@cyclonedx/cdxgen 12.3.3 → 12.4.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +64 -22
- package/bin/audit.js +21 -7
- package/bin/cdxgen.js +238 -116
- package/bin/convert.js +28 -13
- package/bin/hbom.js +490 -0
- package/bin/repl.js +580 -29
- package/bin/validate.js +34 -4
- package/bin/verify.js +40 -5
- package/data/README.md +298 -25
- package/data/component-tags.json +6 -0
- package/data/crypto-oid.json +16 -0
- package/data/predictive-audit-allowlist.json +11 -0
- package/data/queries-darwin.json +12 -1
- package/data/queries-win.json +7 -1
- package/data/queries.json +39 -2
- package/data/rules/ai-agent-governance.yaml +16 -0
- package/data/rules/asar-archives.yaml +150 -0
- package/data/rules/chrome-extensions.yaml +8 -0
- package/data/rules/ci-permissions.yaml +42 -18
- package/data/rules/container-risk.yaml +14 -7
- package/data/rules/dependency-sources.yaml +11 -0
- package/data/rules/hbom-compliance.yaml +325 -0
- package/data/rules/hbom-performance.yaml +307 -0
- package/data/rules/hbom-security.yaml +248 -0
- package/data/rules/host-topology.yaml +165 -0
- package/data/rules/mcp-servers.yaml +18 -3
- package/data/rules/obom-runtime.yaml +907 -22
- package/data/rules/package-integrity.yaml +14 -0
- package/data/rules/rootfs-hardening.yaml +179 -0
- package/data/rules/vscode-extensions.yaml +9 -0
- package/lib/audit/index.js +209 -8
- package/lib/audit/index.poku.js +332 -0
- package/lib/audit/reporters.js +222 -0
- package/lib/audit/targets.js +146 -1
- package/lib/audit/targets.poku.js +186 -0
- package/lib/cli/asar.poku.js +328 -0
- package/lib/cli/index.js +506 -88
- package/lib/cli/index.poku.js +1352 -212
- package/lib/evinser/evinser.js +14 -9
- package/lib/helpers/analyzer.js +1406 -29
- package/lib/helpers/analyzer.poku.js +342 -0
- package/lib/helpers/analyzerScope.js +712 -0
- package/lib/helpers/asarutils.js +1556 -0
- package/lib/helpers/asarutils.poku.js +443 -0
- package/lib/helpers/auditCategories.js +12 -0
- package/lib/helpers/auditCategories.poku.js +32 -0
- package/lib/helpers/cbomutils.js +271 -1
- package/lib/helpers/cbomutils.poku.js +248 -5
- package/lib/helpers/display.js +291 -1
- package/lib/helpers/display.poku.js +149 -0
- package/lib/helpers/evidenceUtils.js +58 -0
- package/lib/helpers/evidenceUtils.poku.js +54 -0
- package/lib/helpers/exportUtils.js +9 -0
- package/lib/helpers/gtfobins.js +142 -8
- package/lib/helpers/gtfobins.poku.js +24 -1
- package/lib/helpers/hbom.js +710 -0
- package/lib/helpers/hbom.poku.js +496 -0
- package/lib/helpers/hbomAnalysis.js +268 -0
- package/lib/helpers/hbomAnalysis.poku.js +249 -0
- package/lib/helpers/hbomLoader.js +35 -0
- package/lib/helpers/hostTopology.js +803 -0
- package/lib/helpers/hostTopology.poku.js +363 -0
- package/lib/helpers/inventoryStats.js +69 -0
- package/lib/helpers/inventoryStats.poku.js +86 -0
- package/lib/helpers/lolbas.js +19 -1
- package/lib/helpers/lolbas.poku.js +23 -0
- package/lib/helpers/osqueryTransform.js +47 -0
- package/lib/helpers/osqueryTransform.poku.js +47 -0
- package/lib/helpers/plugins.js +349 -0
- package/lib/helpers/plugins.poku.js +57 -0
- package/lib/helpers/protobom.js +156 -45
- package/lib/helpers/protobom.poku.js +140 -5
- package/lib/helpers/remote/dependency-track.js +36 -3
- package/lib/helpers/remote/dependency-track.poku.js +44 -0
- package/lib/helpers/source.js +24 -0
- package/lib/helpers/source.poku.js +32 -0
- package/lib/helpers/utils.js +1438 -93
- package/lib/helpers/utils.poku.js +846 -4
- package/lib/managers/binary.e2e.poku.js +367 -0
- package/lib/managers/binary.js +2293 -353
- package/lib/managers/binary.poku.js +1699 -1
- package/lib/managers/docker.js +201 -79
- package/lib/managers/docker.poku.js +337 -12
- package/lib/server/server.js +2 -27
- package/lib/stages/postgen/annotator.js +38 -0
- package/lib/stages/postgen/annotator.poku.js +107 -1
- package/lib/stages/postgen/auditBom.js +121 -18
- package/lib/stages/postgen/auditBom.poku.js +1366 -31
- package/lib/stages/postgen/hostTopologyAudit.poku.js +186 -0
- package/lib/stages/postgen/postgen.js +192 -1
- package/lib/stages/postgen/postgen.poku.js +321 -0
- package/lib/stages/postgen/ruleEngine.js +116 -0
- package/lib/stages/pregen/envAudit.js +14 -3
- package/package.json +23 -21
- package/types/bin/hbom.d.ts +3 -0
- package/types/bin/hbom.d.ts.map +1 -0
- package/types/bin/repl.d.ts.map +1 -1
- package/types/lib/audit/index.d.ts +44 -0
- package/types/lib/audit/index.d.ts.map +1 -1
- package/types/lib/audit/reporters.d.ts +16 -0
- package/types/lib/audit/reporters.d.ts.map +1 -1
- package/types/lib/audit/targets.d.ts.map +1 -1
- package/types/lib/cli/index.d.ts +16 -0
- package/types/lib/cli/index.d.ts.map +1 -1
- package/types/lib/evinser/evinser.d.ts +4 -0
- package/types/lib/evinser/evinser.d.ts.map +1 -1
- package/types/lib/helpers/analyzer.d.ts +33 -0
- package/types/lib/helpers/analyzer.d.ts.map +1 -1
- package/types/lib/helpers/analyzerScope.d.ts +11 -0
- package/types/lib/helpers/analyzerScope.d.ts.map +1 -0
- package/types/lib/helpers/asarutils.d.ts +34 -0
- package/types/lib/helpers/asarutils.d.ts.map +1 -0
- package/types/lib/helpers/auditCategories.d.ts +5 -0
- package/types/lib/helpers/auditCategories.d.ts.map +1 -1
- package/types/lib/helpers/cbomutils.d.ts +3 -2
- package/types/lib/helpers/cbomutils.d.ts.map +1 -1
- package/types/lib/helpers/display.d.ts.map +1 -1
- package/types/lib/helpers/evidenceUtils.d.ts +8 -0
- package/types/lib/helpers/evidenceUtils.d.ts.map +1 -0
- package/types/lib/helpers/exportUtils.d.ts.map +1 -1
- package/types/lib/helpers/gtfobins.d.ts +8 -0
- package/types/lib/helpers/gtfobins.d.ts.map +1 -1
- package/types/lib/helpers/hbom.d.ts +49 -0
- package/types/lib/helpers/hbom.d.ts.map +1 -0
- package/types/lib/helpers/hbomAnalysis.d.ts +62 -0
- package/types/lib/helpers/hbomAnalysis.d.ts.map +1 -0
- package/types/lib/helpers/hbomLoader.d.ts +7 -0
- package/types/lib/helpers/hbomLoader.d.ts.map +1 -0
- package/types/lib/helpers/hostTopology.d.ts +12 -0
- package/types/lib/helpers/hostTopology.d.ts.map +1 -0
- package/types/lib/helpers/inventoryStats.d.ts +11 -0
- package/types/lib/helpers/inventoryStats.d.ts.map +1 -0
- package/types/lib/helpers/lolbas.d.ts.map +1 -1
