@dxworks/insider 2.9.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.github/workflows/build.yml +19 -0
- package/.github/workflows/release-docs.yml +15 -0
- package/.github/workflows/release-voyager.yml +57 -0
- package/.github/workflows/release.yml +102 -0
- package/Dockerfile +8 -0
- package/README.md +89 -0
- package/TODO.txt +7 -0
- package/bin/insider.bat +1 -0
- package/bin/insider.sh +1 -0
- package/build.gradle +55 -0
- package/config/.ignore +4 -0
- package/config/comments.json +71 -0
- package/config/fingerprints/_anomalies-full.json +116 -0
- package/config/fingerprints/_extLibs.json +2555 -0
- package/config/fingerprints/code_smells.json +94 -0
- package/config/fingerprints/generated_code.json +17 -0
- package/config/fingerprints/libraries.json +4667 -0
- package/config/ignoredImports.txt +0 -0
- package/config/insider-conf.properties +3 -0
- package/config/rules/cloud_services/ad_networks.json +50 -0
- package/config/rules/cloud_services/bigdata.json +21 -0
- package/config/rules/cloud_services/cloud_hosting.json +398 -0
- package/config/rules/cloud_services/data_storage.json +291 -0
- package/config/rules/cloud_services/ecommerce.json +45 -0
- package/config/rules/cloud_services/socialmedia.json +82 -0
- package/config/rules/cloud_services/web_analytics.json +108 -0
- package/config/rules/components/active_content.json +157 -0
- package/config/rules/components/load_dll.json +66 -0
- package/config/rules/cryptography/algorithm_implementation.json +62 -0
- package/config/rules/cryptography/certificate.json +199 -0
- package/config/rules/cryptography/ciphers.json +174 -0
- package/config/rules/cryptography/crypto_currency.json +32 -0
- package/config/rules/cryptography/encoding.json +20 -0
- package/config/rules/cryptography/extended.json +220 -0
- package/config/rules/cryptography/external_libraries.json +141 -0
- package/config/rules/cryptography/hash_algorithm.json +98 -0
- package/config/rules/cryptography/key_derivation.json +65 -0
- package/config/rules/cryptography/protocol.json +156 -0
- package/config/rules/cryptography/random.json +97 -0
- package/config/rules/cryptography/weakssl.json +206 -0
- package/config/rules/data_handling/compressed_files.json +18 -0
- package/config/rules/data_handling/database.json +361 -0
- package/config/rules/data_handling/deserialization.json +296 -0
- package/config/rules/data_handling/json_parsing.json +49 -0
- package/config/rules/data_handling/media_parsing.json +33 -0
- package/config/rules/data_handling/pastebin.json +18 -0
- package/config/rules/data_handling/xml_parsing.json +168 -0
- package/config/rules/data_types/financial.json +106 -0
- package/config/rules/data_types/media.json +48 -0
- package/config/rules/data_types/secrets.json +91 -0
- package/config/rules/data_types/sensitive.json +176 -0
- package/config/rules/device_permissions/IOSPermissions.json +240 -0
- package/config/rules/device_permissions/UWP.json +221 -0
- package/config/rules/device_permissions/android_intents.json +599 -0
- package/config/rules/frameworks/PHP.json +172 -0
- package/config/rules/frameworks/build.json +189 -0
- package/config/rules/frameworks/c.json +45 -0
- package/config/rules/frameworks/csharp-nonMS.json +19 -0
- package/config/rules/frameworks/java.json +291 -0
- package/config/rules/frameworks/javascript.json +318 -0
- package/config/rules/frameworks/logging.json +103 -0
- package/config/rules/frameworks/microsoft.json +257 -0
- package/config/rules/frameworks/python.json +274 -0
- package/config/rules/frameworks/ruby.json +53 -0
- package/config/rules/frameworks/rust.json +77 -0
- package/config/rules/general/OSS_license.json +146 -0
- package/config/rules/general/code_metrics.json +132 -0
- package/config/rules/general/dependencies.json +199 -0
- package/config/rules/general/hygiene.json +47 -0
- package/config/rules/general/platforms.json +283 -0
- package/config/rules/general/solutioninfo.json +378 -0
- package/config/rules/infrastructure/hashicorp_packers_tmpl.json +18 -0
- package/config/rules/infrastructure/hashicorp_terraform_tmpl.json +19 -0
- package/config/rules/infrastructure/microsoft_arm_tmpl.json +198 -0
- package/config/rules/networkcomms/outbound_network.json +429 -0
- package/config/rules/os/acl.json +250 -0
- package/config/rules/os/dynamic_execution.json +359 -0
- package/config/rules/os/file_io.json +468 -0
- package/config/rules/os/process.json +179 -0
- package/config/rules/os/setenv.json +270 -0
- package/config/rules/os/system_registry.json +237 -0
- package/config/rules/os/user_accts.json +34 -0
- package/config/rules/security_feature/authentication.json +387 -0
- package/config/rules/security_feature/authorization.json +148 -0
- package/config/rules/test_frameworks/cpp_testing.json +194 -0
- package/config/rules/test_frameworks/go_testing.json +18 -0
- package/config/rules/test_frameworks/java_testing.json +720 -0
- package/config/rules/test_frameworks/javascript_testing.json +724 -0
- package/config/rules/test_frameworks/objectiveC_testing.json +146 -0
- package/config/rules/test_frameworks/php_testing.json +156 -0
- package/config/rules/test_frameworks/powershell_testing.json +17 -0
- package/config/rules/test_frameworks/python_testing.json +108 -0
- package/config/rules/test_frameworks/ruby_testing.json +114 -0
- package/config/rules/tools/pipeline.json +195 -0
- package/config/rules/webapp/comms.json +89 -0
- package/config/rules/webapp/headers.json +178 -0
- package/config/rules/webapp/media.json +56 -0
- package/config/rules/webapp/sessions.json +228 -0
- package/config/rules/webapp/storage.json +215 -0
- package/dist/config/.ignore +4 -0
- package/dist/config/comments.json +71 -0
- package/dist/config/fingerprints/_anomalies-full.json +116 -0
- package/dist/config/fingerprints/_extLibs.json +2555 -0
- package/dist/config/fingerprints/code_smells.json +94 -0
- package/dist/config/fingerprints/generated_code.json +17 -0
- package/dist/config/fingerprints/libraries.json +4667 -0
- package/dist/config/ignoredImports.txt +0 -0
- package/dist/config/insider-conf.properties +3 -0
- package/dist/config/rules/cloud_services/ad_networks.json +50 -0
- package/dist/config/rules/cloud_services/bigdata.json +21 -0
- package/dist/config/rules/cloud_services/cloud_hosting.json +398 -0
- package/dist/config/rules/cloud_services/data_storage.json +291 -0
- package/dist/config/rules/cloud_services/ecommerce.json +45 -0
- package/dist/config/rules/cloud_services/socialmedia.json +82 -0
- package/dist/config/rules/cloud_services/web_analytics.json +108 -0
