@guardbee/mcp-reverse-shield 0.1.1 → 0.2.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +39 -9
- package/TR.md +39 -9
- package/ZH.md +8 -3
- package/dist/__tests__/baseline.test.d.ts +2 -0
- package/dist/__tests__/baseline.test.d.ts.map +1 -0
- package/dist/__tests__/baseline.test.js +130 -0
- package/dist/__tests__/baseline.test.js.map +1 -0
- package/dist/__tests__/fixes.test.d.ts +2 -0
- package/dist/__tests__/fixes.test.d.ts.map +1 -0
- package/dist/__tests__/fixes.test.js +163 -0
- package/dist/__tests__/fixes.test.js.map +1 -0
- package/dist/__tests__/platforms.test.d.ts +2 -0
- package/dist/__tests__/platforms.test.d.ts.map +1 -0
- package/dist/__tests__/platforms.test.js +207 -0
- package/dist/__tests__/platforms.test.js.map +1 -0
- package/dist/__tests__/testFixtures.d.ts +16 -0
- package/dist/__tests__/testFixtures.d.ts.map +1 -1
- package/dist/__tests__/testFixtures.js +71 -0
- package/dist/__tests__/testFixtures.js.map +1 -1
- package/dist/apk.d.ts +1 -0
- package/dist/apk.d.ts.map +1 -1
- package/dist/apk.js +44 -10
- package/dist/apk.js.map +1 -1
- package/dist/baseline.d.ts +36 -0
- package/dist/baseline.d.ts.map +1 -0
- package/dist/baseline.js +87 -0
- package/dist/baseline.js.map +1 -0
- package/dist/cli.js +85 -37
- package/dist/cli.js.map +1 -1
- package/dist/config.d.ts +2 -0
- package/dist/config.d.ts.map +1 -1
- package/dist/config.js +6 -0
- package/dist/config.js.map +1 -1
- package/dist/fixes.d.ts +29 -0
- package/dist/fixes.d.ts.map +1 -0
- package/dist/fixes.js +396 -0
- package/dist/fixes.js.map +1 -0
- package/dist/frameworks.d.ts +19 -0
- package/dist/frameworks.d.ts.map +1 -0
- package/dist/frameworks.js +148 -0
- package/dist/frameworks.js.map +1 -0
- package/dist/index.d.ts +4 -0
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +2 -0
- package/dist/index.js.map +1 -1
- package/dist/ios.d.ts +24 -0
- package/dist/ios.d.ts.map +1 -0
- package/dist/ios.js +170 -0
- package/dist/ios.js.map +1 -0
- package/dist/native.d.ts.map +1 -1
- package/dist/native.js +3 -0
- package/dist/native.js.map +1 -1
- package/dist/plist.d.ts +7 -0
- package/dist/plist.d.ts.map +1 -0
- package/dist/plist.js +156 -0
- package/dist/plist.js.map +1 -0
- package/dist/protoxml.d.ts +14 -0
- package/dist/protoxml.d.ts.map +1 -0
- package/dist/protoxml.js +96 -0
- package/dist/protoxml.js.map +1 -0
- package/dist/rules.d.ts +1 -1
- package/dist/rules.d.ts.map +1 -1
- package/dist/rules.js +65 -0
- package/dist/rules.js.map +1 -1
- package/dist/sarif.d.ts +2 -1
- package/dist/sarif.d.ts.map +1 -1
- package/dist/sarif.js +4 -1
- package/dist/sarif.js.map +1 -1
- package/dist/scanner.d.ts.map +1 -1
- package/dist/scanner.js +47 -7
- package/dist/scanner.js.map +1 -1
- package/dist/server.d.ts +2 -1
- package/dist/server.d.ts.map +1 -1
- package/dist/server.js +28 -5
- package/dist/server.js.map +1 -1
- package/package.json +5 -2
package/dist/apk.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"apk.js","sourceRoot":"","sources":["../src/apk.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,IAAI,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;
|
|
1
|
+
{"version":3,"file":"apk.js","sourceRoot":"","sources":["../src/apk.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,IAAI,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEjD,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AACrE,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAElD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,sBAAsB,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAGnF,MAAM,mBAAmB,GAAG,kBAAkB,CAAC;AAC/C,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AACnF,MAAM,eAAe,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACzC,MAAM,eAAe,GAAG,EAAE,CAAC;AAQ3B,MAAM,UAAU,KAAK,CAAC,QAAgB;IACpC,OAAO,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,QAAgB;IACpC,OAAO,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAClC,CAAC;AAiBD,MAAM,GAAG,GAAW;IAClB,QAAQ,EAAE,wBAAwB;IAClC,KAAK,EAAE,SAAS;IAChB,GAAG,EAAE,mBAAmB;IACxB,GAAG,EAAE,yBAAyB;IAC9B,QAAQ,EAAE,kCAAkC;IAC5C,MAAM,EAAE,6BAA6B;IACrC,MAAM,EAAE,IAAI;CACb,CAAC;AAEF,MAAM,GAAG,GAAW;IAClB,QAAQ,EAAE,wCAAwC;IAClD,KAAK,EAAE,aAAa;IACpB,GAAG,EAAE,+BAA+B;IACpC,GAAG,EAAE,gCAAgC;IACrC,QAAQ,EAAE,wCAAwC;IAClD,MAAM,EAAE,oCAAoC;IAC5C,MAAM,EAAE,KAAK;CACd,CAAC;AAEF,MAAM,UAAU,UAAU,CAAC,QAAgB;IACzC,OAAO,qBAAqB,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,qBAAqB,CAAC,QAAgB,EAAE,MAAc;IAC7D,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC;IACrC,MAAM,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,cAAc,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACzC,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACxE,IAAI,CAAC,aAAa;YAAE,OAAO,IAAI,CAAC;QAEhC,MAAM,IAAI,GAAG,CAAC,CAAW,EAAiB,EAAE,CAAC,CAAC,CAAC,CAAC,gBAAgB,GAAG,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QACpH,MAAM,EAAE,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,GAAG,QAAQ,KAAK,IAAI,EAAE,CAAC;QACpD,MAAM,QAAQ,GAAc,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,IAAI,YAAY,GAAG,CAAC,CAAC;QAErB,iBAAiB;QACjB,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAChE,MAAM,QAAQ,GAAG,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC;QAC9D,MAAM,WAAW,GAAG,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC;QACpE,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QAChG,IAAI,CAAC,QAAQ;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,IAAI,wDAAwD,CAAC,CAAC;QACzG,IAAI,WAAW;YAAE,KAAK,CAAC,IAAI,CAAC,WAAW,WAAW,EAAE,CAAC,CAAC;QAEtD,IAAI,SAAS,CAAC,WAAW,EAAE,YAAY,CAAC,EAAE,KAAK,KAAK,IAAI,EAAE,CAAC;YACzD,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC,CAAC,CAAC;QAC3G,CAAC;QACD,IAAI,SAAS,CAAC,WAAW,EAAE,UAAU,CAAC,EAAE,KAAK,KAAK,IAAI,EAAE,CAAC;YACvD,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC,CAAC;QACxG,CAAC;QACD,MAAM,WAAW,GAAG,SAAS,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QAC1D,IAAI,WAAW,IAAI,WAAW,EAAE,KAAK,KAAK,KAAK,EAAE,CAAC;YAChD,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE;gBAChE,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,gDAAgD;aACrG,CAAC,CAAC,CAAC;QACN,CAAC;QAED,0BAA0B;QAC1B,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAClE,MAAM,WAAW,GAAa,EAAE,CAAC;QACjC,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;YAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YACpB,IAAI,GAAG;gBAAE,WAAW,CAAC,IAAI,CAAC,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC;QACzD,CAAC;QACD,YAAY,IAAI,UAAU,CAAC,MAAM,CAAC;QAClC,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,yEAAyE;YACzE,uEAAuE;YACvE,MAAM,gBAAgB,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC;iBACtC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;iBAC1H,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;iBACrD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;YAClC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;YAC1H,MAAM,OAAO,GAAG,CAAC,GAAG,UAAU,CAAC;iBAC5B,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,oBAAoB,CAAC,WAAW,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;iBAClE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;YAClD,IAAI,OAAO,EAAE,CAAC;gBACZ,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,GAAG,KAAK,OAAO,CAAC,UAAU,mBAAmB,UAAU,CAAC,MAAM,iBAAiB,OAAO,CAAC,UAAU,wBAAwB,CAAC,CAAC;gBACjJ,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;oBACxB,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,oBAAoB,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE;wBAClE,KAAK,EAAE,GAAG,OAAO,CAAC,UAAU,kBAAkB,OAAO,CAAC,GAAG,KAAK,OAAO,CAAC,UAAU,kBAAkB,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;qBAC9H,CAAC,CAAC,CAAC;gBACN,CAAC;YACH,CAAC;QACH,CAAC;QAED,kCAAkC;QAClC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACnE,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC3B,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;gBACnD,KAAK,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;YACvD,CAAC;iBAAM,IAAI,GAAG,EAAE,CAAC;gBACf,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,yBAAyB,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC;gBACvI,QAAQ,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,CAAC,EAAE,GAAG,EAAE,yBAAyB,EAAE,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;gBACvI,YAAY,EAAE,CAAC;YACjB,CAAC;QACH,CAAC;QACD,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC;QACxG,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,YAAY,IAAI,SAAS,CAAC,MAAM,CAAC;YACjC,QAAQ,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,gBAAgB,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACjJ,CAAC;QAED,yBAAyB;QACzB,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;QACtF,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YACpB,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAC3D,YAAY,EAAE,CAAC;YACf,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,QAAQ,IAAI,EAAE,EAAE,CAAC;gBACvC,0EAA0E;gBAC1E,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC;gBACxD,IAAI,CAAC,CAAC,SAAS,KAAK,mBAAmB,IAAI,CAAC,CAAC,SAAS,KAAK,6BAA6B;oBAAE,SAAS;gBACnG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;oBACnB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBACd,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACnB,CAAC;YACH,CAAC;QACH,CAAC;QAED,iCAAiC;QACjC,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,gBAAgB,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC/K,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAE5B,gBAAgB;QAChB,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACnB,KAAK,CAAC,IAAI,CAAC,uFAAuF,CAAC,CAAC;YACpG,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;QAC3C,CAAC;QACD,MAAM,OAAO,GAAG,sBAAsB,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACjD,MAAM,WAAW,GAAG,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,QAAQ,IAAI,EAAE,IAAI,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,QAAQ,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,mBAAmB,CAAC;QACnJ,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oCAAoC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACrF,IAAI,CAAC,WAAW,IAAI,CAAC,KAAK;YAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,gDAAgD,EAAE,CAAC,CAAC,CAAC;aACrI,IAAI,CAAC,WAAW;YAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,uBAAuB,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,qDAAqD,EAAE,CAAC,CAAC,CAAC;;YAC9I,KAAK,CAAC,IAAI,CAAC,uCAAuC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAEjF,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;IAC3C,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;AACH,CAAC"}
|
|
@@ -0,0 +1,36 @@
|
|
|
1
|
+
import type { Finding } from "./finding.js";
|
|
2
|
+
import type { ScanResult } from "./scanner.js";
|
|
3
|
+
export interface Baseline {
|
|
4
|
+
tool: "reverse-shield";
|
|
5
|
+
version: 1;
|
|
6
|
+
createdAt: string;
|
|
7
|
+
grade: ScanResult["grade"];
|
|
8
|
+
fingerprints: string[];
|
|
9
|
+
}
|
|
10
|
+
export interface BaselineDiff {
|
|
11
|
+
/** Findings not in the baseline: what this build newly gives away. */
|
|
12
|
+
added: Finding[];
|
|
13
|
+
/** Baseline fingerprints no longer found: exposures this build closed. */
|
|
14
|
+
fixed: string[];
|
|
15
|
+
unchanged: Finding[];
|
|
16
|
+
previousGrade: ScanResult["grade"];
|
|
17
|
+
}
|
|
18
|
+
/**
|
|
19
|
+
* Where a finding lives, stable across builds: relative to the scanned
|
|
20
|
+
* target, with content hashes (index-3f9a8b2c.js, 7321-dd7cb90a7de65945.js,
|
|
21
|
+
* main.a1b2c3d4.chunk.js) and query strings replaced, so the same exposure
|
|
22
|
+
* in the next build matches instead of showing up as new.
