@kevinrabun/judges 3.96.0 → 3.97.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +13 -0
- package/dist/cli.d.ts.map +1 -1
- package/dist/cli.js +63 -0
- package/dist/cli.js.map +1 -1
- package/dist/commands/finding-annotation-layer.d.ts +5 -0
- package/dist/commands/finding-annotation-layer.d.ts.map +1 -0
- package/dist/commands/finding-annotation-layer.js +129 -0
- package/dist/commands/finding-annotation-layer.js.map +1 -0
- package/dist/commands/finding-impact-rank.d.ts +5 -0
- package/dist/commands/finding-impact-rank.d.ts.map +1 -0
- package/dist/commands/finding-impact-rank.js +86 -0
- package/dist/commands/finding-impact-rank.js.map +1 -0
- package/dist/commands/finding-risk-score.d.ts +5 -0
- package/dist/commands/finding-risk-score.d.ts.map +1 -0
- package/dist/commands/finding-risk-score.js +96 -0
- package/dist/commands/finding-risk-score.js.map +1 -0
- package/dist/commands/finding-trend-forecast.d.ts +5 -0
- package/dist/commands/finding-trend-forecast.d.ts.map +1 -0
- package/dist/commands/finding-trend-forecast.js +107 -0
- package/dist/commands/finding-trend-forecast.js.map +1 -0
- package/dist/commands/review-compliance-map.d.ts +5 -0
- package/dist/commands/review-compliance-map.d.ts.map +1 -0
- package/dist/commands/review-compliance-map.js +111 -0
- package/dist/commands/review-compliance-map.js.map +1 -0
- package/dist/commands/review-gate-config.d.ts +5 -0
- package/dist/commands/review-gate-config.d.ts.map +1 -0
- package/dist/commands/review-gate-config.js +154 -0
- package/dist/commands/review-gate-config.js.map +1 -0
- package/dist/commands/review-policy-engine.d.ts +5 -0
- package/dist/commands/review-policy-engine.d.ts.map +1 -0
- package/dist/commands/review-policy-engine.js +136 -0
- package/dist/commands/review-policy-engine.js.map +1 -0
- package/dist/commands/review-rollout-plan.d.ts +5 -0
- package/dist/commands/review-rollout-plan.d.ts.map +1 -0
- package/dist/commands/review-rollout-plan.js +124 -0
- package/dist/commands/review-rollout-plan.js.map +1 -0
- package/dist/commands/review-webhook-dispatch.d.ts +5 -0
- package/dist/commands/review-webhook-dispatch.d.ts.map +1 -0
- package/dist/commands/review-webhook-dispatch.js +100 -0
- package/dist/commands/review-webhook-dispatch.js.map +1 -0
- package/package.json +1 -1
- package/server.json +2 -2
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"finding-annotation-layer.d.ts","sourceRoot":"","sources":["../../src/commands/finding-annotation-layer.ts"],"names":[],"mappings":"AAAA;;GAEG;AAsBH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAwI9D"}
|
|
@@ -0,0 +1,129 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Finding-annotation-layer — Add contextual annotations to findings.
