@blamejs/exceptd-skills 0.12.13 → 0.12.16
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +217 -0
- package/bin/exceptd.js +522 -27
- package/data/_indexes/_meta.json +45 -45
- package/data/_indexes/activity-feed.json +4 -4
- package/data/_indexes/catalog-summaries.json +29 -29
- package/data/_indexes/chains.json +3238 -3210
- package/data/_indexes/frequency.json +3 -0
- package/data/_indexes/jurisdiction-map.json +5 -3
- package/data/_indexes/section-offsets.json +712 -685
- package/data/_indexes/theater-fingerprints.json +1 -1
- package/data/_indexes/token-budget.json +355 -340
- package/data/atlas-ttps.json +144 -129
- package/data/attack-techniques.json +319 -76
- package/data/cve-catalog.json +516 -476
- package/data/cwe-catalog.json +1081 -759
- package/data/exploit-availability.json +63 -15
- package/data/framework-control-gaps.json +867 -843
- package/data/playbooks/ai-api.json +3 -1
- package/data/playbooks/containers.json +11 -3
- package/data/playbooks/cred-stores.json +3 -1
- package/data/playbooks/crypto-codebase.json +11 -11
- package/data/playbooks/crypto.json +1 -1
- package/data/playbooks/hardening.json +3 -1
- package/data/playbooks/kernel.json +3 -1
- package/data/playbooks/library-author.json +21 -10
- package/data/playbooks/mcp.json +1 -1
- package/data/playbooks/runtime.json +3 -1
- package/data/playbooks/sbom.json +2 -2
- package/data/playbooks/secrets.json +3 -1
- package/data/rfc-references.json +276 -276
- package/keys/EXPECTED_FINGERPRINT +1 -0
- package/lib/auto-discovery.js +57 -35
- package/lib/cross-ref-api.js +39 -6
- package/lib/cve-curation.js +33 -14
- package/lib/lint-skills.js +6 -1
- package/lib/playbook-runner.js +742 -78
- package/lib/prefetch.js +30 -8
- package/lib/refresh-external.js +40 -22
- package/lib/refresh-network.js +233 -17
- package/lib/scoring.js +191 -18
- package/lib/source-ghsa.js +219 -37
- package/lib/source-osv.js +381 -122
- package/lib/validate-catalog-meta.js +64 -9
- package/lib/validate-cve-catalog.js +56 -18
- package/lib/validate-indexes.js +88 -37
- package/lib/validate-playbooks.js +46 -0
- package/lib/verify.js +72 -0
- package/manifest-snapshot.json +1 -1
- package/manifest-snapshot.sha256 +1 -0
- package/manifest.json +73 -73
- package/orchestrator/dispatcher.js +21 -1
- package/orchestrator/event-bus.js +52 -8
- package/orchestrator/index.js +279 -20
- package/orchestrator/pipeline.js +63 -2
- package/orchestrator/scanner.js +32 -10
- package/orchestrator/scheduler.js +150 -17
- package/package.json +3 -1
- package/sbom.cdx.json +7 -7
- package/scripts/check-manifest-snapshot.js +32 -0
- package/scripts/check-sbom-currency.js +65 -3
- package/scripts/check-test-coverage.js +142 -19
- package/scripts/predeploy.js +83 -39
- package/scripts/refresh-manifest-snapshot.js +55 -4
- package/scripts/validate-vendor-online.js +169 -0
- package/scripts/verify-shipped-tarball.js +141 -9
- package/skills/ai-attack-surface/skill.md +18 -10
- package/skills/ai-c2-detection/skill.md +7 -2
- package/skills/ai-risk-management/skill.md +5 -4
- package/skills/api-security/skill.md +3 -3
- package/skills/attack-surface-pentest/skill.md +5 -5
