@cyclonedx/cdxgen 12.3.3 → 12.4.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (175) hide show
  1. package/README.md +69 -25
  2. package/bin/audit.js +21 -7
  3. package/bin/cdxgen.js +270 -127
  4. package/bin/convert.js +34 -15
  5. package/bin/hbom.js +495 -0
  6. package/bin/repl.js +592 -37
  7. package/bin/validate.js +31 -4
  8. package/bin/verify.js +18 -5
  9. package/data/README.md +298 -25
  10. package/data/component-tags.json +6 -0
  11. package/data/crypto-oid.json +16 -0
  12. package/data/cyclonedx-2.0-bundled.schema.json +7182 -0
  13. package/data/predictive-audit-allowlist.json +11 -0
  14. package/data/queries-darwin.json +12 -1
  15. package/data/queries-win.json +7 -1
  16. package/data/queries.json +39 -2
  17. package/data/rules/ai-agent-governance.yaml +16 -0
  18. package/data/rules/asar-archives.yaml +150 -0
  19. package/data/rules/chrome-extensions.yaml +8 -0
  20. package/data/rules/ci-permissions.yaml +42 -18
  21. package/data/rules/container-risk.yaml +14 -7
  22. package/data/rules/dependency-sources.yaml +11 -0
  23. package/data/rules/hbom-compliance.yaml +325 -0
  24. package/data/rules/hbom-performance.yaml +307 -0
  25. package/data/rules/hbom-security.yaml +248 -0
  26. package/data/rules/host-topology.yaml +165 -0
  27. package/data/rules/mcp-servers.yaml +18 -3
  28. package/data/rules/obom-runtime.yaml +907 -22
  29. package/data/rules/package-integrity.yaml +14 -0
  30. package/data/rules/rootfs-hardening.yaml +179 -0
  31. package/data/rules/vscode-extensions.yaml +9 -0
  32. package/lib/audit/index.js +210 -8
  33. package/lib/audit/index.poku.js +332 -0
  34. package/lib/audit/reporters.js +222 -0
  35. package/lib/audit/targets.js +146 -1
  36. package/lib/audit/targets.poku.js +186 -0
  37. package/lib/cli/asar.poku.js +328 -0
  38. package/lib/cli/index.js +527 -99
  39. package/lib/cli/index.poku.js +1469 -212
  40. package/lib/evinser/evinser.js +14 -9
  41. package/lib/helpers/analyzer.js +1406 -29
  42. package/lib/helpers/analyzer.poku.js +342 -0
  43. package/lib/helpers/analyzerScope.js +712 -0
  44. package/lib/helpers/asarutils.js +1556 -0
  45. package/lib/helpers/asarutils.poku.js +443 -0
  46. package/lib/helpers/auditCategories.js +12 -0
  47. package/lib/helpers/auditCategories.poku.js +32 -0
  48. package/lib/helpers/bomUtils.js +155 -1
  49. package/lib/helpers/bomUtils.poku.js +79 -1
  50. package/lib/helpers/cbomutils.js +271 -1
  51. package/lib/helpers/cbomutils.poku.js +248 -5
  52. package/lib/helpers/display.js +291 -1
  53. package/lib/helpers/display.poku.js +149 -0
  54. package/lib/helpers/evidenceUtils.js +58 -0
  55. package/lib/helpers/evidenceUtils.poku.js +54 -0
  56. package/lib/helpers/exportUtils.js +9 -0
  57. package/lib/helpers/gtfobins.js +142 -8
  58. package/lib/helpers/gtfobins.poku.js +24 -1
  59. package/lib/helpers/hbom.js +710 -0
  60. package/lib/helpers/hbom.poku.js +496 -0
  61. package/lib/helpers/hbomAnalysis.js +268 -0
  62. package/lib/helpers/hbomAnalysis.poku.js +249 -0
  63. package/lib/helpers/hbomLoader.js +35 -0
  64. package/lib/helpers/hostTopology.js +803 -0
  65. package/lib/helpers/hostTopology.poku.js +363 -0
  66. package/lib/helpers/inventoryStats.js +69 -0
  67. package/lib/helpers/inventoryStats.poku.js +86 -0
  68. package/lib/helpers/lolbas.js +19 -1
  69. package/lib/helpers/lolbas.poku.js +23 -0
  70. package/lib/helpers/osqueryTransform.js +47 -0
  71. package/lib/helpers/osqueryTransform.poku.js +47 -0
  72. package/lib/helpers/plugins.js +350 -0
  73. package/lib/helpers/plugins.poku.js +57 -0
  74. package/lib/helpers/protobom.js +209 -45
  75. package/lib/helpers/protobom.poku.js +183 -5
  76. package/lib/helpers/protobomLoader.js +43 -0
  77. package/lib/helpers/protobomLoader.poku.js +31 -0
  78. package/lib/helpers/remote/dependency-track.js +36 -3
  79. package/lib/helpers/remote/dependency-track.poku.js +44 -0
  80. package/lib/helpers/source.js +24 -0
  81. package/lib/helpers/source.poku.js +32 -0
  82. package/lib/helpers/utils.js +1438 -93
  83. package/lib/helpers/utils.poku.js +846 -4
  84. package/lib/managers/binary.e2e.poku.js +367 -0
  85. package/lib/managers/binary.js +2293 -353
  86. package/lib/managers/binary.poku.js +1699 -1
  87. package/lib/managers/docker.js +201 -79
  88. package/lib/managers/docker.poku.js +337 -12
  89. package/lib/server/server.js +4 -28
  90. package/lib/stages/postgen/annotator.js +38 -0
  91. package/lib/stages/postgen/annotator.poku.js +107 -1
  92. package/lib/stages/postgen/auditBom.js +121 -18
  93. package/lib/stages/postgen/auditBom.poku.js +1366 -31
  94. package/lib/stages/postgen/hostTopologyAudit.poku.js +186 -0
  95. package/lib/stages/postgen/postgen.js +406 -8
  96. package/lib/stages/postgen/postgen.poku.js +484 -0
  97. package/lib/stages/postgen/ruleEngine.js +116 -0
  98. package/lib/stages/pregen/envAudit.js +14 -3
  99. package/lib/validator/bomValidator.js +90 -38
  100. package/lib/validator/bomValidator.poku.js +90 -0
  101. package/lib/validator/complianceRules.js +4 -2
  102. package/lib/validator/index.poku.js +14 -0
  103. package/package.json +23 -21
  104. package/types/bin/hbom.d.ts +3 -0
  105. package/types/bin/hbom.d.ts.map +1 -0
  106. package/types/bin/repl.d.ts +1 -1
  107. package/types/bin/repl.d.ts.map +1 -1
  108. package/types/lib/audit/index.d.ts +44 -0
  109. package/types/lib/audit/index.d.ts.map +1 -1
  110. package/types/lib/audit/reporters.d.ts +16 -0
