@cdxgen/cdxgen 13.5.0 → 13.7.0

package/types/lib/validator/complianceRules.d.ts

@@ -12,7 +12,7 @@
  *   id            - Stable short identifier (e.g. "SCVS-1.1").
  *   name          - Human readable short name.
  *   description   - Long description (wording taken from the source standard).
- *   standard      - Source standard key: "SCVS" or "CRA".
+ *   standard      - Source standard key: "SCVS", "CRA" or "CISA".
  *   standardRefs  - Array of canonical control identifiers.
  *   category      - Grouping used by --categories.
  *   severity      - Severity emitted for a failing automatable rule.
@@ -34,7 +34,7 @@
  *   }
  */
 /**
- * Returns the full catalog of compliance rules (SCVS + CRA).
+ * Returns the full catalog of compliance rules (SCVS + CRA + CISA).
  *
  * @returns {Array<object>}
  */
@@ -51,6 +51,18 @@ export declare function getScvsRules(): Array<object>;
  * @returns {Array<object>}
  */
 export declare function getCraRules(): Array<object>;
+/**
+ * Returns only CISA 2026 minimum elements rules.
+ *
+ * @returns {Array<object>}
+ */
+export declare function getCisaRules(): Array<object>;
+/**
+ * Returns only the CISA and G7 AI SBOM element rules.
+ *
+ * @returns {Array<object>}
+ */
+export declare function getCisaAiRules(): Array<object>;
 /**
  * Test-only export exposing internal helper functions for unit tests.
  * Double-underscore prefixed to discourage external use.

package/types/lib/validator/complianceRules.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"complianceRules.d.ts","sourceRoot":"","sources":["../../../lib/validator/complianceRules.js"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAskDH;;;;GAIG;AACH,wBAAgB,qBAAqB,IAFxB,KAAK,CAAC,MAAM,CAAC,CAIzB;AAED;;;;GAIG;AACH,wBAAgB,YAAY,IAFf,KAAK,CAAC,MAAM,CAAC,CAIzB;AAED;;;;GAIG;AACH,wBAAgB,WAAW,IAFd,KAAK,CAAC,MAAM,CAAC,CAIzB;AAED;;;;;GAKG;AACH,eAAO,MAAM,MAAM,EAFT,MAQT,CAAC"}
+{"version":3,"file":"complianceRules.d.ts","sourceRoot":"","sources":["../../../lib/validator/complianceRules.js"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAw7FH;;;;GAIG;AACH,wBAAgB,qBAAqB,IAFxB,KAAK,CAAC,MAAM,CAAC,CAIzB;AAED;;;;GAIG;AACH,wBAAgB,YAAY,IAFf,KAAK,CAAC,MAAM,CAAC,CAIzB;AAED;;;;GAIG;AACH,wBAAgB,WAAW,IAFd,KAAK,CAAC,MAAM,CAAC,CAIzB;AAED;;;;GAIG;AACH,wBAAgB,YAAY,IAFf,KAAK,CAAC,MAAM,CAAC,CAIzB;AAED;;;;GAIG;AACH,wBAAgB,cAAc,IAFjB,KAAK,CAAC,MAAM,CAAC,CAIzB;AAED;;;;;GAKG;AACH,eAAO,MAAM,MAAM,EAFT,MAQT,CAAC"}

package/types/lib/validator/index.d.ts

@@ -38,6 +38,11 @@ export declare function validateGeneratedBom(bomJson: object): Promise<{
 /**
  * Run structural + compliance validation against a parsed BOM.
  *
+ * The JSON schema check and signature verification read the document as
+ * given. The deep checks and compliance rules read the 1.x-shaped model, so
+ * the same project gives the same rule results at 1.x and at 2.0; for a 2.0
+ * document `readLosses` lists what that model could not hold.
+ *
  * @param {object} bomJson Parsed CycloneDX JSON BOM.
  * @param {object} [options]
  * @param {boolean} [options.schema]            Run JSON-Schema validation (default true).
@@ -55,6 +60,7 @@ export declare function validateGeneratedBom(bomJson: object): Promise<{
  *   schemaValid: boolean,
  *   deepValid: boolean,
  *   validationErrors: Array<{ stage: string, message: string }>,
+ *   readLosses: Array<{ pointer: string, reason: string }>,
  *   signatureVerified: boolean | null,
  *   signatureDetails: object | null,
  *   signatureEntries: Array<{ index: number, algorithm: any, keyId: any, verified: boolean }> | null,
@@ -82,6 +88,10 @@ export declare function validateBomAdvanced(bomJson: object, options?: {
         stage: string;
         message: string;
     }>;
+    readLosses: Array<{
+        pointer: string;
+        reason: string;
+    }>;
     signatureVerified: boolean | null;
     signatureDetails: object | null;
     signatureEntries: Array<{

