@cyclonedx/cdxgen 12.3.3 → 12.4.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +69 -25
- package/bin/audit.js +21 -7
- package/bin/cdxgen.js +270 -127
- package/bin/convert.js +34 -15
- package/bin/hbom.js +495 -0
- package/bin/repl.js +592 -37
- package/bin/validate.js +31 -4
- package/bin/verify.js +18 -5
- package/data/README.md +298 -25
- package/data/component-tags.json +6 -0
- package/data/crypto-oid.json +16 -0
- package/data/cyclonedx-2.0-bundled.schema.json +7182 -0
- package/data/predictive-audit-allowlist.json +11 -0
- package/data/queries-darwin.json +12 -1
- package/data/queries-win.json +7 -1
- package/data/queries.json +39 -2
- package/data/rules/ai-agent-governance.yaml +16 -0
- package/data/rules/asar-archives.yaml +150 -0
- package/data/rules/chrome-extensions.yaml +8 -0
- package/data/rules/ci-permissions.yaml +42 -18
- package/data/rules/container-risk.yaml +14 -7
- package/data/rules/dependency-sources.yaml +11 -0
- package/data/rules/hbom-compliance.yaml +325 -0
- package/data/rules/hbom-performance.yaml +307 -0
- package/data/rules/hbom-security.yaml +248 -0
- package/data/rules/host-topology.yaml +165 -0
- package/data/rules/mcp-servers.yaml +18 -3
- package/data/rules/obom-runtime.yaml +907 -22
- package/data/rules/package-integrity.yaml +14 -0
- package/data/rules/rootfs-hardening.yaml +179 -0
- package/data/rules/vscode-extensions.yaml +9 -0
- package/lib/audit/index.js +210 -8
- package/lib/audit/index.poku.js +332 -0
- package/lib/audit/reporters.js +222 -0
- package/lib/audit/targets.js +146 -1
- package/lib/audit/targets.poku.js +186 -0
- package/lib/cli/asar.poku.js +328 -0
- package/lib/cli/index.js +527 -99
- package/lib/cli/index.poku.js +1469 -212
- package/lib/evinser/evinser.js +14 -9
- package/lib/helpers/analyzer.js +1406 -29
- package/lib/helpers/analyzer.poku.js +342 -0
- package/lib/helpers/analyzerScope.js +712 -0
- package/lib/helpers/asarutils.js +1556 -0
- package/lib/helpers/asarutils.poku.js +443 -0
- package/lib/helpers/auditCategories.js +12 -0
- package/lib/helpers/auditCategories.poku.js +32 -0
- package/lib/helpers/bomUtils.js +155 -1
- package/lib/helpers/bomUtils.poku.js +79 -1
- package/lib/helpers/cbomutils.js +271 -1
- package/lib/helpers/cbomutils.poku.js +248 -5
- package/lib/helpers/display.js +291 -1
- package/lib/helpers/display.poku.js +149 -0
- package/lib/helpers/evidenceUtils.js +58 -0
- package/lib/helpers/evidenceUtils.poku.js +54 -0
- package/lib/helpers/exportUtils.js +9 -0
- package/lib/helpers/gtfobins.js +142 -8
- package/lib/helpers/gtfobins.poku.js +24 -1
- package/lib/helpers/hbom.js +710 -0
- package/lib/helpers/hbom.poku.js +496 -0
- package/lib/helpers/hbomAnalysis.js +268 -0
- package/lib/helpers/hbomAnalysis.poku.js +249 -0
- package/lib/helpers/hbomLoader.js +35 -0
- package/lib/helpers/hostTopology.js +803 -0
- package/lib/helpers/hostTopology.poku.js +363 -0
- package/lib/helpers/inventoryStats.js +69 -0
- package/lib/helpers/inventoryStats.poku.js +86 -0
- package/lib/helpers/lolbas.js +19 -1
- package/lib/helpers/lolbas.poku.js +23 -0
- package/lib/helpers/osqueryTransform.js +47 -0
- package/lib/helpers/osqueryTransform.poku.js +47 -0
- package/lib/helpers/plugins.js +350 -0
- package/lib/helpers/plugins.poku.js +57 -0
- package/lib/helpers/protobom.js +209 -45
- package/lib/helpers/protobom.poku.js +183 -5
- package/lib/helpers/protobomLoader.js +43 -0
- package/lib/helpers/protobomLoader.poku.js +31 -0
- package/lib/helpers/remote/dependency-track.js +36 -3
- package/lib/helpers/remote/dependency-track.poku.js +44 -0
- package/lib/helpers/source.js +24 -0
- package/lib/helpers/source.poku.js +32 -0
- package/lib/helpers/utils.js +1438 -93
- package/lib/helpers/utils.poku.js +846 -4
- package/lib/managers/binary.e2e.poku.js +367 -0
- package/lib/managers/binary.js +2293 -353
- package/lib/managers/binary.poku.js +1699 -1
- package/lib/managers/docker.js +201 -79
- package/lib/managers/docker.poku.js +337 -12
- package/lib/server/server.js +4 -28
- package/lib/stages/postgen/annotator.js +38 -0
- package/lib/stages/postgen/annotator.poku.js +107 -1
- package/lib/stages/postgen/auditBom.js +121 -18
- package/lib/stages/postgen/auditBom.poku.js +1366 -31
- package/lib/stages/postgen/hostTopologyAudit.poku.js +186 -0
- package/lib/stages/postgen/postgen.js +406 -8
- package/lib/stages/postgen/postgen.poku.js +484 -0
- package/lib/stages/postgen/ruleEngine.js +116 -0
- package/lib/stages/pregen/envAudit.js +14 -3
- package/lib/validator/bomValidator.js +90 -38
- package/lib/validator/bomValidator.poku.js +90 -0
- package/lib/validator/complianceRules.js +4 -2
- package/lib/validator/index.poku.js +14 -0
- package/package.json +23 -21
- package/types/bin/hbom.d.ts +3 -0
- package/types/bin/hbom.d.ts.map +1 -0
- package/types/bin/repl.d.ts +1 -1
- package/types/bin/repl.d.ts.map +1 -1
- package/types/lib/audit/index.d.ts +44 -0
- package/types/lib/audit/index.d.ts.map +1 -1
- package/types/lib/audit/reporters.d.ts +16 -0
- package/types/lib/audit/reporters.d.ts.map +1 -1
- package/types/lib/audit/targets.d.ts.map +1 -1
- package/types/lib/cli/index.d.ts +16 -0
- package/types/lib/cli/index.d.ts.map +1 -1
- package/types/lib/evinser/evinser.d.ts +4 -0
- package/types/lib/evinser/evinser.d.ts.map +1 -1
- package/types/lib/helpers/analyzer.d.ts +33 -0
- package/types/lib/helpers/analyzer.d.ts.map +1 -1
- package/types/lib/helpers/analyzerScope.d.ts +11 -0
- package/types/lib/helpers/analyzerScope.d.ts.map +1 -0
- package/types/lib/helpers/asarutils.d.ts +34 -0
- package/types/lib/helpers/asarutils.d.ts.map +1 -0
- package/types/lib/helpers/auditCategories.d.ts +5 -0
- package/types/lib/helpers/auditCategories.d.ts.map +1 -1
- package/types/lib/helpers/bomUtils.d.ts +10 -0
- package/types/lib/helpers/bomUtils.d.ts.map +1 -1