  111. package/types/lib/audit/reporters.d.ts.map +1 -1
  112. package/types/lib/audit/targets.d.ts.map +1 -1
  113. package/types/lib/cli/index.d.ts +16 -0
  114. package/types/lib/cli/index.d.ts.map +1 -1
  115. package/types/lib/evinser/evinser.d.ts +4 -0
  116. package/types/lib/evinser/evinser.d.ts.map +1 -1
  117. package/types/lib/helpers/analyzer.d.ts +33 -0
  118. package/types/lib/helpers/analyzer.d.ts.map +1 -1
  119. package/types/lib/helpers/analyzerScope.d.ts +11 -0
  120. package/types/lib/helpers/analyzerScope.d.ts.map +1 -0
  121. package/types/lib/helpers/asarutils.d.ts +34 -0
  122. package/types/lib/helpers/asarutils.d.ts.map +1 -0
  123. package/types/lib/helpers/auditCategories.d.ts +5 -0
  124. package/types/lib/helpers/auditCategories.d.ts.map +1 -1
  125. package/types/lib/helpers/bomUtils.d.ts +10 -0
  126. package/types/lib/helpers/bomUtils.d.ts.map +1 -1
  127. package/types/lib/helpers/cbomutils.d.ts +3 -2
  128. package/types/lib/helpers/cbomutils.d.ts.map +1 -1
  129. package/types/lib/helpers/display.d.ts.map +1 -1
  130. package/types/lib/helpers/evidenceUtils.d.ts +8 -0
  131. package/types/lib/helpers/evidenceUtils.d.ts.map +1 -0
  132. package/types/lib/helpers/exportUtils.d.ts.map +1 -1
  133. package/types/lib/helpers/gtfobins.d.ts +8 -0
  134. package/types/lib/helpers/gtfobins.d.ts.map +1 -1
  135. package/types/lib/helpers/hbom.d.ts +49 -0
  136. package/types/lib/helpers/hbom.d.ts.map +1 -0
  137. package/types/lib/helpers/hbomAnalysis.d.ts +76 -0
  138. package/types/lib/helpers/hbomAnalysis.d.ts.map +1 -0
  139. package/types/lib/helpers/hbomLoader.d.ts +7 -0
  140. package/types/lib/helpers/hbomLoader.d.ts.map +1 -0
  141. package/types/lib/helpers/hostTopology.d.ts +12 -0
  142. package/types/lib/helpers/hostTopology.d.ts.map +1 -0
  143. package/types/lib/helpers/inventoryStats.d.ts +11 -0
  144. package/types/lib/helpers/inventoryStats.d.ts.map +1 -0
  145. package/types/lib/helpers/lolbas.d.ts.map +1 -1
  146. package/types/lib/helpers/osqueryTransform.d.ts +3 -0
  147. package/types/lib/helpers/osqueryTransform.d.ts.map +1 -1
  148. package/types/lib/helpers/plugins.d.ts +58 -0
  149. package/types/lib/helpers/plugins.d.ts.map +1 -0
  150. package/types/lib/helpers/protobom.d.ts +5 -4
  151. package/types/lib/helpers/protobom.d.ts.map +1 -1
  152. package/types/lib/helpers/protobomLoader.d.ts +17 -0
  153. package/types/lib/helpers/protobomLoader.d.ts.map +1 -0
  154. package/types/lib/helpers/remote/dependency-track.d.ts +10 -3
  155. package/types/lib/helpers/remote/dependency-track.d.ts.map +1 -1
  156. package/types/lib/helpers/source.d.ts.map +1 -1
  157. package/types/lib/helpers/utils.d.ts +45 -8
  158. package/types/lib/helpers/utils.d.ts.map +1 -1
  159. package/types/lib/managers/binary.d.ts +5 -0
  160. package/types/lib/managers/binary.d.ts.map +1 -1
  161. package/types/lib/managers/docker.d.ts.map +1 -1
  162. package/types/lib/server/server.d.ts +2 -1
  163. package/types/lib/server/server.d.ts.map +1 -1
  164. package/types/lib/stages/postgen/annotator.d.ts.map +1 -1
  165. package/types/lib/stages/postgen/auditBom.d.ts +26 -1
  166. package/types/lib/stages/postgen/auditBom.d.ts.map +1 -1
  167. package/types/lib/stages/postgen/postgen.d.ts +2 -1
  168. package/types/lib/stages/postgen/postgen.d.ts.map +1 -1
  169. package/types/lib/stages/postgen/ruleEngine.d.ts.map +1 -1
  170. package/types/lib/stages/pregen/envAudit.d.ts.map +1 -1
  171. package/types/lib/third-party/arborist/lib/node.d.ts +23 -0
  172. package/types/lib/third-party/arborist/lib/node.d.ts.map +1 -1
  173. package/types/lib/validator/bomValidator.d.ts.map +1 -1
  174. package/types/lib/validator/complianceRules.d.ts.map +1 -1
  175. package/data/spdx-model-v3.0.1.jsonld +0 -15999
@@ -0,0 +1 @@
1
+ {"version":3,"file":"analyzerScope.d.ts","sourceRoot":"","sources":["../../../lib/helpers/analyzerScope.js"],"names":[],"mappings":"AAmCO,sDAQN;AAEM,qDAKN;AAEM,2DAiBN;AAEM,sEAIN;AAEM,uEAGN;AAaM,kFAYN;AAmEM,qHAsFN;AAEM,gKAiPN;AAgEM,yNAmFN;AAEM,+JA6DN"}
@@ -0,0 +1,34 @@
1
+ export function readAsarArchiveHeaderSync(archivePath: any): {
2
+ archiveDataOffset: bigint;
3
+ header: any;
4
+ headerSize: any;
5
+ headerString: any;
6
+ };
7
+ export function listAsarEntries(archivePath: any): {
8
+ entries: any[];
9
+ archiveDataOffset: bigint;
10
+ header: any;
11
+ headerSize: any;
12
+ headerString: any;
13
+ };
14
+ export function rewriteExtractedArchivePaths(subject: any, extractedDir: any, archivePath: any): any;
15
+ /**
16
+ * Parse an Electron ASAR archive and emit inventory, metadata, and optional
17
+ * signing information.
18
+ *
19
+ * @param {string} archivePath Absolute or relative path to an ASAR archive
20
+ * @param {Object} [options={}] Parse options
21
+ * @param {string} [options.asarVirtualPath] Virtual archive identity to use in
22
+ * BOM references and evidence for nested ASAR recursion
23
+ * @param {number} [options.specVersion] CycloneDX spec version used to choose
24
+ * compatible component types
25
+ * @returns {Promise<Object>} Parsed archive analysis result
26
+ */
27
+ export function parseAsarArchive(archivePath: string, options?: {
28
+ asarVirtualPath?: string | undefined;
29
+ specVersion?: number | undefined;
30
+ }): Promise<Object>;
31
+ export function extractAsarToTempDir(archivePath: any): Promise<any>;
32
+ export function cleanupAsarTempDir(tempDir: any): void;
33
+ export function buildAsarExtractionSummary(archiveAnalysis: any, extractionPerformed: any): any[];
