@contrast/contrast 2.0.2-beta.0 → 2.0.2-beta.10
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +2 -1
- package/dist/assess/assessConfig.js +9 -0
- package/dist/assess/assessConfig.js.map +1 -0
- package/dist/assess/help.js +37 -0
- package/dist/assess/help.js.map +1 -0
- package/dist/assess/http/index.js +39 -0
- package/dist/assess/http/index.js.map +1 -0
- package/dist/assess/index.js +69 -0
- package/dist/assess/index.js.map +1 -0
- package/dist/assess/metadata/findYamlFile.js +59 -0
- package/dist/assess/metadata/findYamlFile.js.map +1 -0
- package/dist/assess/metadata/index.js +37 -0
- package/dist/assess/metadata/index.js.map +1 -0
- package/dist/assess/metadata/utils.js +159 -0
- package/dist/assess/metadata/utils.js.map +1 -0
- package/dist/assess/printing/index.js +11 -0
- package/dist/assess/printing/index.js.map +1 -0
- package/dist/assess/printing/utils.js +119 -0
- package/dist/assess/printing/utils.js.map +1 -0
- package/dist/audit/auditConfig.js +9 -0
- package/dist/audit/auditConfig.js.map +1 -0
- package/dist/{commands/audit → audit}/auditController.js +9 -13
- package/dist/audit/auditController.js.map +1 -0
- package/dist/audit/auditRequests.js +193 -0
- package/dist/audit/auditRequests.js.map +1 -0
- package/dist/audit/auditRequestsLegacy.js +63 -0
- package/dist/audit/auditRequestsLegacy.js.map +1 -0
- package/dist/audit/catalogueApplication/catalogueApplication.js +16 -29
- package/dist/audit/catalogueApplication/catalogueApplication.js.map +1 -0
- package/dist/audit/help.js +68 -0
- package/dist/audit/help.js.map +1 -0
- package/dist/audit/languageAnalysisEngine/commonApi.js +12 -14
- package/dist/audit/languageAnalysisEngine/commonApi.js.map +1 -0
- package/dist/audit/languageAnalysisEngine/filterProjectPath.js +2 -1
- package/dist/audit/languageAnalysisEngine/filterProjectPath.js.map +1 -0
- package/dist/audit/languageAnalysisEngine/getProjectRootFilenames.js +9 -12
- package/dist/audit/languageAnalysisEngine/getProjectRootFilenames.js.map +1 -0
- package/dist/audit/languageAnalysisEngine/sendSnapshot.js +18 -30
- package/dist/audit/languageAnalysisEngine/sendSnapshot.js.map +1 -0
- package/dist/audit/nodeAnalysisEngine/parseYarn2LockFileContents.js +9 -9
- package/dist/audit/nodeAnalysisEngine/parseYarn2LockFileContents.js.map +1 -0
- package/dist/audit/processAudit.js +21 -0
- package/dist/audit/processAudit.js.map +1 -0
- package/dist/audit/report/commonReportingFunctions.js +33 -61
- package/dist/audit/report/commonReportingFunctions.js.map +1 -0
- package/dist/audit/report/models/reportGuidanceModel.js +2 -5
- package/dist/audit/report/models/reportGuidanceModel.js.map +1 -0
- package/dist/audit/report/models/reportLibraryModel.js +3 -7
- package/dist/audit/report/models/reportLibraryModel.js.map +1 -0
- package/dist/audit/report/models/reportListModel.js +4 -9
- package/dist/audit/report/models/reportListModel.js.map +1 -0
- package/dist/audit/report/models/reportOutputModel.js +4 -9
- package/dist/audit/report/models/reportOutputModel.js.map +1 -0
- package/dist/audit/report/models/reportSeverityModel.js +2 -5
- package/dist/audit/report/models/reportSeverityModel.js.map +1 -0
- package/dist/audit/report/models/severityCountModel.js +3 -5
- package/dist/audit/report/models/severityCountModel.js.map +1 -0
- package/dist/audit/report/reportingFeature.js +27 -55
- package/dist/audit/report/reportingFeature.js.map +1 -0
- package/dist/audit/report/utils/reportUtils.js +28 -59
- package/dist/audit/report/utils/reportUtils.js.map +1 -0
- package/dist/audit/save.js +14 -16
- package/dist/audit/save.js.map +1 -0
- package/dist/{commands/audit → audit}/saveFile.js +3 -6
- package/dist/audit/saveFile.js.map +1 -0
- package/dist/auth/auth.js +103 -0
- package/dist/auth/auth.js.map +1 -0
- package/dist/auth/authRequests.js +18 -0
- package/dist/auth/authRequests.js.map +1 -0
- package/dist/cliConstants.js +48 -18
- package/dist/cliConstants.js.map +1 -0
- package/dist/commands/config/config.js +12 -13
- package/dist/commands/config/config.js.map +1 -0
- package/dist/commands/learn/learn.js +3 -6
- package/dist/commands/learn/learn.js.map +1 -0
- package/dist/commands/learn/processLearn.js +3 -6
- package/dist/commands/learn/processLearn.js.map +1 -0
- package/dist/common/HTTPClient.js +193 -94
- package/dist/common/HTTPClient.js.map +1 -0
- package/dist/{scan → common}/autoDetection.js +53 -36
- package/dist/common/autoDetection.js.map +1 -0
- package/dist/common/baseRequest.js +59 -23
- package/dist/common/baseRequest.js.map +1 -0
- package/dist/common/commonHelp.js +13 -13
- package/dist/common/commonHelp.js.map +1 -0
- package/dist/common/errorHandling.js +49 -63
- package/dist/common/errorHandling.js.map +1 -0
- package/dist/common/fail.js +6 -12
- package/dist/common/fail.js.map +1 -0
- package/dist/common/stringManipulations.js +8 -0
- package/dist/common/stringManipulations.js.map +1 -0
- package/dist/common/versionChecker.js +16 -19
- package/dist/common/versionChecker.js.map +1 -0
- package/dist/constants/constants.js +46 -65
- package/dist/constants/constants.js.map +1 -0
- package/dist/constants/lambda.js +8 -5
- package/dist/constants/lambda.js.map +1 -0
- package/dist/constants/locales.js +14 -10
- package/dist/constants/locales.js.map +1 -0
- package/dist/github/fingerprintConfig.js +10 -0
- package/dist/github/fingerprintConfig.js.map +1 -0
- package/dist/github/processFingerprint.js +25 -0
- package/dist/github/processFingerprint.js.map +1 -0
- package/dist/github/projectGroup.js +225 -0
- package/dist/github/projectGroup.js.map +1 -0
- package/dist/github/repoServices.js +91 -0
- package/dist/github/repoServices.js.map +1 -0
- package/dist/index.js +42 -39
- package/dist/index.js.map +1 -0
- package/dist/lambda/analytics.js +6 -9
- package/dist/lambda/analytics.js.map +1 -0
- package/dist/lambda/arn.js +6 -9
- package/dist/lambda/arn.js.map +1 -0
- package/dist/lambda/aws.js +29 -34
- package/dist/lambda/aws.js.map +1 -0
- package/dist/lambda/cliError.js +13 -41
- package/dist/lambda/cliError.js.map +1 -0
- package/dist/lambda/constants.js +3 -4
- package/dist/lambda/constants.js.map +1 -0
- package/dist/lambda/help.js +39 -44
- package/dist/lambda/help.js.map +1 -0
- package/dist/lambda/lambda.js +61 -65
- package/dist/lambda/lambda.js.map +1 -0
- package/dist/lambda/lambdaUtils.js +38 -32
- package/dist/lambda/lambdaUtils.js.map +1 -0
- package/dist/lambda/logUtils.js +21 -17
- package/dist/lambda/logUtils.js.map +1 -0
- package/dist/lambda/scanDetailCompletion.js +19 -25
- package/dist/lambda/scanDetailCompletion.js.map +1 -0
- package/dist/lambda/scanRequest.js +34 -41
- package/dist/lambda/scanRequest.js.map +1 -0
- package/dist/lambda/scanResults.js +8 -10
- package/dist/lambda/scanResults.js.map +1 -0
- package/dist/lambda/types.js +5 -7
- package/dist/lambda/types.js.map +1 -0
- package/dist/lambda/utils.js +33 -35
- package/dist/lambda/utils.js.map +1 -0
- package/dist/sbom/generateSbom.js +6 -10
- package/dist/sbom/generateSbom.js.map +1 -0
- package/dist/scaAnalysis/common/auditReport.js +8 -12
- package/dist/scaAnalysis/common/auditReport.js.map +1 -0
- package/dist/scaAnalysis/common/commonReportingFunctionsSca.js +26 -32
- package/dist/scaAnalysis/common/commonReportingFunctionsSca.js.map +1 -0
- package/dist/scaAnalysis/common/formatMessage.js +8 -17
- package/dist/scaAnalysis/common/formatMessage.js.map +1 -0
- package/dist/scaAnalysis/common/models/ScaReportModel.js +4 -9
- package/dist/scaAnalysis/common/models/ScaReportModel.js.map +1 -0
- package/dist/scaAnalysis/common/scaParserForGoAndJava.js +10 -9
- package/dist/scaAnalysis/common/scaParserForGoAndJava.js.map +1 -0
- package/dist/scaAnalysis/common/scaServicesUpload.js +59 -90
- package/dist/scaAnalysis/common/scaServicesUpload.js.map +1 -0