- package/types/lib/helpers/cbomutils.d.ts +3 -2
- package/types/lib/helpers/cbomutils.d.ts.map +1 -1
- package/types/lib/helpers/display.d.ts.map +1 -1
- package/types/lib/helpers/evidenceUtils.d.ts +8 -0
- package/types/lib/helpers/evidenceUtils.d.ts.map +1 -0
- package/types/lib/helpers/exportUtils.d.ts.map +1 -1
- package/types/lib/helpers/gtfobins.d.ts +8 -0
- package/types/lib/helpers/gtfobins.d.ts.map +1 -1
- package/types/lib/helpers/hbom.d.ts +49 -0
- package/types/lib/helpers/hbom.d.ts.map +1 -0
- package/types/lib/helpers/hbomAnalysis.d.ts +76 -0
- package/types/lib/helpers/hbomAnalysis.d.ts.map +1 -0
- package/types/lib/helpers/hbomLoader.d.ts +7 -0
- package/types/lib/helpers/hbomLoader.d.ts.map +1 -0
- package/types/lib/helpers/hostTopology.d.ts +12 -0
- package/types/lib/helpers/hostTopology.d.ts.map +1 -0
- package/types/lib/helpers/inventoryStats.d.ts +11 -0
- package/types/lib/helpers/inventoryStats.d.ts.map +1 -0
- package/types/lib/helpers/lolbas.d.ts.map +1 -1
- package/types/lib/helpers/osqueryTransform.d.ts +3 -0
- package/types/lib/helpers/osqueryTransform.d.ts.map +1 -1
- package/types/lib/helpers/plugins.d.ts +58 -0
- package/types/lib/helpers/plugins.d.ts.map +1 -0
- package/types/lib/helpers/protobom.d.ts +5 -4
- package/types/lib/helpers/protobom.d.ts.map +1 -1
- package/types/lib/helpers/protobomLoader.d.ts +17 -0
- package/types/lib/helpers/protobomLoader.d.ts.map +1 -0
- package/types/lib/helpers/remote/dependency-track.d.ts +10 -3
- package/types/lib/helpers/remote/dependency-track.d.ts.map +1 -1
- package/types/lib/helpers/source.d.ts.map +1 -1
- package/types/lib/helpers/utils.d.ts +45 -8
- package/types/lib/helpers/utils.d.ts.map +1 -1
- package/types/lib/managers/binary.d.ts +5 -0
- package/types/lib/managers/binary.d.ts.map +1 -1
- package/types/lib/managers/docker.d.ts.map +1 -1
- package/types/lib/server/server.d.ts +2 -1
- package/types/lib/server/server.d.ts.map +1 -1
- package/types/lib/stages/postgen/annotator.d.ts.map +1 -1
- package/types/lib/stages/postgen/auditBom.d.ts +26 -1
- package/types/lib/stages/postgen/auditBom.d.ts.map +1 -1
- package/types/lib/stages/postgen/postgen.d.ts +2 -1
- package/types/lib/stages/postgen/postgen.d.ts.map +1 -1
- package/types/lib/stages/postgen/ruleEngine.d.ts.map +1 -1
- package/types/lib/stages/pregen/envAudit.d.ts.map +1 -1
- package/types/lib/third-party/arborist/lib/node.d.ts +23 -0
- package/types/lib/third-party/arborist/lib/node.d.ts.map +1 -1
- package/types/lib/validator/bomValidator.d.ts.map +1 -1
- package/types/lib/validator/complianceRules.d.ts.map +1 -1
- package/data/spdx-model-v3.0.1.jsonld +0 -15999
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"analyzerScope.d.ts","sourceRoot":"","sources":["../../../lib/helpers/analyzerScope.js"],"names":[],"mappings":"AAmCO,sDAQN;AAEM,qDAKN;AAEM,2DAiBN;AAEM,sEAIN;AAEM,uEAGN;AAaM,kFAYN;AAmEM,qHAsFN;AAEM,gKAiPN;AAgEM,yNAmFN;AAEM,+JA6DN"}
|
|
@@ -0,0 +1,34 @@
|
|
|
1
|
+
export function readAsarArchiveHeaderSync(archivePath: any): {
|
|
2
|
+
archiveDataOffset: bigint;
|
|
3
|
+
header: any;
|
|
4
|
+
headerSize: any;
|
|
5
|
+
headerString: any;
|
|
6
|
+
};
|
|
7
|
+
export function listAsarEntries(archivePath: any): {
|
|
8
|
+
entries: any[];
|
|
9
|
+
archiveDataOffset: bigint;
|
|
10
|
+
header: any;
|
|
11
|
+
headerSize: any;
|
|
12
|
+
headerString: any;
|
|
13
|
+
};
|
|
14
|
+
export function rewriteExtractedArchivePaths(subject: any, extractedDir: any, archivePath: any): any;
|
|
15
|
+
/**
|
|
16
|
+
* Parse an Electron ASAR archive and emit inventory, metadata, and optional
|
|
17
|
+
* signing information.
|
|
18
|
+
*
|
|
19
|
+
* @param {string} archivePath Absolute or relative path to an ASAR archive
|
|
20
|
+
* @param {Object} [options={}] Parse options
|
|
21
|
+
* @param {string} [options.asarVirtualPath] Virtual archive identity to use in
|
|
22
|
+
* BOM references and evidence for nested ASAR recursion
|
|
23
|
+
* @param {number} [options.specVersion] CycloneDX spec version used to choose
|
|
24
|
+
* compatible component types
|
|
25
|
+
* @returns {Promise<Object>} Parsed archive analysis result
|
|
26
|
+
*/
|
|
27
|
+
export function parseAsarArchive(archivePath: string, options?: {
|
|
28
|
+
asarVirtualPath?: string | undefined;
|
|
29
|
+
specVersion?: number | undefined;
|
|
30
|
+
}): Promise<Object>;
|
|
31
|
+
export function extractAsarToTempDir(archivePath: any): Promise<any>;
|
|
32
|
+
export function cleanupAsarTempDir(tempDir: any): void;
|
|
33
|
+
export function buildAsarExtractionSummary(archiveAnalysis: any, extractionPerformed: any): any[];
|
|
34
|
+
//# sourceMappingURL=asarutils.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"asarutils.d.ts","sourceRoot":"","sources":["../../../lib/helpers/asarutils.js"],"names":[],"mappings":"AA+PA;;;;;EA+CC;AAED;;;;;;EAwCC;AAgYD,qGAmDC;AAyYD;;;;;;;;;;;GAWG;AACH,8CARW,MAAM,YAEd;IAAyB,eAAe;IAEf,WAAW;CAEpC,GAAU,OAAO,CAAC,MAAM,CAAC,CAyM3B;AAuGD,qEA6BC;AAED,uDAYC;AAED,kGAwBC"}
|
|
@@ -6,7 +6,12 @@ export function validateBomAuditCategories(categories: any, rules: any): {
|
|
|
6
6
|
expandedCategories: any[];
|
|
7
7
|
validCategories: any[];
|
|
8
8
|
};
|
|
9
|
+
export const HBOM_AUDIT_CATEGORIES: readonly string[];
|
|
10
|
+
export const HOST_TOPOLOGY_AUDIT_CATEGORIES: readonly string[];
|
|
11
|
+
export const DEFAULT_HBOM_AUDIT_CATEGORIES: string;
|
|
9
12
|
export const BOM_AUDIT_CATEGORY_ALIASES: Readonly<{
|
|
10
13
|
"ai-inventory": string[];
|
|
14
|
+
hbom: string[];
|
|
15
|
+
host: string[];
|
|
11
16
|
}>;
|
|
12
17
|
//# sourceMappingURL=auditCategories.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"auditCategories.d.ts","sourceRoot":"","sources":["../../../lib/helpers/auditCategories.js"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"auditCategories.d.ts","sourceRoot":"","sources":["../../../lib/helpers/auditCategories.js"],"names":[],"mappings":"AAoBA,oEAeC;AAED,iEAWC;AAED,+DAIC;AAUD;;;;EAuBC;AAvFD,sDAIG;AAEH,+DAA+E;AAE/E,mDAA6E;AAE7E;;;;GAIG"}