- package/dist/config/rules/components/active_content.json +157 -0
- package/dist/config/rules/components/load_dll.json +66 -0
- package/dist/config/rules/cryptography/algorithm_implementation.json +62 -0
- package/dist/config/rules/cryptography/certificate.json +199 -0
- package/dist/config/rules/cryptography/ciphers.json +174 -0
- package/dist/config/rules/cryptography/crypto_currency.json +32 -0
- package/dist/config/rules/cryptography/encoding.json +20 -0
- package/dist/config/rules/cryptography/extended.json +220 -0
- package/dist/config/rules/cryptography/external_libraries.json +141 -0
- package/dist/config/rules/cryptography/hash_algorithm.json +98 -0
- package/dist/config/rules/cryptography/key_derivation.json +65 -0
- package/dist/config/rules/cryptography/protocol.json +156 -0
- package/dist/config/rules/cryptography/random.json +97 -0
- package/dist/config/rules/cryptography/weakssl.json +206 -0
- package/dist/config/rules/data_handling/compressed_files.json +18 -0
- package/dist/config/rules/data_handling/database.json +361 -0
- package/dist/config/rules/data_handling/deserialization.json +296 -0
- package/dist/config/rules/data_handling/json_parsing.json +49 -0
- package/dist/config/rules/data_handling/media_parsing.json +33 -0
- package/dist/config/rules/data_handling/pastebin.json +18 -0
- package/dist/config/rules/data_handling/xml_parsing.json +168 -0
- package/dist/config/rules/data_types/financial.json +106 -0
- package/dist/config/rules/data_types/media.json +48 -0
- package/dist/config/rules/data_types/secrets.json +91 -0
- package/dist/config/rules/data_types/sensitive.json +176 -0
- package/dist/config/rules/device_permissions/IOSPermissions.json +240 -0
- package/dist/config/rules/device_permissions/UWP.json +221 -0
- package/dist/config/rules/device_permissions/android_intents.json +599 -0
- package/dist/config/rules/frameworks/PHP.json +172 -0
- package/dist/config/rules/frameworks/build.json +189 -0
- package/dist/config/rules/frameworks/c.json +45 -0
- package/dist/config/rules/frameworks/csharp-nonMS.json +19 -0
- package/dist/config/rules/frameworks/java.json +291 -0
- package/dist/config/rules/frameworks/javascript.json +318 -0
- package/dist/config/rules/frameworks/logging.json +103 -0
- package/dist/config/rules/frameworks/microsoft.json +257 -0
- package/dist/config/rules/frameworks/python.json +274 -0
- package/dist/config/rules/frameworks/ruby.json +53 -0
- package/dist/config/rules/frameworks/rust.json +77 -0
- package/dist/config/rules/general/OSS_license.json +146 -0
- package/dist/config/rules/general/code_metrics.json +132 -0
- package/dist/config/rules/general/dependencies.json +199 -0
- package/dist/config/rules/general/hygiene.json +47 -0
- package/dist/config/rules/general/platforms.json +283 -0
- package/dist/config/rules/general/solutioninfo.json +378 -0
- package/dist/config/rules/infrastructure/hashicorp_packers_tmpl.json +18 -0
- package/dist/config/rules/infrastructure/hashicorp_terraform_tmpl.json +19 -0
- package/dist/config/rules/infrastructure/microsoft_arm_tmpl.json +198 -0
- package/dist/config/rules/networkcomms/outbound_network.json +429 -0
- package/dist/config/rules/os/acl.json +250 -0
- package/dist/config/rules/os/dynamic_execution.json +359 -0
- package/dist/config/rules/os/file_io.json +468 -0
- package/dist/config/rules/os/process.json +179 -0
- package/dist/config/rules/os/setenv.json +270 -0
- package/dist/config/rules/os/system_registry.json +237 -0
- package/dist/config/rules/os/user_accts.json +34 -0
- package/dist/config/rules/security_feature/authentication.json +387 -0
- package/dist/config/rules/security_feature/authorization.json +148 -0
- package/dist/config/rules/test_frameworks/cpp_testing.json +194 -0
- package/dist/config/rules/test_frameworks/go_testing.json +18 -0
- package/dist/config/rules/test_frameworks/java_testing.json +720 -0
- package/dist/config/rules/test_frameworks/javascript_testing.json +724 -0
- package/dist/config/rules/test_frameworks/objectiveC_testing.json +146 -0
- package/dist/config/rules/test_frameworks/php_testing.json +156 -0
- package/dist/config/rules/test_frameworks/powershell_testing.json +17 -0
- package/dist/config/rules/test_frameworks/python_testing.json +108 -0
- package/dist/config/rules/test_frameworks/ruby_testing.json +114 -0
- package/dist/config/rules/tools/pipeline.json +195 -0
- package/dist/config/rules/webapp/comms.json +89 -0
- package/dist/config/rules/webapp/headers.json +178 -0
- package/dist/config/rules/webapp/media.json +56 -0
- package/dist/config/rules/webapp/sessions.json +228 -0
- package/dist/config/rules/webapp/storage.json +215 -0
- package/dist/index.js +13 -0
- package/dist/insider.jar +0 -0
- package/dist/insider.js +7 -0
- package/dist/lib.js +21 -0
- package/docs/config/config.md +3 -0
- package/docs/config/ignore.md +3 -0
- package/docs/config/languages.md +3 -0
- package/docs/index.md +58 -0
- package/dxworks-site.json +13 -0
- package/gradle.properties +0 -0
- package/gradlew +240 -0
- package/gradlew.bat +91 -0
- package/insider/README.md +89 -0
- package/insider/config/.ignore +4 -0
- package/insider/config/comments.json +71 -0
- package/insider/config/fingerprints/_anomalies-full.json +116 -0
- package/insider/config/fingerprints/_extLibs.json +2555 -0
- package/insider/config/fingerprints/code_smells.json +94 -0
- package/insider/config/fingerprints/generated_code.json +17 -0
- package/insider/config/fingerprints/libraries.json +4667 -0
- package/insider/config/ignoredImports.txt +0 -0
- package/insider/config/insider-conf.properties +3 -0
- package/insider/config/rules/cloud_services/ad_networks.json +50 -0
- package/insider/config/rules/cloud_services/bigdata.json +21 -0
- package/insider/config/rules/cloud_services/cloud_hosting.json +398 -0
- package/insider/config/rules/cloud_services/data_storage.json +291 -0
- package/insider/config/rules/cloud_services/ecommerce.json +45 -0
- package/insider/config/rules/cloud_services/socialmedia.json +82 -0
- package/insider/config/rules/cloud_services/web_analytics.json +108 -0
- package/insider/config/rules/components/active_content.json +157 -0
- package/insider/config/rules/components/load_dll.json +66 -0
- package/insider/config/rules/cryptography/algorithm_implementation.json +62 -0
- package/insider/config/rules/cryptography/certificate.json +199 -0
- package/insider/config/rules/cryptography/ciphers.json +174 -0
- package/insider/config/rules/cryptography/crypto_currency.json +32 -0
- package/insider/config/rules/cryptography/encoding.json +20 -0