- package/dist/scaAnalysis/common/treeUpload.js +15 -25
- package/dist/scaAnalysis/common/treeUpload.js.map +1 -0
- package/dist/scaAnalysis/common/utils/reportUtilsSca.js +21 -29
- package/dist/scaAnalysis/common/utils/reportUtilsSca.js.map +1 -0
- package/dist/scaAnalysis/dotnet/analysis.js +12 -18
- package/dist/scaAnalysis/dotnet/analysis.js.map +1 -0
- package/dist/scaAnalysis/dotnet/index.js +4 -7
- package/dist/scaAnalysis/dotnet/index.js.map +1 -0
- package/dist/scaAnalysis/go/goAnalysis.js +8 -11
- package/dist/scaAnalysis/go/goAnalysis.js.map +1 -0
- package/dist/scaAnalysis/go/goParseDeps.js +9 -7
- package/dist/scaAnalysis/go/goParseDeps.js.map +1 -0
- package/dist/scaAnalysis/go/goReadDepFile.js +10 -8
- package/dist/scaAnalysis/go/goReadDepFile.js.map +1 -0
- package/dist/scaAnalysis/java/analysis.js +23 -20
- package/dist/scaAnalysis/java/analysis.js.map +1 -0
- package/dist/scaAnalysis/java/index.js +7 -10
- package/dist/scaAnalysis/java/index.js.map +1 -0
- package/dist/scaAnalysis/java/javaBuildDepsParser.js +43 -43
- package/dist/scaAnalysis/java/javaBuildDepsParser.js.map +1 -0
- package/dist/scaAnalysis/javascript/analysis.js +16 -20
- package/dist/scaAnalysis/javascript/analysis.js.map +1 -0
- package/dist/scaAnalysis/javascript/index.js +17 -19
- package/dist/scaAnalysis/javascript/index.js.map +1 -0
- package/dist/scaAnalysis/javascript/scaServiceParser.js +8 -15
- package/dist/scaAnalysis/javascript/scaServiceParser.js.map +1 -0
- package/dist/scaAnalysis/legacy/legacyFlow.js +13 -15
- package/dist/scaAnalysis/legacy/legacyFlow.js.map +1 -0
- package/dist/scaAnalysis/php/analysis.js +15 -16
- package/dist/scaAnalysis/php/analysis.js.map +1 -0
- package/dist/scaAnalysis/php/index.js +5 -8
- package/dist/scaAnalysis/php/index.js.map +1 -0
- package/dist/scaAnalysis/php/phpNewServicesMapper.js +9 -12
- package/dist/scaAnalysis/php/phpNewServicesMapper.js.map +1 -0
- package/dist/scaAnalysis/processServicesFlow.js +86 -32
- package/dist/scaAnalysis/processServicesFlow.js.map +1 -0
- package/dist/scaAnalysis/python/analysis.js +16 -23
- package/dist/scaAnalysis/python/analysis.js.map +1 -0
- package/dist/scaAnalysis/python/index.js +4 -7
- package/dist/scaAnalysis/python/index.js.map +1 -0
- package/dist/scaAnalysis/repoMode/gradleParser.js +7 -13
- package/dist/scaAnalysis/repoMode/gradleParser.js.map +1 -0
- package/dist/scaAnalysis/repoMode/index.js +9 -12
- package/dist/scaAnalysis/repoMode/index.js.map +1 -0
- package/dist/scaAnalysis/repoMode/mavenParser.js +109 -73
- package/dist/scaAnalysis/repoMode/mavenParser.js.map +1 -0
- package/dist/scaAnalysis/ruby/analysis.js +32 -46
- package/dist/scaAnalysis/ruby/analysis.js.map +1 -0
- package/dist/scaAnalysis/ruby/index.js +5 -8
- package/dist/scaAnalysis/ruby/index.js.map +1 -0
- package/dist/scaAnalysis/scaAnalysis.js +49 -51
- package/dist/scaAnalysis/scaAnalysis.js.map +1 -0
- package/dist/scan/fileUtils.js +36 -40
- package/dist/scan/fileUtils.js.map +1 -0
- package/dist/scan/formatScanOutput.js +47 -61
- package/dist/scan/formatScanOutput.js.map +1 -0
- package/dist/scan/help.js +8 -11
- package/dist/scan/help.js.map +1 -0
- package/dist/scan/models/groupedResultsModel.js +2 -5
- package/dist/scan/models/groupedResultsModel.js.map +1 -0
- package/dist/scan/models/resultContentModel.js +2 -2
- package/dist/scan/models/resultContentModel.js.map +1 -0
- package/dist/scan/models/scanResultsModel.js +2 -5
- package/dist/scan/models/scanResultsModel.js.map +1 -0
- package/dist/scan/populateProjectIdAndProjectName.js +22 -60
- package/dist/scan/populateProjectIdAndProjectName.js.map +1 -0
- package/dist/scan/processScan.js +28 -0
- package/dist/scan/processScan.js.map +1 -0
- package/dist/scan/saveResults.js +3 -6
- package/dist/scan/saveResults.js.map +1 -0
- package/dist/scan/scan.js +33 -53
- package/dist/scan/scan.js.map +1 -0
- package/dist/scan/scanConfig.js +14 -12
- package/dist/scan/scanConfig.js.map +1 -0
- package/dist/scan/scanController.js +19 -21
- package/dist/scan/scanController.js.map +1 -0
- package/dist/scan/scanRequests.js +86 -0
- package/dist/scan/scanRequests.js.map +1 -0
- package/dist/scan/scanResults.js +26 -72
- package/dist/scan/scanResults.js.map +1 -0
- package/dist/telemetry/telemetry.js +29 -59
- package/dist/telemetry/telemetry.js.map +1 -0
- package/dist/utils/capabilities.js +2 -1
- package/dist/utils/capabilities.js.map +1 -0
- package/dist/utils/commonApi.js +58 -50
- package/dist/utils/commonApi.js.map +1 -0
- package/dist/utils/filterProjectPath.js +2 -1
- package/dist/utils/filterProjectPath.js.map +1 -0
- package/dist/utils/generalAPI.js +11 -33
- package/dist/utils/generalAPI.js.map +1 -0
- package/dist/utils/getConfig.js +8 -13
- package/dist/utils/getConfig.js.map +1 -0
- package/dist/utils/oraWrapper.js +7 -14
- package/dist/utils/oraWrapper.js.map +1 -0
- package/dist/utils/paramsUtil/commandlineParams.js +2 -5
- package/dist/utils/paramsUtil/commandlineParams.js.map +1 -0
- package/dist/utils/paramsUtil/configStoreParams.js +9 -10
- package/dist/utils/paramsUtil/configStoreParams.js.map +1 -0
- package/dist/utils/paramsUtil/envVariableParams.js +2 -3
- package/dist/utils/paramsUtil/envVariableParams.js.map +1 -0
- package/dist/utils/paramsUtil/paramHandler.js +12 -13
- package/dist/utils/paramsUtil/paramHandler.js.map +1 -0
- package/dist/utils/parsedCLIOptions.js +4 -7
- package/dist/utils/parsedCLIOptions.js.map +1 -0
- package/dist/utils/requestUtils.js +7 -13
- package/dist/utils/requestUtils.js.map +1 -0
- package/dist/utils/saveFile.js +8 -11
- package/dist/utils/saveFile.js.map +1 -0
- package/dist/utils/validationCheck.js +5 -11
- package/dist/utils/validationCheck.js.map +1 -0
- package/package.json +40 -48
- package/.prettierignore +0 -1
- package/bin/contrast.js +0 -2
- package/dist/audit/languageAnalysisEngine/util/requestUtils.js +0 -14
- package/dist/commands/audit/auditConfig.js +0 -12
- package/dist/commands/audit/help.js +0 -70
- package/dist/commands/audit/processAudit.js +0 -24
- package/dist/commands/auth/auth.js +0 -120
- package/dist/commands/github/fingerprintConfig.js +0 -13
- package/dist/commands/github/processFingerprint.js +0 -28
- package/dist/commands/github/projectGroup.js +0 -254
- package/dist/commands/github/repoServices.js +0 -108
- package/dist/commands/scan/processScan.js +0 -31
- package/dist/lambda/__mocks__/aws.js +0 -21
- package/dist/lambda/__mocks__/lambdaConfig.json +0 -42
- package/src/audit/catalogueApplication/catalogueApplication.js +0 -51
- package/src/audit/languageAnalysisEngine/commonApi.js +0 -20
- package/src/audit/languageAnalysisEngine/filterProjectPath.js +0 -21
- package/src/audit/languageAnalysisEngine/getProjectRootFilenames.js +0 -36
- package/src/audit/languageAnalysisEngine/sendSnapshot.js +0 -57
- package/src/audit/languageAnalysisEngine/util/requestUtils.js +0 -17
- package/src/audit/nodeAnalysisEngine/parseYarn2LockFileContents.js +0 -63
- package/src/audit/report/commonReportingFunctions.js +0 -412
- package/src/audit/report/models/reportGuidanceModel.ts +0 -5
- package/src/audit/report/models/reportLibraryModel.ts +0 -30
- package/src/audit/report/models/reportListModel.ts +0 -49
- package/src/audit/report/models/reportOutputModel.ts +0 -29
- package/src/audit/report/models/reportSeverityModel.ts +0 -18
- package/src/audit/report/models/severityCountModel.ts +0 -22
- package/src/audit/report/reportingFeature.ts +0 -110
- package/src/audit/report/utils/reportUtils.ts +0 -165
- package/src/audit/save.js +0 -67
- package/src/cliConstants.js +0 -522
- package/src/commands/audit/auditConfig.js +0 -18
- package/src/commands/audit/auditController.js +0 -50
- package/src/commands/audit/help.js +0 -72
- package/src/commands/audit/processAudit.js +0 -34