|
|
23
|
+
*/
|
|
24
|
+
export declare function normalizeLocation(file: string | undefined, target: string): string;
|
|
25
|
+
export declare function fingerprint(f: Finding, target: string): string;
|
|
26
|
+
export declare function createBaseline(result: ScanResult): Baseline;
|
|
27
|
+
export declare function readBaseline(path: string): Baseline;
|
|
28
|
+
export declare function writeBaseline(path: string, result: ScanResult): Baseline;
|
|
29
|
+
export declare function compareToBaseline(result: ScanResult, baseline: Baseline): BaselineDiff;
|
|
30
|
+
/**
|
|
31
|
+
* `ignore` entries from guardbee.yml: a rule id silences it everywhere,
|
|
32
|
+
* `rule:path` only where the location contains `path`. For exposures that
|
|
33
|
+
* are intended (a Firebase web key restricted server-side) or accepted.
|
|
34
|
+
*/
|
|
35
|
+
export declare function applyIgnores(result: ScanResult, ignores: string[]): number;
|
|
36
|
+
//# sourceMappingURL=baseline.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"baseline.d.ts","sourceRoot":"","sources":["../src/baseline.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE/C,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,gBAAgB,CAAC;IACvB,OAAO,EAAE,CAAC,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;IAC3B,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,YAAY;IAC3B,sEAAsE;IACtE,KAAK,EAAE,OAAO,EAAE,CAAC;IACjB,0EAA0E;IAC1E,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,SAAS,EAAE,OAAO,EAAE,CAAC;IACrB,aAAa,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;CACpC;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAUlF;AAQD,wBAAgB,WAAW,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAI9D;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,UAAU,GAAG,QAAQ,CAQ3D;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,CAInD;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,QAAQ,CAIxE;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,GAAG,YAAY,CAWtF;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,CAa1E"}
|
package/dist/baseline.js
ADDED
|
@@ -0,0 +1,87 @@
|
|
|
1
|
+
import { readFileSync, writeFileSync } from "fs";
|
|
2
|
+
import { grade } from "./finding.js";
|
|
3
|
+
/**
|
|
4
|
+
* Where a finding lives, stable across builds: relative to the scanned
|
|
5
|
+
* target, with content hashes (index-3f9a8b2c.js, 7321-dd7cb90a7de65945.js,
|
|
6
|
+
* main.a1b2c3d4.chunk.js) and query strings replaced, so the same exposure
|
|
7
|
+
* in the next build matches instead of showing up as new.
|
|
8
|
+
*/
|
|
9
|
+
export function normalizeLocation(file, target) {
|
|
10
|
+
if (!file)
|
|
11
|
+
return "";
|
|
12
|
+
let p = file.split("?")[0].replace(/\\/g, "/");
|
|
13
|
+
let root = target.replace(/\\/g, "/");
|
|
14
|
+
while (root.endsWith("/"))
|
|
15
|
+
root = root.slice(0, -1);
|
|
16
|
+
if (root && p.startsWith(root))
|
|
17
|
+
p = p.slice(root.length).replace(/^\/+/, "");
|
|
18
|
+
return p
|
|
19
|
+
.split("/")
|
|
20
|
+
.map((seg) => seg.split(/([.\-_])/).map((t) => (isContentHash(t) ? "#" : t)).join(""))
|
|
21
|
+
.join("/");
|
|
22
|
+
}
|
|
23
|
+
/** 8–20 alphanumerics that mix digits and letters, or are all caps (esbuild): what bundlers put in file names. */
|
|
24
|
+
function isContentHash(token) {
|
|
25
|
+
if (!/^[A-Za-z0-9]{8,20}$/.test(token))
|
|
26
|
+
return false;
|
|
27
|
+
return (/\d/.test(token) && /[A-Za-z]/.test(token)) || /^[A-Z0-9]+$/.test(token);
|
|
28
|
+
}
|
|
29
|
+
export function fingerprint(f, target) {
|
|
30
|
+
// A file can hold several different keys; keep them apart by what was matched (already masked).
|
|
31
|
+
const detail = f.patternId === "bundle_secret" ? `|${f.match.split(" — ")[0]}` : "";
|
|
32
|
+
return `${f.patternId}|${normalizeLocation(f.file, target)}${detail}`;
|
|
33
|
+
}
|
|
34
|
+
export function createBaseline(result) {
|
|
35
|
+
return {
|
|
36
|
+
tool: "reverse-shield",
|
|
37
|
+
version: 1,
|
|
38
|
+
createdAt: new Date().toISOString(),
|
|
39
|
+
grade: result.grade,
|
|
40
|
+
fingerprints: [...new Set(result.findings.map((f) => fingerprint(f, result.target)))].sort(),
|
|
41
|
+
};
|
|
42
|
+
}
|
|
43
|
+
export function readBaseline(path) {
|
|
44
|
+
const data = JSON.parse(readFileSync(path, "utf8"));
|
|
45
|
+
if (data.tool !== "reverse-shield" || !Array.isArray(data.fingerprints))
|
|
46
|
+
throw new Error(`${path} is not a reverse-shield baseline`);
|
|
47
|
+
return data;
|
|
48
|
+
}
|
|
49
|
+
export function writeBaseline(path, result) {
|
|
50
|
+
const baseline = createBaseline(result);
|
|
51
|
+
writeFileSync(path, `${JSON.stringify(baseline, null, 2)}\n`);
|
|
52
|
+
return baseline;
|
|
53
|
+
}
|
|
54
|
+
export function compareToBaseline(result, baseline) {
|
|
55
|
+
const known = new Set(baseline.fingerprints);
|
|
56
|
+
const seen = new Set();
|
|
57
|
+
const added = [];
|
|
58
|
+
const unchanged = [];
|
|
59
|
+
for (const f of result.findings) {
|
|
60
|
+
const fp = fingerprint(f, result.target);
|
|
61
|
+
seen.add(fp);
|
|
62
|
+
(known.has(fp) ? unchanged : added).push(f);
|
|
63
|
+
}
|
|
64
|
+
return { added, fixed: baseline.fingerprints.filter((fp) => !seen.has(fp)), unchanged, previousGrade: baseline.grade };
|
|
65
|
+
}
|
|
66
|
+
/**
|
|
67
|
+
* `ignore` entries from guardbee.yml: a rule id silences it everywhere,
|
|
68
|
+
* `rule:path` only where the location contains `path`. For exposures that
|
|
69
|
+
* are intended (a Firebase web key restricted server-side) or accepted.
