e.yield '|'
24
+ e.yield '/'
25
+ e.yield '-'
26
+ e.yield '\\'
27
+ end
28
+ end
29
+
30
+ module HeimdallTools
31
+ class SnykMapper
32
+ def initialize(synk_json, name=nil, verbose = false)
33
+ @synk_json = synk_json
34
+ @verbose = verbose
35
+
36
+ begin
37
+ @cwe_nist_mapping = parse_mapper
38
+ @projects = JSON.parse(synk_json)
39
+
40
+ # Cover single and multi-project scan use cases.
41
+ unless @projects.kind_of?(Array)
42
+ @projects = [ @projects ]
43
+ end
44
+
45
+ rescue StandardError => e
46
+ raise "Invalid Snyk JSON file provided Exception: #{e}"
47
+ end
48
+ end
49
+
50
+ def extract_scaninfo(project)
51
+ info = {}
52
+ begin
53
+ info['policy'] = project['policy']
54
+ reg = Regexp.new(SNYK_VERSION_REGEX, Regexp::IGNORECASE)
55
+ info['version'] = info['policy'].scan(reg).join
56
+ info['projectName'] = project['projectName']
57
+ info['summary'] = project['summary']
58
+
59
+ info
60
+ rescue StandardError => e
61
+ raise "Error extracting project info from Synk JSON file provided Exception: #{e}"
62
+ end
63
+ end
64
+
65
+ def finding(vulnerability)
66
+ finding = {}
67
+ finding['status'] = 'failed'
68
+ finding['code_desc'] = "From : [ #{vulnerability['from'].join(" , ").to_s } ]"
69
+ finding['run_time'] = NA_FLOAT
70
+
71
+ # Snyk results does not profile scan timestamp; using current time to satisfy HDF format
72
+ finding['start_time'] = NA_STRING
73
+ [finding]
74
+ end
75
+
76
+ def nist_tag(cweid)
77
+ entries = @cwe_nist_mapping.select { |x| cweid.include? x[:cweid].to_s }
78
+ tags = entries.map { |x| x[:nistid] }
79
+ tags.empty? ? DEFAULT_NIST_TAG : tags.flatten.uniq
80
+ end
81
+
82
+ def parse_identifiers(vulnerability, ref)
83
+ # Extracting id number from reference style CWE-297
84
+ vulnerability['identifiers'][ref].map { |e| e.split("#{ref}-")[1] }
85
+ rescue
86
+ return []
87
+ end
88
+
89
+ def impact(severity)
90
+ IMPACT_MAPPING[severity.to_sym]
91
+ end
92
+
93
+ def parse_mapper
94
+ csv_data = CSV.read(CWE_NIST_MAPPING_FILE, **{ encoding: 'UTF-8',
95
+ headers: true,
96
+ header_converters: :symbol,
97
+ converters: :all })
98
+ csv_data.map(&:to_hash)
99
+ end
100
+
101
+ def desc_tags(data, label)
102
+ { "data": data || NA_STRING, "label": label || NA_STRING }
103
+ end
104
+
105
+ # Snyk report could have multiple vulnerability entries for multiple findings of same issue type.
106
+ # The meta data is identical across entries
107
+ # method collapse_duplicates return unique controls with applicable findings collapsed into it.