- package/src/commands/audit/saveFile.js +0 -15
- package/src/commands/auth/auth.js +0 -146
- package/src/commands/config/config.js +0 -41
- package/src/commands/github/fingerprintConfig.js +0 -19
- package/src/commands/github/processFingerprint.js +0 -37
- package/src/commands/github/projectGroup.js +0 -294
- package/src/commands/github/repoServices.js +0 -122
- package/src/commands/learn/learn.js +0 -10
- package/src/commands/learn/processLearn.js +0 -13
- package/src/commands/scan/processScan.js +0 -42
- package/src/common/HTTPClient.js +0 -775
- package/src/common/baseRequest.ts +0 -83
- package/src/common/commonHelp.js +0 -53
- package/src/common/errorHandling.js +0 -157
- package/src/common/fail.js +0 -79
- package/src/common/versionChecker.js +0 -75
- package/src/constants/constants.js +0 -71
- package/src/constants/lambda.js +0 -85
- package/src/constants/locales.js +0 -365
- package/src/index.ts +0 -142
- package/src/lambda/__mocks__/aws.ts +0 -32
- package/src/lambda/__mocks__/lambdaConfig.json +0 -42
- package/src/lambda/analytics.ts +0 -9
- package/src/lambda/arn.ts +0 -33
- package/src/lambda/aws.ts +0 -248
- package/src/lambda/cliError.ts +0 -72
- package/src/lambda/constants.ts +0 -11
- package/src/lambda/help.ts +0 -92
- package/src/lambda/lambda.ts +0 -230
- package/src/lambda/lambdaUtils.ts +0 -111
- package/src/lambda/logUtils.ts +0 -64
- package/src/lambda/scanDetailCompletion.ts +0 -78
- package/src/lambda/scanRequest.ts +0 -169
- package/src/lambda/scanResults.ts +0 -29
- package/src/lambda/types.ts +0 -36
- package/src/lambda/utils.ts +0 -188
- package/src/sbom/generateSbom.ts +0 -45
- package/src/scaAnalysis/common/auditReport.js +0 -59
- package/src/scaAnalysis/common/commonReportingFunctionsSca.js +0 -276
- package/src/scaAnalysis/common/formatMessage.js +0 -67
- package/src/scaAnalysis/common/models/ScaReportModel.ts +0 -81
- package/src/scaAnalysis/common/scaParserForGoAndJava.js +0 -41
- package/src/scaAnalysis/common/scaServicesUpload.js +0 -155
- package/src/scaAnalysis/common/treeUpload.js +0 -51
- package/src/scaAnalysis/common/utils/reportUtilsSca.ts +0 -123
- package/src/scaAnalysis/dotnet/analysis.js +0 -72
- package/src/scaAnalysis/dotnet/index.js +0 -11
- package/src/scaAnalysis/go/goAnalysis.js +0 -26
- package/src/scaAnalysis/go/goParseDeps.js +0 -203
- package/src/scaAnalysis/go/goReadDepFile.js +0 -34
- package/src/scaAnalysis/java/analysis.js +0 -148
- package/src/scaAnalysis/java/index.js +0 -29
- package/src/scaAnalysis/java/javaBuildDepsParser.js +0 -439
- package/src/scaAnalysis/javascript/analysis.js +0 -111
- package/src/scaAnalysis/javascript/index.js +0 -104
- package/src/scaAnalysis/javascript/scaServiceParser.js +0 -151
- package/src/scaAnalysis/legacy/legacyFlow.js +0 -43
- package/src/scaAnalysis/php/analysis.js +0 -78
- package/src/scaAnalysis/php/index.js +0 -28
- package/src/scaAnalysis/php/phpNewServicesMapper.js +0 -77
- package/src/scaAnalysis/processServicesFlow.js +0 -119
- package/src/scaAnalysis/python/analysis.js +0 -93
- package/src/scaAnalysis/python/index.js +0 -16
- package/src/scaAnalysis/repoMode/gradleParser.js +0 -88
- package/src/scaAnalysis/repoMode/index.js +0 -21
- package/src/scaAnalysis/repoMode/mavenParser.js +0 -112
- package/src/scaAnalysis/ruby/analysis.js +0 -413
- package/src/scaAnalysis/ruby/index.js +0 -16
- package/src/scaAnalysis/scaAnalysis.js +0 -171
- package/src/scan/autoDetection.js +0 -175
- package/src/scan/fileUtils.js +0 -206
- package/src/scan/formatScanOutput.ts +0 -225
- package/src/scan/help.js +0 -56
- package/src/scan/models/groupedResultsModel.ts +0 -20
- package/src/scan/models/resultContentModel.ts +0 -86
- package/src/scan/models/scanResultsModel.ts +0 -55
- package/src/scan/populateProjectIdAndProjectName.js +0 -73
- package/src/scan/saveResults.js +0 -14
- package/src/scan/scan.ts +0 -68
- package/src/scan/scanConfig.js +0 -58
- package/src/scan/scanController.js +0 -98
- package/src/scan/scanResults.js +0 -171
- package/src/telemetry/telemetry.ts +0 -154
- package/src/utils/capabilities.js +0 -12
- package/src/utils/commonApi.js +0 -103
- package/src/utils/filterProjectPath.js +0 -25
- package/src/utils/generalAPI.js +0 -52
- package/src/utils/getConfig.ts +0 -34
- package/src/utils/oraWrapper.js +0 -29
- package/src/utils/paramsUtil/commandlineParams.js +0 -12
- package/src/utils/paramsUtil/configStoreParams.js +0 -19
- package/src/utils/paramsUtil/envVariableParams.js +0 -10
- package/src/utils/paramsUtil/paramHandler.js +0 -38
- package/src/utils/parsedCLIOptions.js +0 -32
- package/src/utils/requestUtils.js +0 -29
- package/src/utils/saveFile.js +0 -20
- package/src/utils/validationCheck.js +0 -39
|
@@ -1,7 +1,7 @@
|
|
|
1
|
-
|
|
2
|
-
|
|
3
|
-
|
|
4
|
-
if (node.rawYarnLockFileContents
|
|
1
|
+
import i18n from 'i18n';
|
|
2
|
+
export default ({ language: { lockFilename }, node }, next) => {
|
|
3
|
+
// If we never read the lock file or its an earlier version then pass priority
|
|
4
|
+
if (node.rawYarnLockFileContents === undefined || node.yarnVersion === 1) {
|
|
5
5
|
next();
|
|
6
6
|
}
|
|
7
7
|
else {
|
|
@@ -26,20 +26,20 @@ module.exports = exports = ({ language: { lockFilename }, node }, next) => {
|
|
|
26
26
|
next();
|
|
27
27
|
}
|
|
28
28
|
};
|
|
29
|
-
function formatKey(keyNames) {
|
|
29
|
+
export function formatKey(keyNames) {
|
|
30
30
|
let name = '';
|
|
31
31
|
let formattedNames = [];
|
|
32
32
|
keyNames.forEach(dummyString => {
|
|
33
33
|
let nameArr = dummyString.split('@');
|
|
34
34
|
if (nameArr.length > 1) {
|
|
35
|
-
if (nameArr.length
|
|
35
|
+
if (nameArr.length === 2) {
|
|
36
36
|
name = nameArr[0];
|
|
37
37
|
}
|
|
38
|
-
if (nameArr.length
|
|
38
|
+
if (nameArr.length === 3) {
|
|
39
39
|
name = '@' + nameArr[1];
|
|
40
40
|
}
|
|
41
41
|
let version = dummyString.split(':').pop('');
|
|
42
|
-
if (version.length
|
|
42
|
+
if (version.length === 1 && version !== '*') {
|
|
43
43
|
version = version + '.0';
|
|
44
44
|
}
|
|
45
45
|
let reformattedKey = name.trim() + '@' + version;
|
|
@@ -48,4 +48,4 @@ function formatKey(keyNames) {
|
|
|
48
48
|
});
|
|
49
49
|
return formattedNames;
|
|
50
50
|
}
|
|
51
|
-
|
|
51
|
+
//# sourceMappingURL=parseYarn2LockFileContents.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"parseYarn2LockFileContents.js","sourceRoot":"","sources":["../../../src/audit/nodeAnalysisEngine/parseYarn2LockFileContents.js"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,MAAM,CAAA;AAEvB,eAAe,CAAC,EAAE,QAAQ,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE;IAC5D,8EAA8E;IAC9E,IAAI,IAAI,CAAC,uBAAuB,KAAK,SAAS,IAAI,IAAI,CAAC,WAAW,KAAK,CAAC,EAAE;QACxE,IAAI,EAAE,CAAA;KACP;SAAM;QACL,IAAI;YACF,IAAI,CAAC,YAAY,GAAG,EAAE,CAAA;YACtB,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,uBAAuB,CAAA;YAC1D,OAAO,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,UAAU,CAAA;YAC7C,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,SAAS,CAAA;YAErC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;gBACpE,MAAM,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;gBAClC,MAAM,QAAQ,GAAG,SAAS,CAAC,WAAW,CAAC,CAAA;gBAEvC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;oBACtB,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAA;gBACxC,CAAC,CAAC,CAAA;YACJ,CAAC,CAAC,CAAA;SACH;QAAC,OAAO,GAAG,EAAE;YACZ,IAAI,CACF,IAAI,KAAK,CACP,IAAI,CAAC,EAAE,CAAC,gBAAgB,EAAE,YAAY,CAAC,YAAY,CAAC;gBAClD,GAAG,GAAG,CAAC,OAAO,EAAE,CACnB,CACF,CAAA;YAED,OAAM;SACP;QAED,IAAI,EAAE,CAAA;KACP;AACH,CAAC,CAAA;AAED,MAAM,UAAU,SAAS,CAAC,QAAQ;IAChC,IAAI,IAAI,GAAG,EAAE,CAAA;IACb,IAAI,cAAc,GAAG,EAAE,CAAA;IACvB,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE;QAC7B,IAAI,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QACpC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE;YACtB,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE;gBACxB,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;aAClB;YAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE;gBACxB,IAAI,GAAG,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;aACxB;YAED,IAAI,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YAE5C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,KAAK,GAAG,EAAE;gBAC3C,OAAO,GAAG,OAAO,GAAG,IAAI,CAAA;aACzB;YACD,IAAI,cAAc,GAAG,IAAI,CAAC,IAAI,EAAE,GAAG,GAAG,GAAG,OAAO,CAAA;YAEhD,cAAc,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;SACpC;IACH,CAAC,CAAC,CAAA;IACF,OAAO,cAAc,CAAA;AACvB,CAAC"}