|
|
70
|
+
*/
|
|
71
|
+
export function applyIgnores(result, ignores) {
|
|
72
|
+
if (ignores.length === 0)
|
|
73
|
+
return 0;
|
|
74
|
+
const rules = ignores.map((entry) => {
|
|
75
|
+
const i = entry.indexOf(":");
|
|
76
|
+
return i === -1 ? { id: entry.trim(), path: "" } : { id: entry.slice(0, i).trim(), path: entry.slice(i + 1).trim() };
|
|
77
|
+
});
|
|
78
|
+
const before = result.findings.length;
|
|
79
|
+
result.findings = result.findings.filter((f) => !rules.some((r) => r.id === f.patternId && (r.path === "" || (f.file ?? "").includes(r.path))));
|
|
80
|
+
result.totalFindings = result.findings.length;
|
|
81
|
+
result.grade = grade(result.findings);
|
|
82
|
+
const suppressed = before - result.findings.length;
|
|
83
|
+
if (suppressed > 0)
|
|
84
|
+
result.notes.push(`${suppressed} finding(s) suppressed by ignore rules`);
|
|
85
|
+
return suppressed;
|
|
86
|
+
}
|
|
87
|
+
//# sourceMappingURL=baseline.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"baseline.js","sourceRoot":"","sources":["../src/baseline.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;AACjD,OAAO,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AAqBrC;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAwB,EAAE,MAAc;IACxE,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC/C,IAAI,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACtC,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACpD,IAAI,IAAI,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC7E,OAAO,CAAC;SACL,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;SACrF,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED,kHAAkH;AAClH,SAAS,aAAa,CAAC,KAAa;IAClC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACrD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACnF,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,CAAU,EAAE,MAAc;IACpD,gGAAgG;IAChG,MAAM,MAAM,GAAG,CAAC,CAAC,SAAS,KAAK,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACpF,OAAO,GAAG,CAAC,CAAC,SAAS,IAAI,iBAAiB,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAkB;IAC/C,OAAO;QACL,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,CAAC;QACV,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,YAAY,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;KAC7F,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAsB,CAAC;IACzE,IAAI,IAAI,CAAC,IAAI,KAAK,gBAAgB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,mCAAmC,CAAC,CAAC;IACrI,OAAO,IAAgB,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,MAAkB;IAC5D,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IACxC,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IAC9D,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAAkB,EAAE,QAAkB;IACtE,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,KAAK,GAAc,EAAE,CAAC;IAC5B,MAAM,SAAS,GAAc,EAAE,CAAC;IAChC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QAChC,MAAM,EAAE,GAAG,WAAW,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACb,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC;AACzH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,MAAkB,EAAE,OAAiB;IAChE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QAClC,MAAM,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;IACvH,CAAC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;IACtC,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAChJ,MAAM,CAAC,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;IAC9C,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,UAAU,GAAG,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;IACnD,IAAI,UAAU,GAAG,CAAC;QAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,UAAU,wCAAwC,CAAC,CAAC;IAC7F,OAAO,UAAU,CAAC;AACpB,CAAC"}
|
package/dist/cli.js
CHANGED
|
@@ -1,8 +1,10 @@
|
|
|
1
1
|
#!/usr/bin/env node
|
|
2
|
-
import { readFileSync } from "fs";
|
|
2
|
+
import { existsSync, readFileSync } from "fs";
|
|
3
3
|
import { dirname, resolve } from "path";
|
|
4
4
|
import { fileURLToPath } from "url";
|
|
5
|
+
import { applyIgnores, compareToBaseline, readBaseline, writeBaseline } from "./baseline.js";
|
|
5
6
|
import { configFilePath, loadConfig } from "./config.js";
|
|
7
|
+
import { formatFixReport, patchOf, suggestFixes } from "./fixes.js";
|
|
6
8
|
import { scanUrl } from "./live.js";
|
|
7
9
|
import { buildSarif } from "./sarif.js";
|
|
8
10
|
import { scanPath } from "./scanner.js";
|
|
@@ -49,21 +51,23 @@ function printText(result) {
|
|
|
49
51
|
console.log(` • ${n}`);
|
|
50
52
|
}
|
|
51
53
|
function parseArgs(args) {
|
|
52
|
-
const
|
|
53
|
-
let failOn = "any";
|
|
54
|
-
let format = "text";
|
|
55
|
-
let maxFiles = 5000;
|
|
54
|
+
const out = { positionals: [], failOn: "any", format: "text", maxFiles: 5000, baseline: null, updateBaseline: false };
|
|
56
55
|
for (const arg of args) {
|
|
56
|
+
const value = arg.slice(arg.indexOf("=") + 1);