- package/skills/cloud-security/skill.md +1 -1
- package/skills/compliance-theater/skill.md +8 -8
- package/skills/container-runtime-security/skill.md +1 -1
- package/skills/dlp-gap-analysis/skill.md +5 -1
- package/skills/email-security-anti-phishing/skill.md +1 -1
- package/skills/exploit-scoring/skill.md +18 -18
- package/skills/framework-gap-analysis/skill.md +6 -6
- package/skills/global-grc/skill.md +3 -2
- package/skills/identity-assurance/skill.md +2 -2
- package/skills/incident-response-playbook/skill.md +4 -4
- package/skills/kernel-lpe-triage/skill.md +21 -2
- package/skills/mcp-agent-trust/skill.md +17 -10
- package/skills/mlops-security/skill.md +2 -1
- package/skills/ot-ics-security/skill.md +1 -1
- package/skills/policy-exception-gen/skill.md +3 -3
- package/skills/pqc-first/skill.md +1 -1
- package/skills/rag-pipeline-security/skill.md +7 -3
- package/skills/researcher/skill.md +20 -3
- package/skills/sector-energy/skill.md +1 -1
- package/skills/sector-federal-government/skill.md +1 -1
- package/skills/sector-financial/skill.md +3 -3
- package/skills/sector-healthcare/skill.md +2 -2
- package/skills/security-maturity-tiers/skill.md +7 -7
- package/skills/skill-update-loop/skill.md +19 -3
- package/skills/supply-chain-integrity/skill.md +1 -1
- package/skills/threat-model-currency/skill.md +11 -11
- package/skills/threat-modeling-methodology/skill.md +3 -3
- package/skills/webapp-security/skill.md +1 -1
- package/skills/zeroday-gap-learn/skill.md +51 -7
- package/vendor/blamejs/_PROVENANCE.json +4 -1
- package/vendor/blamejs/worker-pool.js +38 -0
|
@@ -2040,6 +2040,7 @@
|
|
|
2040
2040
|
},
|
|
2041
2041
|
"uncited": {
|
|
2042
2042
|
"cwe_refs": [
|
|
2043
|
+
"CWE-123",
|
|
2043
2044
|
"CWE-250",
|
|
2044
2045
|
"CWE-256",
|
|
2045
2046
|
"CWE-284",
|
|
@@ -2055,6 +2056,7 @@
|
|
|
2055
2056
|
"CWE-426",
|
|
2056
2057
|
"CWE-506",
|
|
2057
2058
|
"CWE-522",
|
|
2059
|
+
"CWE-669",
|
|
2058
2060
|
"CWE-759",
|
|
2059
2061
|
"CWE-760",
|
|
2060
2062
|
"CWE-88",
|
|
@@ -2083,6 +2085,7 @@
|
|
|
2083
2085
|
"AU-Essential-8-Backup",
|
|
2084
2086
|
"AU-Essential-8-MFA",
|
|
2085
2087
|
"AU-Essential-8-Patch",
|
|
2088
|
+
"DORA-Art28",
|
|
2086
2089
|
"EU-AI-Act-Art-15",
|
|
2087
2090
|
"EU-CRA-Art13",
|
|
2088
2091
|
"NIS2-Art21-incident-handling",
|
|
@@ -213,10 +213,11 @@
|
|
|
213
213
|
"sector-federal-government",
|
|
214
214
|
"sector-financial",
|
|
215
215
|
"sector-healthcare",
|
|
216
|
+
"skill-update-loop",
|
|
216
217
|
"zeroday-gap-learn"
|
|
217
218
|
],
|
|
218
219
|
"example_excerpts": {},
|
|
219
|
-
"skill_count":
|
|
220
|
+
"skill_count": 14
|
|
220
221
|
},
|
|
221
222
|
"BR": {
|
|
222
223
|
"skills": [
|
|
@@ -250,10 +251,11 @@
|
|
|
250
251
|
"pqc-first",
|
|
251
252
|
"sector-federal-government",
|
|
252
253
|
"supply-chain-integrity",
|
|
253
|
-
"threat-modeling-methodology"
|
|
254
|
+
"threat-modeling-methodology",
|
|
255
|
+
"zeroday-gap-learn"
|
|
254
256
|
],
|
|
255
257
|
"example_excerpts": {},
|
|
256
|
-
"skill_count":
|
|
258
|
+
"skill_count": 13
|
|
257
259
|
},
|
|
258
260
|
"ZA": {
|
|
259
261
|
"skills": [
|