|
|
3
|
+
*/
|
|
4
|
+
import { readFileSync, writeFileSync, existsSync } from "fs";
|
|
5
|
+
// ─── CLI ────────────────────────────────────────────────────────────────────
|
|
6
|
+
export function runFindingAnnotationLayer(argv) {
|
|
7
|
+
const storeIdx = argv.indexOf("--store");
|
|
8
|
+
const storePath = storeIdx >= 0 ? argv[storeIdx + 1] : ".judges-annotations.json";
|
|
9
|
+
const formatIdx = argv.indexOf("--format");
|
|
10
|
+
const format = formatIdx >= 0 ? argv[formatIdx + 1] : "table";
|
|
11
|
+
if (argv.includes("--help") || argv.includes("-h")) {
|
|
12
|
+
console.log(`
|
|
13
|
+
judges finding-annotation-layer — Add annotations to findings
|
|
14
|
+
|
|
15
|
+
Usage:
|
|
16
|
+
judges finding-annotation-layer [--store <path>]
|
|
17
|
+
[--annotate <ruleId> --note <text> --author <name> --type <type>]
|
|
18
|
+
[--report <path>] [--remove <ruleId>] [--format table|json]
|
|
19
|
+
|
|
20
|
+
Options:
|
|
21
|
+
--store <path> Annotation store (default: .judges-annotations.json)
|
|
22
|
+
--annotate <rule> Add annotation for ruleId
|
|
23
|
+
--note <text> Annotation text
|
|
24
|
+
--author <name> Author name
|
|
25
|
+
--type <type> Type: context, false-positive, accepted-risk, defer
|
|
26
|
+
--report <path> Overlay annotations onto report findings
|
|
27
|
+
--remove <rule> Remove annotations for ruleId
|
|
28
|
+
--format <fmt> Output format: table (default), json
|
|
29
|
+
--help, -h Show this help
|
|
30
|
+
`);
|
|
31
|
+
return;
|
|
32
|
+
}
|
|
33
|
+
let store;
|
|
34
|
+
if (existsSync(storePath)) {
|
|
35
|
+
store = JSON.parse(readFileSync(storePath, "utf-8"));
|
|
36
|
+
}
|
|
37
|
+
else {
|
|
38
|
+
store = { annotations: [], lastUpdated: new Date().toISOString().split("T")[0] };
|
|
39
|
+
}
|
|
40
|
+
// Add annotation
|
|
41
|
+
const annotateIdx = argv.indexOf("--annotate");
|
|
42
|
+
if (annotateIdx >= 0) {
|
|
43
|
+
const ruleId = argv[annotateIdx + 1];
|
|
44
|
+
const noteIdx = argv.indexOf("--note");
|
|
45
|
+
const authorIdx = argv.indexOf("--author");
|
|
46
|
+
const typeIdx = argv.indexOf("--type");
|
|
47
|
+
const annotation = {
|
|
48
|
+
ruleId,
|
|
49
|
+
note: noteIdx >= 0 ? argv[noteIdx + 1] : "",
|
|
50
|
+
author: authorIdx >= 0 ? argv[authorIdx + 1] : "unknown",
|
|
51
|
+
type: (typeIdx >= 0 ? argv[typeIdx + 1] : "context"),
|
|
52
|
+
createdAt: new Date().toISOString().split("T")[0],
|
|
53
|
+
};
|
|
54
|
+
store.annotations.push(annotation);
|
|
55
|
+
store.lastUpdated = new Date().toISOString().split("T")[0];
|
|
56
|
+
writeFileSync(storePath, JSON.stringify(store, null, 2));
|
|
57
|
+
console.log(`Annotation added for: ${ruleId}`);
|
|
58
|
+
return;
|
|
59
|
+
}
|
|
60
|
+
// Remove annotations
|
|
61
|
+
const removeIdx = argv.indexOf("--remove");
|
|
62
|
+
if (removeIdx >= 0) {
|
|
63
|
+
const ruleId = argv[removeIdx + 1];
|
|
64
|
+
const before = store.annotations.length;
|
|
65
|
+
store.annotations = store.annotations.filter((a) => a.ruleId !== ruleId);
|
|
66
|
+
store.lastUpdated = new Date().toISOString().split("T")[0];
|
|
67
|
+
writeFileSync(storePath, JSON.stringify(store, null, 2));
|
|
68
|
+
console.log(`Removed ${before - store.annotations.length} annotation(s) for: ${ruleId}`);
|
|
69
|
+
return;
|
|
70
|
+
}
|
|
71
|
+
// Overlay on report
|
|
72
|
+
const reportIdx = argv.indexOf("--report");
|
|
73
|
+
if (reportIdx >= 0) {
|
|
74
|
+
const reportPath = argv[reportIdx + 1];
|
|
75
|
+
if (!existsSync(reportPath)) {
|
|
76
|