- package/types/lib/helpers/osqueryTransform.d.ts +3 -0
- package/types/lib/helpers/osqueryTransform.d.ts.map +1 -1
- package/types/lib/helpers/plugins.d.ts +58 -0
- package/types/lib/helpers/plugins.d.ts.map +1 -0
- package/types/lib/helpers/protobom.d.ts +3 -4
- package/types/lib/helpers/protobom.d.ts.map +1 -1
- package/types/lib/helpers/remote/dependency-track.d.ts +10 -3
- package/types/lib/helpers/remote/dependency-track.d.ts.map +1 -1
- package/types/lib/helpers/source.d.ts.map +1 -1
- package/types/lib/helpers/utils.d.ts +45 -8
- package/types/lib/helpers/utils.d.ts.map +1 -1
- package/types/lib/managers/binary.d.ts +5 -0
- package/types/lib/managers/binary.d.ts.map +1 -1
- package/types/lib/managers/docker.d.ts.map +1 -1
- package/types/lib/server/server.d.ts +2 -1
- package/types/lib/server/server.d.ts.map +1 -1
- package/types/lib/stages/postgen/annotator.d.ts.map +1 -1
- package/types/lib/stages/postgen/auditBom.d.ts +26 -1
- package/types/lib/stages/postgen/auditBom.d.ts.map +1 -1
- package/types/lib/stages/postgen/postgen.d.ts +2 -1
- package/types/lib/stages/postgen/postgen.d.ts.map +1 -1
- package/types/lib/stages/postgen/ruleEngine.d.ts.map +1 -1
- package/types/lib/stages/pregen/envAudit.d.ts.map +1 -1
- package/data/spdx-model-v3.0.1.jsonld +0 -15999
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../lib/audit/index.js"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../lib/audit/index.js"],"names":[],"mappings":"AAkGA;;;;;GAKG;AACH,qCAHW,MAAM,GACJ,MAAM,CAclB;AAED;;;;;GAKG;AACH,qCAHW,MAAM,GACJ,MAAM,EAAE,CAoBpB;AAED;;;;;GAKG;AACH,uCAHW,MAAM,GACJ;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EAAE,CA0BjD;AA6CD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8DC;AA4bD;;;;;;;;GAQG;AACH,mDAHW,MAAM,GACJ,MAAM,EAAE,CAqdpB;AAkJD;;;;;;GAMG;AACH,uDAJW,MAAM,UACN,MAAM,GACJ;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CA0CnD;AAED;;;;;;;GAOG;AACH,uDALW,MAAM,UACN,MAAM,cACN,MAAM,GACJ;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAuBnD;AAoED;;;;;;;;;GASG;AACH,4DAJW,MAAM,UACN,MAAM,GACJ,MAAM,EAAE,CAkEpB;AA+BD;;;;;;GAMG;AACH,oCAJW,MAAM,WACN,MAAM,GACJ,OAAO,CAAC,MAAM,CAAC,CAiN3B;AAoVD,uDA8CC;AAoBD;;;;;;GAMG;AACH,4CAJW;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EAAE,WACrC,MAAM,GACJ,OAAO,CAAC,MAAM,CAAC,CA4I3B;AAED;;;;;GAKG;AACH,kCAHW,MAAM,GACJ,OAAO,CAAC,MAAM,CAAC,CAqB3B;AAED;;;;;;GAMG;AACH,4CAJW,MAAM,WACN,MAAM,GACJ;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAmChD;AAED;;;;;GAKG;AACH,2CAHW,MAAM,GACJ,MAAM,GAAG,SAAS,CAU9B;AA11ED,gDAKE"}
|
|
@@ -6,6 +6,22 @@ export function renderSarifReport(report: any, options?: {}): string;
|
|
|
6
6
|
* @returns {string} JSON output
|
|
7
7
|
*/
|
|
8
8
|
export function renderJsonReport(report: object): string;
|
|
9
|
+
/**
|
|
10
|
+
* Render a direct BOM audit report for terminal output.
|
|
11
|
+
*
|
|
12
|
+
* @param {object} report aggregate direct audit report
|
|
13
|
+
* @param {object} options render options
|
|
14
|
+
* @returns {string} console report text
|
|
15
|
+
*/
|
|
16
|
+
export function renderDirectBomConsoleReport(report: object, options?: object): string;
|
|
17
|
+
/**
|
|
18
|
+
* Render a direct BOM audit report as SARIF 2.1.0 output.
|
|
19
|
+
*
|
|
20
|
+
* @param {object} report aggregate direct audit report
|
|
21
|
+
* @param {object} [options] render options
|
|
22
|
+
* @returns {string} SARIF output
|
|
23
|
+
*/
|
|
24
|
+
export function renderDirectBomSarifReport(report: object, options?: object): string;
|
|
9
25
|
/**
|
|
10
26
|
* Render an audit report for terminal output.
|
|
11
27
|
*
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"reporters.d.ts","sourceRoot":"","sources":["../../../lib/audit/reporters.js"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"reporters.d.ts","sourceRoot":"","sources":["../../../lib/audit/reporters.js"],"names":[],"mappings":"AA6gBA,qEAkDC;AAED;;;;;GAKG;AACH,yCAHW,MAAM,GACJ,MAAM,CAIlB;AAED;;;;;;GAMG;AACH,qDAJW,MAAM,YACN,MAAM,GACJ,MAAM,CA8ClB;AAED;;;;;;GAMG;AACH,mDAJW,MAAM,YACN,MAAM,GACJ,MAAM,CAuClB;AAED;;;;;;GAMG;AACH,4CAJW,MAAM,YACN,MAAM,GACJ,MAAM,CA2DlB;AAED;;;;;;;GAOG;AACH,8CALW,MAAM,UACN,MAAM,YACN,MAAM,GACJ,MAAM,CAmBlB;AAED;;;;;;;GAOG;AACH,oDALW,MAAM,WACN,MAAM,YACN,MAAM,GACJ,MAAM,EAAE,CAgFpB"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"targets.d.ts","sourceRoot":"","sources":["../../../lib/audit/targets.js"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"targets.d.ts","sourceRoot":"","sources":["../../../lib/audit/targets.js"],"names":[],"mappings":"AAmKA;;;;;;;GAOG;AACH,gDAHW,MAAM,GAAG,SAAS,GAChB,OAAO,CAOnB;AAuOD;;;;;;;GAOG;AACH,+DAHW;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EAAE,GACnC,OAAO,CAAC,IAAI,CAAC,CA6EzB;AAkBD;;;;;GAKG;AACH,kDAHW,MAAM,GAAG,SAAS,GAChB,MAAM,CAOlB;AAED;;;;;;;GAOG;AACH,mDALW,MAAM,cACN,MAAM,YACN,MAAM,GAAG,MAAM,GAAG,SAAS,GACzB;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAmGpD;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,+CAfW;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EAAE,YACrC,MAAM,GAAG,MAAM,GAAG,SAAS,GACzB;IACR,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,KAAK,EAAE;QACL,gBAAgB,EAAE,MAAM,CAAC;QACzB,kBAAkB,EAAE,MAAM,CAAC;QAC3B,eAAe,EAAE,MAAM,CAAC;QACxB,cAAc,EAAE,MAAM,CAAC;QACvB,sBAAsB,EAAE,MAAM,CAAC;QAC/B,gBAAgB,EAAE,MAAM,CAAC;KAC1B,CAAC;IACF,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB,CAmJH;AA1wBD,+CAA+D"}
|
package/types/lib/cli/index.d.ts
CHANGED
|
@@ -235,6 +235,14 @@ export function createCsharpBom(path: string, options: Object): Promise<Object |
|
|
|
235
235
|
* @returns {Promise<Object>} Promise resolving to BOM object
|
|
236
236
|
*/
|
|
237
237
|
export function createVscodeExtensionBom(path: string, options: Object): Promise<Object>;
|
|
238
|
+
/**
|
|
239
|
+
* Function to create BOM for Electron ASAR archives.
|
|
240
|
+
*
|
|
241
|
+
* @param {string} path to a single archive or a directory to scan
|
|
242
|
+
* @param {Object} options Parse options from the cli
|
|
243
|
+
* @returns {Promise<Object>} Promise resolving to BOM object
|
|
244
|
+
*/
|
|
245
|
+
export function createAsarBom(path: string, options: Object): Promise<Object>;
|
|
238
246
|
/**
|
|
239
247
|
* Function to create BOM for installed Chrome and Chromium-based browser extensions.