- package/insider/config/rules/cryptography/extended.json +220 -0
- package/insider/config/rules/cryptography/external_libraries.json +141 -0
- package/insider/config/rules/cryptography/hash_algorithm.json +98 -0
- package/insider/config/rules/cryptography/key_derivation.json +65 -0
- package/insider/config/rules/cryptography/protocol.json +156 -0
- package/insider/config/rules/cryptography/random.json +97 -0
- package/insider/config/rules/cryptography/weakssl.json +206 -0
- package/insider/config/rules/data_handling/compressed_files.json +18 -0
- package/insider/config/rules/data_handling/database.json +361 -0
- package/insider/config/rules/data_handling/deserialization.json +296 -0
- package/insider/config/rules/data_handling/json_parsing.json +49 -0
- package/insider/config/rules/data_handling/media_parsing.json +33 -0
- package/insider/config/rules/data_handling/pastebin.json +18 -0
- package/insider/config/rules/data_handling/xml_parsing.json +168 -0
- package/insider/config/rules/data_types/financial.json +106 -0
- package/insider/config/rules/data_types/media.json +48 -0
- package/insider/config/rules/data_types/secrets.json +91 -0
- package/insider/config/rules/data_types/sensitive.json +176 -0
- package/insider/config/rules/device_permissions/IOSPermissions.json +240 -0
- package/insider/config/rules/device_permissions/UWP.json +221 -0
- package/insider/config/rules/device_permissions/android_intents.json +599 -0
- package/insider/config/rules/frameworks/PHP.json +172 -0
- package/insider/config/rules/frameworks/build.json +189 -0
- package/insider/config/rules/frameworks/c.json +45 -0
- package/insider/config/rules/frameworks/csharp-nonMS.json +19 -0
- package/insider/config/rules/frameworks/java.json +291 -0
- package/insider/config/rules/frameworks/javascript.json +318 -0
- package/insider/config/rules/frameworks/logging.json +103 -0
- package/insider/config/rules/frameworks/microsoft.json +257 -0
- package/insider/config/rules/frameworks/python.json +274 -0
- package/insider/config/rules/frameworks/ruby.json +53 -0
- package/insider/config/rules/frameworks/rust.json +77 -0
- package/insider/config/rules/general/OSS_license.json +146 -0
- package/insider/config/rules/general/code_metrics.json +132 -0
- package/insider/config/rules/general/dependencies.json +199 -0
- package/insider/config/rules/general/hygiene.json +47 -0
- package/insider/config/rules/general/platforms.json +283 -0
- package/insider/config/rules/general/solutioninfo.json +378 -0
- package/insider/config/rules/infrastructure/hashicorp_packers_tmpl.json +18 -0
- package/insider/config/rules/infrastructure/hashicorp_terraform_tmpl.json +19 -0
- package/insider/config/rules/infrastructure/microsoft_arm_tmpl.json +198 -0
- package/insider/config/rules/networkcomms/outbound_network.json +429 -0
- package/insider/config/rules/os/acl.json +250 -0
- package/insider/config/rules/os/dynamic_execution.json +359 -0
- package/insider/config/rules/os/file_io.json +468 -0
- package/insider/config/rules/os/process.json +179 -0
- package/insider/config/rules/os/setenv.json +270 -0
- package/insider/config/rules/os/system_registry.json +237 -0
- package/insider/config/rules/os/user_accts.json +34 -0
- package/insider/config/rules/security_feature/authentication.json +387 -0
- package/insider/config/rules/security_feature/authorization.json +148 -0
- package/insider/config/rules/test_frameworks/cpp_testing.json +194 -0
- package/insider/config/rules/test_frameworks/go_testing.json +18 -0
- package/insider/config/rules/test_frameworks/java_testing.json +720 -0
- package/insider/config/rules/test_frameworks/javascript_testing.json +724 -0
- package/insider/config/rules/test_frameworks/objectiveC_testing.json +146 -0
- package/insider/config/rules/test_frameworks/php_testing.json +156 -0
- package/insider/config/rules/test_frameworks/powershell_testing.json +17 -0
- package/insider/config/rules/test_frameworks/python_testing.json +108 -0
- package/insider/config/rules/test_frameworks/ruby_testing.json +114 -0
- package/insider/config/rules/tools/pipeline.json +195 -0
- package/insider/config/rules/webapp/comms.json +89 -0
- package/insider/config/rules/webapp/headers.json +178 -0
- package/insider/config/rules/webapp/media.json +56 -0
- package/insider/config/rules/webapp/sessions.json +228 -0
- package/insider/config/rules/webapp/storage.json +215 -0
- package/insider/insider.bat +1 -0
- package/insider/insider.jar +0 -0
- package/insider/insider.sh +1 -0
- package/insider/languages.yml +3988 -0
- package/instrument.yml +37 -0
- package/languages.yml +3988 -0
- package/lib/index.js +13 -0
- package/lib/insider.js +7 -0
- package/lib/lib.js +21 -0
- package/lombok.config +2 -0
- package/mkdocs.yml +18 -0
- package/package.json +51 -0
- package/releaseNotes/v2.6.0.md +1 -0
- package/releaseNotes/v2.7.1.md +1 -0
- package/settings.gradle +2 -0
- package/src/main/java/org/dxworks/insider/ChronosTag.java +14 -0
- package/src/main/java/org/dxworks/insider/Insider.java +214 -0
- package/src/main/java/org/dxworks/insider/InsiderAnalysis.java +7 -0
- package/src/main/java/org/dxworks/insider/InsiderFile.java +125 -0
- package/src/main/java/org/dxworks/insider/InsiderOptions.java +78 -0
- package/src/main/java/org/dxworks/insider/InsiderResult.java +15 -0
- package/src/main/java/org/dxworks/insider/application/inspector/CodeRuleExtractor.java +14 -0
- package/src/main/java/org/dxworks/insider/application/inspector/CommentRuleExtractor.java +14 -0
- package/src/main/java/org/dxworks/insider/application/inspector/FileRuleExtractor.java +14 -0
- package/src/main/java/org/dxworks/insider/application/inspector/RuleExtractor.java +11 -0
- package/src/main/java/org/dxworks/insider/application/inspector/dtos/Comment.java +18 -0
- package/src/main/java/org/dxworks/insider/application/inspector/dtos/CommentPattern.java +44 -0
- package/src/main/java/org/dxworks/insider/application/inspector/dtos/Condition.java +15 -0
- package/src/main/java/org/dxworks/insider/application/inspector/dtos/InsiderPattern.java +149 -0
- package/src/main/java/org/dxworks/insider/application/inspector/dtos/PatternMatch.java +23 -0
- package/src/main/java/org/dxworks/insider/application/inspector/dtos/Rule.java +61 -0
- package/src/main/java/org/dxworks/insider/application/inspector/services/CommentService.java +165 -0
- package/src/main/java/org/dxworks/insider/application/inspector/services/RuleService.java +54 -0
- package/src/main/java/org/dxworks/insider/commands/AddCommand.java +125 -0
- package/src/main/java/org/dxworks/insider/commands/AllFilesCommand.java +4 -0