108
+ def collapse_duplicates(controls)
109
+ unique_controls = []
110
+
111
+ controls.map { |x| x['id'] }.uniq.each do |id|
112
+ collapsed_results = controls.select { |x| x['id'].eql?(id) }.map {|x| x['results']}
113
+ unique_control = controls.find { |x| x['id'].eql?(id) }
114
+ unique_control['results'] = collapsed_results.flatten
115
+ unique_controls << unique_control
116
+ end
117
+ unique_controls
118
+ end
119
+
120
+
121
+ def to_hdf
122
+ project_results = {}
123
+ @projects.each do | project |
124
+ controls = []
125
+ project['vulnerabilities'].each do | vulnerability |
126
+ printf("\rProcessing: %s", $spinner.next)
127
+
128
+ item = {}
129
+ item['tags'] = {}
130
+ item['descriptions'] = []
131
+ item['refs'] = NA_ARRAY
132
+ item['source_location'] = NA_HASH
133
+ item['descriptions'] = NA_ARRAY
134
+
135
+ item['title'] = vulnerability['title'].to_s
136
+ item['id'] = vulnerability['id'].to_s
137
+ item['desc'] = vulnerability['description'].to_s
138
+ item['impact'] = impact(vulnerability['severity'])
139
+ item['code'] = ''
140
+ item['results'] = finding(vulnerability)
141
+ item['tags']['nist'] = nist_tag( parse_identifiers( vulnerability, 'CWE') )
142
+ item['tags']['cweid'] = parse_identifiers( vulnerability, 'CWE')
143
+ item['tags']['cveid'] = parse_identifiers( vulnerability, 'CVE')
144
+ item['tags']['ghsaid'] = parse_identifiers( vulnerability, 'GHSA')
145
+
146
+ controls << item
147
+ end
148
+ controls = collapse_duplicates(controls)
149
+ scaninfo = extract_scaninfo(project)
150
+ results = HeimdallDataFormat.new(profile_name: scaninfo['policy'],
151
+ version: scaninfo['version'],
152
+ title: "Snyk Project: #{scaninfo['projectName']}",
153
+ summary: "Snyk Summary: #{scaninfo['summary']}",
154
+ controls: controls,
155
+ target_id: scaninfo['projectName'])
156
+ project_results[scaninfo['projectName']] = results.to_hdf
157
+ end
158
+ project_results
159
+ end
160
+ end
161
+ end
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: heimdall_tools
3
3
  version: !ruby/object:Gem::Version
4
- version: 1.3.31
4
+ version: 1.3.32
5
5
  platform: ruby
6
6
  authors:
7
7
  - Robert Thew
@@ -10,7 +10,7 @@ authors:
10
10
  autorequire:
11
11
  bindir: exe
12
12
  cert_chain: []
13
- date: 2020-06-16 00:00:00.000000000 Z
13
+ date: 2020-07-28 00:00:00.000000000 Z
14
14
  dependencies:
15
15
  - !ruby/object:Gem::Dependency
16
16
  name: nokogiri
@@ -203,7 +203,6 @@ executables:
203
203
  extensions: []
204
204
  extra_rdoc_files: []
205
205
  files:
206
- - CHANGELOG.md
207
206
  - Guardfile
208
207
  - LICENSE.md
209
208
  - README.md
@@ -223,9 +222,11 @@ files:
223
222
  - lib/heimdall_tools/help/burpsuite_mapper.md
224
223
  - lib/heimdall_tools/help/fortify_mapper.md
225
224
  - lib/heimdall_tools/help/nessus_mapper.md
225
+ - lib/heimdall_tools/help/snyk_mapper.md
226
226
  - lib/heimdall_tools/help/sonarqube_mapper.md
227
227
  - lib/heimdall_tools/help/zap_mapper.md
228
228
  - lib/heimdall_tools/nessus_mapper.rb
229
+ - lib/heimdall_tools/snyk_mapper.rb
229
230
  - lib/heimdall_tools/sonarqube_mapper.rb
230
231
  - lib/heimdall_tools/version.rb
231
232
  - lib/heimdall_tools/zap_mapper.rb
data/CHANGELOG.md DELETED
@@ -1,285 +0,0 @@
1
- # Changelog
2
-
3
- ## [Unreleased](https://github.com/mitre/heimdall_tools/tree/HEAD)
4
-
5
- [Full Changelog](https://github.com/mitre/heimdall_tools/compare/v1.3.30.pre1...HEAD)
6
