@j-schreiber/sf-cli-security-audit 0.18.1 → 0.19.0

package/lib/salesforce/utils.js

@@ -0,0 +1,11 @@
+export function chunkArray(ids, chunkSize) {
+    const chunks = [];
+    for (let i = 0; i < ids.length; i += chunkSize) {
+        chunks.push(ids.slice(i, i + chunkSize));
+    }
+    return chunks;
+}
+export function joinToSoqlIN(ids) {
+    return ids.map((id) => `'${id}'`).join(',');
+}
+//# sourceMappingURL=utils.js.map

package/lib/salesforce/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../src/salesforce/utils.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,UAAU,CAAC,GAAa,EAAE,SAAiB;IACzD,MAAM,MAAM,GAAG,EAAE,CAAC;IAClB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,SAAS,EAAE,CAAC;QAC/C,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,GAAa;IACxC,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC9C,CAAC"}

package/messages/auditShapeValidation.md

@@ -0,0 +1,11 @@
+# RoleNotInDefinition
+
+%s is not a valid role for audit config.
+
+# FailedToParseAuditConfig
+
+Failed to parse audit config at location %s: %s (%s).
+
+# NoAuditConfigFound
+
+Directory is empty or no valid audit config was found. A valid audit config must contain at least one policy.

package/messages/org.audit.run.md

@@ -52,10 +52,6 @@ Audit config has %s accepted risks documented. %s violations were muted.
 
 Full report was written to: %s.
 
-# NoAuditConfigFound
-
-The target directory %s is empty or no valid audit config was found. A valid audit config must contain at least one policy.
-
 # UserPermClassificationRequiredForProfiles
 
 The "Profiles" policy requires at least userPermissions to be initialised, but none were found at the target directory.
@@ -76,6 +72,10 @@ Failed to parse %s: %s.
 
 Verify that your config matches the expected schema.
 
+# error.FailedToValidateAuditConfig
+
+Failed to validate audit config at location %s: Error "%s" at %s.
+
 # info.RemovedViolationRows
 
 %s out of %s violations shown. See report for full results or use --verbose flag.

package/messages/rules.enforceClassificationPresets.md

@@ -1,3 +1,11 @@
+# DuplicateRoleAfterNormalization
+
+Duplicate role identifier after normalization found: %s was already defined, %s will be ignored.
+
+# TriedToAccessRoleThatDoesNotExist
+
+Tried to access a role that does not exist: %s.
+
 # violations.classification-preset-mismatch
 
 Permission is classified as "%s" and not allowed in role "%s".
@@ -21,3 +29,7 @@ Profile assigns the permission, but it was not found in classification. Refresh
 # warnings.permission-not-classified-in-permission-set
 
 PermissionSet assigns the permission, but it was not found in classification. Refresh or add manually.
+
+# error.failed-to-resolve-role
+
+The assigned role "%s" was not valid for this audit. Check your role definitions.

package/messages/rules.users.md

@@ -14,6 +14,10 @@ User was created %s (%s days ago), but never logged in.
 
 %s is used, but classified as UNKNOWN. Cannot audit user role.
 
+# violations.invalid-entity-role
+
+%s is classified with invalid role "%s". Cannot audit user role.
+
 # violations.entity-not-classified-but-used
 
 %s is used, but not classified in %ss policy.

package/oclif.manifest.json

@@ -278,5 +278,5 @@
       ]
     }
   },
-  "version": "0.18.1"
+  "version": "0.19.0"
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@j-schreiber/sf-cli-security-audit",
   "description": "Salesforce CLI plugin to automate highly configurable security audits",
-  "version": "0.18.1",
+  "version": "0.19.0",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/j-schreiber/js-sf-cli-security-audit"
@@ -92,6 +92,7 @@
     "test:nuts": "nyc mocha \"**/*.nut.ts\" --slow 4500 --timeout 600000 --parallel",
     "test:api:nuts": "nyc mocha \"**/salesforce-apis.nut.ts\" --slow 4500 --timeout 600000 --parallel",
     "debug:nuts": "yarn build && nyc mocha \"**/*.nut.ts\" --slow 4500 --timeout 600000 --inspect-brk",
+    "debug:audit-run:nuts": "yarn build && nyc mocha \"**/org.audit.nut.ts\" --slow 4500 --timeout 600000 --inspect-brk",
     "debug:api:nuts": "yarn build && nyc mocha \"**/salesforce-apis.nut.ts\" --slow 4500 --timeout 600000 --inspect-brk",
     "test:only": "wireit",
     "readme": "wireit",