|
|
57
57
|
if (arg.startsWith("--fail-on="))
|
|
58
|
-
failOn =
|
|
58
|
+
out.failOn = value || "any";
|
|
59
59
|
else if (arg.startsWith("--format="))
|
|
60
|
-
format =
|
|
60
|
+
out.format = value || "text";
|
|
61
61
|
else if (arg.startsWith("--max-files="))
|
|
62
|
-
maxFiles = parseInt(
|
|
62
|
+
out.maxFiles = parseInt(value || "5000", 10);
|
|
63
|
+
else if (arg.startsWith("--baseline="))
|
|
64
|
+
out.baseline = value;
|
|
65
|
+
else if (arg === "--update-baseline")
|
|
66
|
+
out.updateBaseline = true;
|
|
63
67
|
else if (!arg.startsWith("--"))
|
|
64
|
-
positionals.push(arg);
|
|
68
|
+
out.positionals.push(arg);
|
|
65
69
|
}
|
|
66
|
-
return
|
|
70
|
+
return out;
|
|
67
71
|
}
|
|
68
72
|
function shouldFail(findings, failOn) {
|
|
69
73
|
if (failOn === "none")
|
|
@@ -74,47 +78,64 @@ function shouldFail(findings, failOn) {
|
|
|
74
78
|
const threshold = RANK[failOn] ?? 1;
|
|
75
79
|
return findings.some((f) => (RANK[f.severity] ?? 3) <= threshold);
|
|
76
80
|
}
|
|
81
|
+
const DEFAULT_BASELINE = ".reverse-shield-baseline.json";
|
|
77
82
|
async function runCli(rawArgs) {
|
|
78
|
-
const
|
|
79
|
-
const target = positionals[0];
|
|
83
|
+
const args = parseArgs(rawArgs);
|
|
84
|
+
const target = args.positionals[0];
|
|
80
85
|
if (!target) {
|
|
81
|
-
console.error("Usage: guardbee-reverse-shield scan <path|url> [--fail-on=any] [--format=text|json|sarif]");
|
|
86
|
+
console.error("Usage: guardbee-reverse-shield scan <path|url> [--fail-on=any] [--format=text|json|sarif] [--baseline=file] [--update-baseline]");
|
|
82
87
|
process.exit(2);
|
|
83
88
|
}
|
|
89
|
+
const isUrl = /^https?:\/\//i.test(target);
|
|
90
|
+
const cfg = loadConfig(isUrl ? process.cwd() : target, {
|
|
91
|
+
...(args.failOn !== "any" ? { failOn: args.failOn } : {}),
|
|
92
|
+
...(args.maxFiles !== 5000 ? { maxFiles: args.maxFiles } : {}),
|
|
93
|
+
});
|
|
94
|
+
const cfgPath = configFilePath(isUrl ? process.cwd() : target);
|
|
95
|
+
if (cfgPath && args.format === "text")
|
|
96
|
+
process.stderr.write(`[guardbee] Using config: ${cfgPath}\n`);
|
|
84
97
|
let result;
|
|
85
|
-
|
|
86
|
-
|
|
87
|
-
result = await scanUrl(target);
|
|
98
|
+
try {
|
|
99
|
+
result = isUrl ? await scanUrl(target) : scanPath(target, { maxFiles: cfg.maxFiles, exclude: cfg.exclude });
|
|
88
100
|
}
|
|
89
|
-
|
|
90
|
-
|
|
91
|
-
|
|
92
|
-
...(cliMax !== 5000 ? { maxFiles: cliMax } : {}),
|
|
93
|
-
});
|
|
94
|
-
const cfgPath = configFilePath(target);
|
|
95
|
-
if (cfgPath && format === "text")
|
|
96
|
-
process.stderr.write(`[guardbee] Using config: ${cfgPath}\n`);
|
|
97
|
-
failOn = cfg.failOn;
|
|
98
|
-
try {
|
|
99
|
-
result = scanPath(target, { maxFiles: cfg.maxFiles, exclude: cfg.exclude });
|
|
100
|
-
}
|
|
101
|
-
catch (err) {
|
|
102
|
-
console.error(err.message);
|
|
103
|
-
process.exit(2);
|
|
104
|
-
}
|
|
101
|
+
catch (err) {
|
|
102
|
+
console.error(err.message);
|
|
103
|
+
process.exit(2);
|
|
105
104
|
}
|
|
106
|
-
|
|
107
|
-
|
|
105
|
+
applyIgnores(result, cfg.ignore);
|
|
106
|
+
const baselinePath = args.baseline ?? cfg.baseline ?? (args.updateBaseline ? DEFAULT_BASELINE : null);
|
|
107
|
+
if (args.updateBaseline && baselinePath) {
|
|
108
|
+
const written = writeBaseline(baselinePath, result);
|
|
109
|
+
process.stderr.write(`[guardbee] Baseline written: ${baselinePath} (${written.fingerprints.length} finding(s), grade ${written.grade})\n`);
|
|
108
110
|
}
|
|
109
|
-
|
|
110
|
-
|
|
111
|
+
const diff = baselinePath && !args.updateBaseline && existsSync(baselinePath) ? compareToBaseline(result, readBaseline(baselinePath)) : null;
|
|
112
|
+
if (baselinePath && !args.updateBaseline && !diff)
|
|
113
|
+
process.stderr.write(`[guardbee] Baseline not found: ${baselinePath} — every finding counts as new\n`);
|
|
114
|
+
if (args.format === "json") {
|
|
115
|
+
console.log(JSON.stringify(diff ? { ...result, baseline: { added: diff.added.length, fixed: diff.fixed, unchanged: diff.unchanged.length, previousGrade: diff.previousGrade } } : result, null, 2));
|
|
116
|
+
}
|
|
117
|
+
else if (args.format === "sarif") {
|
|
118
|
+
console.log(JSON.stringify(buildSarif(getVersion(), result.findings, diff ? new Set(diff.unchanged) : undefined), null, 2));
|
|
111
119
|
}
|
|
112
120
|
else {
|
|
113
121
|
printText(result);
|
|
122
|
+
if (diff)
|
|
123
|
+
printDiff(diff, result.grade);
|
|
114
124
|
}
|
|
125
|
+
// With a baseline only what this build newly exposes can fail it; what was
|
|
126
|
+
// already accepted stays visible in the report but does not block.
|
|
127
|
+
const gate = diff ? diff.added : result.findings;
|
|
115
128
|
// exitCode, not exit(): a large JSON/SARIF report piped to another process
|
|
116
129
|
// would otherwise be cut off before stdout drains.