- package/src/main/java/org/dxworks/insider/commands/ConvertCommand.java +55 -0
- package/src/main/java/org/dxworks/insider/commands/DetectCommand.java +42 -0
- package/src/main/java/org/dxworks/insider/commands/DiagnoseCommand.java +74 -0
- package/src/main/java/org/dxworks/insider/commands/ExtractCommand.java +35 -0
- package/src/main/java/org/dxworks/insider/commands/FindCommand.java +102 -0
- package/src/main/java/org/dxworks/insider/commands/HelpCommand.java +56 -0
- package/src/main/java/org/dxworks/insider/commands/IndentationCount.java +69 -0
- package/src/main/java/org/dxworks/insider/commands/InsiderCommand.java +71 -0
- package/src/main/java/org/dxworks/insider/commands/InspectCommand.java +98 -0
- package/src/main/java/org/dxworks/insider/commands/MeasureCommand.java +47 -0
- package/src/main/java/org/dxworks/insider/commands/NoFilesCommand.java +4 -0
- package/src/main/java/org/dxworks/insider/commands/VersionCommand.java +34 -0
- package/src/main/java/org/dxworks/insider/configuration/InsiderConfiguration.java +123 -0
- package/src/main/java/org/dxworks/insider/constants/InsiderConstants.java +19 -0
- package/src/main/java/org/dxworks/insider/depext/AbstractImportsProcessor.java +57 -0
- package/src/main/java/org/dxworks/insider/depext/CPPImportsProcessor.java +55 -0
- package/src/main/java/org/dxworks/insider/depext/CSharpImportsProcessor.java +53 -0
- package/src/main/java/org/dxworks/insider/depext/DependencyExtractor.java +105 -0
- package/src/main/java/org/dxworks/insider/depext/ImportItem.java +19 -0
- package/src/main/java/org/dxworks/insider/depext/ImportResult.java +32 -0
- package/src/main/java/org/dxworks/insider/depext/JavastackImportsProcessor.java +88 -0
- package/src/main/java/org/dxworks/insider/depext/VBImportsProcessor.java +41 -0
- package/src/main/java/org/dxworks/insider/exceptions/InsiderException.java +7 -0
- package/src/main/java/org/dxworks/insider/library/detector/C_ImportsContainer.java +73 -0
- package/src/main/java/org/dxworks/insider/library/detector/ImportsContainer.java +122 -0
- package/src/main/java/org/dxworks/insider/library/detector/JavaImportsContainer.java +63 -0
- package/src/main/java/org/dxworks/insider/library/detector/LibraryDetector.java +150 -0
- package/src/main/java/org/dxworks/insider/library/detector/LibraryDetectorLanguage.java +6 -0
- package/src/main/java/org/dxworks/insider/library/detector/model/PackagingUnit.java +26 -0
- package/src/main/java/org/dxworks/insider/technology/finder/LinguistService.java +79 -0
- package/src/main/java/org/dxworks/insider/technology/finder/converters/XmlToJsonConverter.java +41 -0
- package/src/main/java/org/dxworks/insider/technology/finder/exceptions/FingerprintParseException.java +7 -0
- package/src/main/java/org/dxworks/insider/technology/finder/model/Technology.java +73 -0
- package/src/main/java/org/dxworks/insider/technology/finder/model/json/JsonConfigurationDTO.java +14 -0
- package/src/main/java/org/dxworks/insider/technology/finder/model/json/TechnologyJsonDTO.java +66 -0
- package/src/main/java/org/dxworks/insider/technology/finder/model/xml/old/CategoryXmlDTO.java +21 -0
- package/src/main/java/org/dxworks/insider/technology/finder/model/xml/old/ConfigurationDataXmlDTO.java +17 -0
- package/src/main/java/org/dxworks/insider/technology/finder/model/xml/old/FingerprintXmlDTO.java +17 -0
- package/src/main/java/org/dxworks/insider/technology/finder/model/xml/old/LanguageXmlDTO.java +20 -0
- package/src/main/java/org/dxworks/insider/technology/finder/model/xml/old/LanguagesXmlDTO.java +18 -0
- package/src/main/java/org/dxworks/insider/technology/finder/model/xml/old/TechnologyXmlDTO.java +19 -0
- package/src/main/java/org/dxworks/insider/technology/finder/model/xml/old/XmlConfigurationDTO.java +17 -0
- package/src/main/java/org/dxworks/insider/technology/finder/parsers/FingerprintsParser.java +14 -0
- package/src/main/java/org/dxworks/insider/technology/finder/parsers/FingerprintsXmlParser.java +57 -0
- package/src/main/java/org/dxworks/insider/technology/finder/parsers/JavaLibrariesCsvParser.java +71 -0
- package/src/main/java/org/dxworks/insider/technology/finder/parsers/JsonFingerprintParser.java +58 -0
- package/src/main/java/org/dxworks/insider/utils/FileUtils.java +45 -0
- package/src/main/java/org/dxworks/insider/utils/ImportUtils.java +21 -0
- package/src/main/java/org/dxworks/insider/utils/LibraryImport.java +17 -0
- package/src/main/java/org/dxworks/insider/utils/LibraryImportInOtherTechnology.java +30 -0
- package/src/main/java/org/dxworks/insider/utils/MapUtils.java +19 -0
- package/src/main/resources/insider-version +1 -0
- package/src/test/java/org/dxworks/insider/application/inspector/services/CommentServiceTest.java +40 -0
- package/src/test/java/org/dxworks/insider/technology/finder/parsers/FingerprintsXmlParserTest.java +15 -0
- package/src/test/java/org/dxworks/insider/utils/FileUtilsTest.java +31 -0
- package/src/test/java/org/dxworks/insider/utils/ImportUtilsTest.java +24 -0
- package/src/test/java/org/dxworks/insider/utils/transformers/JsonToCsvTransformerTest.java +18 -0
- package/src/test/resources/Test1.java +21 -0
- package/src/test/resources/Test2.java +21 -0
- package/src/test/resources/cobol/CM201M.CBL +88 -0
|
@@ -0,0 +1,283 @@
|
|
|
1
|
+
[
|
|
2
|
+
{
|
|
3
|
+
"name": "Platform: Microsoft .NET Core",
|
|
4
|
+
"id": "AI028500",
|
|
5
|
+
"description": "Platform: .NET Core",
|
|
6
|
+
"applies_to": [ "VSProject", "csharp" ],
|
|
7
|
+
"tags": [ "Platform.Microsoft.NETCore" ],
|
|
8
|
+
"severity": "moderate",
|
|
9
|
+
"patterns": [
|
|
10
|
+
{
|
|
11
|
+
"pattern": "netcore|net[5-9]",
|
|
12
|
+
"type": "string",
|
|
13
|
+
"scopes": [ "code" ],
|
|
14
|
+
"modifiers": [ "i" ]
|
|
15
|
+
}
|
|
16
|
+
]
|
|
17
|
+
},
|
|
18
|
+
{
|
|
19
|
+
"name": "Platform: Microsoft .NET Standard",
|
|
20
|
+
"id": "AI028600",
|
|
21
|
+
"description": "Platform: Microsoft .NET Standard",
|
|
22
|
+
"applies_to": [ "VSProject", "csharp" ],
|
|
23
|
+
"tags": [ "Platform.Microsoft.NETStandard" ],
|
|
24
|
+
"severity": "moderate",
|
|
25
|
+
"patterns": [
|
|
26
|
+
{
|
|
27
|
+
"pattern": "Microsoft.NET.Sdk",
|
|
28
|
+
"type": "string",
|
|
29
|
+
"scopes": [ "code" ],
|
|
30
|
+
"modifiers": [ "i" ]
|
|
31
|
+
}
|
|
32
|
+
]
|
|
33
|
+
},
|
|
34
|
+
{
|
|
35
|
+
"name": "Platform: Microsoft Mono",
|
|
36
|
+
"id": "AI028700",
|
|
37
|
+
"description": "Platform: Microsoft Mono",
|
|
38
|
+
"applies_to": [ "VSProject", "csharp" ],
|
|
39
|
+
"tags": [ "Platform.Microsoft.Mono" ],
|
|