|
|
240
248
|
*
|
|
@@ -278,6 +286,14 @@ export function createMultiXBom(pathList: string[], options: Object): Promise<Ob
|
|
|
278
286
|
* @returns {Promise<Object|undefined>} Promise resolving to BOM object, or undefined if path is not readable
|
|
279
287
|
*/
|
|
280
288
|
export function createXBom(path: string, options: Object): Promise<Object | undefined>;
|
|
289
|
+
/**
|
|
290
|
+
* Function to create a hardware BOM for the current host.
|
|
291
|
+
*
|
|
292
|
+
* @param {string} _path Source path (unused for live host HBOM generation)
|
|
293
|
+
* @param {Object} options Parse options from the cli
|
|
294
|
+
* @returns {Promise<Object>} Promise resolving to BOM object
|
|
295
|
+
*/
|
|
296
|
+
export function createHBom(_path: string, options: Object): Promise<Object>;
|
|
281
297
|
/**
|
|
282
298
|
* Function to create bom string for various languages
|
|
283
299
|
*
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../lib/cli/index.js"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../lib/cli/index.js"],"names":[],"mappings":"AAg8BA;;;;;;;;;GASG;AACH,wCANW,MAAM,cACN,MAAM,OACN,MAAM,UACN,MAAM,GACJ,MAAM,EAAE,CAcpB;AA2bD;;;;;;;GAOG;AACH,mCALW,MAAM,WACN,MAAM,GAEJ,MAAM,CA8ElB;AAED;;;;;;GAMG;AACH,uCAJW,MAAM,WACN,MAAM,GACJ,MAAM,GAAC,SAAS,CAI5B;AAED;;;;;;GAMG;AACH,sCAJW,MAAM,WACN,MAAM,GACJ,MAAM,GAAC,SAAS,CAwB5B;AAED;;;;;;GAMG;AACH,oCAJW,MAAM,WACN,MAAM,GACJ,OAAO,CAAC,MAAM,CAAC,CAouC3B;AA4ID,0EA4/BC;AAgFD;;;;;;;;;;;GAWG;AACH,qDAHW,MAAM,GACJ,MAAM,GAAG,IAAI,CAwEzB;AAED;;;;;;GAMG;AACH,sCAJW,MAAM,WACN,MAAM,GACJ,OAAO,CAAC,MAAM,CAAC,CAylB3B;AAED;;;;;;GAMG;AACH,kCAJW,MAAM,WACN,MAAM,GACJ,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAoavC;AAED;;;;;;GAMG;AACH,oCAJW,MAAM,WACN,MAAM,GACJ,OAAO,CAAC,MAAM,GAAC,SAAS,CAAC,CAmJrC;AA2FD;;;;;;GAMG;AACH,oCAJW,MAAM,WACN,MAAM,GACJ,OAAO,CAAC,MAAM,CAAC,CAiE3B;AAED;;;;;;GAMG;AACH,mCAJW,MAAM,WACN,MAAM,GACJ,MAAM,CAmPlB;AAED;;;;;;GAMG;AACH,uCAJW,MAAM,WACN,MAAM,GACJ,MAAM,CA+GlB;AAED;;;;;;GAMG;AACH,uCAJW,MAAM,WACN,MAAM,GACJ,MAAM,CA0BlB;AAED;;;;;;GAMG;AACH,sCAJW,MAAM,WACN,MAAM,GACJ,MAAM,CA0BlB;AAED;;;;;;GAMG;AACH,sCAJW,MAAM,WACN,MAAM,GACJ,MAAM,CAyBlB;AAED;;;;;;GAMG;AACH,0CAJW,MAAM,WACN,MAAM,GACJ,MAAM,CAsBlB;AAED;;;;;;GAMG;AACH,mCAJW,MAAM,WACN,MAAM,GACJ,OAAO,CAAC,MAAM,CAAC,CAmE3B;AAED;;;;;;GAMG;AACH,uCAJW,MAAM,WACN,MAAM,GACJ,OAAO,CAAC,MAAM,CAAC,CA2C3B;AAED;;;;;;GAMG;AACH,oCAJW,MAAM,WACN,MAAM,GACJ,MAAM,CA0BlB;AAED;;;;;;GAMG;AACH,qCAJW,MAAM,WACN,MAAM,GACJ,OAAO,CAAC,MAAM,CAAC,CA0I3B;AAED;;;;;;GAMG;AACH,qCAJW,MAAM,WACN,MAAM,GACJ,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAgKvC;AAED;;;;;;GAMG;AACH,mCAJW,MAAM,WACN,MAAM,GACJ,OAAO,CAAC,MAAM,CAAC,CAoH3B;AAED;;;;;;GAMG;AACH,oCAJW,MAAM,WACN,MAAM,GACJ,OAAO,CAAC,MAAM,CAAC,CA6C3B;AAED;;;;;;GAMG;AACH,iDAJW,MAAM,WACN,MAAM,GACJ,OAAO,CAAC,MAAM,CAAC,CAkU3B;AAED;;;;;;GAMG;AACH,mCAJW,MAAM,WACN,MAAM,GACJ,MAAM,CA8JlB;AAED;;;;;;GAMG;AACH,oCAJW,MAAM,WACN,MAAM,GACJ,OAAO,CAAC,MAAM,CAAC,CA0P3B;AAED;;;;;;GAMG;AACH,sCAJW,MAAM,WACN,MAAM,GACJ,OAAO,CAAC,MAAM,GAAC,SAAS,CAAC,CAkbrC;AAED;;;;;;;;;GASG;AACH,+CAJW,MAAM,WACN,MAAM,GACJ,OAAO,CAAC,MAAM,CAAC,CA+F3B;AAED;;;;;;GAMG;AACH,oCAJW,MAAM,WACN,MAAM,GACJ,OAAO,CAAC,MAAM,CAAC,CAyL3B;AAED;;;;;;GAMG;AACH,+CAJW,MAAM,WACN,MAAM,GACJ,OAAO,CAAC,MAAM,CAAC,CAoD3B;AA2FD;;;;;;GAMG;AACH,2CAJW,MAAM,WACN,MAAM,GACJ,OAAO,CAAC,MAAM,CAAC,CA+D3B;AAED;;;;;;;;;GASG;AACH,mCAPW,MAAM,sCAEN,MAAM,wBAGJ,MAAM,CAyClB;AAED;;;;;;GAMG;AACH,0CAJW,MAAM,EAAE,WACR,MAAM,GACJ,OAAO,CAAC,MAAM,CAAC,CAy9B3B;AAED;;;;;;GAMG;AACH,iCAJW,MAAM,WACN,MAAM,GACJ,OAAO,CAAC,MAAM,GAAC,SAAS,CAAC,CAmXrC;AAED;;;;;;GAMG;AACH,kCAJW,MAAM,WACN,MAAM,GACJ,OAAO,CAAC,MAAM,CAAC,CAsB3B;AAED;;;;;;GAMG;AACH,gCAJW,MAAM,WACN,MAAM,GACJ,OAAO,CAAC,MAAM,CAAC,CA8T3B;AAED;;;;;;;GAOG;AACH,gCALW,MAAM,eACN,MAAM,GACL,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAAC,CA+HjD"}
|
|
@@ -82,18 +82,21 @@ export function catalogGradleDeps(dirPath: any, purlsJars: any, Namespaces: any)
|
|
|
82
82
|
export function createAndStoreSlice(purl: any, purlsJars: any, Usages: any, options?: {}): Promise<any>;
|
|
83
83
|
export function createSlice(purlOrLanguages: any, filePath: any, sliceType?: string, options?: {}): Promise<{
|
|
84
84
|
tempDir?: undefined;
|
|
85
|
+
tempDirOwned?: undefined;
|
|
85
86
|
slicesFile?: undefined;
|
|
86
87
|
atomFile?: undefined;
|
|
87
88
|
openapiSpecFile?: undefined;
|
|
88
89
|
semanticsSlicesFile?: undefined;
|
|
89
90
|
} | {
|
|
90
91
|
tempDir: any;
|
|
92
|
+
tempDirOwned: boolean;
|
|
91
93
|
slicesFile: any;
|
|
92
94
|
atomFile?: undefined;
|
|
93
95
|
openapiSpecFile?: undefined;
|
|
94
96
|
semanticsSlicesFile?: undefined;
|
|
95
97
|
} | {
|
|
96
98
|
tempDir: any;
|
|
99
|
+
tempDirOwned: boolean;
|
|
97
100
|
slicesFile: any;
|
|
98
101
|
atomFile: any;
|
|
99
102
|
openapiSpecFile: any;
|
|
@@ -120,6 +123,7 @@ export function analyzeProject(dbObjMap: Object, options: Object): Promise<{
|
|
|
120
123
|
servicesMap: {};
|
|
121
124
|
dataFlowFrames: {};
|
|
122
125
|
tempDir: any;
|
|
126
|
+
tempDirOwned: any;
|
|
123
127
|
userDefinedTypesMap: {};
|
|
124
128
|
cryptoComponents: any[];
|
|
125
129
|
cryptoGeneratePurls: {};