34
+ //# sourceMappingURL=asarutils.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"asarutils.d.ts","sourceRoot":"","sources":["../../../lib/helpers/asarutils.js"],"names":[],"mappings":"AA+PA;;;;;EA+CC;AAED;;;;;;EAwCC;AAgYD,qGAmDC;AAyYD;;;;;;;;;;;GAWG;AACH,8CARW,MAAM,YAEd;IAAyB,eAAe;IAEf,WAAW;CAEpC,GAAU,OAAO,CAAC,MAAM,CAAC,CAyM3B;AAuGD,qEA6BC;AAED,uDAYC;AAED,kGAwBC"}
@@ -6,7 +6,12 @@ export function validateBomAuditCategories(categories: any, rules: any): {
6
6
  expandedCategories: any[];
7
7
  validCategories: any[];
8
8
  };
9
+ export const HBOM_AUDIT_CATEGORIES: readonly string[];
10
+ export const HOST_TOPOLOGY_AUDIT_CATEGORIES: readonly string[];
11
+ export const DEFAULT_HBOM_AUDIT_CATEGORIES: string;
9
12
  export const BOM_AUDIT_CATEGORY_ALIASES: Readonly<{
10
13
  "ai-inventory": string[];
14
+ hbom: string[];
15
+ host: string[];
11
16
  }>;
12
17
  //# sourceMappingURL=auditCategories.d.ts.map
@@ -1 +1 @@
1
- {"version":3,"file":"auditCategories.d.ts","sourceRoot":"","sources":["../../../lib/helpers/auditCategories.js"],"names":[],"mappings":"AAQA,oEAeC;AAED,iEAWC;AAED,+DAIC;AAUD;;;;EAuBC;AA3ED;;GAEG"}
1
+ {"version":3,"file":"auditCategories.d.ts","sourceRoot":"","sources":["../../../lib/helpers/auditCategories.js"],"names":[],"mappings":"AAoBA,oEAeC;AAED,iEAWC;AAED,+DAIC;AAUD;;;;EAuBC;AAvFD,sDAIG;AAEH,+DAA+E;AAE/E,mDAA6E;AAE7E;;;;GAIG"}
@@ -1,5 +1,15 @@
1
1
  export function isSpdxJsonLd(bomJson: any): boolean;
2
+ export function normalizeCycloneDxSpecVersion(specVersion: any): number | undefined;
3
+ export function toCycloneDxSpecVersionString(specVersion: any): string | undefined;
4
+ export function isCycloneDxSpecVersionAtLeast(specVersion: any, minimumVersion: any): boolean;
5
+ export function isCycloneDx20SpecVersion(specVersion: any): boolean;
6
+ export function getCycloneDxRootFormatKey(specVersionOrBom: any): "specFormat" | "bomFormat";
7
+ export function getCycloneDxFormat(bomJson: any): any;
8
+ export function hasCycloneDxFormat(bomJson: any): boolean;
2
9
  export function isCycloneDxBom(bomJson: any): boolean;
10
+ export function setCycloneDxFormat(bomJson: any, specVersion: any, { preserveLegacyBomFormat }?: {
11
+ preserveLegacyBomFormat?: boolean | undefined;
12
+ }): any;
3
13
  export function detectBomFormat(bomJson: any): "unknown" | "cyclonedx" | "spdx";
4
14
  export function getNonCycloneDxErrorMessage(bomJson: any, commandName?: string): string;
5
15
  //# sourceMappingURL=bomUtils.d.ts.map
@@ -1 +1 @@
1
- {"version":3,"file":"bomUtils.d.ts","sourceRoot":"","sources":["../../../lib/helpers/bomUtils.js"],"names":[],"mappings":"AAMO,oDAKJ;AAEI,sDACmE;AAEnE,gFAQN;AAEM,wFASN"}
1
+ {"version":3,"file":"bomUtils.d.ts","sourceRoot":"","sources":["../../../lib/helpers/bomUtils.js"],"names":[],"mappings":"AAQO,oDAKJ;AAEI,oFAGN;AAEM,mFAGN;AAEM,8FAWN;AAEM,oEACwC;AAExC,6FAQN;AAEM,sDACoC;AAEpC,0DAC2C;AAE3C,sDAE4D;AAE5D;;QA4BN;AAEM,gFAQN;AAEM,wFASN"}
@@ -5,11 +5,12 @@
5
5
  * @returns osPkgsList Array of OS crypto packages
6
6
  */
7
7
  export function collectOSCryptoLibs(options: Object): any[];
8
+ export function collectSourceCryptoComponents(src: any, options?: {}): Promise<any[]>;
8
9
  /**
9
10
  * Find crypto algorithm in the given code snippet
10
11
  *
11
- * @param {String} Code snippet
12
+ * @param {string} code Code snippet
12
13
  * @returns {Array} Arary of crypto algorithm objects with oid and description
13
14
  */
14
- export function findCryptoAlgos(code: any): any[];
15
+ export function findCryptoAlgos(code: string): any[];
15
16
  //# sourceMappingURL=cbomutils.d.ts.map
@@ -1 +1 @@
1
- {"version":3,"file":"cbomutils.d.ts","sourceRoot":"","sources":["../../../lib/helpers/cbomutils.js"],"names":[],"mappings":"AAaA;;;;;GAKG;AACH,6CAHW,MAAM,SA2BhB;AAMD;;;;;GAKG;AACH,kDAaC"}
1
+ {"version":3,"file":"cbomutils.d.ts","sourceRoot":"","sources":["../../../lib/helpers/cbomutils.js"],"names":[],"mappings":"AAkBA;;;;;GAKG;AACH,6CAHW,MAAM,SA2BhB;AAiOD,sFA4CC;AAED;;;;;GAKG;AACH,sCAHW,MAAM,SAgBhB"}
@@ -1 +1 @@
1
- {"version":3,"file":"display.d.ts","sourceRoot":"","sources":["../../../lib/helpers/display.js"],"names":[],"mappings":"AA+HA;;;;;;;;;EAoBC;AAED,wGA4BC;AA6BD;;;;;;;;;;GAUG;AACH,oCANW,MAAM,gBACN,MAAM,EAAE,cACR,MAAM,gBACN,MAAM,GACJ,IAAI,CA4EhB;AAQD;;;;;GAKG;AACH,sCAHW,MAAM,GACJ,IAAI,CAsBhB;AACD;;;;;;GAMG;AACH,uCAHW,MAAM,GACJ,IAAI,CAwBhB;AAED;;;;;GAKG;AACH,0CAHW,MAAM,GACJ,IAAI,CAuBhB;AAeD;;;;;;GAMG;AACH,0CAHW,MAAM,GACJ,IAAI,CAwChB;AAED;;;;;;GAMG;AACH,wCAHW,MAAM,GACJ,IAAI,CA4ChB;AACD;;;;;;;;GAQG;AACH,6CALW,MAAM,SACN,MAAM,cACN,MAAM,GACJ,IAAI,CAoChB;AAoMD;;;;;;GAMG;AACH,gDAHW,MAAM,GACJ,IAAI,CAoChB;AAED;;;;;GAKG;AACH,sDAHW,MAAM,EAAE,GACN,IAAI,CA4BhB;AAED;;;;;;;GAOG;AACH,4CAHW,MAAM,GACJ,IAAI,CAsBhB;AAED;;;;;;GAMG;AACH,sCAHW,MAAM,GACJ,IAAI,CAkDhB;AAED,mEAiHC;AAgED;;;;;GAKG;AACH,iEAHW,eAAe,EAAE,GACf,IAAI,CA+BhB;AAED;;;;;;;;GAQG;AACH,iDALW,MAAM,UACN,MAAM,WACN,MAAM,oBACN,eAAe,EAAE,QAsU3B;AA11CM,gDANI,MAAM,eACN,MAAM,EAAE,GAAC,SAAS,eAClB,MAAM,GAAC,SAAS,6BAChB,MAAM,GACJ,MAAM,EAAE,CA+BpB;AAQM,6DAHI,MAAM,EAAE,GACN,MAAM,EAAE,CAcpB;AAyjBM,uDAJI,MAAM,EAAE,SACR,MAAM,GACJ,MAAM,EAAE,CAyCpB;8BA0RY;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAC"}
1