|
|
@@ -1,5 +1,15 @@
|
|
|
1
1
|
export function isSpdxJsonLd(bomJson: any): boolean;
|
|
2
|
+
export function normalizeCycloneDxSpecVersion(specVersion: any): number | undefined;
|
|
3
|
+
export function toCycloneDxSpecVersionString(specVersion: any): string | undefined;
|
|
4
|
+
export function isCycloneDxSpecVersionAtLeast(specVersion: any, minimumVersion: any): boolean;
|
|
5
|
+
export function isCycloneDx20SpecVersion(specVersion: any): boolean;
|
|
6
|
+
export function getCycloneDxRootFormatKey(specVersionOrBom: any): "specFormat" | "bomFormat";
|
|
7
|
+
export function getCycloneDxFormat(bomJson: any): any;
|
|
8
|
+
export function hasCycloneDxFormat(bomJson: any): boolean;
|
|
2
9
|
export function isCycloneDxBom(bomJson: any): boolean;
|
|
10
|
+
export function setCycloneDxFormat(bomJson: any, specVersion: any, { preserveLegacyBomFormat }?: {
|
|
11
|
+
preserveLegacyBomFormat?: boolean | undefined;
|
|
12
|
+
}): any;
|
|
3
13
|
export function detectBomFormat(bomJson: any): "unknown" | "cyclonedx" | "spdx";
|
|
4
14
|
export function getNonCycloneDxErrorMessage(bomJson: any, commandName?: string): string;
|
|
5
15
|
//# sourceMappingURL=bomUtils.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"bomUtils.d.ts","sourceRoot":"","sources":["../../../lib/helpers/bomUtils.js"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"bomUtils.d.ts","sourceRoot":"","sources":["../../../lib/helpers/bomUtils.js"],"names":[],"mappings":"AAQO,oDAKJ;AAEI,oFAGN;AAEM,mFAGN;AAEM,8FAWN;AAEM,oEACwC;AAExC,6FAQN;AAEM,sDACoC;AAEpC,0DAC2C;AAE3C,sDAE4D;AAE5D;;QA4BN;AAEM,gFAQN;AAEM,wFASN"}
|
|
@@ -5,11 +5,12 @@
|
|
|
5
5
|
* @returns osPkgsList Array of OS crypto packages
|
|
6
6
|
*/
|
|
7
7
|
export function collectOSCryptoLibs(options: Object): any[];
|
|
8
|
+
export function collectSourceCryptoComponents(src: any, options?: {}): Promise<any[]>;
|
|
8
9
|
/**
|
|
9
10
|
* Find crypto algorithm in the given code snippet
|
|
10
11
|
*
|
|
11
|
-
* @param {
|
|
12
|
+
* @param {string} code Code snippet
|
|
12
13
|
* @returns {Array} Arary of crypto algorithm objects with oid and description
|
|
13
14
|
*/
|
|
14
|
-
export function findCryptoAlgos(code:
|
|
15
|
+
export function findCryptoAlgos(code: string): any[];
|
|
15
16
|
//# sourceMappingURL=cbomutils.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"cbomutils.d.ts","sourceRoot":"","sources":["../../../lib/helpers/cbomutils.js"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"cbomutils.d.ts","sourceRoot":"","sources":["../../../lib/helpers/cbomutils.js"],"names":[],"mappings":"AAkBA;;;;;GAKG;AACH,6CAHW,MAAM,SA2BhB;AAiOD,sFA4CC;AAED;;;;;GAKG;AACH,sCAHW,MAAM,SAgBhB"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"display.d.ts","sourceRoot":"","sources":["../../../lib/helpers/display.js"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"display.d.ts","sourceRoot":"","sources":["../../../lib/helpers/display.js"],"names":[],"mappings":"AAmZA;;;;;;;;;EAoBC;AAED,wGA4BC;AA6BD;;;;;;;;;;GAUG;AACH,oCANW,MAAM,gBACN,MAAM,EAAE,cACR,MAAM,gBACN,MAAM,GACJ,IAAI,CA+EhB;AAQD;;;;;GAKG;AACH,sCAHW,MAAM,GACJ,IAAI,CAsBhB;AACD;;;;;;GAMG;AACH,uCAHW,MAAM,GACJ,IAAI,CAwBhB;AAED;;;;;GAKG;AACH,0CAHW,MAAM,GACJ,IAAI,CAuBhB;AA0BD;;;;;;GAMG;AACH,0CAHW,MAAM,GACJ,IAAI,CAwChB;AAED;;;;;;GAMG;AACH,wCAHW,MAAM,GACJ,IAAI,CA4ChB;AACD;;;;;;;;GAQG;AACH,6CALW,MAAM,SACN,MAAM,cACN,MAAM,GACJ,IAAI,CAoChB;AAoMD;;;;;;GAMG;AACH,gDAHW,MAAM,GACJ,IAAI,CAoChB;AAED;;;;;GAKG;AACH,sDAHW,MAAM,EAAE,GACN,IAAI,CA4BhB;AAED;;;;;;;GAOG;AACH,4CAHW,MAAM,GACJ,IAAI,CAsBhB;AAED;;;;;;GAMG;AACH,sCAHW,MAAM,GACJ,IAAI,CAkDhB;AAED,mEAiHC;AAgED;;;;;GAKG;AACH,iEAHW,eAAe,EAAE,GACf,IAAI,CA+BhB;AAED;;;;;;;;GAQG;AACH,iDALW,MAAM,UACN,MAAM,WACN,MAAM,oBACN,eAAe,EAAE,QAsU3B;AApnDM,gDANI,MAAM,eACN,MAAM,EAAE,GAAC,SAAS,eAClB,MAAM,GAAC,SAAS,6BAChB,MAAM,GACJ,MAAM,EAAE,CA2FpB;AAwNM,6DAHI,MAAM,EAAE,GACN,MAAM,EAAE,CAcpB;AAukBM,uDAJI,MAAM,EAAE,SACR,MAAM,GACJ,MAAM,EAAE,CAyCpB;8BA0RY;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAC"}
|
|
@@ -0,0 +1,8 @@
|
|
|
1
|
+
export function createOccurrenceEvidence(location: any, details?: {}): {
|
|
2
|
+
location: string;
|
|
3
|
+
} | undefined;
|
|
4
|
+
export function parseOccurrenceEvidenceLocation(location: any, details?: {}): {
|
|
5
|
+
location: string;
|
|
6
|
+
} | undefined;
|
|
7
|
+
export function formatOccurrenceEvidence(occurrence: any): any;
|
|
8
|
+
//# sourceMappingURL=evidenceUtils.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"evidenceUtils.d.ts","sourceRoot":"","sources":["../../../lib/helpers/evidenceUtils.js"],"names":[],"mappings":"AAAA;;cAcC;AAED;;cA4BC;AAED,+DAWC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"exportUtils.d.ts","sourceRoot":"","sources":["../../../lib/helpers/exportUtils.js"],"names":[],"mappings":"AAYA;;;;;GAKG;AACH,+CAHW,MAAM,GAAC,MAAM,EAAE,GAAC,SAAS,GAAC,IAAI,GAC5B,MAAM,EAAE,CAoBpB;AAED;;;;;GAKG;AACH,iDAHW,MAAM,GACJ,MAAM,
|
|
1
|
+
{"version":3,"file":"exportUtils.d.ts","sourceRoot":"","sources":["../../../lib/helpers/exportUtils.js"],"names":[],"mappings":"AAYA;;;;;GAKG;AACH,+CAHW,MAAM,GAAC,MAAM,EAAE,GAAC,SAAS,GAAC,IAAI,GAC5B,MAAM,EAAE,CAoBpB;AAED;;;;;GAKG;AACH,iDAHW,MAAM,GACJ,MAAM,CAyBlB;AAED;;;;;GAKG;AACH,sDAHW,MAAM,GACJ,MAAM,CAUlB;AAED;;;;;GAKG;AACH,0CAHW,MAAM,GACJ;IAAE,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,cAAc,EAAE,OAAO,CAAA;CAAE,CAgC9F;AAED;;;;;GAKG;AACH,+CAHW,MAAM,GACJ,MAAM,CAIlB"}
|
|
@@ -14,4 +14,12 @@ export function createGtfoBinsProperties(name: any, linkedName: any): {
|
|
|
14
14
|
name: string;
|
|
15
15
|
value: any;
|
|
16
16
|
}[];
|
|
17
|
+
/**
|
|
18
|
+
* Resolve GTFOBins properties for a live Linux osquery row.
