@greenarmor/ges 0.4.0 → 0.5.1

package/dist/commands/audit.js

@@ -1,9 +1,10 @@
 import { Command } from "commander";
 import { ensureGESInitialized, readJsonFile, writeJsonFile } from "../utils/project.js";
-import { getAllPacks } from "@greenarmor/ges-policy-engine";
+import { getPacksForProjectType, getAllPacks } from "@greenarmor/ges-policy-engine";
 import { generateScoreFile, formatScoreOutput } from "@greenarmor/ges-scoring-engine";
 import { runAudit, deduplicateFindings } from "@greenarmor/ges-audit-engine";
 import { showNextStepsMenu } from "../utils/next-steps.js";
+import * as fs from "node:fs";
 import * as path from "node:path";
 export const auditCommand = new Command("audit")
     .description("Run a compliance audit on the project")
@@ -19,14 +20,29 @@ export const auditCommand = new Command("audit")
     const findings = deduplicateFindings(rawFindings);
     console.log(`  Scanned ${scannedFiles} files\n`);
     const frameworks = (config?.frameworks || ["GDPR", "OWASP"]);
-    const controls = getAllPacks().flatMap(p => p.controls);
-    const updatedControls = updateControlsFromFindings(controls, findings);
-    const scoreData = generateScoreFile(updatedControls, frameworks, findings);
+    const projectPacks = getPacksForProjectType(config?.project_type || "generic-web-application");
+    const packIds = new Set(projectPacks.map(p => p.id));
+    const fwLower = new Set(frameworks.map(f => f.toLowerCase()));
+    const allPacks = getAllPacks();
+    for (const p of allPacks) {
+        if (fwLower.has(p.id))
+            packIds.add(p.id);
+    }
+    const controls = allPacks.filter(p => packIds.has(p.id)).flatMap(p => p.controls);
+    const overrides = loadControlOverrides(root);
+    const updatedControls = applyControlOverrides(controls, overrides);
+    const auditedControls = updateControlsFromFindings(updatedControls, findings);
+    const scoreData = generateScoreFile(auditedControls, frameworks, findings);
     writeJsonFile(path.join(root, ".ges", "score.json"), scoreData);
     const critical = findings.filter(f => f.severity === "critical");
     const high = findings.filter(f => f.severity === "high");
     const medium = findings.filter(f => f.severity === "medium");
     const low = findings.filter(f => f.severity === "low");
+    if (overrides.length > 0) {
+        const naCount = overrides.filter(o => o.status === "not-applicable").length;
+        const passCount = overrides.filter(o => o.status === "pass").length;
+        console.log(`  Control overrides: ${naCount} not-applicable, ${passCount} pre-verified\n`);
+    }
     if (options.json) {
         console.log(JSON.stringify({ findings, score: scoreData }, null, 2));
         if (options.ci && critical.length > 0)
@@ -67,8 +83,32 @@ export const auditCommand = new Command("audit")
     }
     await showNextStepsMenu("audit");
 });
+function loadControlOverrides(root) {
+    const overridePath = path.join(root, ".ges", "control-overrides.json");
+    if (!fs.existsSync(overridePath))
+        return [];
+    const overrides = readJsonFile(overridePath);
+    return Array.isArray(overrides) ? overrides : [];
+}
+function applyControlOverrides(controls, overrides) {
+    if (overrides.length === 0)
+        return controls;
+    const overrideMap = new Map(overrides.map(o => [o.control_id, o]));
+    return controls.map(control => {
+        const override = overrideMap.get(control.id);
+        if (!override)
+            return control;
+        return {
+            ...control,
+            status: override.status,
+            checks: control.checks.map(check => ({ ...check, status: override.status })),
+        };
+    });
+}
 function updateControlsFromFindings(controls, findings) {
     return controls.map(control => {
+        if (control.status === "pass" || control.status === "not-applicable")
+            return control;
         const relevantFindings = findings.filter(f => f.controlIds.includes(control.id));
         if (relevantFindings.length === 0)
             return control;