40
|
+
"severity": "moderate",
|
|
41
|
+
"patterns": [
|
|
42
|
+
{
|
|
43
|
+
"pattern": "using (gtk|Glade)",
|
|
44
|
+
"type": "string",
|
|
45
|
+
"scopes": [ "code" ],
|
|
46
|
+
"modifiers": [ "i" ]
|
|
47
|
+
}
|
|
48
|
+
]
|
|
49
|
+
},
|
|
50
|
+
{
|
|
51
|
+
"name": "Platform: Google Android",
|
|
52
|
+
"id": "AI028800",
|
|
53
|
+
"description": "Platform: Google Android",
|
|
54
|
+
"tags":[ "Platform.OS.Google.Android" ],
|
|
55
|
+
"severity": "moderate",
|
|
56
|
+
"patterns": [
|
|
57
|
+
{
|
|
58
|
+
"pattern": "android",
|
|
59
|
+
"type": "string",
|
|
60
|
+
"scopes": [ "code", "comment" ],
|
|
61
|
+
"modifiers": [ "i" ],
|
|
62
|
+
"confidence": "high"
|
|
63
|
+
}
|
|
64
|
+
]
|
|
65
|
+
},
|
|
66
|
+
{
|
|
67
|
+
"name": "Platform: Apple iOS",
|
|
68
|
+
"id": "AI028900",
|
|
69
|
+
"description": "Platform: Apple iOS",
|
|
70
|
+
"tags":[ "Platform.OS.Apple.iOS" ],
|
|
71
|
+
"severity": "moderate",
|
|
72
|
+
"patterns": [
|
|
73
|
+
{
|
|
74
|
+
"pattern": "AppleWebKit|UIKit|ios",
|
|
75
|
+
"type": "regexword",
|
|
76
|
+
"scopes": [ "code", "comment" ],
|
|
77
|
+
"modifiers": [ "i" ],
|
|
78
|
+
"confidence": "high"
|
|
79
|
+
}
|
|
80
|
+
]
|
|
81
|
+
},
|
|
82
|
+
{
|
|
83
|
+
"name": "Platform: Apple MacOS",
|
|
84
|
+
"id": "AI029000",
|
|
85
|
+
"description": "Platform: Apple MacOS",
|
|
86
|
+
"tags":[ "Platform.OS.Apple.MacOS" ],
|
|
87
|
+
"severity": "moderate",
|
|
88
|
+
"patterns": [
|
|
89
|
+
{
|
|
90
|
+
"pattern": "(os x)|osx|macos|macosx",
|
|
91
|
+
"type": "regexword",
|
|
92
|
+
"scopes": [ "code", "comment" ],
|
|
93
|
+
"modifiers": [ "i" ],
|
|
94
|
+
"confidence": "high"
|
|
95
|
+
}
|
|
96
|
+
]
|
|
97
|
+
},
|
|
98
|
+
{
|
|
99
|
+
"name": "Platform: Microsoft Windows",
|
|
100
|
+
"id": "AI029100",
|
|
101
|
+
"description": "Platform: Microsoft Windows Server",
|
|
102
|
+
"tags":[ "Platform.OS.Microsoft.WindowsServer" ],
|
|
103
|
+
"severity": "moderate",
|
|
104
|
+
"patterns": [
|
|
105
|
+
{
|
|
106
|
+
"pattern": "windows server",
|
|
107
|
+
"type": "regex",
|
|
108
|
+
"scopes": [ "code", "comment" ],
|
|
109
|
+
"modifiers": [ "i" ],
|
|
110
|
+
"confidence": "high"
|
|
111
|
+
}
|
|
112
|
+
]
|
|
113
|
+
},
|
|
114
|
+
{
|
|
115
|
+
"name": "Platform: Microsoft Windows",
|
|
116
|
+
"id": "AI029200",
|
|
117
|
+
"description": "Platform: Microsoft Windows",
|
|
118
|
+
"tags":[ "Platform.OS.Microsoft.WindowsStandard" ],
|
|
119
|
+
"severity": "moderate",
|
|
120
|
+
"patterns": [
|
|
121
|
+
{
|
|
122
|
+
"pattern": "windows",
|
|
123
|
+
"type": "regex",
|
|
124
|
+
"scopes": [ "code", "comment" ],
|
|
125
|
+
"modifiers": [ "i" ],
|
|
126
|
+
"confidence": "high"
|
|
127
|
+
}
|
|
128
|
+
]
|
|
129
|
+
},
|
|
130
|
+
|
|
131
|
+
{
|
|
132
|
+
"name": "Platform: Microsoft Windows",
|
|
133
|
+
"id": "AI029300",
|
|
134
|
+
"description": "Platform: Microsoft Windows",
|
|
135
|
+
"tags":[ "Platform.OS.Microsoft.WindowsCE" ],
|
|
136
|
+
"severity": "moderate",
|
|
137
|
+
"patterns": [
|
|
138
|
+
{
|
|
139
|
+
"pattern": "PlatformID.WinCE|Windows Mobile|Windows Embedded|Windows Phone",
|
|
140
|
+
"type": "regex",
|
|
141
|
+
"scopes": [ "code", "comment" ],
|
|
142
|
+
"modifiers": [ "i" ],
|
|
143
|
+
"confidence": "high"
|
|
144
|
+
}
|
|
145
|
+
]
|
|
146
|
+
},
|
|
147
|
+
{
|
|
148
|
+
"name": "Development Framework: Windows Universal Platform",
|
|
149
|
+
"id": "AI029400",
|
|
150
|
+
"description": "Development Framework: Windows Universal Platform",
|
|
151
|
+
"tags":[ "Platform.OS.Microsoft.WindowsUniversalPlatform" ],
|
|
152
|
+
"severity": "moderate",
|
|
153
|
+
"patterns": [
|
|
154
|
+
{
|
|
155
|
+
"pattern": "Windows universal platform|UWP",
|
|
156
|
+
"type": "regexword",
|
|
157
|
+
"scopes": [ "code" ],
|
|
158
|
+
"modifiers": [ "i" ]
|
|
159
|
+
}
|
|
160
|
+
]
|
|
161
|
+
},
|
|
162
|
+
{
|
|
163
|
+
"name": "Platform: Linux",
|
|
164
|
+
"id": "AI029500",
|
|
165
|
+
"description": "Platform: Linux",
|
|
166
|
+
"tags":[ "Platform.OS.Linux.Distro" ],
|
|
167
|
+
"severity": "moderate",
|
|
168
|
+
"patterns": [
|
|
169
|
+
{
|
|
170
|
+
"pattern": "linux|xubuntu|ubuntu|coreos|manjaro|archlinux|debian|mint|gentoo|opensuse|redhat|mandrake|mandriva|slackware",
|
|
171
|
+
"type": "regexword",
|
|
172
|
+
"scopes": [ "code", "comment" ],
|
|
173
|
+
"modifiers": [ "i" ],
|
|
174
|
+
"confidence": "high"
|
|
175
|
+
}
|
|
176
|
+
]
|
|
177
|
+
},
|
|
178
|
+
{
|
|
179
|
+
"name": "Platform: Microsoft XBox",
|
|
180
|
+
"id": "AI029600",
|
|
181
|
+
"description": "Platform: Microsoft XBox",
|
|
182
|
+
"tags":[ "Platform.OS.Microsoft.XBox" ],
|
|
183
|
+
"severity": "moderate",
|
|
184
|
+
"patterns": [
|
|
185
|
+
{
|
|
186
|
+
"pattern": "xbox",
|
|
187
|
+
"type": "regexword",
|
|
188
|
+
"scopes": [ "code", "comment" ],
|
|
189
|
+
"modifiers": [ "i" ],
|
|
190
|
+
"confidence": "high"
|
|
191
|
+
}
|
|
192
|
+
],
|
|
193
|
+
"conditions": [
|
|
194
|
+
{
|
|
195
|
+
"pattern": {
|
|
196
|
+
"pattern": "areapath",
|
|
197
|
+
"type": "regex",
|
|
198
|
+
"scopes": [ "code" ],
|
|
199
|
+
"modifiers": [ "i" ]
|
|
200
|
+
},
|
|
201
|
+
"search_in": "finding-region(-5,5)",
|
|
202
|
+
"negate_finding": true
|
|
203
|
+
}
|
|
204
|
+
]
|
|
205
|
+
},
|
|
206
|
+
{
|
|
207
|
+
"name": "Platform: Mobile Device",
|
|
208
|
+
"id": "AI029700",
|
|
209
|
+
"description": "Platform: Mobile Device",
|
|
210
|
+
"tags":[ "Platform.Device.Mobile" ],
|
|
211
|
+
"severity": "moderate",
|
|
212
|
+
"patterns": [
|
|
213
|
+
{
|
|
214
|
+
"pattern": "mobile|tablet|iphone",
|
|
215
|
+
"type": "regex",
|
|
216
|
+
"scopes": [ "code", "comment" ],
|
|
217
|
+
"modifiers": [ "i" ],
|
|
218
|
+
"confidence": "high"
|
|
219
|
+
}
|
|
220
|
+
],
|
|
221
|
+
"conditions": [
|
|
222
|
+
{
|
|
223
|
+
"pattern": {
|
|
224
|
+
"pattern": "address|(first|last|sur)name|contact|gender|email",
|
|
225
|
+
"type": "regex",
|
|
226
|
+
"scopes": [ "code" ],
|
|
227
|
+
"modifiers": [ "i" ]
|
|
228
|
+
},
|
|
229
|
+
"search_in": "finding-region(-7,7)",
|
|
230
|
+
"negate_finding": true
|
|
231
|
+
}
|
|
232
|
+
]
|
|
233
|
+
},
|
|
234
|
+
{
|
|
235
|
+
"name": "Platform: IOT",
|
|
236
|
+
"id": "AI029800",
|
|
237
|
+
"description": "Platform: IOT",
|
|
238
|
+
"tags":[ "Platform.Device.IOT" ],
|
|
239
|
+
"severity": "moderate",
|
|
240
|
+
"patterns": [
|
|
241
|
+
{
|
|
242
|
+
"pattern": "IOT",
|
|
243
|
+
"type": "string",
|
|
244
|
+
"scopes": [ "code", "comment" ],
|
|
245
|
+
"modifiers": [ "i" ],
|
|
246
|
+
"confidence": "high",
|
|
247
|
+
"_comment": "driver?"