|
|
19
|
+
*
|
|
20
|
+
* @param {string} queryCategory Osquery query category
|
|
21
|
+
* @param {object} row Osquery row
|
|
22
|
+
* @returns {Array<object>} CycloneDX custom properties
|
|
23
|
+
*/
|
|
24
|
+
export function createGtfoBinsPropertiesFromRow(queryCategory: string, row: object): Array<object>;
|
|
17
25
|
//# sourceMappingURL=gtfobins.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"gtfobins.d.ts","sourceRoot":"","sources":["../../../lib/helpers/gtfobins.js"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"gtfobins.d.ts","sourceRoot":"","sources":["../../../lib/helpers/gtfobins.js"],"names":[],"mappings":"AAwJA;;;;;;;;;;;cAsCC;AAED;;;IAiCC;AAED;;;;;;GAMG;AACH,+DAJW,MAAM,OACN,MAAM,GACJ,KAAK,CAAC,MAAM,CAAC,CA0FzB"}
|
|
@@ -0,0 +1,49 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Determine whether the supplied project types include HBOM.
|
|
3
|
+
*
|
|
4
|
+
* @param {string|string[]|undefined|null} projectTypes Project types.
|
|
5
|
+
* @returns {boolean} True when HBOM is requested.
|
|
6
|
+
*/
|
|
7
|
+
export function hasHbomProjectType(projectTypes: string | string[] | undefined | null): boolean;
|
|
8
|
+
/**
|
|
9
|
+
* Determine whether the supplied project types are exclusively HBOM-oriented.
|
|
10
|
+
*
|
|
11
|
+
* @param {string|string[]|undefined|null} projectTypes Project types.
|
|
12
|
+
* @returns {boolean} True when at least one project type is supplied and all are HBOM-oriented.
|
|
13
|
+
*/
|
|
14
|
+
export function isHbomOnlyProjectTypes(projectTypes: string | string[] | undefined | null): boolean;
|
|
15
|
+
/**
|
|
16
|
+
* Reject mixed HBOM and non-HBOM project types.
|
|
17
|
+
*
|
|
18
|
+
* @param {string|string[]|undefined|null} projectTypes Project types.
|
|
19
|
+
*/
|
|
20
|
+
export function ensureNoMixedHbomProjectTypes(projectTypes: string | string[] | undefined | null): void;
|
|
21
|
+
/**
|
|
22
|
+
* Ensure HBOM generation uses the supported CycloneDX version.
|
|
23
|
+
*
|
|
24
|
+
* @param {number|string|undefined|null} specVersion Requested spec version.
|
|
25
|
+
*/
|
|
26
|
+
export function ensureSupportedHbomSpecVersion(specVersion: number | string | undefined | null): void;
|
|
27
|
+
/**
|
|
28
|
+
* Ensure merged HBOM + runtime collection has access to osquery.
|
|
29
|
+
*
|
|
30
|
+
* @param {object} [options={}] CLI options.
|
|
31
|
+
* @param {string} [commandName="hbom"] Invoked command name for tailored guidance.
|
|
32
|
+
*/
|
|
33
|
+
export function ensureHbomRuntimeSupport(options?: object, commandName?: string): void;
|
|
34
|
+
/**
|
|
35
|
+
* Translate cdxgen CLI options to cdx-hbom collector options.
|
|
36
|
+
*
|
|
37
|
+
* @param {object} [options={}] CLI options.
|
|
38
|
+
* @returns {object} cdx-hbom collector options.
|
|
39
|
+
*/
|
|
40
|
+
export function normalizeHbomOptions(options?: object): object;
|
|
41
|
+
export function addHbomAnalysisProperties(bomJson: any): any;
|
|
42
|
+
/**
|
|
43
|
+
* Generate an HBOM using the optional cdx-hbom package.
|
|
44
|
+
*
|
|
45
|
+
* @param {object} [options={}] CLI options.
|
|
46
|
+
* @returns {Promise<object>} CycloneDX HBOM document.
|
|
47
|
+
*/
|
|
48
|
+
export function createHbomDocument(options?: object): Promise<object>;
|
|
49
|
+
//# sourceMappingURL=hbom.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"hbom.d.ts","sourceRoot":"","sources":["../../../lib/helpers/hbom.js"],"names":[],"mappings":"AAwSA;;;;;GAKG;AACH,iDAHW,MAAM,GAAC,MAAM,EAAE,GAAC,SAAS,GAAC,IAAI,GAC5B,OAAO,CAMnB;AAED;;;;;GAKG;AACH,qDAHW,MAAM,GAAC,MAAM,EAAE,GAAC,SAAS,GAAC,IAAI,GAC5B,OAAO,CAUnB;AAED;;;;GAIG;AACH,4DAFW,MAAM,GAAC,MAAM,EAAE,GAAC,SAAS,GAAC,IAAI,QAkBxC;AAED;;;;GAIG;AACH,4DAFW,MAAM,GAAC,MAAM,GAAC,SAAS,GAAC,IAAI,QAStC;AAED;;;;;GAKG;AACH,mDAHW,MAAM,gBACN,MAAM,QAqBhB;AAED;;;;;GAKG;AACH,+CAHW,MAAM,GACJ,MAAM,CA2BlB;AA8GD,6DA4HC;AAED;;;;;GAKG;AACH,6CAHW,MAAM,GACJ,OAAO,CAAC,MAAM,CAAC,CAiC3B"}
|
|
@@ -0,0 +1,76 @@
|
|
|
1
|
+
export function getHbomCommandDiagnostics(bomJson: any): any;
|
|
2
|
+
export function getHbomCommandDiagnosticSummary(bomJson: any): {
|
|
3
|
+
actionableDiagnosticCount: any;
|
|
4
|
+
commandDiagnosticCount: any;
|
|
5
|
+
commandDiagnostics: any;
|
|
6
|
+
commandErrorCount: any;
|
|
7
|
+
commandErrorIds: string[];
|
|
8
|
+
diagnosticIssues: string[];
|
|
9
|
+
installHintCount: number;
|
|
10
|
+
installHints: string[];
|
|
11
|
+
missingCommandCount: any;
|
|
12
|
+
missingCommandIds: string[];
|
|
13
|
+
missingCommands: string[];
|
|
14
|
+
partialSupportCount: any;
|
|
15
|
+
partialSupportIds: string[];
|
|
16
|
+
permissionDeniedCommands: string[];
|
|
17
|
+
permissionDeniedCount: any;
|
|
18
|
+
permissionDeniedIds: string[];
|
|
19
|
+
privilegeHintCount: number;
|
|
20
|
+
privilegeHints: string[];
|
|
21
|
+
requiresPrivilegedEnrichment: boolean;
|
|
22
|
+
timeoutIds: string[];
|
|
23
|
+
timeoutCount: any;
|
|
24
|
+
};
|
|
25
|
+
export function isHbomLikeBom(bomJson: any): any;
|
|
26
|
+
export function getHbomHardwareClass(component: any): any;
|
|
27
|
+
export function getHbomHardwareClassCounts(components?: any[]): {
|
|
28
|
+
hardwareClass: any;
|
|
29
|
+
count: any;
|
|
30
|
+
}[];
|
|
31
|
+
export function formatHbomHardwareClassSummary(hardwareClassCounts?: any[]): string;
|
|
32
|
+
export function getHbomSummary(bomJson: any): {
|
|
33
|
+
actionableDiagnosticCount: any;
|
|
34
|
+
architecture: any;
|
|
35
|
+
collectorProfile: any;
|
|
36
|
+
commandDiagnosticCount: any;
|
|