package/dist/commands/badge.js

@@ -1,12 +1,12 @@
 import { Command } from "commander";
 import { ensureGESInitialized, readJsonFile } from "../utils/project.js";
-import { generateBadgeSvg, injectBadgeIntoReadme, computeGrade } from "@greenarmor/ges-scoring-engine";
+import { generateBadgeSvg, injectBadgeIntoReadme, computeGrade, generateScoreExplainer } from "@greenarmor/ges-scoring-engine";
 import { showNextStepsMenu } from "../utils/next-steps.js";
 import * as fs from "node:fs";
 import * as path from "node:path";
 export const badgeCommand = new Command("badge")
     .description("Generate compliance score badge for README")
-    .option("-o, --output <path>", "Output path for badge SVG", ".ges/badge.svg")
+    .option("-o, --output <path>", "Output path for badge SVG", "badge.svg")
     .option("--readme <path>", "README file to inject badge into", "README.md")
     .option("--no-readme", "Do not inject badge into README")
     .action(async (options) => {
@@ -22,6 +22,7 @@ export const badgeCommand = new Command("badge")
     const outputPath = path.resolve(root, options.output);
     fs.mkdirSync(path.dirname(outputPath), { recursive: true });
     fs.writeFileSync(outputPath, svg);
+    const explainer = generateScoreExplainer(score);
     console.log(`\n  Badge generated: ${options.output}`);
     console.log(`  Score: ${score.overall}% (${score.overall_grade ?? computeGrade(score.overall)})`);
     if (options.readme !== false) {
@@ -29,7 +30,7 @@ export const badgeCommand = new Command("badge")
         if (fs.existsSync(readmePath)) {
             const readmeContent = fs.readFileSync(readmePath, "utf-8");
             const relativeBadgePath = path.relative(path.dirname(readmePath), outputPath);
-            const updated = injectBadgeIntoReadme(readmeContent, relativeBadgePath);
+            const updated = injectBadgeIntoReadme(readmeContent, relativeBadgePath, explainer);
             fs.writeFileSync(readmePath, updated);
             console.log(`  Badge injected into ${options.readme}`);
         }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@greenarmor/ges",
-  "version": "0.4.0",
+  "version": "0.5.1",
   "description": "Green Engineering Standard Framework - Compliance-as-Code CLI",
   "type": "module",
   "main": "./dist/index.js",
@@ -13,17 +13,17 @@
   ],
   "dependencies": {
     "commander": "^13.0.0",
-    "@greenarmor/ges-audit-engine": "0.4.0",
-    "@greenarmor/ges-cicd-generator": "0.4.0",
-    "@greenarmor/ges-policy-engine": "0.4.0",
-    "@greenarmor/ges-core": "0.4.0",
-    "@greenarmor/ges-report-generator": "0.4.0",
-    "@greenarmor/ges-compliance-engine": "0.4.0",
-    "@greenarmor/ges-scanner-integration": "0.4.0",
-    "@greenarmor/ges-scoring-engine": "0.4.0",
-    "@greenarmor/ges-rules-engine": "0.4.0",
-    "@greenarmor/ges-mcp-server": "0.4.0",
-    "@greenarmor/ges-doc-generator": "0.4.0"
+    "@greenarmor/ges-audit-engine": "0.5.1",
+    "@greenarmor/ges-cicd-generator": "0.5.1",
+    "@greenarmor/ges-compliance-engine": "0.5.1",
+    "@greenarmor/ges-doc-generator": "0.5.1",
+    "@greenarmor/ges-policy-engine": "0.5.1",
+    "@greenarmor/ges-report-generator": "0.5.1",
+    "@greenarmor/ges-rules-engine": "0.5.1",
+    "@greenarmor/ges-scanner-integration": "0.5.1",
+    "@greenarmor/ges-scoring-engine": "0.5.1",
+    "@greenarmor/ges-mcp-server": "0.5.1",
+    "@greenarmor/ges-core": "0.5.1"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",