-
7
- **Closed issues:**
8
-
9
- - nessus\_mapper CCI to NIST Mapping [\#54](https://github.com/mitre/heimdall_tools/issues/54)
10
-
11
- **Merged pull requests:**
12
-
13
- - Update to map NIST tags from CCI refs [\#55](https://github.com/mitre/heimdall_tools/pull/55) ([rx294](https://github.com/rx294))
14
-
15
- ## [v1.3.30.pre1](https://github.com/mitre/heimdall_tools/tree/v1.3.30.pre1) (2020-06-12)
16
-
17
- [Full Changelog](https://github.com/mitre/heimdall_tools/compare/v1.3.29...v1.3.30.pre1)
18
-
19
- ## [v1.3.29](https://github.com/mitre/heimdall_tools/tree/v1.3.29) (2020-05-28)
20
-
21
- [Full Changelog](https://github.com/mitre/heimdall_tools/compare/v1.3.28...v1.3.29)
22
-
23
- **Merged pull requests:**
24
-
25
- - Remove debug line [\#53](https://github.com/mitre/heimdall_tools/pull/53) ([rx294](https://github.com/rx294))
26
-
27
- ## [v1.3.28](https://github.com/mitre/heimdall_tools/tree/v1.3.28) (2020-05-28)
28
-
29
- [Full Changelog](https://github.com/mitre/heimdall_tools/compare/v1.3.27...v1.3.28)
30
-
31
- **Closed issues:**
32
-
33
- - Map 'Policy Compliance' entries for nessus\_mapper [\#49](https://github.com/mitre/heimdall_tools/issues/49)
34
-
35
- **Merged pull requests:**
36
-
37
- - Add code to translate Policy compliance results [\#51](https://github.com/mitre/heimdall_tools/pull/51) ([rx294](https://github.com/rx294))
38
-
39
- ## [v1.3.27](https://github.com/mitre/heimdall_tools/tree/v1.3.27) (2020-05-22)
40
-
41
- [Full Changelog](https://github.com/mitre/heimdall_tools/compare/v1.3.26...v1.3.27)
42
-
43
- **Merged pull requests:**
44
-
45
- - Updated the Dockerfile to run in an alpine ruby container [\#47](https://github.com/mitre/heimdall_tools/pull/47) ([jsa5593](https://github.com/jsa5593))
46
- - Require a newer version of git-lite-version-bump for Windows support [\#46](https://github.com/mitre/heimdall_tools/pull/46) ([rbclark](https://github.com/rbclark))
47
-
48
- ## [v1.3.26](https://github.com/mitre/heimdall_tools/tree/v1.3.26) (2020-05-06)
49
-
50
- [Full Changelog](https://github.com/mitre/heimdall_tools/compare/v1.3.25...v1.3.26)
51
-
52
- **Implemented enhancements:**
53
-
54
- - Converter: Nessus Transform for Audit results and vulnerability scan results [\#29](https://github.com/mitre/heimdall_tools/issues/29)
55
-
56
- **Merged pull requests:**
57
-
58
- - Nessus Mapper [\#45](https://github.com/mitre/heimdall_tools/pull/45) ([rx294](https://github.com/rx294))
59
-
60
- ## [v1.3.25](https://github.com/mitre/heimdall_tools/tree/v1.3.25) (2020-04-16)
61
-
62
- [Full Changelog](https://github.com/mitre/heimdall_tools/compare/v1.3.24...v1.3.25)
63
-
64
- **Closed issues:**
65
-
66
- - Add minimum required json fields to work heimdall server [\#5](https://github.com/mitre/heimdall_tools/issues/5)
67
-
68
- **Merged pull requests:**
69
-
70
- - Make sure the fields we are looking for in Fortify exist before we parse the element [\#44](https://github.com/mitre/heimdall_tools/pull/44) ([rbclark](https://github.com/rbclark))
71
- - Update actions to use ruby/setup-ruby [\#43](https://github.com/mitre/heimdall_tools/pull/43) ([Bialogs](https://github.com/Bialogs))
72
-
73
- ## [v1.3.24](https://github.com/mitre/heimdall_tools/tree/v1.3.24) (2020-04-07)
74
-
75
- [Full Changelog](https://github.com/mitre/heimdall_tools/compare/v1.3.23...v1.3.24)
76
-
77
- **Implemented enhancements:**
78
-
79