+ {"version":3,"file":"display.d.ts","sourceRoot":"","sources":["../../../lib/helpers/display.js"],"names":[],"mappings":"AAmZA;;;;;;;;;EAoBC;AAED,wGA4BC;AA6BD;;;;;;;;;;GAUG;AACH,oCANW,MAAM,gBACN,MAAM,EAAE,cACR,MAAM,gBACN,MAAM,GACJ,IAAI,CA+EhB;AAQD;;;;;GAKG;AACH,sCAHW,MAAM,GACJ,IAAI,CAsBhB;AACD;;;;;;GAMG;AACH,uCAHW,MAAM,GACJ,IAAI,CAwBhB;AAED;;;;;GAKG;AACH,0CAHW,MAAM,GACJ,IAAI,CAuBhB;AA0BD;;;;;;GAMG;AACH,0CAHW,MAAM,GACJ,IAAI,CAwChB;AAED;;;;;;GAMG;AACH,wCAHW,MAAM,GACJ,IAAI,CA4ChB;AACD;;;;;;;;GAQG;AACH,6CALW,MAAM,SACN,MAAM,cACN,MAAM,GACJ,IAAI,CAoChB;AAoMD;;;;;;GAMG;AACH,gDAHW,MAAM,GACJ,IAAI,CAoChB;AAED;;;;;GAKG;AACH,sDAHW,MAAM,EAAE,GACN,IAAI,CA4BhB;AAED;;;;;;;GAOG;AACH,4CAHW,MAAM,GACJ,IAAI,CAsBhB;AAED;;;;;;GAMG;AACH,sCAHW,MAAM,GACJ,IAAI,CAkDhB;AAED,mEAiHC;AAgED;;;;;GAKG;AACH,iEAHW,eAAe,EAAE,GACf,IAAI,CA+BhB;AAED;;;;;;;;GAQG;AACH,iDALW,MAAM,UACN,MAAM,WACN,MAAM,oBACN,eAAe,EAAE,QAsU3B;AApnDM,gDANI,MAAM,eACN,MAAM,EAAE,GAAC,SAAS,eAClB,MAAM,GAAC,SAAS,6BAChB,MAAM,GACJ,MAAM,EAAE,CA2FpB;AAwNM,6DAHI,MAAM,EAAE,GACN,MAAM,EAAE,CAcpB;AAukBM,uDAJI,MAAM,EAAE,SACR,MAAM,GACJ,MAAM,EAAE,CAyCpB;8BA0RY;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAC"}
@@ -0,0 +1,8 @@
1
+ export function createOccurrenceEvidence(location: any, details?: {}): {
2
+ location: string;
3
+ } | undefined;
4
+ export function parseOccurrenceEvidenceLocation(location: any, details?: {}): {
5
+ location: string;
6
+ } | undefined;
7
+ export function formatOccurrenceEvidence(occurrence: any): any;
8
+ //# sourceMappingURL=evidenceUtils.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"evidenceUtils.d.ts","sourceRoot":"","sources":["../../../lib/helpers/evidenceUtils.js"],"names":[],"mappings":"AAAA;;cAcC;AAED;;cA4BC;AAED,+DAWC"}
@@ -1 +1 @@
1
- {"version":3,"file":"exportUtils.d.ts","sourceRoot":"","sources":["../../../lib/helpers/exportUtils.js"],"names":[],"mappings":"AAYA;;;;;GAKG;AACH,+CAHW,MAAM,GAAC,MAAM,EAAE,GAAC,SAAS,GAAC,IAAI,GAC5B,MAAM,EAAE,CAoBpB;AAED;;;;;GAKG;AACH,iDAHW,MAAM,GACJ,MAAM,CAgBlB;AAED;;;;;GAKG;AACH,sDAHW,MAAM,GACJ,MAAM,CAUlB;AAED;;;;;GAKG;AACH,0CAHW,MAAM,GACJ;IAAE,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,cAAc,EAAE,OAAO,CAAA;CAAE,CAgC9F;AAED;;;;;GAKG;AACH,+CAHW,MAAM,GACJ,MAAM,CAIlB"}
1
+ {"version":3,"file":"exportUtils.d.ts","sourceRoot":"","sources":["../../../lib/helpers/exportUtils.js"],"names":[],"mappings":"AAYA;;;;;GAKG;AACH,+CAHW,MAAM,GAAC,MAAM,EAAE,GAAC,SAAS,GAAC,IAAI,GAC5B,MAAM,EAAE,CAoBpB;AAED;;;;;GAKG;AACH,iDAHW,MAAM,GACJ,MAAM,CAyBlB;AAED;;;;;GAKG;AACH,sDAHW,MAAM,GACJ,MAAM,CAUlB;AAED;;;;;GAKG;AACH,0CAHW,MAAM,GACJ;IAAE,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,cAAc,EAAE,OAAO,CAAA;CAAE,CAgC9F;AAED;;;;;GAKG;AACH,+CAHW,MAAM,GACJ,MAAM,CAIlB"}
@@ -14,4 +14,12 @@ export function createGtfoBinsProperties(name: any, linkedName: any): {
14
14
  name: string;
15
15
  value: any;
16
16
  }[];
17
+ /**
18
+ * Resolve GTFOBins properties for a live Linux osquery row.
19
+ *
20
+ * @param {string} queryCategory Osquery query category
21
+ * @param {object} row Osquery row
22
+ * @returns {Array<object>} CycloneDX custom properties
23
+ */
24
+ export function createGtfoBinsPropertiesFromRow(queryCategory: string, row: object): Array<object>;
17
25
  //# sourceMappingURL=gtfobins.d.ts.map
@@ -1 +1 @@
1
- {"version":3,"file":"gtfobins.d.ts","sourceRoot":"","sources":["../../../lib/helpers/gtfobins.js"],"names":[],"mappings":"AAmHA;;;;;;;;;;;cAsCC;AAED;;;IAiCC"}
1
+ {"version":3,"file":"gtfobins.d.ts","sourceRoot":"","sources":["../../../lib/helpers/gtfobins.js"],"names":[],"mappings":"AAwJA;;;;;;;;;;;cAsCC;AAED;;;IAiCC;AAED;;;;;;GAMG;AACH,+DAJW,MAAM,OACN,MAAM,GACJ,KAAK,CAAC,MAAM,CAAC,CA0FzB"}
@@ -0,0 +1,49 @@
1
+ /**
2
+ * Determine whether the supplied project types include HBOM.
3
+ *
4
+ * @param {string|string[]|undefined|null} projectTypes Project types.
5
+ * @returns {boolean} True when HBOM is requested.
6
+ */
7
+ export function hasHbomProjectType(projectTypes: string | string[] | undefined | null): boolean;
8
+ /**
9
+ * Determine whether the supplied project types are exclusively HBOM-oriented.
10
+ *
11
+ * @param {string|string[]|undefined|null} projectTypes Project types.
12
+ * @returns {boolean} True when at least one project type is supplied and all are HBOM-oriented.
13
+ */
14
+ export function isHbomOnlyProjectTypes(projectTypes: string | string[] | undefined | null): boolean;
15
+ /**
16
+ * Reject mixed HBOM and non-HBOM project types.
17
+ *
18
+ * @param {string|string[]|undefined|null} projectTypes Project types.
19
+ */
20
+ export function ensureNoMixedHbomProjectTypes(projectTypes: string | string[] | undefined | null): void;
21
+ /**
22
+ * Ensure HBOM generation uses the supported CycloneDX version.
23
+ *
24
+ * @param {number|string|undefined|null} specVersion Requested spec version.
25
+ */
26
+ export function ensureSupportedHbomSpecVersion(specVersion: number | string | undefined | null): void;
27
+ /**
28
+ * Ensure merged HBOM + runtime collection has access to osquery.
29
+ *
30
+ * @param {object} [options={}] CLI options.
31
+ * @param {string} [commandName="hbom"] Invoked command name for tailored guidance.
32
+ */
33
+ export function ensureHbomRuntimeSupport(options?: object, commandName?: string): void;
34
+ /**
35
+ * Translate cdxgen CLI options to cdx-hbom collector options.
36
+ *
37
+ * @param {object} [options={}] CLI options.
38
+ * @returns {object} cdx-hbom collector options.
39
+ */
40
+ export function normalizeHbomOptions(options?: object): object;
41
+ export function addHbomAnalysisProperties(bomJson: any): any;
42
+ /**
43
+ * Generate an HBOM using the optional cdx-hbom package.
44
+ *
45
+ * @param {object} [options={}] CLI options.
46
+ * @returns {Promise<object>} CycloneDX HBOM document.