+
console.error(`Report not found: ${reportPath}`);
|
|
77
|
+
process.exitCode = 1;
|
|
78
|
+
return;
|
|
79
|
+
}
|
|
80
|
+
const report = JSON.parse(readFileSync(reportPath, "utf-8"));
|
|
81
|
+
const findings = report.findings ?? [];
|
|
82
|
+
const annotated = findings.map((f) => {
|
|
83
|
+
const matching = store.annotations.filter((a) => a.ruleId === f.ruleId);
|
|
84
|
+
return {
|
|
85
|
+
ruleId: f.ruleId,
|
|
86
|
+
title: f.title,
|
|
87
|
+
severity: f.severity,
|
|
88
|
+
annotations: matching,
|
|
89
|
+
};
|
|
90
|
+
});
|
|
91
|
+
if (format === "json") {
|
|
92
|
+
console.log(JSON.stringify(annotated, null, 2));
|
|
93
|
+
return;
|
|
94
|
+
}
|
|
95
|
+
console.log(`\nAnnotated Findings`);
|
|
96
|
+
console.log("═".repeat(65));
|
|
97
|
+
for (const af of annotated) {
|
|
98
|
+
console.log(` ${af.ruleId} [${af.severity}] — ${af.title}`);
|
|
99
|
+
if (af.annotations.length > 0) {
|
|
100
|
+
for (const a of af.annotations) {
|
|
101
|
+
console.log(` [${a.type}] ${a.note} (by ${a.author}, ${a.createdAt})`);
|
|
102
|
+
}
|
|
103
|
+
}
|
|
104
|
+
else {
|
|
105
|
+
console.log(" (no annotations)");
|
|
106
|
+
}
|
|
107
|
+
}
|
|
108
|
+
console.log("═".repeat(65));
|
|
109
|
+
return;
|
|
110
|
+
}
|
|
111
|
+
// List all annotations
|
|
112
|
+
if (format === "json") {
|
|
113
|
+
console.log(JSON.stringify(store, null, 2));
|
|
114
|
+
return;
|
|
115
|
+
}
|
|
116
|
+
console.log(`\nFinding Annotations`);
|
|
117
|
+
console.log("═".repeat(65));
|
|
118
|
+
if (store.annotations.length === 0) {
|
|
119
|
+
console.log(" No annotations. Use --annotate <ruleId> to add one.");
|
|
120
|
+
}
|
|
121
|
+
else {
|
|
122
|
+
for (const a of store.annotations) {
|
|
123
|
+
console.log(` ${a.ruleId.padEnd(25)} [${a.type}]`);
|
|
124
|
+
console.log(` ${a.note} — ${a.author} (${a.createdAt})`);
|
|
125
|
+
}
|
|
126
|
+
}
|
|
127
|
+
console.log("═".repeat(65));
|
|
128
|
+
}
|
|
129
|
+
//# sourceMappingURL=finding-annotation-layer.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"finding-annotation-layer.js","sourceRoot":"","sources":["../../src/commands/finding-annotation-layer.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAkB7D,+EAA+E;AAE/E,MAAM,UAAU,yBAAyB,CAAC,IAAc;IACtD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACzC,MAAM,SAAS,GAAG,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,0BAA0B,CAAC;IAClF,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IAE9D,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;CAkBf,CAAC,CAAC;QACC,OAAO;IACT,CAAC;IAED,IAAI,KAAsB,CAAC;IAC3B,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1B,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAoB,CAAC;IAC1E,CAAC;SAAM,CAAC;QACN,KAAK,GAAG,EAAE,WAAW,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACnF,CAAC;IAED,iBAAiB;IACjB,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAC/C,IAAI,WAAW,IAAI,CAAC,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC;QACrC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACvC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAEvC,MAAM,UAAU,GAAe;YAC7B,MAAM;YACN,IAAI,EAAE,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE;YAC3C,MAAM,EAAE,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;YACxD,IAAI,EAAE,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAuB;YAC1E,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;SAClD,CAAC;QAEF,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACnC,KAAK,CAAC,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