|
|
@@ -0,0 +1,21 @@
|
|
|
1
|
+
import { getAuditConfig } from './auditConfig.js';
|
|
2
|
+
import { auditUsageGuide } from './help.js';
|
|
3
|
+
import { processSca } from '../scaAnalysis/scaAnalysis.js';
|
|
4
|
+
import { sendTelemetryConfigAsObject } from '../telemetry/telemetry.js';
|
|
5
|
+
import { postRunMessage } from '../common/commonHelp.js';
|
|
6
|
+
export const processAudit = async (contrastConf, argvMain) => {
|
|
7
|
+
if (argvMain.indexOf('--help') !== -1) {
|
|
8
|
+
printHelpMessage();
|
|
9
|
+
process.exit(0);
|
|
10
|
+
}
|
|
11
|
+
let config = await getAuditConfig(contrastConf, 'audit', argvMain);
|
|
12
|
+
await processSca(config);
|
|
13
|
+
if (!config.fingerprint) {
|
|
14
|
+
postRunMessage('audit');
|
|
15
|
+
await sendTelemetryConfigAsObject(config, 'audit', argvMain, 'SUCCESS', config.language);
|
|
16
|
+
}
|
|
17
|
+
};
|
|
18
|
+
const printHelpMessage = () => {
|
|
19
|
+
console.log(auditUsageGuide);
|
|
20
|
+
};
|
|
21
|
+
//# sourceMappingURL=processAudit.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"processAudit.js","sourceRoot":"","sources":["../../src/audit/processAudit.js"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAA;AAC1D,OAAO,EAAE,2BAA2B,EAAE,MAAM,2BAA2B,CAAA;AACvE,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AAExD,MAAM,CAAC,MAAM,YAAY,GAAG,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,EAAE;IAC3D,IAAI,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE;QACrC,gBAAgB,EAAE,CAAA;QAClB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;KAChB;IAED,IAAI,MAAM,GAAG,MAAM,cAAc,CAAC,YAAY,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAA;IAElE,MAAM,UAAU,CAAC,MAAM,CAAC,CAAA;IACxB,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE;QACvB,cAAc,CAAC,OAAO,CAAC,CAAA;QACvB,MAAM,2BAA2B,CAC/B,MAAM,EACN,OAAO,EACP,QAAQ,EACR,SAAS,EACT,MAAM,CAAC,QAAQ,CAChB,CAAA;KACF;AACH,CAAC,CAAA;AAED,MAAM,gBAAgB,GAAG,GAAG,EAAE;IAC5B,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAA;AAC9B,CAAC,CAAA"}
|
|
@@ -1,43 +1,29 @@
|
|
|
1
|
-
|
|
2
|
-
|
|
3
|
-
|
|
4
|
-
|
|
5
|
-
|
|
6
|
-
|
|
7
|
-
|
|
8
|
-
|
|
9
|
-
|
|
10
|
-
|
|
11
|
-
|
|
12
|
-
const
|
|
13
|
-
const createSummaryMessageTop = (numberOfVulnerableLibraries, numberOfCves) => {
|
|
1
|
+
import { ReportCompositeKey, ReportList, ReportModelStructure } from './models/reportListModel.js';
|
|
2
|
+
import { countVulnerableLibrariesBySeverity, findCVESeverity, findHighestSeverityCVE, findNameAndVersion, orderByHighestPriority, severityCountAllCVEs } from './utils/reportUtils.js';
|
|
3
|
+
import { SeverityCountModel } from './models/severityCountModel.js';
|
|
4
|
+
import { orderBy } from 'lodash-es';
|
|
5
|
+
import { ReportOutputBodyModel, ReportOutputHeaderModel, ReportOutputModel } from './models/reportOutputModel.js';
|
|
6
|
+
import { CE_URL, CRITICAL_COLOUR, HIGH_COLOUR, LOW_COLOUR, MEDIUM_COLOUR, NOTE_COLOUR } from '../../constants/constants.js';
|
|
7
|
+
import chalk from 'chalk';
|
|
8
|
+
import Table from 'cli-table3';
|
|
9
|
+
import { ReportGuidanceModel } from './models/reportGuidanceModel.js';
|
|
10
|
+
import i18n from 'i18n';
|
|
11
|
+
import { getReportById } from '../auditRequestsLegacy.js';
|
|
12
|
+
export const createSummaryMessageTop = (numberOfVulnerableLibraries, numberOfCves) => {
|
|
14
13
|
numberOfVulnerableLibraries === 1
|
|
15
14
|
? console.log(`Found 1 vulnerable library containing ${numberOfCves} CVE`)
|
|
16
15
|
: console.log(`Found ${numberOfVulnerableLibraries} vulnerable libraries containing ${numberOfCves} CVEs`);
|
|
17
16
|
};
|
|
18
|
-
const createSummaryMessageBottom = numberOfVulnerableLibraries => {
|
|
17
|
+
export const createSummaryMessageBottom = numberOfVulnerableLibraries => {
|
|
19
18
|
numberOfVulnerableLibraries === 1
|
|
20
19
|
? console.log(`Found 1 vulnerability`)
|
|
21
20
|
: console.log(`Found ${numberOfVulnerableLibraries} vulnerabilities`);
|
|
22
21
|
};
|
|
23
|
-
const getReport = async (config, reportId) => {
|
|
24
|
-
const
|
|
25
|
-
return
|
|
26
|
-
.getReportById(config, reportId)
|
|
27
|
-
.then(res => {
|
|
28
|
-
if (res.statusCode === 200) {
|
|
29
|
-
return res.body;
|
|
30
|
-
}
|
|
31
|
-
else {
|
|
32
|
-
console.log(JSON.stringify(res.statusCode));
|
|
33
|
-
commonApi.handleResponseErrors(res, 'report');
|
|
34
|
-
}
|
|
35
|
-
})
|
|
36
|
-
.catch(err => {
|
|
37
|
-
console.log(err);
|
|
38
|
-
});
|
|
22
|
+
export const getReport = async (config, reportId) => {
|
|
23
|
+
const res = await getReportById(config, reportId);
|
|
24
|
+
return res.body;
|
|
39
25
|
};
|
|
40
|
-
const printVulnerabilityResponse = (config, vulnerableLibraries, numberOfVulnerableLibraries, numberOfCves, guidance) => {
|
|
26
|
+
export const printVulnerabilityResponse = (config, vulnerableLibraries, numberOfVulnerableLibraries, numberOfCves, guidance) => {
|
|
41
27
|
let hasSomeVulnerabilitiesReported = false;
|
|
42
28
|
printFormattedOutput(config, vulnerableLibraries, numberOfVulnerableLibraries, numberOfCves, guidance);
|
|
43
29
|
if (Object.keys(vulnerableLibraries).length > 0) {
|
|
@@ -45,7 +31,7 @@ const printVulnerabilityResponse = (config, vulnerableLibraries, numberOfVulnera
|
|
|
45
31
|
}
|
|
46
32
|
return hasSomeVulnerabilitiesReported;
|
|
47
33
|
};
|
|
48
|
-
const printFormattedOutput = (config, libraries, numberOfVulnerableLibraries, numberOfCves, guidance) => {
|
|
34
|
+
export const printFormattedOutput = (config, libraries, numberOfVulnerableLibraries, numberOfCves, guidance) => {
|
|
49
35
|
createSummaryMessageTop(numberOfVulnerableLibraries, numberOfCves);
|
|
50
36
|
console.log();
|
|
51
37
|
const report = new ReportList();
|
|
@@ -84,7 +70,7 @@ const printFormattedOutput = (config, libraries, numberOfVulnerableLibraries, nu
|
|
|
84
70
|
console.log(`${config.host}/Contrast/static/ng/index.html#/${config.organizationId}/applications/${config.applicationId}/libs/dependency-tree`);
|
|
85
71
|
}
|
|
86
72
|
};
|
|
87
|
-
function getReportTable() {
|
|
73
|
+
export function getReportTable() {
|
|
88
74
|
return new Table({
|
|
89
75
|
chars: {
|
|
90
76
|
top: '',
|
|
@@ -109,7 +95,7 @@ function getReportTable() {
|
|
|
109
95
|
colWidths: [12, 1, 100]
|
|
110
96
|
});
|
|
111
97
|
}
|
|
112
|
-
function buildHeader(highestSeverity, contrastHeaderNum, libraryName, version, numOfCVEs) {
|
|
98
|
+
export function buildHeader(highestSeverity, contrastHeaderNum, libraryName, version, numOfCVEs) {
|
|
113
99
|
const vulnerabilityPluralised = numOfCVEs > 1 ? 'vulnerabilities' : 'vulnerability';
|
|
114
100
|
const formattedHeaderNum = buildFormattedHeaderNum(contrastHeaderNum);
|
|
115
101
|
const headerColour = chalk.hex(highestSeverity.colour);
|
|
@@ -119,9 +105,11 @@ function buildHeader(highestSeverity, contrastHeaderNum, libraryName, version, n
|
|
|
119
105
|
const introducesMessage = `introduces ${numOfCVEs} ${vulnerabilityPluralised}`;
|
|
120
106
|
return new ReportOutputHeaderModel(vulnMessage, introducesMessage);
|
|
121
107
|
}
|
|
122
|
-
function buildBody(cveArray, advice) {
|
|
108
|
+
export function buildBody(cveArray, advice) {
|
|
123
109
|