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"evinser.d.ts","sourceRoot":"","sources":["../../../lib/evinser/evinser.js"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"evinser.d.ts","sourceRoot":"","sources":["../../../lib/evinser/evinser.js"],"names":[],"mappings":"AA+BA;;;;GAIG;AACH,mCAFW,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;eAyDhB;AAED,6GAiDC;AAED,gGAkCC;AAED,wGAqBC;AAED;;;;;;;;;;;;;;;;;;;;;GA2KC;AAED,6EAuBC;AAED;;;EA8BC;AAcD;;;;;GAKG;AACH,yCAHW,MAAM,WACN,MAAM;;;;;;;;;;;;;;;GA6KhB;AAED,wLA8DC;AAED;;;;;;;;;;;GAWG;AACH,2CARW,MAAM,uBACN,MAAM,0BAEN,MAAM,mBACN,MAAM,kBACN,MAAM,iBAqOhB;AAED;;;;;;;GAOG;AACH,yFAHW,MAAM,GACJ,MAAM,CAiGlB;AAyBD,sGAyEC;AAED,wGAmCC;AAED;;;;;;GAMG;AACH,mDAJW,MAAM,8BAEN,MAAM,uBA6DhB;AAED;;;;;;GAMG;AACH,gDAJW,MAAM,wCAEN,MAAM,QAkDhB;AAED,yEAWC;AAED,gEAsFC;AAED;;;;;;GAMG;AACH,iDAJW,MAAM,WACN,MAAM,OA0KhB;AAED;;;;;;;;;;GAUG;AACH,gDAPW,MAAM,uBACN,MAAM,iBACN,MAAM,YACN,MAAM,oBACN,MAAM,kBACN,MAAM,eAoHhB;AAED;;;;;;;GAOG;AACH,kDAHW,MAAM,mBACN,MAAM;;;;;;;;;;;;;EA4FhB;AAED;;;;;GAKG;AACH,kDAaC;AAED;;;;;GAKG;AACH,2CAHW,MAAM,UAKhB;AAED,gGAiDC"}
|
|
@@ -1,4 +1,22 @@
|
|
|
1
|
+
export function analyzeSuspiciousJsSource(source: any): {
|
|
2
|
+
executionIndicators: any[];
|
|
3
|
+
indicators: any[];
|
|
4
|
+
networkIndicators: any[];
|
|
5
|
+
obfuscationIndicators: any[];
|
|
6
|
+
};
|
|
7
|
+
export function analyzeJsCapabilitiesSource(source: any): {
|
|
8
|
+
capabilities: string[];
|
|
9
|
+
hasDynamicFetch: boolean;
|
|
10
|
+
hasDynamicImport: boolean;
|
|
11
|
+
hasEval: boolean;
|
|
12
|
+
indicatorMap: {};
|
|
13
|
+
};
|
|
14
|
+
export function analyzeJsCryptoSource(source: any): {
|
|
15
|
+
algorithms: any[];
|
|
16
|
+
libraries: any[];
|
|
17
|
+
};
|
|
1
18
|
export const CHROMIUM_EXTENSION_CAPABILITY_CATEGORIES: string[];
|
|
19
|
+
export const JS_CAPABILITY_CATEGORIES: string[];
|
|
2
20
|
export function findJSImportsExports(src: any, deep: any): Promise<{
|
|
3
21
|
allImports: {};
|
|
4
22
|
allExports: {};
|
|
@@ -9,6 +27,21 @@ export function analyzeSuspiciousJsFile(filePath: string): {
|
|
|
9
27
|
networkIndicators: string[];
|
|
10
28
|
obfuscationIndicators: string[];
|
|
11
29
|
};
|
|
30
|
+
export function analyzeJsCapabilitiesFile(filePath: any): {
|
|
31
|
+
capabilities: string[];
|
|
32
|
+
hasDynamicFetch: boolean;
|
|
33
|
+
hasDynamicImport: boolean;
|
|
34
|
+
hasEval: boolean;
|
|
35
|
+
indicatorMap: {};
|
|
36
|
+
};
|
|
37
|
+
export function analyzeJsCryptoFile(filePath: any): {
|
|
38
|
+
algorithms: any[];
|
|
39
|
+
libraries: any[];
|
|
40
|
+
};
|
|
41
|
+
export function detectJsCryptoInventory(src: any, deep?: boolean): Promise<{
|
|
42
|
+
algorithms: any[];
|
|
43
|
+
libraries: any[];
|
|
44
|
+
}>;
|
|
12
45
|
export function detectExtensionCapabilities(src: string, deep?: boolean): {
|
|
13
46
|
capabilities: string[];
|
|
14
47
|
indicators: {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"analyzer.d.ts","sourceRoot":"","sources":["../../../lib/helpers/analyzer.js"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"analyzer.d.ts","sourceRoot":"","sources":["../../../lib/helpers/analyzer.js"],"names":[],"mappings":"AA6yCA;;;;;EAyJC;AA8CD;;;;;;EAmOC;AAyRD;;;EAyaC;AAv7CD,gEAQE;AA4JF,gDAQE;AA6TK;;;GAiBN;AASM,kDAHI,MAAM,GACJ;IAAC,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAAC,UAAU,EAAE,MAAM,EAAE,CAAC;IAAC,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAAC,qBAAqB,EAAE,MAAM,EAAE,CAAA;CAAC,CAe/H;AAuOM;;;;;;EAcN;AAorBM;;;EAQN;AAEM;;;GA+BN;AAWM,iDANI,MAAM,SACN,OAAO,GACL;IAAC,YAAY,EAAE,MAAM,EAAE,CAAC;IAAC,UAAU,EAAE;YAAO,MAAM,GAAE,MAAM,EAAE;KAAC,CAAA;CAAC,CAiK1E;AA68BM,8CAJI,MAAM,SACN,OAAO,GACL;IAAC,UAAU,EAAE,MAAM,EAAE,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAC,CAsI9E;AASM,wCAJI,MAAM,SACN,OAAO,GACL;IAAC,UAAU,EAAE,MAAM,EAAE,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAC,CA+uB9E"}
|
|
@@ -0,0 +1,11 @@
|
|
|
1
|
+
export function toResolvedValueArray(value: any): any;
|
|
2
|
+
export function resolvedValueKey(value: any): string;
|
|
3
|
+
export function mergeResolvedValues(...values: any[]): any;
|
|
4
|
+
export function filterResolvedValues(value: any, predicate: any): any;
|
|
5
|
+
export function hasOnlyResolvedValues(value: any, predicate: any): any;
|
|
6
|
+
export function getStaticObjectProperty(objectValue: any, propertyName: any): any;
|
|
7
|
+
export function deriveStaticNarrowingsFromCondition(astNode: any, branchTaken: any, getLiteralStringValue: any): any;
|
|
8
|
+
export function resolveStaticValue(astNode: any, staticValueByName: any, getLiteralStringValue: any, getMemberExpressionPropertyName: any, depth?: number): any;
|
|
9
|
+
export function deriveStaticNarrowingsFromSwitchCase(switchCaseNode: any, switchStatementNode: any, staticValueByName: any, getLiteralStringValue: any, getMemberExpressionPropertyName: any): Map<any, any> | undefined;
|
|
10
|
+
export function getScopedStaticValueByName(path: any, staticValueByName: any, getLiteralStringValue: any, getMemberExpressionPropertyName: any): Map<any, any>;
|
|
11
|
+
//# sourceMappingURL=analyzerScope.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"analyzerScope.d.ts","sourceRoot":"","sources":["../../../lib/helpers/analyzerScope.js"],"names":[],"mappings":"AAmCO,sDAQN;AAEM,qDAKN;AAEM,2DAiBN;AAEM,sEAIN;AAEM,uEAGN;AAaM,kFAYN;AAmEM,qHAsFN;AAEM,gKAiPN;AAgEM,yNAmFN;AAEM,+JA6DN"}
|
|
@@ -0,0 +1,34 @@
|
|
|
1
|
+
export function readAsarArchiveHeaderSync(archivePath: any): {
|
|
2
|
+
archiveDataOffset: bigint;
|
|
3
|
+
header: any;
|
|
4
|
+
headerSize: any;
|
|
5
|
+
headerString: any;
|
|
6
|
+
};
|
|
7
|
+
export function listAsarEntries(archivePath: any): {
|
|
8
|
+
entries: any[];
|
|
9
|
+
archiveDataOffset: bigint;
|
|
10
|
+
header: any;
|
|
11
|
+
headerSize: any;
|
|
12
|
+
headerString: any;
|
|
13
|
+
};
|
|
14
|
+
export function rewriteExtractedArchivePaths(subject: any, extractedDir: any, archivePath: any): any;
|
|
15
|
+
/**
|
|
16
|
+
* Parse an Electron ASAR archive and emit inventory, metadata, and optional
|
|
17
|
+
* signing information.