3D,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACzD,OAAO,CAAC,GAAG,CAAC,yBAAyB,MAAM,EAAE,CAAC,CAAC;QAC/C,OAAO;IACT,CAAC;IAED,qBAAqB;IACrB,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;QACnB,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC;QACxC,KAAK,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;QACzE,KAAK,CAAC,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3D,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACzD,OAAO,CAAC,GAAG,CAAC,WAAW,MAAM,GAAG,KAAK,CAAC,WAAW,CAAC,MAAM,uBAAuB,MAAM,EAAE,CAAC,CAAC;QACzF,OAAO;IACT,CAAC;IAED,oBAAoB;IACpB,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;QACnB,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;QACvC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,KAAK,CAAC,qBAAqB,UAAU,EAAE,CAAC,CAAC;YACjD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAA6B,CAAC;QACzF,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC;QAEvC,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACnC,MAAM,QAAQ,GAAG,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC;YACxE,OAAO;gBACL,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,WAAW,EAAE,QAAQ;aACtB,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAChD,OAAO;QACT,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;QACpC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAE5B,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,MAAM,KAAK,EAAE,CAAC,QAAQ,OAAO,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC;YAC7D,IAAI,EAAE,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC9B,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;oBAC/B,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC;gBAC5E,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5B,OAAO;IACT,CAAC;IAED,uBAAuB;IACvB,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC5C,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;IACrC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAE5B,IAAI,KAAK,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,OAAO,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC;IACvE,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;YAClC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;YACpD,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;AAC9B,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"finding-impact-rank.d.ts","sourceRoot":"","sources":["../../src/commands/finding-impact-rank.ts"],"names":[],"mappings":"AAAA;;GAEG;AA0BH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAsFzD"}
|
|
@@ -0,0 +1,86 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Finding-impact-rank — Rank findings by estimated business impact.
|
|
3
|
+
*/
|
|
4
|
+
import { readFileSync, existsSync } from "fs";
|
|
5
|
+
// ─── Impact model ───────────────────────────────────────────────────────────
|
|
6
|
+
const SEVERITY_IMPACT = {
|
|
7
|
+
critical: 100,
|
|
8
|
+
high: 70,
|
|
9
|
+
medium: 40,
|
|
10
|
+
low: 15,
|
|
11
|
+
info: 5,
|
|
12
|
+
};
|
|
13
|
+
// ─── CLI ────────────────────────────────────────────────────────────────────
|
|
14
|
+
export function runFindingImpactRank(argv) {
|
|
15
|
+
const reportIdx = argv.indexOf("--report");
|
|
16
|
+
const topIdx = argv.indexOf("--top");
|
|
17
|
+
const formatIdx = argv.indexOf("--format");
|
|
18
|
+
const format = formatIdx >= 0 ? argv[formatIdx + 1] : "table";
|
|
19
|
+
const topN = topIdx >= 0 ? parseInt(argv[topIdx + 1], 10) : 0;
|
|
20
|
+
if (argv.includes("--help") || argv.includes("-h")) {
|
|
21
|
+