|
|
248
|
+
}
|
|
249
|
+
]
|
|
250
|
+
},
|
|
251
|
+
{
|
|
252
|
+
"name": "Hardware: Microsoft Kinex",
|
|
253
|
+
"id": "AI029900",
|
|
254
|
+
"description": "Platform: Microsoft Kinex",
|
|
255
|
+
"tags":[ "Hardware.Accessory.Microsoft.Kinex" ],
|
|
256
|
+
"severity": "moderate",
|
|
257
|
+
"patterns": [
|
|
258
|
+
{
|
|
259
|
+
"pattern": "kinex",
|
|
260
|
+
"type": "string",
|
|
261
|
+
"scopes": [ "code", "comment" ],
|
|
262
|
+
"modifiers": [ "i" ],
|
|
263
|
+
"confidence": "high"
|
|
264
|
+
}
|
|
265
|
+
]
|
|
266
|
+
},
|
|
267
|
+
{
|
|
268
|
+
"name": "Hardware: Reference Design",
|
|
269
|
+
"id": "AI030000",
|
|
270
|
+
"description": "Hardware: Reference Design",
|
|
271
|
+
"tags":[ "Hardware.ReferenceDesign" ],
|
|
272
|
+
"severity": "moderate",
|
|
273
|
+
"patterns": [
|
|
274
|
+
{
|
|
275
|
+
"pattern": "Reference Design",
|
|
276
|
+
"type": "string",
|
|
277
|
+
"scopes": [ "code", "comment" ],
|
|
278
|
+
"modifiers": [ "i" ],
|
|
279
|
+
"confidence": "high"
|
|
280
|
+
}
|
|
281
|
+
]
|
|
282
|
+
}
|
|
283
|
+
]
|
|
@@ -0,0 +1,378 @@
|
|
|
1
|
+
[
|
|
2
|
+
{
|
|
3
|
+
"name": "Metadata: Target Processor",
|
|
4
|
+
"id": "AI030100",
|
|
5
|
+
"description": "Metadata: Target Processor",
|
|
6
|
+
"tags":[ "Metadata.Application.Target.Processor" ],
|
|
7
|
+
"applies_to": [ "VSsolution", "VSProject", "cpp" ],
|
|
8
|
+
"severity": "moderate",
|
|
9
|
+
"patterns": [
|
|
10
|
+
{
|
|
11
|
+
"pattern": "Win32|Any CPU|Win64|x64|x86|Arm|Arm64",
|
|
12
|
+
"type": "regexword",
|
|
13
|
+
"scopes": [ "code" ],
|
|
14
|
+
"modifiers": [ "i" ],
|
|
15
|
+
"confidence": "high"
|
|
16
|
+
}
|
|
17
|
+
]
|
|
18
|
+
},
|
|
19
|
+
{
|
|
20
|
+
"name": "Metadata: Application Name",
|
|
21
|
+
"id": "AI030200",
|
|
22
|
+
"description": "Metadata: Application Name",
|
|
23
|
+
"tags":[ "Metadata.Application.Name" ],
|
|
24
|
+
"applies_to": [ "VSProject" ],
|
|
25
|
+
"severity": "moderate",
|
|
26
|
+
"patterns": [
|
|
27
|
+
{
|
|
28
|
+
"pattern": "<Product(Name)?>.*<\/Product(Name)?>|<PackageId>.*</PackageId>",
|
|
29
|
+
"type": "regex",
|
|
30
|
+
"scopes": [ "code" ],
|
|
31
|
+
"confidence": "high"
|
|
32
|
+
}
|
|
33
|
+
]
|
|
34
|
+
},
|
|
35
|
+
{
|
|
36
|
+
"name": "Metadata: Application Author",
|
|
37
|
+
"id": "AI030210",
|
|
38
|
+
"description": "Metadata: Application Author",
|
|
39
|
+
"tags":[ "Metadata.Application.Author" ],
|
|
40
|
+
"applies_to": [ "VSProject" ],
|
|
41
|
+
"severity": "moderate",
|
|
42
|
+
"patterns": [
|
|
43
|
+
{
|
|
44
|
+
"pattern": "<Authors>.*<\/Authors>",
|
|
45
|
+
"type": "regex",
|
|
46
|
+
"scopes": [ "code" ],
|
|
47
|
+
"confidence": "high"
|
|
48
|
+
}
|
|
49
|
+
]
|
|
50
|
+
},
|
|
51
|
+
{
|
|
52
|
+
"name": "Metadata: Application Version",
|
|
53
|
+
"id": "AI030220",
|
|
54
|
+
"description": "Metadata: Application Version",
|
|
55
|
+
"tags":[ "Metadata.Application.Version" ],
|
|
56
|
+
"applies_to": [ "VSProject" ],
|
|
57
|
+
"severity": "moderate",
|
|
58
|
+
"patterns": [
|
|
59
|
+
{
|
|
60
|
+
"pattern": "<Version>.*<\/Version>",
|
|
61
|
+
"type": "regex",
|
|
62
|
+
"scopes": [ "code" ],
|
|
63
|
+
"confidence": "high"
|
|
64
|
+
}
|
|
65
|
+
]
|
|
66
|
+
},
|
|
67
|
+
{
|
|
68
|
+
"name": "Metadata: Application Description",
|
|
69
|
+
"id": "AI030230",
|
|
70
|
+
"description": "Metadata: Application Description",
|
|
71
|
+
"tags":[ "Metadata.Application.Description" ],
|
|
72
|
+
"applies_to": [ "VSProject" ],
|
|
73
|
+
"severity": "moderate",
|
|
74
|
+
"patterns": [
|
|
75
|
+
{
|
|
76
|
+
"pattern": "<Description>.*<\/Description>",
|
|
77
|
+
"type": "regex",
|
|
78
|
+
"scopes": [ "code" ],
|
|
79
|
+
"confidence": "high"
|
|
80
|
+
}
|
|
81
|
+
]
|
|
82
|
+
},
|
|
83
|
+
{
|
|
84
|
+
"name": "Metadata: Build Output Type",
|
|
85
|
+
"id": "AI030300",
|
|
86
|
+
"description": "Metadata: Build Output Type",
|
|
87
|
+
"tags":[ "Metadata.Application.Output.Type" ],
|
|
88
|
+
"applies_to": [ "VSProject" ],
|
|
89
|
+
"severity": "moderate",
|
|
90
|
+
"patterns": [
|
|
91
|
+
{
|
|
92
|
+
"pattern": "<OutputType>.*<\/OutputType>",
|
|
93
|
+
"type": "regex",
|
|
94
|
+
"scopes": [ "code" ],
|
|
95
|
+
"confidence": "high"
|
|
96
|
+
},
|
|
97
|
+
{
|
|
98
|
+
"pattern": "<ConfigurationType>.*<\/ConfigurationType>",
|
|
99
|
+
"type": "regex",
|
|
100
|
+
"scopes": [ "code" ],
|
|
101
|
+
"confidence": "high"
|
|
102
|
+
}
|
|
103
|
+
]
|
|
104
|
+
},
|
|
105
|
+
{
|
|
106
|
+
"name": "Metadata: Application Type (Windows Forms)",
|
|
107
|
+
"id": "AI030400",
|
|
108
|
+
"description": "Metadata: Application Type (Windows Forms)",
|
|
109
|
+
"tags":[ "Application.Type.Client.Winforms" ],
|
|
110
|
+
"applies_to": [ "csharp" ],
|
|
111
|
+
"severity": "moderate",
|
|
112
|
+
"patterns": [
|
|
113
|
+
{
|
|
114
|
+
"pattern": "winforms",
|
|
115
|
+
"type": "string",
|
|
116
|
+
"scopes": [ "code" ],
|
|
117
|
+
"modifiers": [ "i" ],
|
|
118
|
+
"confidence": "high"
|
|
119
|
+
}
|
|
120
|
+
]
|