|
|
18
|
+
*
|
|
19
|
+
* @param {string} archivePath Absolute or relative path to an ASAR archive
|
|
20
|
+
* @param {Object} [options={}] Parse options
|
|
21
|
+
* @param {string} [options.asarVirtualPath] Virtual archive identity to use in
|
|
22
|
+
* BOM references and evidence for nested ASAR recursion
|
|
23
|
+
* @param {number} [options.specVersion] CycloneDX spec version used to choose
|
|
24
|
+
* compatible component types
|
|
25
|
+
* @returns {Promise<Object>} Parsed archive analysis result
|
|
26
|
+
*/
|
|
27
|
+
export function parseAsarArchive(archivePath: string, options?: {
|
|
28
|
+
asarVirtualPath?: string | undefined;
|
|
29
|
+
specVersion?: number | undefined;
|
|
30
|
+
}): Promise<Object>;
|
|
31
|
+
export function extractAsarToTempDir(archivePath: any): Promise<any>;
|
|
32
|
+
export function cleanupAsarTempDir(tempDir: any): void;
|
|
33
|
+
export function buildAsarExtractionSummary(archiveAnalysis: any, extractionPerformed: any): any[];
|
|
34
|
+
//# sourceMappingURL=asarutils.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"asarutils.d.ts","sourceRoot":"","sources":["../../../lib/helpers/asarutils.js"],"names":[],"mappings":"AA+PA;;;;;EA+CC;AAED;;;;;;EAwCC;AAgYD,qGAmDC;AAyYD;;;;;;;;;;;GAWG;AACH,8CARW,MAAM,YAEd;IAAyB,eAAe;IAEf,WAAW;CAEpC,GAAU,OAAO,CAAC,MAAM,CAAC,CAyM3B;AAuGD,qEA6BC;AAED,uDAYC;AAED,kGAwBC"}
|
|
@@ -6,7 +6,12 @@ export function validateBomAuditCategories(categories: any, rules: any): {
|
|
|
6
6
|
expandedCategories: any[];
|
|
7
7
|
validCategories: any[];
|
|
8
8
|
};
|
|
9
|
+
export const HBOM_AUDIT_CATEGORIES: readonly string[];
|
|
10
|
+
export const HOST_TOPOLOGY_AUDIT_CATEGORIES: readonly string[];
|
|
11
|
+
export const DEFAULT_HBOM_AUDIT_CATEGORIES: string;
|
|
9
12
|
export const BOM_AUDIT_CATEGORY_ALIASES: Readonly<{
|
|
10
13
|
"ai-inventory": string[];
|
|
14
|
+
hbom: string[];
|
|
15
|
+
host: string[];
|
|
11
16
|
}>;
|
|
12
17
|
//# sourceMappingURL=auditCategories.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"auditCategories.d.ts","sourceRoot":"","sources":["../../../lib/helpers/auditCategories.js"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"auditCategories.d.ts","sourceRoot":"","sources":["../../../lib/helpers/auditCategories.js"],"names":[],"mappings":"AAoBA,oEAeC;AAED,iEAWC;AAED,+DAIC;AAUD;;;;EAuBC;AAvFD,sDAIG;AAEH,+DAA+E;AAE/E,mDAA6E;AAE7E;;;;GAIG"}
|
|
@@ -5,11 +5,12 @@
|
|
|
5
5
|
* @returns osPkgsList Array of OS crypto packages
|
|
6
6
|
*/
|
|
7
7
|
export function collectOSCryptoLibs(options: Object): any[];
|
|
8
|
+
export function collectSourceCryptoComponents(src: any, options?: {}): Promise<any[]>;
|
|
8
9
|
/**
|
|
9
10
|
* Find crypto algorithm in the given code snippet
|
|
10
11
|
*
|
|
11
|
-
* @param {
|
|
12
|
+
* @param {string} code Code snippet
|
|
12
13
|
* @returns {Array} Arary of crypto algorithm objects with oid and description
|
|
13
14
|
*/
|
|
14
|
-
export function findCryptoAlgos(code:
|
|
15
|
+
export function findCryptoAlgos(code: string): any[];
|
|
15
16
|
//# sourceMappingURL=cbomutils.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"cbomutils.d.ts","sourceRoot":"","sources":["../../../lib/helpers/cbomutils.js"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"cbomutils.d.ts","sourceRoot":"","sources":["../../../lib/helpers/cbomutils.js"],"names":[],"mappings":"AAkBA;;;;;GAKG;AACH,6CAHW,MAAM,SA2BhB;AAiOD,sFA4CC;AAED;;;;;GAKG;AACH,sCAHW,MAAM,SAgBhB"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"display.d.ts","sourceRoot":"","sources":["../../../lib/helpers/display.js"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"display.d.ts","sourceRoot":"","sources":["../../../lib/helpers/display.js"],"names":[],"mappings":"AAmZA;;;;;;;;;EAoBC;AAED,wGA4BC;AA6BD;;;;;;;;;;GAUG;AACH,oCANW,MAAM,gBACN,MAAM,EAAE,cACR,MAAM,gBACN,MAAM,GACJ,IAAI,CA+EhB;AAQD;;;;;GAKG;AACH,sCAHW,MAAM,GACJ,IAAI,CAsBhB;AACD;;;;;;GAMG;AACH,uCAHW,MAAM,GACJ,IAAI,CAwBhB;AAED;;;;;GAKG;AACH,0CAHW,MAAM,GACJ,IAAI,CAuBhB;AA0BD;;;;;;GAMG;AACH,0CAHW,MAAM,GACJ,IAAI,CAwChB;AAED;;;;;;GAMG;AACH,wCAHW,MAAM,GACJ,IAAI,CA4ChB;AACD;;;;;;;;GAQG;AACH,6CALW,MAAM,SACN,MAAM,cACN,MAAM,GACJ,IAAI,CAoChB;AAoMD;;;;;;GAMG;AACH,gDAHW,MAAM,GACJ,IAAI,CAoChB;AAED;;;;;GAKG;AACH,sDAHW,MAAM,EAAE,GACN,IAAI,CA4BhB;AAED;;;;;;;GAOG;AACH,4CAHW,MAAM,GACJ,IAAI,CAsBhB;AAED;;;;;;GAMG;AACH,sCAHW,MAAM,GACJ,IAAI,CAkDhB;AAED,mEAiHC;AAgED;;;;;GAKG;AACH,iEAHW,eAAe,EAAE,GACf,IAAI,CA+BhB;AAED;;;;;;;;GAQG;AACH,iDALW,MAAM,UACN,MAAM,WACN,MAAM,oBACN,eAAe,EAAE,QAsU3B;AApnDM,gDANI,MAAM,eACN,MAAM,EAAE,GAAC,SAAS,eAClB,MAAM,GAAC,SAAS,6BAChB,MAAM,GACJ,MAAM,EAAE,CA2FpB;AAwNM,6DAHI,MAAM,EAAE,GACN,MAAM,EAAE,CAcpB;AAukBM,uDAJI,MAAM,EAAE,SACR,MAAM,GACJ,MAAM,EAAE,CAyCpB;8BA0RY;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAC"}
|
|
@@ -0,0 +1,8 @@
|