console.log(`
|
|
22
|
+
judges finding-impact-rank — Rank findings by business impact
|
|
23
|
+
|
|
24
|
+
Usage:
|
|
25
|
+
judges finding-impact-rank --report <path> [--top <n>] [--format table|json]
|
|
26
|
+
|
|
27
|
+
Options:
|
|
28
|
+
--report <path> Report file with findings
|
|
29
|
+
--top <n> Show only top N findings by impact
|
|
30
|
+
--format <fmt> Output format: table (default), json
|
|
31
|
+
--help, -h Show this help
|
|
32
|
+
`);
|
|
33
|
+
return;
|
|
34
|
+
}
|
|
35
|
+
if (reportIdx < 0) {
|
|
36
|
+
console.error("Missing --report <path>");
|
|
37
|
+
process.exitCode = 1;
|
|
38
|
+
return;
|
|
39
|
+
}
|
|
40
|
+
const reportPath = argv[reportIdx + 1];
|
|
41
|
+
if (!existsSync(reportPath)) {
|
|
42
|
+
console.error(`Report not found: ${reportPath}`);
|
|
43
|
+
process.exitCode = 1;
|
|
44
|
+
return;
|
|
45
|
+
}
|
|
46
|
+
const report = JSON.parse(readFileSync(reportPath, "utf-8"));
|
|
47
|
+
const findings = report.findings ?? [];
|
|
48
|
+
if (findings.length === 0) {
|
|
49
|
+
console.log("No findings to rank.");
|
|
50
|
+
return;
|
|
51
|
+
}
|
|
52
|
+
const ranked = findings.map((f) => {
|
|
53
|
+
const baseImpact = SEVERITY_IMPACT[f.severity] ?? 5;
|
|
54
|
+
const conf = f.confidence ?? 0.5;
|
|
55
|
+
const impactScore = Math.round(baseImpact * conf);
|
|
56
|
+
return {
|
|
57
|
+
rank: 0,
|
|
58
|
+
ruleId: f.ruleId,
|
|
59
|
+
severity: f.severity,
|
|
60
|
+
title: f.title,
|
|
61
|
+
impactScore,
|
|
62
|
+
recommendation: f.recommendation,
|
|
63
|
+
};
|
|
64
|
+
});
|
|
65
|
+
ranked.sort((a, b) => b.impactScore - a.impactScore);
|
|
66
|
+
ranked.forEach((r, i) => {
|
|
67
|
+
r.rank = i + 1;
|
|
68
|
+
});
|
|
69
|
+
const display = topN > 0 ? ranked.slice(0, topN) : ranked;
|
|
70
|
+
if (format === "json") {
|
|
71
|
+
console.log(JSON.stringify(display, null, 2));
|
|
72
|
+
return;
|
|
73
|
+
}
|
|
74
|
+
console.log(`\nFinding Impact Ranking`);
|
|
75
|
+
console.log("═".repeat(75));
|
|
76
|
+
console.log(` ${"#".padEnd(5)} ${"Impact".padEnd(8)} ${"Severity".padEnd(10)} ${"Rule".padEnd(25)} Title`);
|
|
77
|
+
console.log(" " + "─".repeat(70));
|
|
78
|
+
for (const r of display) {
|
|
79
|
+
console.log(` ${String(r.rank).padEnd(5)} ${String(r.impactScore).padEnd(8)} ${r.severity.padEnd(10)} ${r.ruleId.padEnd(25)} ${r.title}`);
|
|
80
|
+
}
|
|
81
|
+
const totalImpact = ranked.reduce((sum, r) => sum + r.impactScore, 0);
|
|
82
|
+
const avgImpact = Math.round(totalImpact / ranked.length);
|
|
83
|
+
console.log(`\n Total impact: ${totalImpact} | Average: ${avgImpact} | Findings: ${ranked.length}`);
|
|
84
|
+
console.log("═".repeat(75));
|
|
85
|
+
}
|
|
86
|
+
//# sourceMappingURL=finding-impact-rank.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"finding-impact-rank.js","sourceRoot":"","sources":["../../src/commands/finding-impact-rank.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAG9C,+EAA+E;AAE/E,MAAM,eAAe,GAA6B;IAChD,QAAQ,EAAE,GAAG;IACb,IAAI,EAAE,EAAE;IACR,MAAM,EAAE,EAAE;IACV,GAAG,EAAE,EAAE;IACP,IAAI,EAAE,CAAC;CACR,CAAC;AAWF,+EAA+E;AAE/E,MAAM,UAAU,oBAAoB,CAAC,IAAc;IACjD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IAC9D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAE9D,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;CAWf,CAAC,CAAC;QACC,OAAO;IACT,CAAC;IAED,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;QACzC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;IACvC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,