|
|
117
|
-
process.exitCode = shouldFail(
|
|
130
|
+
process.exitCode = shouldFail(gate, cfg.failOn) ? 1 : 0;
|
|
131
|
+
}
|
|
132
|
+
function printDiff(diff, grade) {
|
|
133
|
+
console.log("");
|
|
134
|
+
console.log(`Compared to baseline (grade ${diff.previousGrade} → ${grade}): ${diff.added.length} new, ${diff.fixed.length} fixed, ${diff.unchanged.length} unchanged`);
|
|
135
|
+
for (const f of diff.added)
|
|
136
|
+
console.log(` + [${f.severity.toUpperCase()}] ${f.patternId} ${f.file ?? ""}`);
|
|
137
|
+
for (const fp of diff.fixed)
|
|
138
|
+
console.log(` - ${fp.split("|").slice(0, 2).join(" ")}`);
|
|
118
139
|
}
|
|
119
140
|
function printHelp() {
|
|
120
141
|
console.log(`@guardbee/mcp-reverse-shield
|
|
@@ -127,6 +148,8 @@ Usage (MCP server):
|
|
|
127
148
|
Usage (CLI):
|
|
128
149
|
guardbee-reverse-shield scan <path> Scan an artifact or a build output directory
|
|
129
150
|
guardbee-reverse-shield scan <url> Scan a live site's same-site bundles and source maps
|
|
151
|
+
guardbee-reverse-shield suggest <dir> Propose build-config changes for a project (never writes);
|
|
152
|
+
--format=patch prints a diff for git apply
|
|
130
153
|
|
|
131
154
|
Recognised artifacts:
|
|
132
155
|
Web .js .mjs .cjs bundles, .map source maps, build output folders, live URLs
|
|
@@ -140,6 +163,10 @@ Options:
|
|
|
140
163
|
Levels: any (default) | critical | high | medium | low | none
|
|
141
164
|
--format=<fmt> Output format: text (default) | json | sarif
|
|
142
165
|
--max-files=<n> Max files to check in a directory (default: 5000)
|
|
166
|
+
--baseline=<file> Compare with a saved baseline: report new and fixed findings,
|
|
167
|
+
and fail only on new ones (also: baseline: in guardbee.yml)
|
|
168
|
+
--update-baseline Write the current findings as the baseline
|
|
169
|
+
(default file: .reverse-shield-baseline.json)
|
|
143
170
|
|
|
144
171
|
Exit codes:
|
|
145
172
|
0 No issues found (or none above --fail-on threshold)
|
|
@@ -158,6 +185,27 @@ else if (firstArg === "--help" || firstArg === "-h") {
|
|
|
158
185
|
printHelp();
|
|
159
186
|
process.exit(0);
|
|
160
187
|
}
|
|
188
|
+
else if (firstArg === "suggest") {
|
|
189
|
+
const dir = rest.find((a) => !a.startsWith("--"));
|
|
190
|
+
const format = rest.find((a) => a.startsWith("--format="))?.split("=")[1] ?? "text";
|
|
191
|
+
if (!dir) {
|
|
192
|
+
console.error("Usage: guardbee-reverse-shield suggest <project-dir> [--format=text|patch|json]");
|
|
193
|
+
process.exit(2);
|
|
194
|
+
}
|
|
195
|
+
try {
|
|
196
|
+
const report = suggestFixes(dir);
|
|
197
|
+
if (format === "patch")
|
|
198
|
+
process.stdout.write(patchOf(report));
|
|
199
|
+
else if (format === "json")
|
|
200
|
+
console.log(JSON.stringify(report, null, 2));
|
|
201
|
+
else
|
|
202
|
+
console.log(formatFixReport(report));
|
|
203
|
+
}
|
|
204
|
+
catch (err) {
|
|
205
|
+
console.error(err.message);
|
|
206
|
+
process.exit(2);
|
|
207
|
+
}
|
|
208
|
+
}
|
|
161
209
|
else if (firstArg === "scan") {
|
|
162
210
|
runCli(rest).catch((err) => {
|
|
163
211
|
console.error("Error:", err.message);
|
package/dist/cli.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;
|
|
1
|
+
{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE7F,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAEpE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAExC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1D,SAAS,UAAU;IACjB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,SAAS,EAAE,iBAAiB,CAAC,EAAE,MAAM,CAAC,CAAwB,CAAC;QAC3G,OAAO,GAAG,CAAC,OAAO,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC;AAED,MAAM,QAAQ,GAA2B;IACvC,QAAQ,EAAE,IAAI;IACd,IAAI,EAAE,IAAI;IACV,MAAM,EAAE,IAAI;IACZ,GAAG,EAAE,IAAI;CACV,CAAC;AAEF,SAAS,SAAS,CAAC,MAAkB;IACnC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC;IACvF,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,OAAO,CAAC,GAAG,CAAC,WAAW,MAAM,CAAC,KAAK,+CAA+C,MAAM,CAAC,YAAY,aAAa,KAAK,KAAK,MAAM,CAAC,UAAU,KAAK,CAAC,CAAC;IACtJ,CAAC;SAAM,CAAC;QACN,MAAM,MAAM,GAA2B,EAAE,CAAC;QAC1C,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ;YAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACpF,OAAO,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,KAAK,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,uCAAuC,MAAM,CAAC,YAAY,aAAa,KAAK,KAAK,MAAM,CAAC,UAAU,KAAK,CAAC,CAAC;QAC3K,OAAO,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnJ,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YAChC,OAAO,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,WAAW,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC;YACzH,IAAI,CAAC,CAAC,IAAI;gBAAE,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACtG,IAAI,CAAC,CAAC,KAAK;gBAAE,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YAC3D,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC;YACvD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK;QAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AACzD,CAAC;AAWD,SAAS,SAAS,CAAC,IAAc;IAC/B,MAAM,GAAG,GAAY,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;IAC/H,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9C,IAAI,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC;YAAE,GAAG,CAAC,MAAM,GAAG,KAAK,IAAI,KAAK,CAAC;aACzD,IAAI,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC;YAAE,GAAG,CAAC,MAAM,GAAG,KAAK,IAAI,MAAM,CAAC;aAC9D,IAAI,GAAG,CAAC,UAAU,CAAC,cAAc,CAAC;YAAE,GAAG,CAAC,QAAQ,GAAG,QAAQ,CAAC,KAAK,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;aACjF,IAAI,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC;YAAE,GAAG,CAAC,QAAQ,GAAG,KAAK,CAAC;aACxD,IAAI,GAAG,KAAK,mBAAmB;YAAE,GAAG,CAAC,cAAc,GAAG,IAAI,CAAC;aAC3D,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,UAAU,CAAC,QAAmB,EAAE,MAAc;IACrD,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IACpC,IAAI,MAAM,KAAK,KAAK;QAAE,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