37
|
+
commandDiagnostics: any;
|
|
38
|
+
commandErrorCount: any;
|
|
39
|
+
commandErrorIds: string[];
|
|
40
|
+
componentCount: any;
|
|
41
|
+
diagnosticIssues: string[];
|
|
42
|
+
evidenceCommandCount: any;
|
|
43
|
+
evidenceCommands: any;
|
|
44
|
+
evidenceFileCount: any;
|
|
45
|
+
evidenceFiles: any;
|
|
46
|
+
hardwareClassCount: number;
|
|
47
|
+
hardwareClassCounts: {
|
|
48
|
+
hardwareClass: any;
|
|
49
|
+
count: any;
|
|
50
|
+
}[];
|
|
51
|
+
identifierPolicy: any;
|
|
52
|
+
installHintCount: number;
|
|
53
|
+
installHints: string[];
|
|
54
|
+
manufacturer: any;
|
|
55
|
+
metadataName: any;
|
|
56
|
+
metadataType: any;
|
|
57
|
+
missingCommandCount: any;
|
|
58
|
+
missingCommandIds: string[];
|
|
59
|
+
missingCommands: string[];
|
|
60
|
+
partialSupportCount: any;
|
|
61
|
+
partialSupportIds: string[];
|
|
62
|
+
platform: any;
|
|
63
|
+
permissionDeniedCommands: string[];
|
|
64
|
+
permissionDeniedCount: any;
|
|
65
|
+
permissionDeniedIds: string[];
|
|
66
|
+
privilegeHintCount: number;
|
|
67
|
+
privilegeHints: string[];
|
|
68
|
+
requiresPrivilegedEnrichment: boolean;
|
|
69
|
+
timeoutIds: string[];
|
|
70
|
+
timeoutCount: any;
|
|
71
|
+
topHardwareClasses: {
|
|
72
|
+
hardwareClass: any;
|
|
73
|
+
count: any;
|
|
74
|
+
}[];
|
|
75
|
+
};
|
|
76
|
+
//# sourceMappingURL=hbomAnalysis.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"hbomAnalysis.d.ts","sourceRoot":"","sources":["../../../lib/helpers/hbomAnalysis.js"],"names":[],"mappings":"AAoDA,6DAIC;AAED;;;;;;;;;;;;;;;;;;;;;;EAqEC;AAED,iDA2BC;AAED,0DAEC;AAED;;;IAgBC;AAED,oFAKC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAgFC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"hbomLoader.d.ts","sourceRoot":"","sources":["../../../lib/helpers/hbomLoader.js"],"names":[],"mappings":"AAUA;;;;GAIG;AACH,oCAFa,OAAO,CAAC,MAAM,CAAC,CAqB3B"}
|
|
@@ -0,0 +1,12 @@
|
|
|
1
|
+
export function isMergedHostViewBom(bomJson: any): any;
|
|
2
|
+
export function getHostViewSummary(bomJson: any): {
|
|
3
|
+
linkedHardwareComponentCount: number;
|
|
4
|
+
linkedRuntimeCategories: any;
|
|
5
|
+
mode: any;
|
|
6
|
+
runtimeAnchorCount: number;
|
|
7
|
+
runtimeComponentCount: number;
|
|
8
|
+
topologyLinkCount: number;
|
|
9
|
+
};
|
|
10
|
+
export function applyHostInventoryTopology(bomJson: any): any;
|
|
11
|
+
export function mergeHostInventoryBoms(hbomJson: any, obomData: any): any;
|
|
12
|
+
//# sourceMappingURL=hostTopology.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"hostTopology.d.ts","sourceRoot":"","sources":["../../../lib/helpers/hostTopology.js"],"names":[],"mappings":"AA2mBA,uDAQC;AAED;;;;;;;EAwBC;AAYD,8DA+EC;AAED,0EAwDC"}
|
|
@@ -0,0 +1,11 @@
|
|
|
1
|
+
export function getPropertyValue(propertiesOrObject: any, propertyName: any): any;
|
|
2
|
+
export function getUnpackagedExecutableComponents(components?: any[]): any[];
|
|
3
|
+
export function getUnpackagedSharedLibraryComponents(components?: any[]): any[];
|
|
4
|
+
export function getSourceDerivedCryptoComponents(components?: any[]): any[];
|
|
5
|
+
export function getContainerFileInventoryStats(components?: any[]): {
|
|
6
|
+
unpackagedExecutables: any[];
|
|
7
|
+
unpackagedSharedLibraries: any[];
|
|
8
|
+
unpackagedExecutableCount: number;
|
|
9
|
+
unpackagedSharedLibraryCount: number;
|
|
10
|
+
};
|
|
11
|
+
//# sourceMappingURL=inventoryStats.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"inventoryStats.d.ts","sourceRoot":"","sources":["../../../lib/helpers/inventoryStats.js"],"names":[],"mappings":"AAUA,kFAIC;AAkBD,6EAMC;AAED,gFAMC;AAED,4EAQC;AAED;;;;;EAUC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"lolbas.d.ts","sourceRoot":"","sources":["../../../lib/helpers/lolbas.js"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"lolbas.d.ts","sourceRoot":"","sources":["../../../lib/helpers/lolbas.js"],"names":[],"mappings":"AA2JA;;;;;GAKG;AACH,6CAHW,MAAM,GACJ,MAAM,GAAC,SAAS,CAqB5B;AAED;;;;;;GAMG;AACH,sDAJW,MAAM,OACN,MAAM,GACJ,KAAK,CAAC,MAAM,CAAC,CAiGzB"}
|
|
@@ -3,5 +3,8 @@ export function deriveOsQueryName(res: any, singleResult: any, queryName: any):
|
|
|
3
3
|
export function deriveOsQueryPublisher(res: any): any;
|
|
4
4
|
export function deriveOsQueryDescription(res: any): any;
|
|
5
5
|
export function sanitizeOsQueryIdentity(value: any): string;
|
|
6
|
+
export function sanitizeOsQueryBomRefValue(value: any, fallback?: string): string;
|
|
7
|
+
export function createOsQueryFallbackBomRef(queryCategory: any, componentType: any, name: any, version: any, identityField: any, identityValue: any): string;
|
|
8
|
+
export function shouldCreateOsQueryPurl(componentType: any): boolean;
|
|
6
9
|
export function createOsQueryPurl(purlType: any, group: any, name: any, version: any, qualifiers: any, subpath: any): string;
|
|
7
10
|
//# sourceMappingURL=osqueryTransform.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"osqueryTransform.d.ts","sourceRoot":"","sources":["../../../lib/helpers/osqueryTransform.js"],"names":[],"mappings":"AAEA,oDAWC;AAED,oFAgBC;AAED,sDASC;AAED,wDAaC;AAED,4DAMC;AAED,6HAgBC"}
|
|
1
|
+
{"version":3,"file":"osqueryTransform.d.ts","sourceRoot":"","sources":["../../../lib/helpers/osqueryTransform.js"],"names":[],"mappings":"AAEA,oDAWC;AAED,oFAgBC;AAED,sDASC;AAED,wDAaC;AAED,4DAMC;AAED,kFASC;AAED,6JA4BC;AAED,qEAIC;AAED,6HAgBC"}
|
|
@@ -0,0 +1,58 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Determine the normalized plugin target tuple for the current runtime.