47
+ */
48
+ export function createHbomDocument(options?: object): Promise<object>;
49
+ //# sourceMappingURL=hbom.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"hbom.d.ts","sourceRoot":"","sources":["../../../lib/helpers/hbom.js"],"names":[],"mappings":"AAwSA;;;;;GAKG;AACH,iDAHW,MAAM,GAAC,MAAM,EAAE,GAAC,SAAS,GAAC,IAAI,GAC5B,OAAO,CAMnB;AAED;;;;;GAKG;AACH,qDAHW,MAAM,GAAC,MAAM,EAAE,GAAC,SAAS,GAAC,IAAI,GAC5B,OAAO,CAUnB;AAED;;;;GAIG;AACH,4DAFW,MAAM,GAAC,MAAM,EAAE,GAAC,SAAS,GAAC,IAAI,QAkBxC;AAED;;;;GAIG;AACH,4DAFW,MAAM,GAAC,MAAM,GAAC,SAAS,GAAC,IAAI,QAStC;AAED;;;;;GAKG;AACH,mDAHW,MAAM,gBACN,MAAM,QAqBhB;AAED;;;;;GAKG;AACH,+CAHW,MAAM,GACJ,MAAM,CA2BlB;AA8GD,6DA4HC;AAED;;;;;GAKG;AACH,6CAHW,MAAM,GACJ,OAAO,CAAC,MAAM,CAAC,CAiC3B"}
@@ -0,0 +1,76 @@
1
+ export function getHbomCommandDiagnostics(bomJson: any): any;
2
+ export function getHbomCommandDiagnosticSummary(bomJson: any): {
3
+ actionableDiagnosticCount: any;
4
+ commandDiagnosticCount: any;
5
+ commandDiagnostics: any;
6
+ commandErrorCount: any;
7
+ commandErrorIds: string[];
8
+ diagnosticIssues: string[];
9
+ installHintCount: number;
10
+ installHints: string[];
11
+ missingCommandCount: any;
12
+ missingCommandIds: string[];
13
+ missingCommands: string[];
14
+ partialSupportCount: any;
15
+ partialSupportIds: string[];
16
+ permissionDeniedCommands: string[];
17
+ permissionDeniedCount: any;
18
+ permissionDeniedIds: string[];
19
+ privilegeHintCount: number;
20
+ privilegeHints: string[];
21
+ requiresPrivilegedEnrichment: boolean;
22
+ timeoutIds: string[];
23
+ timeoutCount: any;
24
+ };
25
+ export function isHbomLikeBom(bomJson: any): any;
26
+ export function getHbomHardwareClass(component: any): any;
27
+ export function getHbomHardwareClassCounts(components?: any[]): {
28
+ hardwareClass: any;
29
+ count: any;
30
+ }[];
31
+ export function formatHbomHardwareClassSummary(hardwareClassCounts?: any[]): string;
32
+ export function getHbomSummary(bomJson: any): {
33
+ actionableDiagnosticCount: any;
34
+ architecture: any;
35
+ collectorProfile: any;
36
+ commandDiagnosticCount: any;
37
+ commandDiagnostics: any;
38
+ commandErrorCount: any;
39
+ commandErrorIds: string[];
40
+ componentCount: any;
41
+ diagnosticIssues: string[];
42
+ evidenceCommandCount: any;
43
+ evidenceCommands: any;
44
+ evidenceFileCount: any;
45
+ evidenceFiles: any;
46
+ hardwareClassCount: number;
47
+ hardwareClassCounts: {
48
+ hardwareClass: any;
49
+ count: any;
50
+ }[];
51
+ identifierPolicy: any;
52
+ installHintCount: number;
53
+ installHints: string[];
54
+ manufacturer: any;
55
+ metadataName: any;
56
+ metadataType: any;
57
+ missingCommandCount: any;
58
+ missingCommandIds: string[];
59
+ missingCommands: string[];
60
+ partialSupportCount: any;
61
+ partialSupportIds: string[];
62
+ platform: any;
63
+ permissionDeniedCommands: string[];
64
+ permissionDeniedCount: any;
65
+ permissionDeniedIds: string[];
66
+ privilegeHintCount: number;
67
+ privilegeHints: string[];
68
+ requiresPrivilegedEnrichment: boolean;
69
+ timeoutIds: string[];
70
+ timeoutCount: any;
71
+ topHardwareClasses: {
72
+ hardwareClass: any;
73
+ count: any;
74
+ }[];
75
+ };
76
+ //# sourceMappingURL=hbomAnalysis.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"hbomAnalysis.d.ts","sourceRoot":"","sources":["../../../lib/helpers/hbomAnalysis.js"],"names":[],"mappings":"AAoDA,6DAIC;AAED;;;;;;;;;;;;;;;;;;;;;;EAqEC;AAED,iDA2BC;AAED,0DAEC;AAED;;;IAgBC;AAED,oFAKC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAgFC"}
@@ -0,0 +1,7 @@
1
+ /**
2
+ * Resolve the optional cdx-hbom module.
3
+ *
4
+ * @returns {Promise<object>} Loaded cdx-hbom module namespace.
5
+ */
6
+ export function importHbomModule(): Promise<object>;
7
+ //# sourceMappingURL=hbomLoader.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"hbomLoader.d.ts","sourceRoot":"","sources":["../../../lib/helpers/hbomLoader.js"],"names":[],"mappings":"AAUA;;;;GAIG;AACH,oCAFa,OAAO,CAAC,MAAM,CAAC,CAqB3B"}
@@ -0,0 +1,12 @@
1
+ export function isMergedHostViewBom(bomJson: any): any;
2
+ export function getHostViewSummary(bomJson: any): {
3
+ linkedHardwareComponentCount: number;
4
+ linkedRuntimeCategories: any;
5
+ mode: any;
6
+ runtimeAnchorCount: number;
7
+ runtimeComponentCount: number;
8
+ topologyLinkCount: number;
9
+ };
10
+ export function applyHostInventoryTopology(bomJson: any): any;
11
+ export function mergeHostInventoryBoms(hbomJson: any, obomData: any): any;
12
+ //# sourceMappingURL=hostTopology.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"hostTopology.d.ts","sourceRoot":"","sources":["../../../lib/helpers/hostTopology.js"],"names":[],"mappings":"AA2mBA,uDAQC;AAED;;;;;;;EAwBC;AAYD,8DA+EC;AAED,0EAwDC"}
@@ -0,0 +1,11 @@
1
+ export function getPropertyValue(propertiesOrObject: any, propertyName: any): any;
2
+ export function getUnpackagedExecutableComponents(components?: any[]): any[];
3
+ export function getUnpackagedSharedLibraryComponents(components?: any[]): any[];
4
+ export function getSourceDerivedCryptoComponents(components?: any[]): any[];
5
+ export function getContainerFileInventoryStats(components?: any[]): {
6
+ unpackagedExecutables: any[];
7
+ unpackagedSharedLibraries: any[];
8
+ unpackagedExecutableCount: number;
9
+ unpackagedSharedLibraryCount: number;
10
+ };
11
+ //# sourceMappingURL=inventoryStats.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"inventoryStats.d.ts","sourceRoot":"","sources":["../../../lib/helpers/inventoryStats.js"],"names":[],"mappings":"AAUA,kFAIC;AAkBD,6EAMC;AAED,gFAMC;AAED,4EAQC;AAED;;;;;EAUC"}
@@ -1 +1 @@
1
- {"version":3,"file":"lolbas.d.ts","sourceRoot":"","sources":["../../../lib/helpers/lolbas.js"],"names":[],"mappings":"AA2IA;;;;;GAKG;AACH,6CAHW,MAAM,GACJ,MAAM,GAAC,SAAS,CAqB5B;AAED;;;;;;GAMG;AACH,sDAJW,MAAM,OACN,MAAM,GACJ,KAAK,CAAC,MAAM,CAAC,CA+FzB"}
1
+ {"version":3,"file":"lolbas.d.ts","sourceRoot":"","sources":["../../../lib/helpers/lolbas.js"],"names":[],"mappings":"AA2JA;;;;;GAKG;AACH,6CAHW,MAAM,GACJ,MAAM,GAAC,SAAS,CAqB5B;AAED;;;;;;GAMG;AACH,sDAJW,MAAM,OACN,MAAM,GACJ,KAAK,CAAC,MAAM,CAAC,CAiGzB"}
@@ -3,5 +3,8 @@ export function deriveOsQueryName(res: any, singleResult: any, queryName: any):
3
3
  export function deriveOsQueryPublisher(res: any): any;
4
4
  export function deriveOsQueryDescription(res: any): any;
5
5
  export function sanitizeOsQueryIdentity(value: any): string;
6
+ export function sanitizeOsQueryBomRefValue(value: any, fallback?: string): string;
7
+ export function createOsQueryFallbackBomRef(queryCategory: any, componentType: any, name: any, version: any, identityField: any, identityValue: any): string;
8
+ export function shouldCreateOsQueryPurl(componentType: any): boolean;
6
9
  export function createOsQueryPurl(purlType: any, group: any, name: any, version: any, qualifiers: any, subpath: any): string;
7
10
  //# sourceMappingURL=osqueryTransform.d.ts.map
@@ -1 +1 @@
1
- {"version":3,"file":"osqueryTransform.d.ts","sourceRoot":"","sources":["../../../lib/helpers/osqueryTransform.js"],"names":[],"mappings":"AAEA,oDAWC;AAED,oFAgBC;AAED,sDASC;AAED,wDAaC;AAED,4DAMC;AAED,6HAgBC"}
1
+ {"version":3,"file":"osqueryTransform.d.ts","sourceRoot":"","sources":["../../../lib/helpers/osqueryTransform.js"],"names":[],"mappings":"AAEA,oDAWC;AAED,oFAgBC;AAED,sDASC;AAED,wDAaC;AAED,4DAMC;AAED,kFASC;AAED,6JA4BC;AAED,qEAIC;AAED,6HAgBC"}
@@ -0,0 +1,58 @@
1
+ /**
2
+ * Determine the normalized plugin target tuple for the current runtime.