|
121
|
+
},
|
|
122
|
+
{
|
|
123
|
+
"name": "Metadata: Application Type (Service)",
|
|
124
|
+
"id": "AI030500",
|
|
125
|
+
"description": "Metadata: Application Type (Service)",
|
|
126
|
+
"tags":[ "Application.Type.Client.Service.Windows" ],
|
|
127
|
+
"applies_to": [ "csharp" ],
|
|
128
|
+
"severity": "moderate",
|
|
129
|
+
"patterns": [
|
|
130
|
+
{
|
|
131
|
+
"pattern": "ServiceStatus|ServiceController|InstallService",
|
|
132
|
+
"type": "regexword",
|
|
133
|
+
"scopes": [ "code" ],
|
|
134
|
+
"confidence": "high"
|
|
135
|
+
}
|
|
136
|
+
]
|
|
137
|
+
},
|
|
138
|
+
{
|
|
139
|
+
"name": "Metadata: Application Type (Service)",
|
|
140
|
+
"id": "AI030600",
|
|
141
|
+
"description": "Metadata: Application Type (Service)",
|
|
142
|
+
"tags":[ "Application.Type.Client.Service.Windows" ],
|
|
143
|
+
"applies_to": [ "c", "cpp", "shellscript" ],
|
|
144
|
+
"severity": "moderate",
|
|
145
|
+
"patterns": [
|
|
146
|
+
{
|
|
147
|
+
"pattern": "(/etc/rc\\.d/service|/etc/systemd/system)",
|
|
148
|
+
"type": "regex",
|
|
149
|
+
"scopes": [ "code" ],
|
|
150
|
+
"confidence": "high"
|
|
151
|
+
}
|
|
152
|
+
]
|
|
153
|
+
},
|
|
154
|
+
{
|
|
155
|
+
"name": "Metadata: Application Type (Service)",
|
|
156
|
+
"id": "AI030700",
|
|
157
|
+
"description": "Metadata: Application Type (Service)",
|
|
158
|
+
"tags":[ "Application.Type.Client.Service.Windows" ],
|
|
159
|
+
"applies_to": [ "cpp" ],
|
|
160
|
+
"severity": "moderate",
|
|
161
|
+
"patterns": [
|
|
162
|
+
{
|
|
163
|
+
"pattern": "RegisterServiceCtrlHandler|serviceCtrlHandler|StartServiceCtrlDispatcher|SERVICE_STATUS|SERVICE_RUNNING|SERVICE_WIN32|SERVICE_CONTROL",
|
|
164
|
+
"type": "regexword",
|
|
165
|
+
"scopes": [ "code" ],
|
|
166
|
+
"confidence": "high"
|
|
167
|
+
}
|
|
168
|
+
]
|
|
169
|
+
},
|
|
170
|
+
{
|
|
171
|
+
"name": "Metadata: Application Name",
|
|
172
|
+
"id": "AI030800",
|
|
173
|
+
"description": "Metadata: Application Name",
|
|
174
|
+
"tags":[ "Metadata.Application.Name" ],
|
|
175
|
+
"applies_to": [ "pom.xml", "build.gradle", "build.make.xml" ],
|
|
176
|
+
"severity": "moderate",
|
|
177
|
+
"patterns": [
|
|
178
|
+
{
|
|
179
|
+
"pattern": "<artifactId>(.*)<\/artifactId>",
|
|
180
|
+
"type": "regex",
|
|
181
|
+
"scopes": [ "code" ],
|
|
182
|
+
"confidence": "high"
|
|
183
|
+
}
|
|
184
|
+
]
|
|
185
|
+
},
|
|
186
|
+
{
|
|
187
|
+
"name": "Metadata: Application Description",
|
|
188
|
+
"id": "AI030900",
|
|
189
|
+
"description": "Metadata: Application Description",
|
|
190
|
+
"tags":[ "Metadata.Application.Description" ],
|
|
191
|
+
"applies_to": [ "package.json" ],
|
|
192
|
+
"severity": "moderate",
|
|
193
|
+
"patterns": [
|
|
194
|
+
{
|
|
195
|
+
"pattern": "\\\"description\\\"\\s*:\\s*\\\"([^\\\"])+\\\"",
|
|
196
|
+
"type": "regex",
|
|
197
|
+
"scopes": [ "code" ],
|
|
198
|
+
"confidence": "high"
|
|
199
|
+
}
|
|
200
|
+
]
|
|
201
|
+
},
|
|
202
|
+
{
|
|
203
|
+
"name": "Metadata: Application Version",
|
|
204
|
+
"id": "AI031000",
|
|
205
|
+
"description": "Metadata: Application Version",
|
|
206
|
+
"tags":[ "Metadata.Application.Version" ],
|
|
207
|
+
"applies_to": [ "package.json" ],
|
|
208
|
+
"severity": "moderate",
|
|
209
|
+
"patterns": [
|
|
210
|
+
{
|
|
211
|
+
"pattern": "\\\"version\\\"\\s*:\\s*\\\"([^\\\"])+\\\"",
|
|
212
|
+
"type": "regex",
|
|
213
|
+
"scopes": [ "code" ],
|
|
214
|
+
"confidence": "high"
|
|
215
|
+
}
|
|
216
|
+
]
|
|
217
|
+
},
|
|
218
|
+
{
|
|
219
|
+
"name": "Metadata: Application Author",
|
|
220
|
+
"id": "AI031200",
|
|
221
|
+
"description": "Metadata: Application Author",
|
|
222
|
+
"tags":[ "Metadata.Application.Author" ],
|
|
223
|
+
"applies_to": [ "package.json" ],
|
|
224
|
+
"severity": "moderate",
|
|
225
|
+
"patterns": [
|
|
226
|
+
{
|
|
227
|
+
"pattern": "\\\"author\\\"\\s*:\\s*\\\"([^\\\"])+\\\"",
|
|
228
|
+
"type": "regex",
|
|
229
|
+
"scopes": [ "code" ],
|
|
230
|
+
"confidence": "high"
|
|
231
|
+
}
|
|
232
|
+
]
|
|
233
|
+
},
|
|
234
|
+
{
|
|
235
|
+
"name": "Metadata: Application Author",
|
|
236
|
+
"id": "AI031300",
|
|
237
|
+
"description": "Metadata: Application Author",
|
|
238
|
+
"tags":[ "Metadata.Application.Author" ],
|
|
239
|
+
"severity": "moderate",
|
|
240
|
+
"patterns": [
|
|
241
|
+
{
|
|
242
|
+
"pattern": "author[=: ](.*)",
|
|
243
|
+
"type": "regex",
|
|
244
|
+
"scopes": [ "code" ],
|
|
245
|
+
"confidence": "high",
|
|
246
|
+
"modifiers": [ "i" ]
|
|
247
|
+
}
|
|
248
|
+
]
|
|
249
|
+
},
|
|
250
|
+
{
|
|
251
|
+
"name": "Metadata: Application Publisher",
|
|
252
|
+
"id": "AI031400",
|
|
253
|
+
"description": "Metadata: Application Publisher",
|
|
254
|
+
"applies_to": [ "VSProject" ],
|
|
255
|
+
"tags":[ "Metadata.Application.Publisher" ],
|
|
256
|
+
"severity": "moderate",
|
|
257
|
+
"patterns": [
|
|
258
|
+
{
|
|
259
|
+
"pattern": "<PublisherName>.*<\/PublisherName>",
|
|
260
|
+
"type": "regex",
|
|
261
|
+
"scopes": [ "code" ],
|
|
262
|
+
"confidence": "high",