IACjD,MAAM,IAAI,GAA2B,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;IACjF,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACpC,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,gBAAgB,GAAG,+BAA+B,CAAC;AAEzD,KAAK,UAAU,MAAM,CAAC,OAAiB;IACrC,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAChC,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IACnC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,CAAC,KAAK,CAAC,iIAAiI,CAAC,CAAC;QACjJ,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE;QACrD,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/D,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC/D,IAAI,OAAO,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,OAAO,IAAI,CAAC,CAAC;IAErG,IAAI,MAAkB,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IAC9G,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAE,GAAa,CAAC,OAAO,CAAC,CAAC;QACtC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,YAAY,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAEjC,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACtG,IAAI,IAAI,CAAC,cAAc,IAAI,YAAY,EAAE,CAAC;QACxC,MAAM,OAAO,GAAG,aAAa,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QACpD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,YAAY,KAAK,OAAO,CAAC,YAAY,CAAC,MAAM,sBAAsB,OAAO,CAAC,KAAK,KAAK,CAAC,CAAC;IAC7I,CAAC;IACD,MAAM,IAAI,GAAG,YAAY,IAAI,CAAC,IAAI,CAAC,cAAc,IAAI,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,MAAM,EAAE,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7I,IAAI,YAAY,IAAI,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,IAAI;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,YAAY,kCAAkC,CAAC,CAAC;IAE1J,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACtM,CAAC;SAAM,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QACnC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9H,CAAC;SAAM,CAAC;QACN,SAAS,CAAC,MAAM,CAAC,CAAC;QAClB,IAAI,IAAI;YAAE,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1C,CAAC;IAED,2EAA2E;IAC3E,mEAAmE;IACnE,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC;IACjD,2EAA2E;IAC3E,mDAAmD;IACnD,OAAO,CAAC,QAAQ,GAAG,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,SAAS,CAAC,IAAkB,EAAE,KAAa;IAClD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,+BAA+B,IAAI,CAAC,aAAa,MAAM,KAAK,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,SAAS,IAAI,CAAC,KAAK,CAAC,MAAM,WAAW,IAAI,CAAC,SAAS,CAAC,MAAM,YAAY,CAAC,CAAC;IACvK,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK;QAAE,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;IAC7G,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,KAAK;QAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAC1F,CAAC;AAED,SAAS,SAAS;IAChB,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkCb,CAAC,CAAC;AACH,CAAC;AAED,MAAM,CAAC,EAAE,AAAD,EAAG,QAAQ,EAAE,GAAG,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;AAE7C,IAAI,CAAC,QAAQ,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;IACtC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QAC1B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0CAA0C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC;KAAM,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;IACtD,SAAS,EAAE,CAAC;IACZ,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;KAAM,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;IAClC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC;IACpF,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,CAAC,KAAK,CAAC,iFAAiF,CAAC,CAAC;QACjG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,MAAM,KAAK,OAAO;YAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;aACzD,IAAI,MAAM,KAAK,MAAM;YAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;;YACpE,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAE,GAAa,CAAC,OAAO,CAAC,CAAC;QACtC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;KAAM,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;IAC/B,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QACzB,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;QAChD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC;KAAM,CAAC;IACN,OAAO,CAAC,KAAK,CAAC,oBAAoB,QAAQ,EAAE,CAAC,CAAC;IAC9C,OAAO,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC5C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC"}
|
package/dist/config.d.ts
CHANGED
|
@@ -2,6 +2,8 @@ export interface ReverseShieldConfig {
|
|
|
2
2
|
failOn: string;
|
|
3
3
|
maxFiles: number;
|
|
4
4
|
exclude: string[];
|
|
5
|
+
ignore: string[];
|
|
6
|
+
baseline: string | null;
|
|
5
7
|
}
|
|
6
8
|
export declare function loadConfig(searchDir: string, cliOverrides?: Partial<ReverseShieldConfig>): ReverseShieldConfig;
|
|
7
9
|
export declare function configFilePath(searchDir: string): string | null;
|
package/dist/config.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAcA,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAoFD,wBAAgB,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,GAAE,OAAO,CAAC,mBAAmB,CAAM,GAAG,mBAAmB,CAqBlH;AAED,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAE/D"}
|
package/dist/config.js
CHANGED
|
@@ -4,6 +4,8 @@ const DEFAULTS = {
|
|
|
4
4
|
failOn: "any",
|
|
5
5
|
maxFiles: 5000,
|
|
6
6
|
exclude: [],
|
|
7
|
+
ignore: [],
|
|
8
|
+
baseline: null,
|
|
7
9
|
};
|
|
8
10
|
function findConfigFile(startDir) {
|
|
9
11
|
const names = ["guardbee.yml", "guardbee.yaml", ".guardbee.yml"];
|
|
@@ -89,6 +91,10 @@ export function loadConfig(searchDir, cliOverrides = {}) {
|
|
|
89
91
|
fileConfig.maxFiles = parseInt(section["max-files"], 10);
|
|
90
92
|
if (Array.isArray(section["exclude"]))
|
|
91
93
|
fileConfig.exclude = section["exclude"];
|
|
94
|
+
if (Array.isArray(section["ignore"]))
|
|
95
|
+
fileConfig.ignore = section["ignore"];
|
|
96
|
+
if (typeof section["baseline"] === "string")
|
|
97
|
+
fileConfig.baseline = section["baseline"];
|
|
92
98
|
}
|
|
93
99
|
}
|
|
94
100
|