3
+ *
4
+ * @returns {{arch: string, extn: string, platform: string, pluginsBinSuffix: string}}
5
+ */
6
+ export function getPluginsBinTarget(): {
7
+ arch: string;
8
+ extn: string;
9
+ platform: string;
10
+ pluginsBinSuffix: string;
11
+ };
12
+ /**
13
+ * Resolve the cdxgen companion plugins directory for the current runtime.
14
+ *
15
+ * @returns {{
16
+ * arch: string,
17
+ * extn: string,
18
+ * extraNMBinPath: string|undefined,
19
+ * platform: string,
20
+ * pluginManifestFile: string|undefined,
21
+ * pluginVersion: string|undefined,
22
+ * pluginsBinSuffix: string,
23
+ * pluginsDir: string,
24
+ * }}
25
+ */
26
+ export function resolveCdxgenPlugins(): {
27
+ arch: string;
28
+ extn: string;
29
+ extraNMBinPath: string | undefined;
30
+ platform: string;
31
+ pluginManifestFile: string | undefined;
32
+ pluginVersion: string | undefined;
33
+ pluginsBinSuffix: string;
34
+ pluginsDir: string;
35
+ };
36
+ /**
37
+ * Retrieve the default plugin runtime, recomputing it only when the
38
+ * environment that influences plugin discovery changes.
39
+ *
40
+ * @returns {ReturnType<typeof resolveCdxgenPlugins>} The resolved plugin runtime.
41
+ */
42
+ export function getDefaultPluginRuntime(): ReturnType<typeof resolveCdxgenPlugins>;
43
+ /**
44
+ * Add the detected node_modules binary directory to PATH when present.
45
+ *
46
+ * @param {ReturnType<typeof resolveCdxgenPlugins>} [pluginRuntime] Detected plugin runtime.
47
+ * @returns {ReturnType<typeof resolveCdxgenPlugins>} The resolved plugin runtime.
48
+ */
49
+ export function setPluginsPathEnv(pluginRuntime?: ReturnType<typeof resolveCdxgenPlugins>): ReturnType<typeof resolveCdxgenPlugins>;
50
+ /**
51
+ * Resolve a known plugin binary path, honoring explicit environment overrides.
52
+ *
53
+ * @param {string} toolName Tool identifier.
54
+ * @param {ReturnType<typeof resolveCdxgenPlugins>} [pluginRuntime] Detected plugin runtime.
55
+ * @returns {string|undefined} Resolved binary path or configured override.
56
+ */
57
+ export function resolvePluginBinary(toolName: string, pluginRuntime?: ReturnType<typeof resolveCdxgenPlugins>): string | undefined;
58
+ //# sourceMappingURL=plugins.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"plugins.d.ts","sourceRoot":"","sources":["../../../lib/helpers/plugins.js"],"names":[],"mappings":"AAyCA;;;;GAIG;AACH,uCAFa;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,gBAAgB,EAAE,MAAM,CAAA;CAAC,CAgCpF;AAED;;;;;;;;;;;;;GAaG;AACH,wCAXa;IACR,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,MAAM,GAAC,SAAS,CAAC;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB,EAAE,MAAM,GAAC,SAAS,CAAC;IACrC,aAAa,EAAE,MAAM,GAAC,SAAS,CAAC;IAChC,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;CACpB,CAuJH;AAYD;;;;;GAKG;AACH,2CAFa,UAAU,CAAC,OAAO,oBAAoB,CAAC,CASnD;AAED;;;;;GAKG;AACH,kDAHW,UAAU,CAAC,OAAO,oBAAoB,CAAC,GACrC,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAWnD;AAoDD;;;;;;GAMG;AACH,8CAJW,MAAM,kBACN,UAAU,CAAC,OAAO,oBAAoB,CAAC,GACrC,MAAM,GAAC,SAAS,CAS5B"}
@@ -1,5 +1,6 @@
1
- export function writeBinary(bomJson: string | Object, binFile: string): void;
2
- export function readBinary(binFile: string, asJson?: boolean, specVersion?: number): cdx_17.Bom | cdx_16.Bom | import("@bufbuild/protobuf").JsonValue | undefined;
3
- import { cdx_17 } from "@appthreat/cdx-proto";
4
- import { cdx_16 } from "@appthreat/cdx-proto";
1
+ export function isProtoSupportedSpecVersion(specVersion: any): boolean;
2
+ export function assertProtoSupportedSpecVersion(specVersion: any, operation?: string): void;
3
+ export function isProtoBomFile(filePath: string): boolean;
4
+ export function writeBinary(bomJson: string | Object, binFile: string, specVersion?: string | number): void;
5
+ export function readBinary(binFile: string, asJson: boolean, specVersion?: string | number): any;
5
6
  //# sourceMappingURL=protobom.d.ts.map
@@ -1 +1 @@
1
- {"version":3,"file":"protobom.d.ts","sourceRoot":"","sources":["../../../lib/helpers/protobom.js"],"names":[],"mappings":"AA+BO,qCAHI,MAAM,GAAG,MAAM,WACf,MAAM,QAuBhB;AASM,oCAJI,MAAM,WACN,OAAO,gBACP,MAAM,gFAmBhB;uBA5E8B,sBAAsB;uBAAtB,sBAAsB"}
1
+ {"version":3,"file":"protobom.d.ts","sourceRoot":"","sources":["../../../lib/helpers/protobom.js"],"names":[],"mappings":"AA+DO,uEASN;AAEM,4FAeN;AA0GM,yCAHI,MAAM,GACJ,OAAO,CAOnB;AASM,qCAJI,MAAM,GAAG,MAAM,WACf,MAAM,gBACN,MAAM,GAAG,MAAM,QAWzB;AASM,oCAJI,MAAM,UACN,OAAO,gBACP,MAAM,GAAG,MAAM,OAiBzB"}
@@ -0,0 +1,17 @@
1
+ /**
2
+ * Determine whether a path looks like a CycloneDX protobuf BOM file.
3
+ *
4
+ * @param {string} filePath File path
5
+ * @returns {boolean} true when the path uses a protobuf BOM extension
6
+ */
7
+ export function isProtoBomPath(filePath: string): boolean;
8
+ /**
9
+ * Import protobuf BOM helpers and replace optional-dependency loader failures
10
+ * with actionable command-specific messages.