|
|
1
|
+
export function createOccurrenceEvidence(location: any, details?: {}): {
|
|
2
|
+
location: string;
|
|
3
|
+
} | undefined;
|
|
4
|
+
export function parseOccurrenceEvidenceLocation(location: any, details?: {}): {
|
|
5
|
+
location: string;
|
|
6
|
+
} | undefined;
|
|
7
|
+
export function formatOccurrenceEvidence(occurrence: any): any;
|
|
8
|
+
//# sourceMappingURL=evidenceUtils.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"evidenceUtils.d.ts","sourceRoot":"","sources":["../../../lib/helpers/evidenceUtils.js"],"names":[],"mappings":"AAAA;;cAcC;AAED;;cA4BC;AAED,+DAWC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"exportUtils.d.ts","sourceRoot":"","sources":["../../../lib/helpers/exportUtils.js"],"names":[],"mappings":"AAYA;;;;;GAKG;AACH,+CAHW,MAAM,GAAC,MAAM,EAAE,GAAC,SAAS,GAAC,IAAI,GAC5B,MAAM,EAAE,CAoBpB;AAED;;;;;GAKG;AACH,iDAHW,MAAM,GACJ,MAAM,
|
|
1
|
+
{"version":3,"file":"exportUtils.d.ts","sourceRoot":"","sources":["../../../lib/helpers/exportUtils.js"],"names":[],"mappings":"AAYA;;;;;GAKG;AACH,+CAHW,MAAM,GAAC,MAAM,EAAE,GAAC,SAAS,GAAC,IAAI,GAC5B,MAAM,EAAE,CAoBpB;AAED;;;;;GAKG;AACH,iDAHW,MAAM,GACJ,MAAM,CAyBlB;AAED;;;;;GAKG;AACH,sDAHW,MAAM,GACJ,MAAM,CAUlB;AAED;;;;;GAKG;AACH,0CAHW,MAAM,GACJ;IAAE,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,cAAc,EAAE,OAAO,CAAA;CAAE,CAgC9F;AAED;;;;;GAKG;AACH,+CAHW,MAAM,GACJ,MAAM,CAIlB"}
|
|
@@ -14,4 +14,12 @@ export function createGtfoBinsProperties(name: any, linkedName: any): {
|
|
|
14
14
|
name: string;
|
|
15
15
|
value: any;
|
|
16
16
|
}[];
|
|
17
|
+
/**
|
|
18
|
+
* Resolve GTFOBins properties for a live Linux osquery row.
|
|
19
|
+
*
|
|
20
|
+
* @param {string} queryCategory Osquery query category
|
|
21
|
+
* @param {object} row Osquery row
|
|
22
|
+
* @returns {Array<object>} CycloneDX custom properties
|
|
23
|
+
*/
|
|
24
|
+
export function createGtfoBinsPropertiesFromRow(queryCategory: string, row: object): Array<object>;
|
|
17
25
|
//# sourceMappingURL=gtfobins.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"gtfobins.d.ts","sourceRoot":"","sources":["../../../lib/helpers/gtfobins.js"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"gtfobins.d.ts","sourceRoot":"","sources":["../../../lib/helpers/gtfobins.js"],"names":[],"mappings":"AAwJA;;;;;;;;;;;cAsCC;AAED;;;IAiCC;AAED;;;;;;GAMG;AACH,+DAJW,MAAM,OACN,MAAM,GACJ,KAAK,CAAC,MAAM,CAAC,CA0FzB"}
|
|
@@ -0,0 +1,49 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Determine whether the supplied project types include HBOM.
|
|
3
|
+
*
|
|
4
|
+
* @param {string|string[]|undefined|null} projectTypes Project types.
|
|
5
|
+
* @returns {boolean} True when HBOM is requested.
|
|
6
|
+
*/
|
|
7
|
+
export function hasHbomProjectType(projectTypes: string | string[] | undefined | null): boolean;
|
|
8
|
+
/**
|
|
9
|
+
* Determine whether the supplied project types are exclusively HBOM-oriented.
|
|
10
|
+
*
|
|
11
|
+
* @param {string|string[]|undefined|null} projectTypes Project types.
|
|
12
|
+
* @returns {boolean} True when at least one project type is supplied and all are HBOM-oriented.
|
|
13
|
+
*/
|
|
14
|
+
export function isHbomOnlyProjectTypes(projectTypes: string | string[] | undefined | null): boolean;
|
|
15
|
+
/**
|
|
16
|
+
* Reject mixed HBOM and non-HBOM project types.
|
|
17
|
+
*
|
|
18
|
+
* @param {string|string[]|undefined|null} projectTypes Project types.
|
|
19
|
+
*/
|
|
20
|
+
export function ensureNoMixedHbomProjectTypes(projectTypes: string | string[] | undefined | null): void;
|
|
21
|
+
/**
|
|
22
|
+
* Ensure HBOM generation uses the supported CycloneDX version.
|
|
23
|
+
*
|
|
24
|
+
* @param {number|string|undefined|null} specVersion Requested spec version.
|
|
25
|
+
*/
|
|
26
|
+
export function ensureSupportedHbomSpecVersion(specVersion: number | string | undefined | null): void;
|
|
27
|
+
/**
|
|
28
|
+
* Ensure merged HBOM + runtime collection has access to osquery.
|
|
29
|
+
*
|
|
30
|
+
* @param {object} [options={}] CLI options.
|
|
31
|
+
* @param {string} [commandName="hbom"] Invoked command name for tailored guidance.
|
|
32
|
+
*/
|
|
33
|
+
export function ensureHbomRuntimeSupport(options?: object, commandName?: string): void;
|
|
34
|
+
/**
|
|
35
|
+
* Translate cdxgen CLI options to cdx-hbom collector options.
|
|
36
|
+
*
|
|
37
|
+
* @param {object} [options={}] CLI options.
|
|
38
|
+
* @returns {object} cdx-hbom collector options.
|
|
39
|
+
*/
|
|
40
|
+
export function normalizeHbomOptions(options?: object): object;
|
|
41
|
+
export function addHbomAnalysisProperties(bomJson: any): any;
|
|
42
|
+
/**
|
|
43
|
+
* Generate an HBOM using the optional cdx-hbom package.
|
|
44
|
+
*
|
|
45
|
+
* @param {object} [options={}] CLI options.
|
|
46
|
+
* @returns {Promise<object>} CycloneDX HBOM document.