- - Converter: Burp Suite Pro [\#28](https://github.com/mitre/heimdall_tools/issues/28)
80
-
81
- **Fixed bugs:**
82
-
83
- - \[Bug\] Import mapping csvs by relative path [\#41](https://github.com/mitre/heimdall_tools/issues/41)
84
-
85
- **Merged pull requests:**
86
-
87
- - Update to pull data csvs by relative path [\#42](https://github.com/mitre/heimdall_tools/pull/42) ([rx294](https://github.com/rx294))
88
- - Burpsuite mapper [\#40](https://github.com/mitre/heimdall_tools/pull/40) ([rx294](https://github.com/rx294))
89
-
90
- ## [v1.3.23](https://github.com/mitre/heimdall_tools/tree/v1.3.23) (2020-03-31)
91
-
92
- [Full Changelog](https://github.com/mitre/heimdall_tools/compare/v1.3.23.pre5...v1.3.23)
93
-
94
- ## [v1.3.23.pre5](https://github.com/mitre/heimdall_tools/tree/v1.3.23.pre5) (2020-03-31)
95
-
96
- [Full Changelog](https://github.com/mitre/heimdall_tools/compare/v1.3.23.pre4...v1.3.23.pre5)
97
-
98
- **Merged pull requests:**
99
-
100
- - Rubygems automatically trims the word \_api\_key when referencing the key [\#39](https://github.com/mitre/heimdall_tools/pull/39) ([rbclark](https://github.com/rbclark))
101
-
102
- ## [v1.3.23.pre4](https://github.com/mitre/heimdall_tools/tree/v1.3.23.pre4) (2020-03-31)
103
-
104
- [Full Changelog](https://github.com/mitre/heimdall_tools/compare/v1.3.23.pre3...v1.3.23.pre4)
105
-
106
- **Merged pull requests:**
107
-
108
- - Cleanup GPR and Rubygems release flow [\#38](https://github.com/mitre/heimdall_tools/pull/38) ([rbclark](https://github.com/rbclark))
109
-
110
- ## [v1.3.23.pre3](https://github.com/mitre/heimdall_tools/tree/v1.3.23.pre3) (2020-03-31)
111
-
112
- [Full Changelog](https://github.com/mitre/heimdall_tools/compare/v1.3.23.pre2...v1.3.23.pre3)
113
-
114
- ## [v1.3.23.pre2](https://github.com/mitre/heimdall_tools/tree/v1.3.23.pre2) (2020-03-31)
115
-
116
- [Full Changelog](https://github.com/mitre/heimdall_tools/compare/v1.3.23.pre...v1.3.23.pre2)
117
-
118
- ## [v1.3.23.pre](https://github.com/mitre/heimdall_tools/tree/v1.3.23.pre) (2020-03-31)
119
-
120
- [Full Changelog](https://github.com/mitre/heimdall_tools/compare/v1.3.22...v1.3.23.pre)
121
-
122
- **Merged pull requests:**
123
-
124
- - Restructure workflow for publishing gem [\#37](https://github.com/mitre/heimdall_tools/pull/37) ([rbclark](https://github.com/rbclark))
125
-
126
- ## [v1.3.22](https://github.com/mitre/heimdall_tools/tree/v1.3.22) (2020-03-31)
127
-
128
- [Full Changelog](https://github.com/mitre/heimdall_tools/compare/v1.3.21...v1.3.22)
129
-
130
- ## [v1.3.21](https://github.com/mitre/heimdall_tools/tree/v1.3.21) (2020-03-31)
131
-
132
- [Full Changelog](https://github.com/mitre/heimdall_tools/compare/v1.3.20...v1.3.21)
133
-
134
- ## [v1.3.20](https://github.com/mitre/heimdall_tools/tree/v1.3.20) (2020-03-30)
135
-
136
- [Full Changelog](https://github.com/mitre/heimdall_tools/compare/v1.3.19...v1.3.20)
137
-
138
- **Fixed bugs:**
139
-
140
- - Unable to Convert Fortify 19.2.0 FVDL file to HDF [\#25](https://github.com/mitre/heimdall_tools/issues/25)
141
-
142
- ## [v1.3.19](https://github.com/mitre/heimdall_tools/tree/v1.3.19) (2020-03-30)
143
-
144
- [Full Changelog](https://github.com/mitre/heimdall_tools/compare/v1.3.18...v1.3.19)
145
-
146
- **Merged pull requests:**
147
-
148
- - Remove all gems from Gemfile and declare them properly in the gemspec [\#33](https://github.com/mitre/heimdall_tools/pull/33) ([rbclark](https://github.com/rbclark))