11
+ *
12
+ * @param {string} [commandName="cdxgen"] CLI command name
13
+ * @param {string} [featureDescription="protobuf support"] Feature being used
14
+ * @returns {Promise<object>} Loaded protobom module namespace
15
+ */
16
+ export function importProtobomModule(commandName?: string, featureDescription?: string): Promise<object>;
17
+ //# sourceMappingURL=protobomLoader.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"protobomLoader.d.ts","sourceRoot":"","sources":["../../../lib/helpers/protobomLoader.js"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,yCAHW,MAAM,GACJ,OAAO,CAOnB;AAED;;;;;;;GAOG;AACH,mDAJW,MAAM,uBACN,MAAM,GACJ,OAAO,CAAC,MAAM,CAAC,CAqB3B"}
@@ -1,10 +1,17 @@
1
1
  /**
2
- * Returns the Dependency-Track BOM API URL.
2
+ * Returns the Dependency-Track BOM API URL as a sanitized URL object.
3
3
  *
4
4
  * @param {string} serverUrl Dependency-Track server URL
5
- * @returns {string} API URL to submit BOM payload
5
+ * @returns {URL | undefined} API URL to submit BOM payload
6
6
  */
7
- export function getDependencyTrackBomUrl(serverUrl: string): string;
7
+ export function getDependencyTrackBomApiUrl(serverUrl: string): URL | undefined;
8
+ /**
9
+ * Returns the Dependency-Track BOM API URL string.
10
+ *
11
+ * @param {string} serverUrl Dependency-Track server URL
12
+ * @returns {string | undefined} API URL to submit BOM payload
13
+ */
14
+ export function getDependencyTrackBomUrl(serverUrl: string): string | undefined;
8
15
  /**
9
16
  * Build the payload for Dependency-Track BOM submission.
10
17
  *
@@ -1 +1 @@
1
- {"version":3,"file":"dependency-track.d.ts","sourceRoot":"","sources":["../../../../lib/helpers/remote/dependency-track.js"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,oDAHW,MAAM,GACJ,MAAM,CAIlB;AAED;;;;;;GAMG;AACH,qDAJW,MAAM,eACN,MAAM,GACJ,MAAM,GAAG,SAAS,CAkE9B"}
1
+ {"version":3,"file":"dependency-track.d.ts","sourceRoot":"","sources":["../../../../lib/helpers/remote/dependency-track.js"],"names":[],"mappings":"AAIA;;;;;GAKG;AACH,uDAHW,MAAM,GACJ,GAAG,GAAG,SAAS,CAyB3B;AAED;;;;;GAKG;AACH,oDAHW,MAAM,GACJ,MAAM,GAAG,SAAS,CAI9B;AAED;;;;;;GAMG;AACH,qDAJW,MAAM,eACN,MAAM,GACJ,MAAM,GAAG,SAAS,CAkE9B"}
@@ -1 +1 @@
1
- {"version":3,"file":"source.d.ts","sourceRoot":"","sources":["../../../lib/helpers/source.js"],"names":[],"mappings":"AA+EA;;;;;;;GAOG;AACH,yCALW,MAAM,EAAE,YAEhB;IAAkC,GAAG,EAA7B,MAAM,GAAC,SAAS;CACxB,GAAU,MAAM,CA8BlB;AA+ED;;;;;;GAMG;AACH,mDAJW,MAAM,GAAC,SAAS,YAChB,MAAM,GACJ,MAAM,GAAC,SAAS,CA6I5B;AAED;;;;GAIG;AACH,uCAFa,MAAM,CASlB;AAkBD;;;;;GAKG;AACH,wCAHW,MAAM,GACJ,OAAO,CAWnB;AAkBD;;;;;GAKG;AACH,oCAHW,MAAM,GACJ,OAAO,CA+BnB;AAED;;;;;GAKG;AACH,iCAHW,MAAM,GACJ,OAAO,CAyBnB;AAED;;;;;GAKG;AACH,0CAHW,MAAM,GACJ,OAAO,CAInB;AAED;;;;;GAKG;AACH,0CAHW,MAAM,GACJ,OAAO,CAInB;AAED;;;;;GAKG;AACH,qDAHW,MAAM,GACJ,MAAM,GAAC,IAAI,CAgEvB;AAED;;;;;;GAMG;AACH,kCAJW,MAAM,WACN,MAAM,GAAC,MAAM,EAAE,GAAC,IAAI,GAClB,MAAM,CAyDlB;AAED;;;;;GAKG;AACH,oDAHW,MAAM,GAAC,SAAS,GACd,MAAM,GAAC,SAAS,CAgB5B;AAED;;;;;;GAMG;AACH,kDAJW,MAAM,kBACN,MAAM,GAAC,SAAS,GACd,MAAM,GAAC,SAAS,CA8D5B;AAED;;;;;;GAMG;AACH,mDAJW,MAAM,kBACN,MAAM,GAAC,SAAS,GACd,MAAM,GAAC,SAAS,CAiF5B;AAoHD;;;;;GAKG;AACH,+CAHW,MAAM,GACJ;IAAC,MAAM,EAAC,MAAM,CAAC;IAAA,KAAK,EAAC,MAAM,CAAC;IAAA,OAAO,EAAC,MAAM,CAAA;CAAC,GAAC,IAAI,CA8D5D;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,kDAHW,MAAM,GACJ,OAAO,CAAC;IAAC,OAAO,EAAC,MAAM,GAAC,SAAS,CAAC;IAAC,QAAQ,EAAC,MAAM,GAAC,SAAS,CAAC;IAAC,IAAI,EAAC,MAAM,CAAA;CAAC,GAAC,SAAS,CAAC,CAgPjG;AAED;;;;GAIG;AACH,yCAFW,MAAM,QAoChB;AA3uCD,2CACE,qIAAqI,CAAC;AAExI,mDAWE"}
1
+ {"version":3,"file":"source.d.ts","sourceRoot":"","sources":["../../../lib/helpers/source.js"],"names":[],"mappings":"AA8FA;;;;;;;GAOG;AACH,yCALW,MAAM,EAAE,YAEhB;IAAkC,GAAG,EAA7B,MAAM,GAAC,SAAS;CACxB,GAAU,MAAM,CAuClB;AA+ED;;;;;;GAMG;AACH,mDAJW,MAAM,GAAC,SAAS,YAChB,MAAM,GACJ,MAAM,GAAC,SAAS,CA6I5B;AAED;;;;GAIG;AACH,uCAFa,MAAM,CASlB;AAkBD;;;;;GAKG;AACH,wCAHW,MAAM,GACJ,OAAO,CAWnB;AAkBD;;;;;GAKG;AACH,oCAHW,MAAM,GACJ,OAAO,CA+BnB;AAED;;;;;GAKG;AACH,iCAHW,MAAM,GACJ,OAAO,CAyBnB;AAED;;;;;GAKG;AACH,0CAHW,MAAM,GACJ,OAAO,CAInB;AAED;;;;;GAKG;AACH,0CAHW,MAAM,GACJ,OAAO,CAInB;AAED;;;;;GAKG;AACH,qDAHW,MAAM,GACJ,MAAM,GAAC,IAAI,CAgEvB;AAED;;;;;;GAMG;AACH,kCAJW,MAAM,WACN,MAAM,GAAC,MAAM,EAAE,GAAC,IAAI,GAClB,MAAM,CAyDlB;AAED;;;;;GAKG;AACH,oDAHW,MAAM,GAAC,SAAS,GACd,MAAM,GAAC,SAAS,CAgB5B;AAED;;;;;;GAMG;AACH,kDAJW,MAAM,kBACN,MAAM,GAAC,SAAS,GACd,MAAM,GAAC,SAAS,CA8D5B;AAED;;;;;;GAMG;AACH,mDAJW,MAAM,kBACN,MAAM,GAAC,SAAS,GACd,MAAM,GAAC,SAAS,CAiF5B;AAoHD;;;;;GAKG;AACH,+CAHW,MAAM,GACJ;IAAC,MAAM,EAAC,MAAM,CAAC;IAAA,KAAK,EAAC,MAAM,CAAC;IAAA,OAAO,EAAC,MAAM,CAAA;CAAC,GAAC,IAAI,CA8D5D;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,kDAHW,MAAM,GACJ,OAAO,CAAC;IAAC,OAAO,EAAC,MAAM,GAAC,SAAS,CAAC;IAAC,QAAQ,EAAC,MAAM,GAAC,SAAS,CAAC;IAAC,IAAI,EAAC,MAAM,CAAA;CAAC,GAAC,SAAS,CAAC,CAgPjG;AAED;;;;GAIG;AACH,yCAFW,MAAM,QAoChB;AAnwCD,2CACE,qIAAqI,CAAC;AAExI,mDAWE"}
@@ -1,3 +1,12 @@
1
+ export function isSensitiveEnvironmentVariableName(varName: any): boolean;
2
+ export function recordObservedActivity(kind: any, target: any, options?: {}): any;
3
+ export function recordDecisionActivity(target: any, options?: {}): any;
4
+ export function recordDiscoveryActivity(target: any, options?: {}): any;
5
+ export function recordPolicyActivity(target: any, options?: {}): any;
6
+ export function recordSymlinkResolution(sourcePath: any, resolvedPath: any, options?: {}): any;
7
+ export function recordEnvironmentRead(varName: any, options?: {}): any;
8
+ export function recordSensitiveFileRead(filePath: any, options?: {}): any;
9
+ export function readEnvironmentVariable(varName: any, options?: {}): any;
1
10
  export function setDryRunMode(enabled: any): void;
2
11
  export function createDryRunError(action: any, target: any, reason: any): Error;
3
12
  export function isDryRunError(error: any): boolean;
@@ -13,7 +22,7 @@ export function resetRecordedActivities(): void;
13
22
  * @Boolean True if the path exists. False otherwise
14
23
  */
15
24
  export function safeExistsSync(filePath: string): any;