|
|
263
|
+
"_comment": "use as additional author value"
|
|
264
|
+
}
|
|
265
|
+
]
|
|
266
|
+
},
|
|
267
|
+
{
|
|
268
|
+
"name": "Metadata: Target Framework",
|
|
269
|
+
"id": "AI031500",
|
|
270
|
+
"description": "Metadata: Target Framework",
|
|
271
|
+
"tags":[ "Application.Target.Framework" ],
|
|
272
|
+
"severity": "moderate",
|
|
273
|
+
"patterns": [
|
|
274
|
+
{
|
|
275
|
+
"pattern": "<TargetFramework(s)?>.*<\/TargetFramework(s)?>",
|
|
276
|
+
"type": "regex",
|
|
277
|
+
"scopes": [ "code" ],
|
|
278
|
+
"confidence": "high"
|
|
279
|
+
}
|
|
280
|
+
]
|
|
281
|
+
},
|
|
282
|
+
{
|
|
283
|
+
"name": "Metadata: Application Container (Kubernetes)",
|
|
284
|
+
"id": "AI031510",
|
|
285
|
+
"description": "Metadata: Application Container (Kubernetes)",
|
|
286
|
+
"tags":[ "Application.Container.Kubernetes" ],
|
|
287
|
+
"severity": "moderate",
|
|
288
|
+
"patterns": [
|
|
289
|
+
{
|
|
290
|
+
"pattern": "Kubernetes",
|
|
291
|
+
"type": "string",
|
|
292
|
+
"scopes": [ "code" ],
|
|
293
|
+
"modifiers": [ "i" ],
|
|
294
|
+
"confidence": "high"
|
|
295
|
+
}
|
|
296
|
+
]
|
|
297
|
+
},
|
|
298
|
+
{
|
|
299
|
+
"name": "Metadata: Application Container (Docker)",
|
|
300
|
+
"id": "AI031520",
|
|
301
|
+
"description": "Metadata: Application Container (Docker)",
|
|
302
|
+
"tags":[ "Application.Container.Docker" ],
|
|
303
|
+
"severity": "moderate",
|
|
304
|
+
"patterns": [
|
|
305
|
+
{
|
|
306
|
+
"pattern": "Docker|RancherOS",
|
|
307
|
+
"type": "regexword",
|
|
308
|
+
"scopes": [ "code" ],
|
|
309
|
+
"modifiers": [ "i" ],
|
|
310
|
+
"confidence": "high"
|
|
311
|
+
}
|
|
312
|
+
]
|
|
313
|
+
},
|
|
314
|
+
{
|
|
315
|
+
"name": "Metadata: Application Container (rktlet)",
|
|
316
|
+
"id": "AI031530",
|
|
317
|
+
"description": "Metadata: Application Container (rktlet)",
|
|
318
|
+
"tags":[ "Application.Container.rktlet" ],
|
|
319
|
+
"severity": "moderate",
|
|
320
|
+
"patterns": [
|
|
321
|
+
{
|
|
322
|
+
"pattern": "rktlet",
|
|
323
|
+
"type": "string",
|
|
324
|
+
"scopes": [ "code" ],
|
|
325
|
+
"modifiers": [ "i" ],
|
|
326
|
+
"confidence": "high"
|
|
327
|
+
}
|
|
328
|
+
]
|
|
329
|
+
},
|
|
330
|
+
{
|
|
331
|
+
"name": "Metadata: Application Container (CRI-O)",
|
|
332
|
+
"id": "AI031540",
|
|
333
|
+
"description": "Metadata: Application Container (CRI-O)",
|
|
334
|
+
"tags":[ "Application.Container.CRI-O" ],
|
|
335
|
+
"severity": "moderate",
|
|
336
|
+
"patterns": [
|
|
337
|
+
{
|
|
338
|
+
"pattern": "CRI-O",
|
|
339
|
+
"type": "string",
|
|
340
|
+
"scopes": [ "code" ],
|
|
341
|
+
"modifiers": [ "i" ],
|
|
342
|
+
"confidence": "high"
|
|
343
|
+
}
|
|
344
|
+
]
|
|
345
|
+
},
|
|
346
|
+
{
|
|
347
|
+
"name": "Metadata: Application Container (Microsoft Hyper-V)",
|
|
348
|
+
"id": "AI031550",
|
|
349
|
+
"description": "Metadata: Application Container (Microsoft Hyper-V)",
|
|
350
|
+
"tags":[ "Application.Container.Microsoft.Hyper-V" ],
|
|
351
|
+
"severity": "moderate",
|
|
352
|
+
"patterns": [
|
|
353
|
+
{
|
|
354
|
+
"pattern": "hyper-v",
|
|
355
|
+
"type": "string",
|
|
356
|
+
"scopes": [ "code" ],
|
|
357
|
+
"modifiers": [ "i" ],
|
|
358
|
+
"confidence": "high"
|
|
359
|
+
}
|
|
360
|
+
]
|
|
361
|
+
},
|
|
362
|
+
{
|
|
363
|
+
"name": "Metadata: Application Container (Microsoft Server)",
|
|
364
|
+
"id": "AI031560",
|
|
365
|
+
"description": "Metadata: Application Container (Microsoft Server)",
|
|
366
|
+
"tags":[ "Application.Container.Microsoft.Core" ],
|
|
367
|
+
"severity": "moderate",
|
|
368
|
+
"patterns": [
|
|
369
|
+
{
|
|
370
|
+
"pattern": "Nano Server|Server Core",
|
|
371
|
+
"type": "regexword",
|
|
372
|
+
"scopes": [ "code" ],
|
|
373
|
+
"modifiers": [ "i" ],
|
|
374
|
+
"confidence": "high"
|
|
375
|
+
}
|
|
376
|
+
]
|
|
377
|
+
}
|
|
378
|
+
]
|
|
@@ -0,0 +1,18 @@
|
|
|
1
|
+
[
|
|
2
|
+
{
|
|
3
|
+
"name": "Infrastructure As Code: Packers (Hashicorp)",
|
|
4
|
+
"id": "AI031565",
|
|
5
|
+
"description": "Infrastructure As Code: Packers (Hashicorp)",
|
|
6
|
+
"applies_to":[ "json" ],
|
|
7
|
+
"tags":[ "Infrastructure.Packers.Hashicorp" ],
|
|
8
|
+
"severity": "moderate",
|
|
9
|
+
"patterns": [
|
|
10
|
+
{
|
|
11
|
+
"pattern": "builders\": \\[",
|
|
12
|
+
"type": "regex",
|
|
13
|
+
"scopes": [ "code" ],
|
|
14
|
+
"confidence": "medium"
|
|
15
|
+
}
|
|
16
|
+
]
|
|
17
|
+
}
|
|
18
|
+
]
|
|
@@ -0,0 +1,19 @@
|
|
|
1
|
+
[
|
|
2
|
+
{
|
|
3
|
+
"name": "Infrastructure As Code: Terraform (Hashicorp)",
|
|
4
|
+
"id": "AI031566",
|
|
5
|
+
"description": "Infrastructure As Code: Terraform (Hashicorp)",
|
|
6
|
+
"applies_to":[ "terraform" ],
|
|
7
|
+
"tags":[ "Infrastructure.Terraform.Hashicorp" ],
|
|
8
|
+
"severity": "moderate",
|
|
9
|
+
"patterns": [
|
|
10
|
+
{
|
|
11
|
+
"pattern": "terraform",
|
|
12
|
+
"type": "string",
|
|
13
|
+
"scopes": [ "code" ],
|
|
14
|
+
"modifiers": [ "i" ],
|
|
15
|
+
"confidence": "high"
|
|
16
|
+
}
|
|
17
|
+
]
|
|
18
|
+
}
|
|
19
|
+
]
|