const orderedCvesWithSeverityAssigned = orderByHighestPriority(cveArray.map(cve => findCVESeverity(cve)));
|
|
124
110
|
const issueMessage = getIssueRow(orderedCvesWithSeverityAssigned);
|
|
111
|
+
//todo different advice based on remediationGuidance being available or now
|
|
112
|
+
// console.log(advice)
|
|
125
113
|
const minOrMax = advice.minimum ? advice.minimum : advice.maximum;
|
|
126
114
|
const displayAdvice = minOrMax
|
|
127
115
|
? `Change to version ${chalk.bold(minOrMax)}`
|
|
@@ -129,11 +117,11 @@ function buildBody(cveArray, advice) {
|
|
|
129
117
|
const adviceMessage = [chalk.bold('Advice'), ':', displayAdvice];
|
|
130
118
|
return new ReportOutputBodyModel(issueMessage, adviceMessage);
|
|
131
119
|
}
|
|
132
|
-
function getIssueRow(cveArray) {
|
|
120
|
+
export function getIssueRow(cveArray) {
|
|
133
121
|
const cveMessagesList = getIssueCveMsgList(cveArray);
|
|
134
122
|
return [chalk.bold('Issue'), ':', `${cveMessagesList.join(', ')}`];
|
|
135
123
|
}
|
|
136
|
-
function gatherRemediationAdvice(guidance, libraryName, libraryVersion) {
|
|
124
|
+
export function gatherRemediationAdvice(guidance, libraryName, libraryVersion) {
|
|
137
125
|
const guidanceModel = new ReportGuidanceModel();
|
|
138
126
|
const data = guidance[libraryName + '@' + libraryVersion];
|
|
139
127
|
if (data) {
|
|
@@ -142,10 +130,10 @@ function gatherRemediationAdvice(guidance, libraryName, libraryVersion) {
|
|
|
142
130
|
}
|
|
143
131
|
return guidanceModel;
|
|
144
132
|
}
|
|
145
|
-
function buildFormattedHeaderNum(contrastHeaderNum) {
|
|
133
|
+
export function buildFormattedHeaderNum(contrastHeaderNum) {
|
|
146
134
|
return `CONTRAST-${contrastHeaderNum.toString().padStart(3, '0')}`;
|
|
147
135
|
}
|
|
148
|
-
const buildFooter = reportModelStructure => {
|
|
136
|
+
export const buildFooter = reportModelStructure => {
|
|
149
137
|
const { critical, high, medium, low, note } = countVulnerableLibrariesBySeverity(reportModelStructure);
|
|
150
138
|
const criticalMessage = chalk
|
|
151
139
|
.hex(CRITICAL_COLOUR)
|
|
@@ -162,7 +150,7 @@ const buildFooter = reportModelStructure => {
|
|
|
162
150
|
noteMessage
|
|
163
151
|
};
|
|
164
152
|
};
|
|
165
|
-
const getIssueCveMsgList = results => {
|
|
153
|
+
export const getIssueCveMsgList = results => {
|
|
166
154
|
const cveMessages = [];
|
|
167
155
|
results.forEach(reportSeverityModel => {
|
|
168
156
|
const { colour, severity, name } = reportSeverityModel;
|
|
@@ -174,7 +162,7 @@ const getIssueCveMsgList = results => {
|
|
|
174
162
|
});
|
|
175
163
|
return cveMessages;
|
|
176
164
|
};
|
|
177
|
-
const getSeverityCounts = results => {
|
|
165
|
+
export const getSeverityCounts = results => {
|
|
178
166
|
const acc = {
|
|
179
167
|
critical: 0,
|
|
180
168
|
high: 0,
|
|
@@ -192,20 +180,20 @@ const getSeverityCounts = results => {
|
|
|
192
180
|
}
|
|
193
181
|
return acc;
|
|
194
182
|
};
|
|
195
|
-
const printNoVulnFoundMsg = () => {
|
|
183
|
+
export const printNoVulnFoundMsg = () => {
|
|
196
184
|
console.log(i18n.__('scanNoVulnerabilitiesFound'));
|
|
197
185
|
console.log(i18n.__('scanNoVulnerabilitiesFoundSecureCode'));
|
|
198
186
|
console.log(i18n.__('scanNoVulnerabilitiesFoundGoodWork'));
|
|
199
187
|
console.log(chalk.bold(`Found 0 vulnerabilities`));
|
|
200
188
|
console.log(i18n.__('foundDetailedVulnerabilities', String(0), String(0), String(0), String(0), String(0)));
|
|
201
189
|
};
|
|
202
|
-
const printVulnInfo = projectOverview => {
|
|
190
|
+
export const printVulnInfo = projectOverview => {
|
|
203
191
|
const totalVulnerabilities = projectOverview.total;
|
|
204
192
|
createSummaryMessageBottom(totalVulnerabilities);
|
|
205
193
|
const formattedValues = severityFormatted(projectOverview);
|
|
206
194
|
console.log(i18n.__('foundDetailedVulnerabilities', String(formattedValues.criticalFormatted), String(formattedValues.highFormatted), String(formattedValues.mediumFormatted), String(formattedValues.lowFormatted), String(formattedValues.noteFormatted)));
|
|
207
195
|
};
|
|
208
|
-
const severityFormatted = projectOverview => {
|
|
196
|
+
export const severityFormatted = projectOverview => {
|
|
209
197
|
const criticalFormatted = chalk
|
|
210
198
|
.hex(CRITICAL_COLOUR)
|
|
211
199
|
.bold(`${projectOverview.critical} Critical`);
|
|
@@ -227,20 +215,4 @@ const severityFormatted = projectOverview => {
|
|
|
227
215
|
noteFormatted
|
|
228
216
|
};
|
|
229
217
|
};
|
|
230
|
-
|
|
231
|
-
createSummaryMessageTop,
|
|
232
|
-
getReport,
|
|
233
|
-
createSummaryMessageBottom,
|
|
234
|
-
printVulnerabilityResponse,
|
|
235
|
-
printFormattedOutput,
|
|
236
|
-
getReportTable,
|
|
237
|
-
buildHeader,
|
|
238
|
-
buildBody,
|
|
239
|
-
getIssueRow,
|
|
240
|
-
gatherRemediationAdvice,
|
|
241
|
-
buildFormattedHeaderNum,
|
|
242
|
-
getIssueCveMsgList,
|
|
243
|
-
getSeverityCounts,
|
|
244
|
-
printNoVulnFoundMsg,
|
|
245
|
-
printVulnInfo
|
|
246
|
-
};
|
|
218
|
+
//# sourceMappingURL=commonReportingFunctions.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"commonReportingFunctions.js","sourceRoot":"","sources":["../../../src/audit/report/commonReportingFunctions.js"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,UAAU,EACV,oBAAoB,EACrB,MAAM,6BAA6B,CAAA;AACpC,OAAO,EACL,kCAAkC,EAClC,eAAe,EACf,sBAAsB,EACtB,kBAAkB,EAClB,sBAAsB,EACtB,oBAAoB,EACrB,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAA;AACnE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,EACL,qBAAqB,EACrB,uBAAuB,EACvB,iBAAiB,EAClB,MAAM,+BAA+B,CAAA;AACtC,OAAO,EACL,MAAM,EACN,eAAe,EACf,WAAW,EACX,UAAU,EACV,aAAa,EACb,WAAW,EACZ,MAAM,8BAA8B,CAAA;AACrC,OAAO,KAAK,MAAM,OAAO,CAAA;AACzB,OAAO,KAAK,MAAM,YAAY,CAAA;AAC9B,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAA;AACrE,OAAO,IAAI,MAAM,MAAM,CAAA;AACvB,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAA;AAEzD,MAAM,CAAC,MAAM,uBAAuB,GAAG,CACrC,2BAA2B,EAC3B,YAAY,EACZ,EAAE;IACF,2BAA2B,KAAK,CAAC;QAC/B,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,yCAAyC,YAAY,MAAM,CAAC;QAC1E,CAAC,CAAC,OAAO,CAAC,GAAG,CACT,SAAS,2BAA2B,oCAAoC,YAAY,OAAO,CAC5F,CAAA;AACP,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,0BAA0B,GAAG,2BAA2B,CAAC,EAAE;IACtE,2BAA2B,KAAK,CAAC;QAC/B,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC;QACtC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,2BAA2B,kBAAkB,CAAC,CAAA;AACzE,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,SAAS,GAAG,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE;IAClD,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;IACjD,OAAO,GAAG,CAAC,IAAI,CAAA;AACjB,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,0BAA0B,GAAG,CACxC,MAAM,EACN,mBAAmB,EACnB,2BAA2B,EAC3B,YAAY,EACZ,QAAQ,EACR,EAAE;IACF,IAAI,8BAA8B,GAAG,KAAK,CAAA;IAC1C,oBAAoB,CAClB,MAAM,EACN,mBAAmB,EACnB,2BAA2B,EAC3B,YAAY,EACZ,QAAQ,CACT,CAAA;IACD,IAAI,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE;QAC/C,8BAA8B,GAAG,IAAI,CAAA;KACtC;IACD,OAAO,8BAA8B,CAAA;AACvC,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAClC,MAAM,EACN,SAAS,EACT,2BAA2B,EAC3B,YAAY,EACZ,QAAQ,EACR,EAAE;IACF,uBAAuB,CAAC,2BAA2B,EAAE,YAAY,CAAC,CAAA;IAClE,OAAO,CAAC,GAAG,EAAE,CAAA;IACb,MAAM,MAAM,GAAG,IAAI,UAAU,EAAE,CAAA;IAE/B,KAAK,MAAM,OAAO,IAAI,SAAS,EAAE;QAC/B,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,kBAAkB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAE7D,MAAM,cAAc,GAAG,IAAI,oBAAoB,CAC7C,IAAI,kBAAkB,CACpB,IAAI,EACJ,OAAO,EACP,sBAAsB,CAAC,OAAO,CAAC,QAAQ,CAAC,EACxC,oBAAoB,CAClB,OAAO,CAAC,QAAQ,EAChB,IAAI,kBAAkB,EAAE,CACzB,CAAC,QAAQ,CACX,EACD,OAAO,CAAC,QAAQ,EAChB,IAAI,CACL,CAAA;QACD,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;KAC7C;IAED,MAAM,oDAAoD,GAAG,OAAO,CAClE,MAAM,CAAC,gBAAgB,EACvB;QACE,cAAc,CAAC,EAAE;YACf,OAAO,cAAc,CAAC,YAAY,CAAC,eAAe,CAAC,QAAQ,CAAA;QAC7D,CAAC;QACD,cAAc,CAAC,EAAE;YACf,OAAO,cAAc,CAAC,YAAY,CAAC,kBAAkB,CAAA