16
- export function safeWriteSync(filePath: any, data: any, options: any): any;
25
+ export function safeWriteSync(filePath: any, data: any, options: any): undefined;
17
26
  /**
18
27
  * Safely create a directory without crashing due to a lack of permissions
19
28
  *
@@ -21,12 +30,12 @@ export function safeWriteSync(filePath: any, data: any, options: any): any;
21
30
  * @param options {Options} mkdir options
22
31
  * @Boolean True if the path exists. False otherwise
23
32
  */
24
- export function safeMkdirSync(filePath: string, options: Options): any;
33
+ export function safeMkdirSync(filePath: string, options: Options): undefined;
25
34
  export function safeMkdtempSync(prefix: any, options?: undefined): any;
26
- export function safeRmSync(filePath: any, options?: undefined): any;
27
- export function safeUnlinkSync(filePath: any): any;
35
+ export function safeRmSync(filePath: any, options?: undefined): undefined;
36
+ export function safeUnlinkSync(filePath: any): undefined;
28
37
  export function safeCopyFileSync(src: any, dest: any, mode?: undefined): any;
29
- export function safeExtractArchive(sourcePath: any, targetPath: any, extractor: any, kind?: string): Promise<boolean>;
38
+ export function safeExtractArchive(sourcePath: any, targetPath: any, extractor: any, kind?: string, options?: undefined): Promise<boolean>;
30
39
  /**
31
40
  * Safe wrapper around spawnSync that enforces permission checks, injects default
32
41
  * options (maxBuffer, encoding, timeout), warns about unsafe Python and pip/uv
@@ -89,6 +98,29 @@ export function isFeatureEnabled(cliOptions: Object, feature: string): boolean;
89
98
  * @param {Boolean} defaultStatus Default return value if there are no types provided
90
99
  */
91
100
  export function hasAnyProjectType(projectTypes: any[], options: Object, defaultStatus?: boolean): any;
101
+ /**
102
+ * Determine whether the predictive dependency audit should run for the current
103
+ * CLI invocation.
104
+ *
105
+ * OBOM-focused runs (`obom` or explicit `-t os` / OS aliases only) should keep
106
+ * the direct BOM audit findings but skip the predictive dependency audit.
107
+ *
108
+ * @param {object} options CLI options
109
+ * @param {string} [commandPath] Invoked command path or name
110
+ * @returns {boolean} True when predictive dependency audit should run
111
+ */
112
+ export function shouldRunPredictiveBomAudit(options: object, commandPath?: string): boolean;
113
+ /**
114
+ * Determine the default BOM audit categories for the current CLI invocation.
115
+ *
116
+ * OBOM-focused runs should default to the runtime-specific rule pack unless the
117
+ * user explicitly requests other categories.
118
+ *
119
+ * @param {object} options CLI options
120
+ * @param {string} [commandPath] Invoked command path or name
121
+ * @returns {string | undefined} Default category string, if any
122
+ */
123
+ export function getDefaultBomAuditCategories(options: object, commandPath?: string): string | undefined;
92
124
  /**
93
125
  * Convenient method to check if the given package manager is allowed.
94
126
  *
@@ -99,6 +131,7 @@ export function hasAnyProjectType(projectTypes: any[], options: Object, defaultS
99
131
  * @returns {Boolean} True if the package manager is allowed
100
132
  */
101
133
  export function isPackageManagerAllowed(name: string, conflictingManagers: any[], options: Object): boolean;
134
+ export function isAllowedHttpHost(hostname: any, allowedHostsEnv?: any): boolean;
102
135
  /**
103
136
  * Method to get files matching a pattern
104
137
  *
@@ -1334,7 +1367,7 @@ export function convertOSQueryResults(queryCategory: string, queryObj: Object, r
1334
1367
  description: any;
1335
1368
  publisher: any;
1336
1369
  "bom-ref": string;
1337
- purl: string;
1370
+ purl: string | undefined;
1338
1371
  scope: any;
1339
1372
  type: any;
1340
1373
  }[];
@@ -1948,9 +1981,10 @@ export function extractPathEnv(envValues: any): any;
1948
1981
  *
1949
1982
  * @param basePath Base directory
1950
1983
  * @param binPaths {Array[String]} Paths containing potential binaries
1984
+ * @param excludePaths {Array[String]} Container-relative paths that should be excluded from the result set
1951
1985
  * @return {Array[String]} List of executables
1952
1986
  */
1953
- export function collectExecutables(basePath: any, binPaths: any): any;
1987
+ export function collectExecutables(basePath: any, binPaths: any, excludePaths?: any): any;
1954
1988
  /**
1955
1989
  * Collect all shared library files from the given list of paths
1956
1990
  *
@@ -1958,10 +1992,11 @@ export function collectExecutables(basePath: any, binPaths: any): any;
1958
1992
  * @param libPaths {Array[String]} Paths containing potential libraries
1959
1993
  * @param ldConf {String} Config file used by ldconfig to locate additional paths
1960
1994
  * @param ldConfDirPattern {String} Config directory that can contain more .conf files for ldconfig
1995
+ * @param excludePaths {Array[String]} Container-relative paths that should be excluded from the result set
1961
1996
  *
1962
1997
  * @return {Array[String]} List of executables
1963
1998
  */
1964
- export function collectSharedLibs(basePath: any, libPaths: any, ldConf: string, ldConfDirPattern: string): any;
1999
+ export function collectSharedLibs(basePath: any, libPaths: any, ldConf: string, ldConfDirPattern: string, excludePaths?: any): any;
1965
2000
  /**
1966
2001
  * Get information about the runtime.
1967
2002
  *
@@ -2071,6 +2106,7 @@ export const PROJECT_TYPE_ALIASES: {
2071
2106
  c: string[];
2072
2107
  clojure: string[];
2073
2108
  github: string[];
2109
+ hbom: string[];
2074
2110
  os: string[];
2075
2111
  jenkins: string[];
2076
2112
  helm: string[];
@@ -2084,6 +2120,7 @@ export const PROJECT_TYPE_ALIASES: {
2084
2120
  scala: string[];
2085
2121
  nix: string[];
2086
2122
  caxa: string[];
2123
+ asar: string[];
2087
2124
  "vscode-extension": string[];
2088
2125
  "chrome-extension": string[];
2089
2126
  };