package/types/lib/validator/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../lib/validator/index.js"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAgBH;;;;;GAKG;AACH,QAAA,MAAM,cAAc,wBAAuD,CAAC;AA4D5E;;;;;;;;;;;;GAYG;AACH,wBAAsB,oBAAoB,CAAC,OAAO,EAHvC,MAGuC,GAFrC,OAAO,CAAC;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,IAAI,CAAA;CAAE,CAAC,CAKrE;AAgDD;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAsB,mBAAmB,CAAC,OAAO,EA1BtC,MA0BsC,EAAE,OAAO,AAzBvD,CAYA,EAXA;IAA0B,MAAM,AAAhC,CACA,EADQ,OAAO,CACf;IAA0B,IAAI,AAA9B,CACA,EADQ,OAAO,CACf;IAAgC,UAAU,AAA1C,CACA,EADQ,KAAK,CAAC,MAAM,CAAC,CACrB;IAAgC,UAAU,AAA1C,CACA,EADQ,KAAK,CAAC,MAAM,CAAC,CACrB;IAAyB,WAAW,AAApC,CACA,EADQ,MAAM,CACd;IAA0B,aAAa,AAAvC,CACA,EADQ,OAAO,CACf;IAA0B,WAAW,AAArC,CACA,EADQ,OAAO,CACf;IAAyB,SAAS,AAAlC,CACA,EADQ,MAAM,CACd;IAAgC,SAAS,AAAzC,CACA,EADQ,MAAM,GAAC,MAAM,CACrB;IAA0B,gBAAgB,AAA1C,CAEA,EAFQ,OAAO,CAEf;CAa4D,GAblD;IACR,WAAW,EAAE,OAAO,CAAC;IACrB,SAAS,EAAE,OAAO,CAAC;IACnB,gBAAgB,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC5D,iBAAiB,EAAE,OAAO,GAAG,IAAI,CAAC;IAClC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,gBAAgB,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,GAAG,CAAC;QAAC,KAAK,EAAE,GAAG,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,CAAC,GAAG,IAAI,CAAC;IACjG,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACxB,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3B,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAA;CAChB,CA2EH;AAED;;;;;;;;;GASG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAPtB,MAOsB,EAAE,IAAI,GALpC;IAAsB,YAAY,AAAlC,CACA,EADQ,MAAM,CACd;IAAuB,MAAM,AAA7B,CACA,EADQ,OAAO,CACf;IAAuB,gBAAgB,AAAvC,CACA,EADQ,OAAO,CACf;CAEyC,GAF/B;IAAE,UAAU,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CA0B1D;AAED,OAAO,EAAE,qBAAqB,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAC3E,OAAO,EAAE,cAAc,EAAE,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../lib/validator/index.js"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAiBH;;;;;GAKG;AACH,QAAA,MAAM,cAAc,wBAAuD,CAAC;AA4D5E;;;;;;;;;;;;GAYG;AACH,wBAAsB,oBAAoB,CAAC,OAAO,EAHvC,MAGuC,GAFrC,OAAO,CAAC;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,IAAI,CAAA;CAAE,CAAC,CAKrE;AA6ED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,wBAAsB,mBAAmB,CAAC,OAAO,EA3BtC,MA2BsC,EAAE,OAAO,AA1BvD,CAYA,EAXA;IAA0B,MAAM,AAAhC,CACA,EADQ,OAAO,CACf;IAA0B,IAAI,AAA9B,CACA,EADQ,OAAO,CACf;IAAgC,UAAU,AAA1C,CACA,EADQ,KAAK,CAAC,MAAM,CAAC,CACrB;IAAgC,UAAU,AAA1C,CACA,EADQ,KAAK,CAAC,MAAM,CAAC,CACrB;IAAyB,WAAW,AAApC,CACA,EADQ,MAAM,CACd;IAA0B,aAAa,AAAvC,CACA,EADQ,OAAO,CACf;IAA0B,WAAW,AAArC,CACA,EADQ,OAAO,CACf;IAAyB,SAAS,AAAlC,CACA,EADQ,MAAM,CACd;IAAgC,SAAS,AAAzC,CACA,EADQ,MAAM,GAAC,MAAM,CACrB;IAA0B,gBAAgB,AAA1C,CAEA,EAFQ,OAAO,CAEf;CAc4D,GAdlD;IACR,WAAW,EAAE,OAAO,CAAC;IACrB,SAAS,EAAE,OAAO,CAAC;IACnB,gBAAgB,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC5D,UAAU,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACvD,iBAAiB,EAAE,OAAO,GAAG,IAAI,CAAC;IAClC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,gBAAgB,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,GAAG,CAAC;QAAC,KAAK,EAAE,GAAG,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,CAAC,GAAG,IAAI,CAAC;IACjG,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACxB,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3B,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAA;CAChB,CAgFH;AAED;;;;;;;;;GASG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAPtB,MAOsB,EAAE,IAAI,GALpC;IAAsB,YAAY,AAAlC,CACA,EADQ,MAAM,CACd;IAAuB,MAAM,AAA7B,CACA,EADQ,OAAO,CACf;IAAuB,gBAAgB,AAAvC,CACA,EADQ,OAAO,CACf;CAEyC,GAF/B;IAAE,UAAU,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CA0B1D;AAED,OAAO,EAAE,qBAAqB,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAC3E,OAAO,EAAE,cAAc,EAAE,CAAC"}

package/types/lib/validator/reporters/json.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"json.d.ts","sourceRoot":"","sources":["../../../../lib/validator/reporters/json.js"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;GAIG;AACH,wBAAgB,MAAM,CAAC,MAAM,EAJlB,MAIkB,EAAE,QAAQ,AAHpC,CACA,EADQ,MAGiC,GAF/B,MAAM,CA8BlB"}
+{"version":3,"file":"json.d.ts","sourceRoot":"","sources":["../../../../lib/validator/reporters/json.js"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;GAIG;AACH,wBAAgB,MAAM,CAAC,MAAM,EAJlB,MAIkB,EAAE,QAAQ,AAHpC,CACA,EADQ,MAGiC,GAF/B,MAAM,CAoClB"}