|
|
47
|
+
*/
|
|
48
|
+
export function createHbomDocument(options?: object): Promise<object>;
|
|
49
|
+
//# sourceMappingURL=hbom.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"hbom.d.ts","sourceRoot":"","sources":["../../../lib/helpers/hbom.js"],"names":[],"mappings":"AAwSA;;;;;GAKG;AACH,iDAHW,MAAM,GAAC,MAAM,EAAE,GAAC,SAAS,GAAC,IAAI,GAC5B,OAAO,CAMnB;AAED;;;;;GAKG;AACH,qDAHW,MAAM,GAAC,MAAM,EAAE,GAAC,SAAS,GAAC,IAAI,GAC5B,OAAO,CAUnB;AAED;;;;GAIG;AACH,4DAFW,MAAM,GAAC,MAAM,EAAE,GAAC,SAAS,GAAC,IAAI,QAkBxC;AAED;;;;GAIG;AACH,4DAFW,MAAM,GAAC,MAAM,GAAC,SAAS,GAAC,IAAI,QAStC;AAED;;;;;GAKG;AACH,mDAHW,MAAM,gBACN,MAAM,QAqBhB;AAED;;;;;GAKG;AACH,+CAHW,MAAM,GACJ,MAAM,CA2BlB;AA8GD,6DA4HC;AAED;;;;;GAKG;AACH,6CAHW,MAAM,GACJ,OAAO,CAAC,MAAM,CAAC,CAiC3B"}
|
|
@@ -0,0 +1,62 @@
|
|
|
1
|
+
export function getHbomCommandDiagnostics(bomJson: any): any;
|
|
2
|
+
export function getHbomCommandDiagnosticSummary(bomJson: any): {
|
|
3
|
+
actionableDiagnosticCount: any;
|
|
4
|
+
commandDiagnosticCount: any;
|
|
5
|
+
commandDiagnostics: any;
|
|
6
|
+
commandErrorCount: any;
|
|
7
|
+
diagnosticIssues: string[];
|
|
8
|
+
installHints: string[];
|
|
9
|
+
missingCommandCount: any;
|
|
10
|
+
missingCommands: string[];
|
|
11
|
+
partialSupportCount: any;
|
|
12
|
+
permissionDeniedCommands: string[];
|
|
13
|
+
permissionDeniedCount: any;
|
|
14
|
+
privilegeHints: string[];
|
|
15
|
+
requiresPrivilegedEnrichment: boolean;
|
|
16
|
+
timeoutCount: any;
|
|
17
|
+
};
|
|
18
|
+
export function isHbomLikeBom(bomJson: any): any;
|
|
19
|
+
export function getHbomHardwareClass(component: any): any;
|
|
20
|
+
export function getHbomHardwareClassCounts(components?: any[]): {
|
|
21
|
+
hardwareClass: any;
|
|
22
|
+
count: any;
|
|
23
|
+
}[];
|
|
24
|
+
export function formatHbomHardwareClassSummary(hardwareClassCounts?: any[]): string;
|
|
25
|
+
export function getHbomSummary(bomJson: any): {
|
|
26
|
+
actionableDiagnosticCount: any;
|
|
27
|
+
architecture: any;
|
|
28
|
+
collectorProfile: any;
|
|
29
|
+
commandDiagnosticCount: any;
|
|
30
|
+
commandDiagnostics: any;
|
|
31
|
+
commandErrorCount: any;
|
|
32
|
+
componentCount: any;
|
|
33
|
+
diagnosticIssues: string[];
|
|
34
|
+
evidenceCommandCount: any;
|
|
35
|
+
evidenceCommands: any;
|
|
36
|
+
evidenceFileCount: any;
|
|
37
|
+
evidenceFiles: any;
|
|
38
|
+
hardwareClassCount: number;
|
|
39
|
+
hardwareClassCounts: {
|
|
40
|
+
hardwareClass: any;
|
|
41
|
+
count: any;
|
|
42
|
+
}[];
|
|
43
|
+
identifierPolicy: any;
|
|
44
|
+
installHints: string[];
|
|
45
|
+
manufacturer: any;
|
|
46
|
+
metadataName: any;
|
|
47
|
+
metadataType: any;
|
|
48
|
+
missingCommandCount: any;
|
|
49
|
+
missingCommands: string[];
|
|
50
|
+
partialSupportCount: any;
|
|
51
|
+
platform: any;
|
|
52
|
+
permissionDeniedCommands: string[];
|
|
53
|
+
permissionDeniedCount: any;
|
|
54
|
+
privilegeHints: string[];
|
|
55
|
+
requiresPrivilegedEnrichment: boolean;
|
|
56
|
+
timeoutCount: any;
|
|
57
|
+
topHardwareClasses: {
|
|
58
|
+
hardwareClass: any;
|
|
59
|
+
count: any;
|
|
60
|
+
}[];
|
|
61
|
+
};
|
|
62
|
+
//# sourceMappingURL=hbomAnalysis.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"hbomAnalysis.d.ts","sourceRoot":"","sources":["../../../lib/helpers/hbomAnalysis.js"],"names":[],"mappings":"AAqCA,6DAIC;AAED;;;;;;;;;;;;;;;EA6DC;AAED,iDA2BC;AAED,0DAEC;AAED;;;IAgBC;AAED,oFAKC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAyEC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"hbomLoader.d.ts","sourceRoot":"","sources":["../../../lib/helpers/hbomLoader.js"],"names":[],"mappings":"AAUA;;;;GAIG;AACH,oCAFa,OAAO,CAAC,MAAM,CAAC,CAqB3B"}
|
|
@@ -0,0 +1,12 @@
|
|
|
1
|
+
export function isMergedHostViewBom(bomJson: any): any;
|
|
2
|
+
export function getHostViewSummary(bomJson: any): {
|
|
3
|
+
linkedHardwareComponentCount: number;
|
|
4
|
+
linkedRuntimeCategories: any;
|
|
5
|
+
mode: any;
|
|
6
|
+
runtimeAnchorCount: number;
|
|
7
|
+
runtimeComponentCount: number;
|
|
8
|
+
topologyLinkCount: number;
|
|
9
|
+
};
|
|
10
|
+
export function applyHostInventoryTopology(bomJson: any): any;
|
|
11
|
+
export function mergeHostInventoryBoms(hbomJson: any, obomData: any): any;
|
|
12
|
+
//# sourceMappingURL=hostTopology.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"hostTopology.d.ts","sourceRoot":"","sources":["../../../lib/helpers/hostTopology.js"],"names":[],"mappings":"AAsmBA,uDAQC;AAED;;;;;;;EAwBC;AAYD,8DA8EC;AAED,0EAwDC"}
|
|
@@ -0,0 +1,11 @@
|
|
|
1
|
+
export function getPropertyValue(propertiesOrObject: any, propertyName: any): any;
|
|
2
|
+
export function getUnpackagedExecutableComponents(components?: any[]): any[];
|
|
3
|
+
export function getUnpackagedSharedLibraryComponents(components?: any[]): any[];
|
|
4
|
+
export function getSourceDerivedCryptoComponents(components?: any[]): any[];
|
|
5
|
+
export function getContainerFileInventoryStats(components?: any[]): {
|
|
6
|
+
unpackagedExecutables: any[];
|
|
7
|
+
unpackagedSharedLibraries: any[];
|
|
8
|
+
unpackagedExecutableCount: number;
|
|
9
|
+
unpackagedSharedLibraryCount: number;
|
|
10
|
+
};
|
|
11
|
+
//# sourceMappingURL=inventoryStats.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"inventoryStats.d.ts","sourceRoot":"","sources":["../../../lib/helpers/inventoryStats.js"],"names":[],"mappings":"AAUA,kFAIC;AAkBD,6EAMC;AAED,gFAMC;AAED,4EAQC;AAED;;;;;EAUC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"lolbas.d.ts","sourceRoot":"","sources":["../../../lib/helpers/lolbas.js"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"lolbas.d.ts","sourceRoot":"","sources":["../../../lib/helpers/lolbas.js"],"names":[],"mappings":"AA2JA;;;;;GAKG;AACH,6CAHW,MAAM,GACJ,MAAM,GAAC,SAAS,CAqB5B;AAED;;;;;;GAMG;AACH,sDAJW,MAAM,OACN,MAAM,GACJ,KAAK,CAAC,MAAM,CAAC,CAiGzB"}
|
|
@@ -3,5 +3,8 @@ export function deriveOsQueryName(res: any, singleResult: any, queryName: any):
|
|
|
3
3
|
export function deriveOsQueryPublisher(res: any): any;
|
|
4
4
|
export function deriveOsQueryDescription(res: any): any;
|
|
5
5
|
export function sanitizeOsQueryIdentity(value: any): string;
|
|
6
|
+
export function sanitizeOsQueryBomRefValue(value: any, fallback?: string): string;
|
|
7
|
+
export function createOsQueryFallbackBomRef(queryCategory: any, componentType: any, name: any, version: any, identityField: any, identityValue: any): string;
|
|
8
|
+
export function shouldCreateOsQueryPurl(componentType: any): boolean;
|
|
6
9
|
export function createOsQueryPurl(purlType: any, group: any, name: any, version: any, qualifiers: any, subpath: any): string;
|
|
7
10
|
//# sourceMappingURL=osqueryTransform.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"osqueryTransform.d.ts","sourceRoot":"","sources":["../../../lib/helpers/osqueryTransform.js"],"names":[],"mappings":"AAEA,oDAWC;AAED,oFAgBC;AAED,sDASC;AAED,wDAaC;AAED,4DAMC;AAED,6HAgBC"}
|
|
1
|
+
{"version":3,"file":"osqueryTransform.d.ts","sourceRoot":"","sources":["../../../lib/helpers/osqueryTransform.js"],"names":[],"mappings":"AAEA,oDAWC;AAED,oFAgBC;AAED,sDASC;AAED,wDAaC;AAED,4DAMC;AAED,kFASC;AAED,6JA4BC;AAED,qEAIC;AAED,6HAgBC"}
|
|
@@ -0,0 +1,58 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Determine the normalized plugin target tuple for the current runtime.