|
|
3
|
+
*
|
|
4
|
+
* @returns {{arch: string, extn: string, platform: string, pluginsBinSuffix: string}}
|
|
5
|
+
*/
|
|
6
|
+
export function getPluginsBinTarget(): {
|
|
7
|
+
arch: string;
|
|
8
|
+
extn: string;
|
|
9
|
+
platform: string;
|
|
10
|
+
pluginsBinSuffix: string;
|
|
11
|
+
};
|
|
12
|
+
/**
|
|
13
|
+
* Resolve the cdxgen companion plugins directory for the current runtime.
|
|
14
|
+
*
|
|
15
|
+
* @returns {{
|
|
16
|
+
* arch: string,
|
|
17
|
+
* extn: string,
|
|
18
|
+
* extraNMBinPath: string|undefined,
|
|
19
|
+
* platform: string,
|
|
20
|
+
* pluginManifestFile: string|undefined,
|
|
21
|
+
* pluginVersion: string|undefined,
|
|
22
|
+
* pluginsBinSuffix: string,
|
|
23
|
+
* pluginsDir: string,
|
|
24
|
+
* }}
|
|
25
|
+
*/
|
|
26
|
+
export function resolveCdxgenPlugins(): {
|
|
27
|
+
arch: string;
|
|
28
|
+
extn: string;
|
|
29
|
+
extraNMBinPath: string | undefined;
|
|
30
|
+
platform: string;
|
|
31
|
+
pluginManifestFile: string | undefined;
|
|
32
|
+
pluginVersion: string | undefined;
|
|
33
|
+
pluginsBinSuffix: string;
|
|
34
|
+
pluginsDir: string;
|
|
35
|
+
};
|
|
36
|
+
/**
|
|
37
|
+
* Retrieve the default plugin runtime, recomputing it only when the
|
|
38
|
+
* environment that influences plugin discovery changes.
|
|
39
|
+
*
|
|
40
|
+
* @returns {ReturnType<typeof resolveCdxgenPlugins>} The resolved plugin runtime.
|
|
41
|
+
*/
|
|
42
|
+
export function getDefaultPluginRuntime(): ReturnType<typeof resolveCdxgenPlugins>;
|
|
43
|
+
/**
|
|
44
|
+
* Add the detected node_modules binary directory to PATH when present.
|
|
45
|
+
*
|
|
46
|
+
* @param {ReturnType<typeof resolveCdxgenPlugins>} [pluginRuntime] Detected plugin runtime.
|
|
47
|
+
* @returns {ReturnType<typeof resolveCdxgenPlugins>} The resolved plugin runtime.
|
|
48
|
+
*/
|
|
49
|
+
export function setPluginsPathEnv(pluginRuntime?: ReturnType<typeof resolveCdxgenPlugins>): ReturnType<typeof resolveCdxgenPlugins>;
|
|
50
|
+
/**
|
|
51
|
+
* Resolve a known plugin binary path, honoring explicit environment overrides.
|
|
52
|
+
*
|
|
53
|
+
* @param {string} toolName Tool identifier.
|
|
54
|
+
* @param {ReturnType<typeof resolveCdxgenPlugins>} [pluginRuntime] Detected plugin runtime.
|
|
55
|
+
* @returns {string|undefined} Resolved binary path or configured override.
|
|
56
|
+
*/
|
|
57
|
+
export function resolvePluginBinary(toolName: string, pluginRuntime?: ReturnType<typeof resolveCdxgenPlugins>): string | undefined;
|
|
58
|
+
//# sourceMappingURL=plugins.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"plugins.d.ts","sourceRoot":"","sources":["../../../lib/helpers/plugins.js"],"names":[],"mappings":"AAyCA;;;;GAIG;AACH,uCAFa;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,gBAAgB,EAAE,MAAM,CAAA;CAAC,CAgCpF;AAED;;;;;;;;;;;;;GAaG;AACH,wCAXa;IACR,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,MAAM,GAAC,SAAS,CAAC;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB,EAAE,MAAM,GAAC,SAAS,CAAC;IACrC,aAAa,EAAE,MAAM,GAAC,SAAS,CAAC;IAChC,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;CACpB,CAuJH;AAYD;;;;;GAKG;AACH,2CAFa,UAAU,CAAC,OAAO,oBAAoB,CAAC,CASnD;AAED;;;;;GAKG;AACH,kDAHW,UAAU,CAAC,OAAO,oBAAoB,CAAC,GACrC,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAWnD;AAoDD;;;;;;GAMG;AACH,8CAJW,MAAM,kBACN,UAAU,CAAC,OAAO,oBAAoB,CAAC,GACrC,MAAM,GAAC,SAAS,CAS5B"}
|
|
@@ -1,5 +1,6 @@
|
|
|
1
|
-
export function
|
|
2
|
-
export function
|
|
3
|
-
|
|
4
|
-
|
|
1
|
+
export function isProtoSupportedSpecVersion(specVersion: any): boolean;
|
|
2
|
+
export function assertProtoSupportedSpecVersion(specVersion: any, operation?: string): void;
|
|
3
|
+
export function isProtoBomFile(filePath: string): boolean;
|
|
4
|
+
export function writeBinary(bomJson: string | Object, binFile: string, specVersion?: string | number): void;
|
|
5
|
+
export function readBinary(binFile: string, asJson: boolean, specVersion?: string | number): any;
|
|
5
6
|
//# sourceMappingURL=protobom.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"protobom.d.ts","sourceRoot":"","sources":["../../../lib/helpers/protobom.js"],"names":[],"mappings":"AA+
|
|
1
|
+
{"version":3,"file":"protobom.d.ts","sourceRoot":"","sources":["../../../lib/helpers/protobom.js"],"names":[],"mappings":"AA+DO,uEASN;AAEM,4FAeN;AA0GM,yCAHI,MAAM,GACJ,OAAO,CAOnB;AASM,qCAJI,MAAM,GAAG,MAAM,WACf,MAAM,gBACN,MAAM,GAAG,MAAM,QAWzB;AASM,oCAJI,MAAM,UACN,OAAO,gBACP,MAAM,GAAG,MAAM,OAiBzB"}
|
|
@@ -0,0 +1,17 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Determine whether a path looks like a CycloneDX protobuf BOM file.
|
|
3
|
+
*
|
|
4
|
+
* @param {string} filePath File path
|
|
5
|
+
* @returns {boolean} true when the path uses a protobuf BOM extension
|
|
6
|
+
*/
|
|
7
|
+
export function isProtoBomPath(filePath: string): boolean;
|
|
8
|
+
/**
|
|
9
|
+
* Import protobuf BOM helpers and replace optional-dependency loader failures
|
|
10
|
+
* with actionable command-specific messages.