;QACvD,CAAC;KACF,EACD,CAAC,KAAK,EAAE,MAAM,CAAC,CAChB,CAAA;IAED,IAAI,wBAAwB,GAAG,CAAC,CAAA;IAChC,KAAK,MAAM,WAAW,IAAI,oDAAoD,EAAE;QAC9E,wBAAwB,EAAE,CAAA;QAC1B,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,eAAe,EAAE,GACpD,WAAW,CAAC,YAAY,CAAA;QAE1B,MAAM,SAAS,GAAG,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAA;QAE7C,MAAM,KAAK,GAAG,cAAc,EAAE,CAAA;QAE9B,MAAM,MAAM,GAAG,WAAW,CACxB,eAAe,EACf,wBAAwB,EACxB,WAAW,EACX,cAAc,EACd,SAAS,CACV,CAAA;QAED,MAAM,MAAM,GAAG,uBAAuB,CACpC,QAAQ,EACR,WAAW,EACX,cAAc,CACf,CAAA;QAED,MAAM,IAAI,GAAG,SAAS,CAAC,WAAW,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;QAEpD,MAAM,iBAAiB,GAAG,IAAI,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;QAE7D,KAAK,CAAC,IAAI,CACR,iBAAiB,CAAC,IAAI,CAAC,YAAY,EACnC,iBAAiB,CAAC,IAAI,CAAC,aAAa,CACrC,CAAA;QAED,OAAO,CAAC,GAAG,CACT,iBAAiB,CAAC,MAAM,CAAC,WAAW,EACpC,iBAAiB,CAAC,MAAM,CAAC,iBAAiB,CAC3C,CAAA;QACD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,CAAA;KACrC;IAED,0BAA0B,CAAC,2BAA2B,CAAC,CAAA;IACvD,MAAM,EACJ,eAAe,EACf,WAAW,EACX,aAAa,EACb,UAAU,EACV,WAAW,EACZ,GAAG,WAAW,CAAC,oDAAoD,CAAC,CAAA;IACrE,OAAO,CAAC,GAAG,CACT,GAAG,eAAe,MAAM,WAAW,MAAM,aAAa,MAAM,UAAU,MAAM,WAAW,EAAE,CAC1F,CAAA;IAED,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE;QAC1B,OAAO,CAAC,GAAG,CACT,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,6CAA6C,CAAC,CACjE,CAAA;QACD,OAAO,CAAC,GAAG,CACT,GAAG,MAAM,CAAC,IAAI,mCAAmC,MAAM,CAAC,cAAc,iBAAiB,MAAM,CAAC,aAAa,uBAAuB,CACnI,CAAA;KACF;AACH,CAAC,CAAA;AAED,MAAM,UAAU,cAAc;IAC5B,OAAO,IAAI,KAAK,CAAC;QACf,KAAK,EAAE;YACL,GAAG,EAAE,EAAE;YACP,SAAS,EAAE,EAAE;YACb,UAAU,EAAE,EAAE;YACd,WAAW,EAAE,EAAE;YACf,MAAM,EAAE,EAAE;YACV,YAAY,EAAE,EAAE;YAChB,aAAa,EAAE,EAAE;YACjB,cAAc,EAAE,EAAE;YAClB,IAAI,EAAE,EAAE;YACR,UAAU,EAAE,EAAE;YACd,GAAG,EAAE,EAAE;YACP,SAAS,EAAE,EAAE;YACb,KAAK,EAAE,EAAE;YACT,WAAW,EAAE,EAAE;YACf,MAAM,EAAE,GAAG;SACZ;QACD,KAAK,EAAE,EAAE,cAAc,EAAE,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE;QAChD,SAAS,EAAE,CAAC,OAAO,CAAC;QACpB,QAAQ,EAAE,IAAI;QACd,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,GAAG,CAAC;KACxB,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,eAAe,EACf,iBAAiB,EACjB,WAAW,EACX,OAAO,EACP,SAAS;IAET,MAAM,uBAAuB,GAC3B,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,eAAe,CAAA;IACrD,MAAM,kBAAkB,GAAG,uBAAuB,CAAC,iBAAiB,CAAC,CAAA;IAErE,MAAM,YAAY,GAAG,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,MAAM,CAAC,CAAA;IACtD,MAAM,oBAAoB,GAAG,YAAY,CACvC,GAAG,kBAAkB,OAAO,eAAe,CAAC,QAAQ,GAAG,CACxD,CAAA;IACD,MAAM,qBAAqB,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,WAAW,IAAI,OAAO,EAAE,CAAC,CAAA;IAC5E,MAAM,WAAW,GAAG,GAAG,oBAAoB,IAAI,qBAAqB,EAAE,CAAA;IAEtE,MAAM,iBAAiB,GAAG,cAAc,SAAS,IAAI,uBAAuB,EAAE,CAAA;IAE9E,OAAO,IAAI,uBAAuB,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAA;AACpE,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,QAAQ,EAAE,MAAM;IACxC,MAAM,+BAA+B,GAAG,sBAAsB,CAC5D,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAC1C,CAAA;IAED,MAAM,YAAY,GAAG,WAAW,CAAC,+BAA+B,CAAC,CAAA;IAEjE,2EAA2E;IAC3E,sBAAsB;IAEtB,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAA;IACjE,MAAM,aAAa,GAAG,QAAQ;QAC5B,CAAC,CAAC,qBAAqB,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE;QAC7C,CAAC,CAAC,oHAAoH,CAAA;IAExH,MAAM,aAAa,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE,aAAa,CAAC,CAAA;IAEhE,OAAO,IAAI,qBAAqB,CAAC,YAAY,EAAE,aAAa,CAAC,CAAA;AAC/D,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,QAAQ;IAClC,MAAM,eAAe,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAA;IACpD,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;AACpE,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,QAAQ,EAAE,WAAW,EAAE,cAAc;IAC3E,MAAM,aAAa,GAAG,IAAI,mBAAmB,EAAE,CAAA;IAE/C,MAAM,IAAI,GAAG,QAAQ,CAAC,WAAW,GAAG,GAAG,GAAG,cAAc,CAAC,CAAA;IAEzD,IAAI,IAAI,EAAE;QACR,aAAa,CAAC,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAA;QAC9C,aAAa,CAAC,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAA;KAC/C;IAED,OAAO,aAAa,CAAA;AACtB,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,iBAAiB;IACvD,OAAO,YAAY,iBAAiB,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAA;AACpE,CAAC;AAED,MAAM,CAAC,MAAM,WAAW,GAAG,oBAAoB,CAAC,EAAE;IAChD,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GACzC,kCAAkC,CAAC,oBAAoB,CAAC,CAAA;IAE1D,MAAM,eAAe,GAAG,KAAK;SAC1B,GAAG,CAAC,eAAe,CAAC;SACpB,IAAI,CAAC,GAAG,QAAQ,WAAW,CAAC,CAAA;IAC/B,MAAM,WAAW,GAAG,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,CAAA;IAC/D,MAAM,aAAa,GAAG,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,MAAM,SAAS,CAAC,CAAA;IACvE,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,CAAA;IAC3D,MAAM,WAAW,GAAG,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,CAAA;IAE/D,OAAO;QACL,eAAe;QACf,WAAW;QACX,aAAa;QACb,UAAU;QACV,WAAW;KACZ,CAAA;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAG,OAAO,CAAC,EAAE;IAC1C,MAAM,WAAW,GAAG,EAAE,CAAA;IAEtB,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,EAAE;QACpC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,mBAAmB,CAAA;QAEtD,MAAM,iBAAiB,GAAG,KAAK;aAC5B,GAAG,CAAC,MAAM,CAAC;aACX,IAAI,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAA;QAEhD,MAAM,YAAY,GAAG,iBAAiB,GAAG,IAAI,CAAA;QAC7C,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;IAChC,CAAC,CAAC,CAAA;IACF,OAAO,WAAW,CAAA;AACpB,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,OAAO,CAAC,EAAE;IACzC,MAAM,GAAG,GAAG;QACV,QAAQ,EAAE,CAAC;QACX,IAAI,EAAE,CAAC;QACP,MAAM,EAAE,CAAC;QACT,GAAG,EAAE,CAAC;QACN,IAAI,EAAE,CAAC;QACP,KAAK,EAAE,CAAC;KACT,CAAA;IACD,IAAI,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE;QACjC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;YAClB,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,CAAA;YAClC,GAAG,CAAC,KAAK,IAAI,CAAC,CAAA;YACd,OAAO,GAAG,CAAA;QACZ,CAAC,CAAC,CAAA;KACH;IAED,OAAO,GAAG,CAAA;AACZ,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,EAAE;IACtC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,4BAA4B,CAAC,CAAC,CAAA;IAClD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,sCAAsC,CAAC,CAAC,CAAA;IAC5D,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,oCAAoC,CAAC,CAAC,CAAA;IAC1D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAA;IAClD,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,EAAE,CACL,8BAA8B,EAC9B,MAAM,CAAC,CAAC,CAAC,EACT,MAAM,CAAC,CAAC,CAAC,EACT,MAAM,CAAC,CAAC,CAAC,EACT,MAAM,CAAC,CAAC,CAAC,EACT,MAAM,CAAC,CAAC,CAAC,CACV,CACF,CAAA;AACH,CAAC,CAAA;AACD,MAAM,CAAC,MAAM,aAAa,GAAG,eAAe,CAAC,EAAE;IAC7C,MAAM,oBAAoB,GAAG,eAAe,CAAC,KAAK,CAAA;IAElD,0BAA0B,CAAC,oBAAoB,CAAC,CAAA;IAChD,MAAM,eAAe,GAAG,iBAAiB,CAAC,eAAe,CAAC,CAAA;IAC1D,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,EAAE,CACL,8BAA8B,EAC9B,MAAM,CAAC,eAAe,CAAC,iBAAiB,CAAC,EACzC,MAAM,CAAC,eAAe,CAAC,aAAa,CAAC,EACrC,MAAM,CAAC,eAAe,CAAC,eAAe,CAAC,EACvC,MAAM,CAAC,eAAe,CAAC,YAAY,CAAC,EACpC,MAAM,CAAC,eAAe,CAAC,aAAa,CAAC,CACtC,CACF,CAAA;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,eAAe,CAAC,EAAE;IACjD,MAAM,iBAAiB,GAAG,KAAK;SAC5B,GAAG,CAAC,eAAe,CAAC;SACpB,IAAI,CAAC,GAAG,eAAe,CAAC,QAAQ,WAAW,CAAC,CAAA;IAC/C,MAAM,aAAa,GAAG,KAAK;SACxB,GAAG,CAAC,WAAW,CAAC;SAChB,IAAI,CAAC,GAAG,eAAe,CAAC,IAAI,OAAO,CAAC,CAAA;IACvC,MAAM,eAAe,GAAG,KAAK;SAC1B,GAAG,CAAC,aAAa,CAAC;SAClB,IAAI,CAAC,GAAG,eAAe,CAAC,MAAM,SAAS,CAAC,CAAA;IAC3C,MAAM,YAAY,GAAG,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,GAAG,MAAM,CAAC,CAAA;IAC7E,MAAM,aAAa,GAAG,KAAK;SACxB,GAAG,CAAC,WAAW,CAAC;SAChB,IAAI,CAAC,GAAG,eAAe,CAAC,IAAI,OAAO,CAAC,CAAA;IAEvC,OAAO;QACL,iBAAiB;QACjB,aAAa;QACb,eAAe;QACf,YAAY;QACZ,aAAa;KACd,CAAA;AACH,CAAC,CAAA"}
|
|
@@ -1,6 +1,3 @@
|
|
|
1
|
-
|
|
2
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
exports.ReportGuidanceModel = void 0;
|
|
4
|
-
class ReportGuidanceModel {
|
|
1
|
+
export class ReportGuidanceModel {
|
|
5
2
|
}
|
|
6
|
-
|
|
3
|
+