149
-
150
- ## [v1.3.18](https://github.com/mitre/heimdall_tools/tree/v1.3.18) (2020-03-28)
151
-
152
- [Full Changelog](https://github.com/mitre/heimdall_tools/compare/v1.3.17...v1.3.18)
153
-
154
- ## [v1.3.17](https://github.com/mitre/heimdall_tools/tree/v1.3.17) (2020-03-26)
155
-
156
- [Full Changelog](https://github.com/mitre/heimdall_tools/compare/v1.3.16...v1.3.17)
157
-
158
- **Closed issues:**
159
-
160
- - Request New converters [\#23](https://github.com/mitre/heimdall_tools/issues/23)
161
-
162
- ## [v1.3.16](https://github.com/mitre/heimdall_tools/tree/v1.3.16) (2020-03-25)
163
-
164
- [Full Changelog](https://github.com/mitre/heimdall_tools/compare/v1.3.15...v1.3.16)
165
-
166
- ## [v1.3.15](https://github.com/mitre/heimdall_tools/tree/v1.3.15) (2020-03-25)
167
-
168
- [Full Changelog](https://github.com/mitre/heimdall_tools/compare/v1.3.14...v1.3.15)
169
-
170
- ## [v1.3.14](https://github.com/mitre/heimdall_tools/tree/v1.3.14) (2020-03-24)
171
-
172
- [Full Changelog](https://github.com/mitre/heimdall_tools/compare/v1.3.13...v1.3.14)
173
-
174
- ## [v1.3.13](https://github.com/mitre/heimdall_tools/tree/v1.3.13) (2020-03-24)
175
-
176
- [Full Changelog](https://github.com/mitre/heimdall_tools/compare/v1.3.12...v1.3.13)
177
-
178
- ## [v1.3.12](https://github.com/mitre/heimdall_tools/tree/v1.3.12) (2020-03-24)
179
-
180
- [Full Changelog](https://github.com/mitre/heimdall_tools/compare/v1.3.11...v1.3.12)
181
-
182
- ## [v1.3.11](https://github.com/mitre/heimdall_tools/tree/v1.3.11) (2020-03-24)
183
-
184
- [Full Changelog](https://github.com/mitre/heimdall_tools/compare/v1.3.10...v1.3.11)
185
-
186
- ## [v1.3.10](https://github.com/mitre/heimdall_tools/tree/v1.3.10) (2020-03-24)
187
-
188
- [Full Changelog](https://github.com/mitre/heimdall_tools/compare/v1.3.9...v1.3.10)
189
-
190
- ## [v1.3.9](https://github.com/mitre/heimdall_tools/tree/v1.3.9) (2020-03-23)
191
-
192
- [Full Changelog](https://github.com/mitre/heimdall_tools/compare/v1.3.8...v1.3.9)
193
-
194
- **Closed issues:**
195
-
196
- - Update XML parser [\#26](https://github.com/mitre/heimdall_tools/issues/26)
197
-
198
- **Merged pull requests:**
199
-
200
- - Update XML parser [\#27](https://github.com/mitre/heimdall_tools/pull/27) ([rx294](https://github.com/rx294))
201
-
202
- ## [v1.3.8](https://github.com/mitre/heimdall_tools/tree/v1.3.8) (2020-03-09)
203
-
204
- [Full Changelog](https://github.com/mitre/heimdall_tools/compare/v1.3.7...v1.3.8)
205
-
206
- **Closed issues:**
207
-
208
- - \[BUG\] | sonarqube\_mapper is not handling NIST mapping correctly [\#21](https://github.com/mitre/heimdall_tools/issues/21)
209
-
210
- **Merged pull requests:**
211
-
212
- - Fixes \#21 \[BUG\] | sonarqube\_mapper is not handling NIST mapping correctly [\#22](https://github.com/mitre/heimdall_tools/pull/22) ([rx294](https://github.com/rx294))
213
-
214
- ## [v1.3.7](https://github.com/mitre/heimdall_tools/tree/v1.3.7) (2020-03-06)
215
-
216
- [Full Changelog](https://github.com/mitre/heimdall_tools/compare/v1.3.6...v1.3.7)
217
-
218
- ## [v1.3.6](https://github.com/mitre/heimdall_tools/tree/v1.3.6) (2020-03-05)
219
-
220
- [Full Changelog](https://github.com/mitre/heimdall_tools/compare/v1.3.5...v1.3.6)
221
-
222
- ## [v1.3.5](https://github.com/mitre/heimdall_tools/tree/v1.3.5) (2020-03-05)
223
-
224
- [Full Changelog](https://github.com/mitre/heimdall_tools/compare/v1.3.4...v1.3.5)