|
|
11
|
+
*
|
|
12
|
+
* @param {string} [commandName="cdxgen"] CLI command name
|
|
13
|
+
* @param {string} [featureDescription="protobuf support"] Feature being used
|
|
14
|
+
* @returns {Promise<object>} Loaded protobom module namespace
|
|
15
|
+
*/
|
|
16
|
+
export function importProtobomModule(commandName?: string, featureDescription?: string): Promise<object>;
|
|
17
|
+
//# sourceMappingURL=protobomLoader.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"protobomLoader.d.ts","sourceRoot":"","sources":["../../../lib/helpers/protobomLoader.js"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,yCAHW,MAAM,GACJ,OAAO,CAOnB;AAED;;;;;;;GAOG;AACH,mDAJW,MAAM,uBACN,MAAM,GACJ,OAAO,CAAC,MAAM,CAAC,CAqB3B"}
|
|
@@ -1,10 +1,17 @@
|
|
|
1
1
|
/**
|
|
2
|
-
* Returns the Dependency-Track BOM API URL.
|
|
2
|
+
* Returns the Dependency-Track BOM API URL as a sanitized URL object.
|
|
3
3
|
*
|
|
4
4
|
* @param {string} serverUrl Dependency-Track server URL
|
|
5
|
-
* @returns {
|
|
5
|
+
* @returns {URL | undefined} API URL to submit BOM payload
|
|
6
6
|
*/
|
|
7
|
-
export function
|
|
7
|
+
export function getDependencyTrackBomApiUrl(serverUrl: string): URL | undefined;
|
|
8
|
+
/**
|
|
9
|
+
* Returns the Dependency-Track BOM API URL string.
|
|
10
|
+
*
|
|
11
|
+
* @param {string} serverUrl Dependency-Track server URL
|
|
12
|
+
* @returns {string | undefined} API URL to submit BOM payload
|
|
13
|
+
*/
|
|
14
|
+
export function getDependencyTrackBomUrl(serverUrl: string): string | undefined;
|
|
8
15
|
/**
|
|
9
16
|
* Build the payload for Dependency-Track BOM submission.
|
|
10
17
|
*
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"dependency-track.d.ts","sourceRoot":"","sources":["../../../../lib/helpers/remote/dependency-track.js"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"dependency-track.d.ts","sourceRoot":"","sources":["../../../../lib/helpers/remote/dependency-track.js"],"names":[],"mappings":"AAIA;;;;;GAKG;AACH,uDAHW,MAAM,GACJ,GAAG,GAAG,SAAS,CAyB3B;AAED;;;;;GAKG;AACH,oDAHW,MAAM,GACJ,MAAM,GAAG,SAAS,CAI9B;AAED;;;;;;GAMG;AACH,qDAJW,MAAM,eACN,MAAM,GACJ,MAAM,GAAG,SAAS,CAkE9B"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"source.d.ts","sourceRoot":"","sources":["../../../lib/helpers/source.js"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"source.d.ts","sourceRoot":"","sources":["../../../lib/helpers/source.js"],"names":[],"mappings":"AA8FA;;;;;;;GAOG;AACH,yCALW,MAAM,EAAE,YAEhB;IAAkC,GAAG,EAA7B,MAAM,GAAC,SAAS;CACxB,GAAU,MAAM,CAuClB;AA+ED;;;;;;GAMG;AACH,mDAJW,MAAM,GAAC,SAAS,YAChB,MAAM,GACJ,MAAM,GAAC,SAAS,CA6I5B;AAED;;;;GAIG;AACH,uCAFa,MAAM,CASlB;AAkBD;;;;;GAKG;AACH,wCAHW,MAAM,GACJ,OAAO,CAWnB;AAkBD;;;;;GAKG;AACH,oCAHW,MAAM,GACJ,OAAO,CA+BnB;AAED;;;;;GAKG;AACH,iCAHW,MAAM,GACJ,OAAO,CAyBnB;AAED;;;;;GAKG;AACH,0CAHW,MAAM,GACJ,OAAO,CAInB;AAED;;;;;GAKG;AACH,0CAHW,MAAM,GACJ,OAAO,CAInB;AAED;;;;;GAKG;AACH,qDAHW,MAAM,GACJ,MAAM,GAAC,IAAI,CAgEvB;AAED;;;;;;GAMG;AACH,kCAJW,MAAM,WACN,MAAM,GAAC,MAAM,EAAE,GAAC,IAAI,GAClB,MAAM,CAyDlB;AAED;;;;;GAKG;AACH,oDAHW,MAAM,GAAC,SAAS,GACd,MAAM,GAAC,SAAS,CAgB5B;AAED;;;;;;GAMG;AACH,kDAJW,MAAM,kBACN,MAAM,GAAC,SAAS,GACd,MAAM,GAAC,SAAS,CA8D5B;AAED;;;;;;GAMG;AACH,mDAJW,MAAM,kBACN,MAAM,GAAC,SAAS,GACd,MAAM,GAAC,SAAS,CAiF5B;AAoHD;;;;;GAKG;AACH,+CAHW,MAAM,GACJ;IAAC,MAAM,EAAC,MAAM,CAAC;IAAA,KAAK,EAAC,MAAM,CAAC;IAAA,OAAO,EAAC,MAAM,CAAA;CAAC,GAAC,IAAI,CA8D5D;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,kDAHW,MAAM,GACJ,OAAO,CAAC;IAAC,OAAO,EAAC,MAAM,GAAC,SAAS,CAAC;IAAC,QAAQ,EAAC,MAAM,GAAC,SAAS,CAAC;IAAC,IAAI,EAAC,MAAM,CAAA;CAAC,GAAC,SAAS,CAAC,CAgPjG;AAED;;;;GAIG;AACH,yCAFW,MAAM,QAoChB;AAnwCD,2CACE,qIAAqI,CAAC;AAExI,mDAWE"}
|
|
@@ -1,3 +1,12 @@
|
|
|
1
|
+
export function isSensitiveEnvironmentVariableName(varName: any): boolean;
|
|
2
|
+
export function recordObservedActivity(kind: any, target: any, options?: {}): any;
|
|
3
|
+
export function recordDecisionActivity(target: any, options?: {}): any;
|
|
4
|
+
export function recordDiscoveryActivity(target: any, options?: {}): any;
|
|
5
|
+
export function recordPolicyActivity(target: any, options?: {}): any;
|
|
6
|
+
export function recordSymlinkResolution(sourcePath: any, resolvedPath: any, options?: {}): any;
|
|
7
|
+
export function recordEnvironmentRead(varName: any, options?: {}): any;
|
|
8
|
+
export function recordSensitiveFileRead(filePath: any, options?: {}): any;
|
|
9
|
+
export function readEnvironmentVariable(varName: any, options?: {}): any;
|
|
1
10
|
export function setDryRunMode(enabled: any): void;
|
|
2
11
|
export function createDryRunError(action: any, target: any, reason: any): Error;
|
|
3
12
|
export function isDryRunError(error: any): boolean;
|
|
@@ -13,7 +22,7 @@ export function resetRecordedActivities(): void;
|
|
|
13
22
|
* @Boolean True if the path exists. False otherwise
|
|
14
23
|
*/
|
|
15
24
|
export function safeExistsSync(filePath: string): any;
|
|
16
|
-
export function safeWriteSync(filePath: any, data: any, options: any):
|
|
25
|
+
export function safeWriteSync(filePath: any, data: any, options: any): undefined;
|
|
17
26
|
/**
|
|
18
27
|
* Safely create a directory without crashing due to a lack of permissions
|
|
19
28
|
*
|
|
@@ -21,12 +30,12 @@ export function safeWriteSync(filePath: any, data: any, options: any): any;
|
|
|
21
30
|
* @param options {Options} mkdir options
|
|
22
31
|
* @Boolean True if the path exists. False otherwise
|
|
23
32
|
*/
|
|
24
|
-
export function safeMkdirSync(filePath: string, options: Options):
|
|
33
|
+
export function safeMkdirSync(filePath: string, options: Options): undefined;
|
|
25
34
|
export function safeMkdtempSync(prefix: any, options?: undefined): any;
|
|
26
|
-
export function safeRmSync(filePath: any, options?: undefined):
|
|
27
|
-
export function safeUnlinkSync(filePath: any):
|
|
35
|
+
export function safeRmSync(filePath: any, options?: undefined): undefined;
|
|
36
|
+
export function safeUnlinkSync(filePath: any): undefined;
|
|
28
37
|
export function safeCopyFileSync(src: any, dest: any, mode?: undefined): any;
|
|
29
|
-
export function safeExtractArchive(sourcePath: any, targetPath: any, extractor: any, kind?: string): Promise<boolean>;
|
|
38
|
+
export function safeExtractArchive(sourcePath: any, targetPath: any, extractor: any, kind?: string, options?: undefined): Promise<boolean>;
|
|
30
39
|
/**
|
|
31
40
|
* Safe wrapper around spawnSync that enforces permission checks, injects default
|
|
32
41
|
* options (maxBuffer, encoding, timeout), warns about unsafe Python and pip/uv
|
|
@@ -89,6 +98,29 @@ export function isFeatureEnabled(cliOptions: Object, feature: string): boolean;
|
|
|
89
98
|
* @param {Boolean} defaultStatus Default return value if there are no types provided
|
|
90
99
|
*/
|
|
91
100
|
export function hasAnyProjectType(projectTypes: any[], options: Object, defaultStatus?: boolean): any;
|
|
101
|
+
/**
|
|
102
|
+
* Determine whether the predictive dependency audit should run for the current
|
|
103
|
+
* CLI invocation.