//# sourceMappingURL=reportGuidanceModel.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"reportGuidanceModel.js","sourceRoot":"","sources":["../../../../src/audit/report/models/reportGuidanceModel.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,mBAAmB;CAI/B"}
|
|
@@ -1,14 +1,10 @@
|
|
|
1
|
-
|
|
2
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
exports.ReportCVEModel = exports.ReportLibraryModel = void 0;
|
|
4
|
-
class ReportLibraryModel {
|
|
1
|
+
export class ReportLibraryModel {
|
|
5
2
|
constructor(name, cveArray) {
|
|
6
3
|
this.name = name;
|
|
7
4
|
this.cveArray = cveArray;
|
|
8
5
|
}
|
|
9
6
|
}
|
|
10
|
-
|
|
11
|
-
class ReportCVEModel {
|
|
7
|
+
export class ReportCVEModel {
|
|
12
8
|
constructor(name, description, severityCode, cvss3SeverityCode) {
|
|
13
9
|
this.name = name;
|
|
14
10
|
this.description = description;
|
|
@@ -16,4 +12,4 @@ class ReportCVEModel {
|
|
|
16
12
|
this.cvss3SeverityCode = cvss3SeverityCode;
|
|
17
13
|
}
|
|
18
14
|
}
|
|
19
|
-
|
|
15
|
+
//# sourceMappingURL=reportLibraryModel.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"reportLibraryModel.js","sourceRoot":"","sources":["../../../../src/audit/report/models/reportLibraryModel.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,kBAAkB;IAI7B,YAAY,IAAY,EAAE,QAA0B;QAClD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAChB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAA;IAC1B,CAAC;CACF;AAED,MAAM,OAAO,cAAc;IAQzB,YACE,IAAY,EACZ,WAAmB,EACnB,YAAoB,EACpB,iBAAyB;QAEzB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAChB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAA;QAC9B,IAAI,CAAC,YAAY,GAAG,YAAY,CAAA;QAChC,IAAI,CAAC,iBAAiB,GAAG,iBAAiB,CAAA;IAC5C,CAAC;CACF"}
|
|
@@ -1,21 +1,16 @@
|
|
|
1
|
-
|
|
2
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
exports.ReportCompositeKey = exports.ReportModelStructure = exports.ReportList = void 0;
|
|
4
|
-
class ReportList {
|
|
1
|
+
export class ReportList {
|
|
5
2
|
constructor() {
|
|
6
3
|
this.reportOutputList = [];
|
|
7
4
|
}
|
|
8
5
|
}
|
|
9
|
-
|
|
10
|
-
class ReportModelStructure {
|
|
6
|
+
export class ReportModelStructure {
|
|
11
7
|
constructor(compositeKey, cveArray, remediationAdvice) {
|
|
12
8
|
this.compositeKey = compositeKey;
|
|
13
9
|
this.cveArray = cveArray;
|
|
14
10
|
this.remediationAdvice = remediationAdvice;
|
|
15
11
|
}
|
|
16
12
|
}
|
|
17
|
-
|
|
18
|
-
class ReportCompositeKey {
|
|
13
|
+
export class ReportCompositeKey {
|
|
19
14
|
constructor(libraryName, libraryVersion, highestSeverity, numberOfSeverities) {
|
|
20
15
|
this.libraryName = libraryName;
|
|
21
16
|
this.libraryVersion = libraryVersion;
|
|
@@ -23,4 +18,4 @@ class ReportCompositeKey {
|
|
|
23
18
|
this.numberOfSeverities = numberOfSeverities;
|
|
24
19
|
}
|
|
25
20
|
}
|
|
26
|
-
|
|
21
|
+
//# sourceMappingURL=reportListModel.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"reportListModel.js","sourceRoot":"","sources":["../../../../src/audit/report/models/reportListModel.ts"],"names":[],"mappings":"AAOA,MAAM,OAAO,UAAU;IAGrB;QACE,IAAI,CAAC,gBAAgB,GAAG,EAAE,CAAA;IAC5B,CAAC;CACF;AAED,MAAM,OAAO,oBAAoB;IAK/B,YACE,YAAgC,EAChC,QAA0D,EAC1D,iBAAyD;QAEzD,IAAI,CAAC,YAAY,GAAG,YAAY,CAAA;QAChC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAA;QACxB,IAAI,CAAC,iBAAiB,GAAG,iBAAiB,CAAA;IAC5C,CAAC;CACF;AAED,MAAM,OAAO,kBAAkB;IAM7B,YACE,WAAmB,EACnB,cAAsB,EACtB,eAAoC,EACpC,kBAA0B;QAE1B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAA;QAC9B,IAAI,CAAC,cAAc,GAAG,cAAc,CAAA;QACpC,IAAI,CAAC,eAAe,GAAG,eAAe,CAAA;QACtC,IAAI,CAAC,kBAAkB,GAAG,kBAAkB,CAAA;IAC9C,CAAC;CACF"}
|
|
@@ -1,24 +1,19 @@
|
|
|
1
|
-
|
|
2
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
exports.ReportOutputBodyModel = exports.ReportOutputHeaderModel = exports.ReportOutputModel = void 0;
|
|
4
|
-
class ReportOutputModel {
|
|
1
|
+
export class ReportOutputModel {
|
|
5
2
|
constructor(header, body) {
|
|
6
3
|
this.header = header;
|
|
7
4
|
this.body = body;
|
|
8
5
|
}
|
|
9
6
|
}
|
|
10
|
-
|
|
11
|
-
class ReportOutputHeaderModel {
|
|
7
|
+
export class ReportOutputHeaderModel {
|
|
12
8
|
constructor(vulnMessage, introducesMessage) {
|
|
13
9
|
this.vulnMessage = vulnMessage;
|
|
14
10
|
this.introducesMessage = introducesMessage;
|
|
15
11
|
}
|
|
16
12
|
}
|
|
17
|
-
|
|
18
|
-
class ReportOutputBodyModel {
|
|
13
|
+
export class ReportOutputBodyModel {
|
|
19
14
|
constructor(issueMessage, adviceMessage) {
|
|
20
15
|
this.issueMessage = issueMessage;
|
|
21
16
|
this.adviceMessage = adviceMessage;
|
|
22
17
|
}
|
|
23
18
|
}
|
|
24
|
-
|
|
19
|
+
//# sourceMappingURL=reportOutputModel.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"reportOutputModel.js","sourceRoot":"","sources":["../../../../src/audit/report/models/reportOutputModel.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,iBAAiB;IAI5B,YAAY,MAA+B,EAAE,IAA2B;QACtE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;IAClB,CAAC;CACF;AAED,MAAM,OAAO,uBAAuB;IAIlC,YAAY,WAAmB,EAAE,iBAAyB;QACxD,IAAI,CAAC,WAAW,GAAG,WAAW,CAAA;QAC9B,IAAI,CAAC,iBAAiB,GAAG,iBAAiB,CAAA;IAC5C,CAAC;CACF;AAED,MAAM,OAAO,qBAAqB;IAIhC,YAAY,YAAsB,EAAE,aAAuB;QACzD,IAAI,CAAC,YAAY,GAAG,YAAY,CAAA;QAChC,IAAI,CAAC,aAAa,GAAG,aAAa,CAAA;IACpC,CAAC;CACF"}
|
|
@@ -1,7 +1,4 @@
|
|
|
1
|
-
|
|
2
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
exports.ReportSeverityModel = void 0;
|
|
4
|
-
class ReportSeverityModel {
|
|
1
|
+
export class ReportSeverityModel {
|
|
5
2
|
constructor(severity, priority, colour, name) {
|
|
6
3
|
this.severity = severity;
|
|
7
4
|
this.priority = priority;
|
|
@@ -9,4 +6,4 @@ class ReportSeverityModel {
|
|
|
9
6
|
this.name = name;
|
|
10
7
|
}
|
|
11
8
|
}
|
|
12
|
-
|
|
9
|
+
//# sourceMappingURL=reportSeverityModel.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"reportSeverityModel.js","sourceRoot":"","sources":["../../../../src/audit/report/models/reportSeverityModel.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,mBAAmB;IAM9B,YACE,QAAgB,EAChB,QAAgB,EAChB,MAAc,EACd,IAAY;QAEZ,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAA;QACxB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAA;QACxB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;IAClB,CAAC;CACF"}
|
|
@@ -1,7 +1,5 @@
|
|
|
1
|
-
|
|
2
|
-
|
|
3
|
-
exports.SeverityCountModel = void 0;
|
|
4
|
-
class SeverityCountModel {
|
|
1
|
+
export class SeverityCountModel {
|
|
2
|
+
//needed as default to stop NaN when new object constructed
|
|
5
3
|
constructor() {
|
|
6
4
|
this.critical = 0;
|
|
7
5
|
this.high = 0;
|
|
@@ -14,4 +12,4 @@ class SeverityCountModel {
|
|
|
14
12
|
return this.critical + this.high + this.medium + this.low + this.note;
|
|
15
13
|
}
|
|
16
14
|
}
|
|
17
|
-
|
|
15
|
+
//# sourceMappingURL=severityCountModel.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"severityCountModel.js","sourceRoot":"","sources":["../../../../src/audit/report/models/severityCountModel.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,kBAAkB;IAQ7B,2DAA2D;IAC3D;QACE,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAA;QACjB,IAAI,CAAC,IAAI,GAAG,CAAC,CAAA;QACb,IAAI,CAAC,MAAM,GAAG,CAAC,CAAA;QACf,IAAI,CAAC,GAAG,GAAG,CAAC,CAAA;QACZ,IAAI,CAAC,IAAI,GAAG,CAAC,CAAA;QACb,IAAI,CAAC,KAAK,GAAG,CAAC,CAAA;IAChB,CAAC;IAED,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,IAAI,CAAA;IACvE,CAAC;CACF"}
|
|
@@ -1,91 +1,63 @@
|
|
|
1
|
-
|
|
2
|
-
|
|
3
|
-
|
|
4
|
-
|
|
5
|
-
|
|
6
|
-
|
|
7
|
-
|
|
8
|
-
Object.defineProperty(o, k2, desc);
|
|
9
|
-
}) : (function(o, m, k, k2) {
|
|
10
|
-
if (k2 === undefined) k2 = k;
|
|
11
|
-
o[k2] = m[k];
|
|
12
|
-
}));
|
|
13
|
-
var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
|
|
14
|
-
Object.defineProperty(o, "default", { enumerable: true, value: v });
|
|
15
|
-
}) : function(o, v) {
|
|
16
|
-
o["default"] = v;
|
|
17
|
-
});
|
|
18
|
-
var __importStar = (this && this.__importStar) || function (mod) {