|
|
3
|
+
*
|
|
4
|
+
* @returns {{arch: string, extn: string, platform: string, pluginsBinSuffix: string}}
|
|
5
|
+
*/
|
|
6
|
+
export function getPluginsBinTarget(): {
|
|
7
|
+
arch: string;
|
|
8
|
+
extn: string;
|
|
9
|
+
platform: string;
|
|
10
|
+
pluginsBinSuffix: string;
|
|
11
|
+
};
|
|
12
|
+
/**
|
|
13
|
+
* Resolve the cdxgen companion plugins directory for the current runtime.
|
|
14
|
+
*
|
|
15
|
+
* @returns {{
|
|
16
|
+
* arch: string,
|
|
17
|
+
* extn: string,
|
|
18
|
+
* extraNMBinPath: string|undefined,
|
|
19
|
+
* platform: string,
|
|
20
|
+
* pluginManifestFile: string|undefined,
|
|
21
|
+
* pluginVersion: string|undefined,
|
|
22
|
+
* pluginsBinSuffix: string,
|
|
23
|
+
* pluginsDir: string,
|
|
24
|
+
* }}
|
|
25
|
+
*/
|
|
26
|
+
export function resolveCdxgenPlugins(): {
|
|
27
|
+
arch: string;
|
|
28
|
+
extn: string;
|
|
29
|
+
extraNMBinPath: string | undefined;
|
|
30
|
+
platform: string;
|
|
31
|
+
pluginManifestFile: string | undefined;
|
|
32
|
+
pluginVersion: string | undefined;
|
|
33
|
+
pluginsBinSuffix: string;
|
|
34
|
+
pluginsDir: string;
|
|
35
|
+
};
|
|
36
|
+
/**
|
|
37
|
+
* Retrieve the default plugin runtime, recomputing it only when the
|
|
38
|
+
* environment that influences plugin discovery changes.
|
|
39
|
+
*
|
|
40
|
+
* @returns {ReturnType<typeof resolveCdxgenPlugins>} The resolved plugin runtime.
|
|
41
|
+
*/
|
|
42
|
+
export function getDefaultPluginRuntime(): ReturnType<typeof resolveCdxgenPlugins>;
|
|
43
|
+
/**
|
|
44
|
+
* Add the detected node_modules binary directory to PATH when present.
|
|
45
|
+
*
|
|
46
|
+
* @param {ReturnType<typeof resolveCdxgenPlugins>} [pluginRuntime] Detected plugin runtime.
|
|
47
|
+
* @returns {ReturnType<typeof resolveCdxgenPlugins>} The resolved plugin runtime.
|
|
48
|
+
*/
|
|
49
|
+
export function setPluginsPathEnv(pluginRuntime?: ReturnType<typeof resolveCdxgenPlugins>): ReturnType<typeof resolveCdxgenPlugins>;
|
|
50
|
+
/**
|
|
51
|
+
* Resolve a known plugin binary path, honoring explicit environment overrides.
|
|
52
|
+
*
|
|
53
|
+
* @param {string} toolName Tool identifier.
|
|
54
|
+
* @param {ReturnType<typeof resolveCdxgenPlugins>} [pluginRuntime] Detected plugin runtime.
|
|
55
|
+
* @returns {string|undefined} Resolved binary path or configured override.
|
|
56
|
+
*/
|
|
57
|
+
export function resolvePluginBinary(toolName: string, pluginRuntime?: ReturnType<typeof resolveCdxgenPlugins>): string | undefined;
|
|
58
|
+
//# sourceMappingURL=plugins.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"plugins.d.ts","sourceRoot":"","sources":["../../../lib/helpers/plugins.js"],"names":[],"mappings":"AA0BA;;;;GAIG;AACH,uCAFa;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,gBAAgB,EAAE,MAAM,CAAA;CAAC,CAgCpF;AAED;;;;;;;;;;;;;GAaG;AACH,wCAXa;IACR,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,MAAM,GAAC,SAAS,CAAC;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB,EAAE,MAAM,GAAC,SAAS,CAAC;IACrC,aAAa,EAAE,MAAM,GAAC,SAAS,CAAC;IAChC,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;CACpB,CAqKH;AAYD;;;;;GAKG;AACH,2CAFa,UAAU,CAAC,OAAO,oBAAoB,CAAC,CASnD;AAED;;;;;GAKG;AACH,kDAHW,UAAU,CAAC,OAAO,oBAAoB,CAAC,GACrC,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAWnD;AAoDD;;;;;;GAMG;AACH,8CAJW,MAAM,kBACN,UAAU,CAAC,OAAO,oBAAoB,CAAC,GACrC,MAAM,GAAC,SAAS,CAS5B"}
|
|
@@ -1,5 +1,4 @@
|
|
|
1
|
-
export function
|
|
2
|
-
export function
|
|
3
|
-
|
|
4
|
-
import { cdx_16 } from "@appthreat/cdx-proto";
|
|
1
|
+
export function isProtoBomFile(filePath: string): boolean;
|
|
2
|
+
export function writeBinary(bomJson: string | Object, binFile: string, specVersion?: string | number): void;
|
|
3
|
+
export function readBinary(binFile: string, asJson: boolean, specVersion?: string | number): any;
|
|
5
4
|
//# sourceMappingURL=protobom.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"protobom.d.ts","sourceRoot":"","sources":["../../../lib/helpers/protobom.js"],"names":[],"mappings":"AA+
|
|
1
|
+
{"version":3,"file":"protobom.d.ts","sourceRoot":"","sources":["../../../lib/helpers/protobom.js"],"names":[],"mappings":"AA+IO,yCAHI,MAAM,GACJ,OAAO,CAOnB;AASM,qCAJI,MAAM,GAAG,MAAM,WACf,MAAM,gBACN,MAAM,GAAG,MAAM,QAWzB;AASM,oCAJI,MAAM,UACN,OAAO,gBACP,MAAM,GAAG,MAAM,OAgBzB"}
|
|
@@ -1,10 +1,17 @@
|
|
|
1
1
|
/**
|
|
2
|
-
* Returns the Dependency-Track BOM API URL.
|
|
2
|
+
* Returns the Dependency-Track BOM API URL as a sanitized URL object.
|
|
3
3
|
*
|
|
4
4
|
* @param {string} serverUrl Dependency-Track server URL
|
|
5
|
-
* @returns {
|
|
5
|
+
* @returns {URL | undefined} API URL to submit BOM payload
|
|
6
6
|
*/
|
|
7
|
-
export function
|
|
7
|
+
export function getDependencyTrackBomApiUrl(serverUrl: string): URL | undefined;
|
|
8
|
+
/**
|
|
9
|
+
* Returns the Dependency-Track BOM API URL string.
|
|
10
|
+
*
|
|
11
|
+
* @param {string} serverUrl Dependency-Track server URL
|
|
12
|
+
* @returns {string | undefined} API URL to submit BOM payload
|
|
13
|
+
*/
|
|
14
|
+
export function getDependencyTrackBomUrl(serverUrl: string): string | undefined;
|
|
8
15
|
/**
|
|
9
16
|
* Build the payload for Dependency-Track BOM submission.
|
|
10
17
|
*
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"dependency-track.d.ts","sourceRoot":"","sources":["../../../../lib/helpers/remote/dependency-track.js"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"dependency-track.d.ts","sourceRoot":"","sources":["../../../../lib/helpers/remote/dependency-track.js"],"names":[],"mappings":"AAIA;;;;;GAKG;AACH,uDAHW,MAAM,GACJ,GAAG,GAAG,SAAS,CAyB3B;AAED;;;;;GAKG;AACH,oDAHW,MAAM,GACJ,MAAM,GAAG,SAAS,CAI9B;AAED;;;;;;GAMG;AACH,qDAJW,MAAM,eACN,MAAM,GACJ,MAAM,GAAG,SAAS,CAkE9B"}
|