225
-
226
- ## [v1.3.4](https://github.com/mitre/heimdall_tools/tree/v1.3.4) (2020-03-04)
227
-
228
- [Full Changelog](https://github.com/mitre/heimdall_tools/compare/v1.3.3...v1.3.4)
229
-
230
- **Closed issues:**
231
-
232
- - Support Authenticated Sonarqube API for sonarqube\_mapper [\#18](https://github.com/mitre/heimdall_tools/issues/18)
233
-
234
- ## [v1.3.3](https://github.com/mitre/heimdall_tools/tree/v1.3.3) (2020-03-04)
235
-
236
- [Full Changelog](https://github.com/mitre/heimdall_tools/compare/v1.3.2...v1.3.3)
237
-
238
- **Merged pull requests:**
239
-
240
- - Sonarqube authentication option [\#20](https://github.com/mitre/heimdall_tools/pull/20) ([rx294](https://github.com/rx294))
241
-
242
- ## [v1.3.2](https://github.com/mitre/heimdall_tools/tree/v1.3.2) (2019-12-27)
243
-
244
- [Full Changelog](https://github.com/mitre/heimdall_tools/compare/v1.3.1...v1.3.2)
245
-
246
- **Merged pull requests:**
247
-
248
- - Adding dockerfile for heimdall tools [\#15](https://github.com/mitre/heimdall_tools/pull/15) ([rx294](https://github.com/rx294))
249
-
250
- ## [v1.3.1](https://github.com/mitre/heimdall_tools/tree/v1.3.1) (2019-12-27)
251
-
252
- [Full Changelog](https://github.com/mitre/heimdall_tools/compare/v1.3.0...v1.3.1)
253
-
254
- **Closed issues:**
255
-
256
- - Update HDF format generate jsons in Inspec results style [\#10](https://github.com/mitre/heimdall_tools/issues/10)
257
-
258
- **Merged pull requests:**
259
-
260
- - Updating required nori gem version [\#16](https://github.com/mitre/heimdall_tools/pull/16) ([rx294](https://github.com/rx294))
261
- - Populate shasum and runtime field [\#14](https://github.com/mitre/heimdall_tools/pull/14) ([rx294](https://github.com/rx294))
262
- - Updates as per feedback [\#13](https://github.com/mitre/heimdall_tools/pull/13) ([rx294](https://github.com/rx294))
263
- - updating samples [\#12](https://github.com/mitre/heimdall_tools/pull/12) ([rx294](https://github.com/rx294))
264
- - Change to results view on heimdall [\#11](https://github.com/mitre/heimdall_tools/pull/11) ([rx294](https://github.com/rx294))
265
-
266
- ## [v1.3.0](https://github.com/mitre/heimdall_tools/tree/v1.3.0) (2019-09-24)
267
-
268
- [Full Changelog](https://github.com/mitre/heimdall_tools/compare/c9c08305796eaf12d7abb2535c285a4acd2f5a91...v1.3.0)
269
-
270
- **Closed issues:**
271
-
272
- - README needs authors [\#9](https://github.com/mitre/heimdall_tools/issues/9)
273
- - Get NIST rev version from CSV [\#4](https://github.com/mitre/heimdall_tools/issues/4)
274
- - Output in evaluation format, not profile [\#2](https://github.com/mitre/heimdall_tools/issues/2)
275
-
276
- **Merged pull requests:**
277
-
278
- - Fixes to PR \#6 [\#8](https://github.com/mitre/heimdall_tools/pull/8) ([rx294](https://github.com/rx294))
279
- - Update README fortify-fvdl flag to fvdl as in usage [\#7](https://github.com/mitre/heimdall_tools/pull/7) ([mirskiy](https://github.com/mirskiy))
280
- - Add SonarQube Mapper and OWASP NIST mappings [\#6](https://github.com/mitre/heimdall_tools/pull/6) ([mirskiy](https://github.com/mirskiy))
281
- - OWASP ZAP Mapper PR [\#3](https://github.com/mitre/heimdall_tools/pull/3) ([rx294](https://github.com/rx294))
282
-
283
-
284
-
285
- \* *This Changelog was automatically generated by [github_changelog_generator](https://github.com/github-changelog-generator/github-changelog-generator)*