|
|
19
|
-
if (mod && mod.__esModule) return mod;
|
|
20
|
-
var result = {};
|
|
21
|
-
if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
|
|
22
|
-
__setModuleDefault(result, mod);
|
|
23
|
-
return result;
|
|
24
|
-
};
|
|
25
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
26
|
-
exports.vulnerabilityReportV2 = exports.formatVulnerabilityOutput = exports.convertJSDotNetPython = exports.convertKeysToStandardFormat = void 0;
|
|
27
|
-
const commonReportingFunctions_1 = require("./commonReportingFunctions");
|
|
28
|
-
const reportUtils_1 = require("./utils/reportUtils");
|
|
29
|
-
const constants = __importStar(require("../../constants/constants"));
|
|
30
|
-
const severityCountModel_1 = require("./models/severityCountModel");
|
|
31
|
-
const common = __importStar(require("../../common/fail"));
|
|
32
|
-
const save_1 = require("../save");
|
|
33
|
-
function convertKeysToStandardFormat(config, guidance) {
|
|
1
|
+
import { getReport, printNoVulnFoundMsg, printVulnerabilityResponse } from './commonReportingFunctions.js';
|
|
2
|
+
import { convertGenericToTypedLibraryVulns, severityCountAllLibraries } from './utils/reportUtils.js';
|
|
3
|
+
import { SeverityCountModel } from './models/severityCountModel.js';
|
|
4
|
+
import * as common from '../../common/fail.js';
|
|
5
|
+
import { auditSave } from '../save.js';
|
|
6
|
+
import { DOTNET, GO, JAVA, NODE, PHP, PYTHON, RUBY } from '../../constants/constants.js';
|
|
7
|
+
export function convertKeysToStandardFormat(config, guidance) {
|
|
34
8
|
let convertedGuidance = guidance;
|
|
35
9
|
switch (config.language) {
|
|
36
|
-
case
|
|
37
|
-
case
|
|
38
|
-
case
|
|
10
|
+
case JAVA:
|
|
11
|
+
case GO:
|
|
12
|
+
case PHP:
|
|
39
13
|
break;
|
|
40
|
-
case
|
|
41
|
-
case
|
|
42
|
-
case
|
|
43
|
-
case
|
|
14
|
+
case NODE:
|
|
15
|
+
case DOTNET:
|
|
16
|
+
case PYTHON:
|
|
17
|
+
case RUBY:
|
|
44
18
|
convertedGuidance = convertJSDotNetPython(guidance);
|
|
45
19
|
break;
|
|
46
20
|
}
|
|
47
21
|
return convertedGuidance;
|
|
48
22
|
}
|
|
49
|
-
|
|
50
|
-
function convertJSDotNetPython(guidance) {
|
|
23
|
+
export function convertJSDotNetPython(guidance) {
|
|
51
24
|
const returnObject = {};
|
|
52
25
|
Object.entries(guidance).forEach(([key, value]) => {
|
|
53
26
|
const splitKey = key.split('/');
|
|
54
27
|
if (splitKey.length === 2) {
|
|
28
|
+
// @ts-ignore
|
|
55
29
|
returnObject[splitKey[1]] = value;
|
|
56
30
|
}
|
|
57
31
|
});
|
|
58
32
|
return returnObject;
|
|
59
33
|
}
|
|
60
|
-
|
|
61
|
-
|
|
62
|
-
const vulnerableLibraries = (0, reportUtils_1.convertGenericToTypedLibraryVulns)(libraryVulnerabilityResponse);
|
|
34
|
+
export function formatVulnerabilityOutput(libraryVulnerabilityResponse, id, config, remediationGuidance) {
|
|
35
|
+
const vulnerableLibraries = convertGenericToTypedLibraryVulns(libraryVulnerabilityResponse);
|
|
63
36
|
const guidance = convertKeysToStandardFormat(config, remediationGuidance);
|
|
64
37
|
const numberOfVulnerableLibraries = vulnerableLibraries.length;
|
|
65
38
|
if (numberOfVulnerableLibraries === 0) {
|
|
66
|
-
|
|
67
|
-
return [false, 0, [new
|
|
39
|
+
printNoVulnFoundMsg();
|
|
40
|
+
return [false, 0, [new SeverityCountModel()]];
|
|
68
41
|
}
|
|
69
42
|
else {
|
|
70
43
|
let numberOfCves = 0;
|
|
71
44
|
vulnerableLibraries.forEach(lib => (numberOfCves += lib.cveArray.length));
|
|
72
|
-
const hasSomeVulnerabilitiesReported =
|
|
73
|
-
let severityCount = new
|
|
74
|
-
severityCount =
|
|
45
|
+
const hasSomeVulnerabilitiesReported = printVulnerabilityResponse(config, vulnerableLibraries, numberOfVulnerableLibraries, numberOfCves, guidance);
|
|
46
|
+
let severityCount = new SeverityCountModel();
|
|
47
|
+
severityCount = severityCountAllLibraries(vulnerableLibraries, severityCount);
|
|
75
48
|
severityCount.total = severityCount.getTotal;
|
|
76
49
|
return [hasSomeVulnerabilitiesReported, numberOfCves, severityCount];
|
|
77
50
|
}
|
|
78
51
|
}
|
|
79
|
-
|
|
80
|
-
async function vulnerabilityReportV2(config, reportId) {
|
|
52
|
+
export async function vulnerabilityReportV2(config, reportId) {
|
|
81
53
|
console.log();
|
|
82
|
-
const reportResponse = await
|
|
54
|
+
const reportResponse = await getReport(config, reportId);
|
|
83
55
|
if (reportResponse !== undefined) {
|
|
84
56
|
const output = formatVulnerabilityOutput(reportResponse.vulnerabilities, config.applicationId, config, reportResponse.remediationGuidance
|
|
85
57
|
? reportResponse.remediationGuidance
|
|
86
58
|
: {});
|
|
87
59
|
if (config.save !== undefined) {
|
|
88
|
-
await
|
|
60
|
+
await auditSave(config);
|
|
89
61
|
}
|
|
90
62
|
else {
|
|
91
63
|
console.log('\nUse contrast audit --save to generate an SBOM');
|
|
@@ -95,4 +67,4 @@ async function vulnerabilityReportV2(config, reportId) {
|
|
|
95
67
|
}
|
|
96
68
|
}
|
|
97
69
|
}
|
|
98
|
-
|
|
70
|
+
//# sourceMappingURL=reportingFeature.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"reportingFeature.js","sourceRoot":"","sources":["../../../src/audit/report/reportingFeature.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,mBAAmB,EACnB,0BAA0B,EAC3B,MAAM,+BAA+B,CAAA;AACtC,OAAO,EACL,iCAAiC,EACjC,yBAAyB,EAC1B,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAA;AACnE,OAAO,KAAK,MAAM,MAAM,sBAAsB,CAAA;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AACtC,OAAO,EACL,MAAM,EACN,EAAE,EACF,IAAI,EACJ,IAAI,EACJ,GAAG,EACH,MAAM,EACN,IAAI,EACL,MAAM,8BAA8B,CAAA;AAErC,MAAM,UAAU,2BAA2B,CAAC,MAAW,EAAE,QAAa;IACpE,IAAI,iBAAiB,GAAG,QAAQ,CAAA;IAEhC,QAAQ,MAAM,CAAC,QAAQ,EAAE;QACvB,KAAK,IAAI,CAAC;QACV,KAAK,EAAE,CAAC;QACR,KAAK,GAAG;YACN,MAAK;QACP,KAAK,IAAI,CAAC;QACV,KAAK,MAAM,CAAC;QACZ,KAAK,MAAM,CAAC;QACZ,KAAK,IAAI;YACP,iBAAiB,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAA;YACnD,MAAK;KACR;IACD,OAAO,iBAAiB,CAAA;AAC1B,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,QAAa;IACjD,MAAM,YAAY,GAAG,EAAE,CAAA;IAEvB,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;QAChD,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QAC/B,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE;YACzB,aAAa;YACb,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAA;SAClC;IACH,CAAC,CAAC,CAAA;IACF,OAAO,YAAY,CAAA;AACrB,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,4BAAiC,EACjC,EAAU,EACV,MAAW,EACX,mBAAwB;IAExB,MAAM,mBAAmB,GAAG,iCAAiC,CAC3D,4BAA4B,CAC7B,CAAA;IAED,MAAM,QAAQ,GAAG,2BAA2B,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAA;IAEzE,MAAM,2BAA2B,GAAG,mBAAmB,CAAC,MAAM,CAAA;IAE9D,IAAI,2BAA2B,KAAK,CAAC,EAAE;QACrC,mBAAmB,EAAE,CAAA;QACrB,OAAO,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,IAAI,kBAAkB,EAAE,CAAC,CAAC,CAAA;KAC9C;SAAM;QACL,IAAI,YAAY,GAAG,CAAC,CAAA;QACpB,mBAAmB,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,YAAY,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;QAEzE,MAAM,8BAA8B,GAAG,0BAA0B,CAC/D,MAAM,EACN,mBAAmB,EACnB,2BAA2B,EAC3B,YAAY,EACZ,QAAQ,CACT,CAAA;QACD,IAAI,aAAa,GAAG,IAAI,kBAAkB,EAAE,CAAA;QAC5C,aAAa,GAAG,yBAAyB,CACvC,mBAAmB,EACnB,aAAa,CACd,CAAA;QACD,aAAa,CAAC,KAAK,GAAG,aAAa,CAAC,QAAQ,CAAA;QAC5C,OAAO,CAAC,8BAA8B,EAAE,YAAY,EAAE,aAAa,CAAC,CAAA;KACrE;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,MAAW,EAAE,QAAgB;IACvE,OAAO,CAAC,GAAG,EAAE,CAAA;IACb,MAAM,cAAc,GAAG,MAAM,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;IAExD,IAAI,cAAc,KAAK,SAAS,EAAE;QAChC,MAAM,MAAM,GAAG,yBAAyB,CACtC,cAAc,CAAC,eAAe,EAC9B,MAAM,CAAC,aAAa,EACpB,MAAM,EACN,cAAc,CAAC,mBAAmB;YAChC,CAAC,CAAC,cAAc,CAAC,mBAAmB;YACpC,CAAC,CAAC,EAAE,CACP,CAAA;QAED,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE;YAC7B,MAAM,SAAS,CAAC,MAAM,CAAC,CAAA;SACxB;aAAM;YACL,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAA;SAC/D;QAED,IAAI,MAAM,CAAC,IAAI,EAAE;YACf,MAAM,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAA;SACtC;KACF;AACH,CAAC"}
|