catch {
|
package/dist/config.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;
|
|
1
|
+
{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAqBrC,MAAM,QAAQ,GAAwB;IACpC,MAAM,EAAE,KAAK;IACb,QAAQ,EAAE,IAAI;IACd,OAAO,EAAE,EAAE;IACX,MAAM,EAAE,EAAE;IACV,QAAQ,EAAE,IAAI;CACf,CAAC;AAEF,SAAS,cAAc,CAAC,QAAgB;IACtC,MAAM,KAAK,GAAG,CAAC,cAAc,EAAE,eAAe,EAAE,eAAe,CAAC,CAAC;IACjE,IAAI,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAE5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC1B,IAAI,UAAU,CAAC,CAAC,CAAC;gBAAE,OAAO,CAAC,CAAC;QAC9B,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAClC,IAAI,MAAM,KAAK,GAAG;YAAE,MAAM;QAC1B,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gFAAgF;AAChF,SAAS,SAAS,CAAC,OAAe;IAChC,MAAM,IAAI,GAA4B,EAAE,CAAC;IACzC,IAAI,cAAc,GAAkB,IAAI,CAAC;IACzC,IAAI,UAAU,GAAkB,IAAI,CAAC;IACrC,IAAI,WAAW,GAAoB,IAAI,CAAC;IAExC,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,SAAS;QAE3B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;QAErD,IAAI,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9C,IAAI,UAAU,IAAI,WAAW,EAAE,CAAC;gBAC7B,IAAI,CAAC,cAAe,CAA6B,CAAC,UAAU,CAAC,GAAG,WAAW,CAAC;gBAC7E,WAAW,GAAG,IAAI,CAAC;gBACnB,UAAU,GAAG,IAAI,CAAC;YACpB,CAAC;YACD,cAAc,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAC1C,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,CAAC;YAC1B,SAAS;QACX,CAAC;QAED,IAAI,MAAM,KAAK,CAAC,IAAI,cAAc,EAAE,CAAC;YACnC,IAAI,UAAU,IAAI,WAAW,EAAE,CAAC;gBAC7B,IAAI,CAAC,cAAc,CAA6B,CAAC,UAAU,CAAC,GAAG,WAAW,CAAC;gBAC5E,WAAW,GAAG,IAAI,CAAC;gBACnB,UAAU,GAAG,IAAI,CAAC;YACpB,CAAC;YACD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACnC,IAAI,QAAQ,KAAK,CAAC,CAAC;gBAAE,SAAS;YAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;YAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAE9C,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;gBACjB,UAAU,GAAG,GAAG,CAAC;gBACjB,WAAW,GAAG,EAAE,CAAC;YACnB,CAAC;iBAAM,CAAC;gBACL,IAAI,CAAC,cAAc,CAA6B,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACjE,CAAC;YACD,SAAS;QACX,CAAC;QAED,IAAI,MAAM,KAAK,CAAC,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;YACzC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;YAC1E,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvB,SAAS;QACX,CAAC;IACH,CAAC;IAED,IAAI,UAAU,IAAI,WAAW,IAAI,cAAc,EAAE,CAAC;QAC/C,IAAI,CAAC,cAAc,CAA6B,CAAC,UAAU,CAAC,GAAG,WAAW,CAAC;IAC9E,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,SAAiB,EAAE,eAA6C,EAAE;IAC3F,MAAM,UAAU,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;IAC7C,IAAI,CAAC,UAAU;QAAE,OAAO,EAAE,GAAG,QAAQ,EAAE,GAAG,YAAY,EAAE,CAAC;IAEzD,IAAI,UAAU,GAAiC,EAAE,CAAC;IAClD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,OAAO,GAAG,MAAM,CAAC,gBAAgB,CAAwC,CAAC;QAChF,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,OAAO,OAAO,CAAC,SAAS,CAAC,KAAK,QAAQ;gBAAE,UAAU,CAAC,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;YACnF,IAAI,OAAO,OAAO,CAAC,WAAW,CAAC,KAAK,QAAQ;gBAAE,UAAU,CAAC,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC;YACvG,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBAAE,UAAU,CAAC,OAAO,GAAG,OAAO,CAAC,SAAS,CAAa,CAAC;YAC3F,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAAE,UAAU,CAAC,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAa,CAAC;YACxF,IAAI,OAAO,OAAO,CAAC,UAAU,CAAC,KAAK,QAAQ;gBAAE,UAAU,CAAC,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;QACzF,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,oCAAoC;IACtC,CAAC;IAED,OAAO,EAAE,GAAG,QAAQ,EAAE,GAAG,UAAU,EAAE,GAAG,YAAY,EAAE,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,SAAiB;IAC9C,OAAO,cAAc,CAAC,SAAS,CAAC,CAAC;AACnC,CAAC"}
|
package/dist/fixes.d.ts
ADDED
|
@@ -0,0 +1,29 @@
|
|
|
1
|
+
export interface FixSuggestion {
|
|
2
|
+
/** Path relative to the project directory, "/"-separated. */
|
|
3
|
+
file: string;
|
|
4
|
+
/** Checks this change addresses. */
|
|
5
|
+
ruleIds: string[];
|
|
6
|
+
title: string;
|
|
7
|
+
/** Unified diff (`git apply`-compatible), or empty when the change cannot be expressed as one. */
|
|
8
|
+
diff: string;
|
|
9
|
+
/** Extra guidance: a snippet to add by hand, a build flag, a caveat. */
|
|
10
|
+
note?: string;
|
|
11
|
+
}
|
|
12
|
+
export interface FixReport {
|
|
13
|
+
project: string;
|
|
14
|
+
suggestions: FixSuggestion[];
|
|
15
|
+
/** Config files that were read. */
|
|
16
|
+
inspected: string[];
|
|
17
|
+
}
|
|
18
|
+
/** One hunk covering every changed line, with three lines of context; enough for config edits. */
|
|
19
|
+
export declare function unifiedDiff(file: string, before: string, after: string): string;
|
|
20
|
+
/**
|
|
21
|
+
* Reads a project's build configuration and proposes the changes that close
|
|
22
|
+
* the exposures reverse-shield reports, as diffs to review and apply. It
|
|
23
|
+
* never writes files.
|
|
24
|
+
*/
|
|
25
|
+
export declare function suggestFixes(projectDir: string): FixReport;
|
|
26
|
+
export declare function formatFixReport(report: FixReport): string;
|
|
27
|
+
/** All diffs concatenated, ready for `git apply`. */
|
|
28
|
+
export declare function patchOf(report: FixReport): string;
|
|
29
|
+
//# sourceMappingURL=fixes.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"fixes.d.ts","sourceRoot":"","sources":["../src/fixes.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,aAAa;IAC5B,6DAA6D;IAC7D,IAAI,EAAE,MAAM,CAAC;IACb,oCAAoC;IACpC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,kGAAkG;IAClG,IAAI,EAAE,MAAM,CAAC;IACb,wEAAwE;IACxE,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,aAAa,EAAE,CAAC;IAC7B,mCAAmC;IACnC,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAgCD,kGAAkG;AAClG,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAmC/E;AAgQD;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,CA2B1D;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,SAAS,GAAG,MAAM,CAYzD;AAED,qDAAqD;AACrD,wBAAgB,OAAO,CAAC,MAAM,EAAE,SAAS,GAAG,MAAM,CAEjD"}
|