|
|
104
|
+
*
|
|
105
|
+
* OBOM-focused runs (`obom` or explicit `-t os` / OS aliases only) should keep
|
|
106
|
+
* the direct BOM audit findings but skip the predictive dependency audit.
|
|
107
|
+
*
|
|
108
|
+
* @param {object} options CLI options
|
|
109
|
+
* @param {string} [commandPath] Invoked command path or name
|
|
110
|
+
* @returns {boolean} True when predictive dependency audit should run
|
|
111
|
+
*/
|
|
112
|
+
export function shouldRunPredictiveBomAudit(options: object, commandPath?: string): boolean;
|
|
113
|
+
/**
|
|
114
|
+
* Determine the default BOM audit categories for the current CLI invocation.
|
|
115
|
+
*
|
|
116
|
+
* OBOM-focused runs should default to the runtime-specific rule pack unless the
|
|
117
|
+
* user explicitly requests other categories.
|
|
118
|
+
*
|
|
119
|
+
* @param {object} options CLI options
|
|
120
|
+
* @param {string} [commandPath] Invoked command path or name
|
|
121
|
+
* @returns {string | undefined} Default category string, if any
|
|
122
|
+
*/
|
|
123
|
+
export function getDefaultBomAuditCategories(options: object, commandPath?: string): string | undefined;
|
|
92
124
|
/**
|
|
93
125
|
* Convenient method to check if the given package manager is allowed.
|
|
94
126
|
*
|
|
@@ -99,6 +131,7 @@ export function hasAnyProjectType(projectTypes: any[], options: Object, defaultS
|
|
|
99
131
|
* @returns {Boolean} True if the package manager is allowed
|
|
100
132
|
*/
|
|
101
133
|
export function isPackageManagerAllowed(name: string, conflictingManagers: any[], options: Object): boolean;
|
|
134
|
+
export function isAllowedHttpHost(hostname: any, allowedHostsEnv?: any): boolean;
|
|
102
135
|
/**
|
|
103
136
|
* Method to get files matching a pattern
|
|
104
137
|
*
|
|
@@ -1334,7 +1367,7 @@ export function convertOSQueryResults(queryCategory: string, queryObj: Object, r
|
|
|
1334
1367
|
description: any;
|
|
1335
1368
|
publisher: any;
|
|
1336
1369
|
"bom-ref": string;
|
|
1337
|
-
purl: string;
|
|
1370
|
+
purl: string | undefined;
|
|
1338
1371
|
scope: any;
|
|
1339
1372
|
type: any;
|
|
1340
1373
|
}[];
|
|
@@ -1948,9 +1981,10 @@ export function extractPathEnv(envValues: any): any;
|
|
|
1948
1981
|
*
|
|
1949
1982
|
* @param basePath Base directory
|
|
1950
1983
|
* @param binPaths {Array[String]} Paths containing potential binaries
|
|
1984
|
+
* @param excludePaths {Array[String]} Container-relative paths that should be excluded from the result set
|
|
1951
1985
|
* @return {Array[String]} List of executables
|
|
1952
1986
|
*/
|
|
1953
|
-
export function collectExecutables(basePath: any, binPaths: any): any;
|
|
1987
|
+
export function collectExecutables(basePath: any, binPaths: any, excludePaths?: any): any;
|
|
1954
1988
|
/**
|
|
1955
1989
|
* Collect all shared library files from the given list of paths
|
|
1956
1990
|
*
|
|
@@ -1958,10 +1992,11 @@ export function collectExecutables(basePath: any, binPaths: any): any;
|
|
|
1958
1992
|
* @param libPaths {Array[String]} Paths containing potential libraries
|
|
1959
1993
|
* @param ldConf {String} Config file used by ldconfig to locate additional paths
|
|
1960
1994
|
* @param ldConfDirPattern {String} Config directory that can contain more .conf files for ldconfig
|
|
1995
|
+
* @param excludePaths {Array[String]} Container-relative paths that should be excluded from the result set
|
|
1961
1996
|
*
|
|
1962
1997
|
* @return {Array[String]} List of executables
|
|
1963
1998
|
*/
|
|
1964
|
-
export function collectSharedLibs(basePath: any, libPaths: any, ldConf: string, ldConfDirPattern: string): any;
|
|
1999
|
+
export function collectSharedLibs(basePath: any, libPaths: any, ldConf: string, ldConfDirPattern: string, excludePaths?: any): any;
|
|
1965
2000
|
/**
|
|
1966
2001
|
* Get information about the runtime.
|
|
1967
2002
|
*
|
|
@@ -2071,6 +2106,7 @@ export const PROJECT_TYPE_ALIASES: {
|
|
|
2071
2106
|
c: string[];
|
|
2072
2107
|
clojure: string[];
|
|
2073
2108
|
github: string[];
|
|
2109
|
+
hbom: string[];
|
|
2074
2110
|
os: string[];
|
|
2075
2111
|
jenkins: string[];
|
|
2076
2112
|
helm: string[];
|
|
@@ -2084,6 +2120,7 @@ export const PROJECT_TYPE_ALIASES: {
|
|
|
2084
2120
|
scala: string[];
|
|
2085
2121
|
nix: string[];
|
|
2086
2122
|
caxa: string[];
|
|
2123
|
+
asar: string[];
|
|
2087
2124
|
"vscode-extension": string[];
|
|
2088
2125
|
"chrome-extension": string[];
|
|
2089
2126
|
};
|