KAAK,CAAC,qBAAqB,UAAU,EAAE,CAAC,CAAC;QACjD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAA6B,CAAC;IACzF,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC;IAEvC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;QACpC,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAoB,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACjD,MAAM,UAAU,GAAG,eAAe,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACpD,MAAM,IAAI,GAAG,CAAC,CAAC,UAAU,IAAI,GAAG,CAAC;QACjC,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;QAElD,OAAO;YACL,IAAI,EAAE,CAAC;YACP,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,WAAW;YACX,cAAc,EAAE,CAAC,CAAC,cAAc;SACjC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC;IACrD,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACtB,CAAC,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACjB,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAE1D,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC9C,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;IACxC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5B,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;IAC5G,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAEnC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CACT,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,CAC9H,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IACtE,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1D,OAAO,CAAC,GAAG,CAAC,qBAAqB,WAAW,eAAe,SAAS,gBAAgB,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACrG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;AAC9B,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"finding-risk-score.d.ts","sourceRoot":"","sources":["../../src/commands/finding-risk-score.ts"],"names":[],"mappings":"AAAA;;GAEG;AAqDH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAuExD"}
|
|
@@ -0,0 +1,96 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Finding-risk-score — Calculate composite risk scores for findings.
|
|
3
|
+
*/
|
|
4
|
+
import { readFileSync, existsSync } from "fs";
|
|
5
|
+
// ─── Scoring ────────────────────────────────────────────────────────────────
|
|
6
|
+
const SEVERITY_WEIGHT = {
|
|
7
|
+
critical: 10,
|
|
8
|
+
high: 7,
|
|
9
|
+
medium: 4,
|
|
10
|
+
low: 2,
|
|
11
|
+
info: 1,
|
|
12
|
+
};
|
|
13
|
+
function scoreFinding(f) {
|
|
14
|
+
const factors = [];
|
|
15
|
+
let score = SEVERITY_WEIGHT[f.severity] ?? 1;
|
|
16
|
+
factors.push(`severity(${f.severity})=${SEVERITY_WEIGHT[f.severity] ?? 1}`);
|
|
17
|
+
const conf = f.confidence ?? 0.5;
|
|
18
|
+
score *= conf;
|
|
19
|
+
factors.push(`confidence=${conf}`);
|
|
20
|
+
if (f.patch !== undefined && f.patch !== null) {
|
|
21
|
+
score *= 1.2;
|
|
22
|
+
factors.push("has-patch(+20%)");
|
|
23
|
+
}
|
|
24
|
+
if (f.isAbsenceBased === true) {
|
|
25
|
+
score *= 0.8;
|
|
26
|
+
factors.push("absence-based(-20%)");
|
|
27
|
+
}
|
|
28
|
+
return {
|
|
29
|
+
ruleId: f.ruleId,
|
|
30
|
+
severity: f.severity,
|
|
31
|
+
title: f.title,
|
|
32
|
+
riskScore: Math.round(score * 100) / 100,
|
|
33
|
+
factors,
|
|
34
|
+
};
|
|
35
|
+
}
|
|
36
|
+
// ─── CLI ────────────────────────────────────────────────────────────────────
|
|
37
|
+
export function runFindingRiskScore(argv) {
|
|
38
|
+
const reportIdx = argv.indexOf("--report");
|
|
39
|
+
const topIdx = argv.indexOf("--top");
|
|
40
|
+
const formatIdx = argv.indexOf("--format");
|
|
41
|
+
const format = formatIdx >= 0 ? argv[formatIdx + 1] : "table";
|
|
42
|
+
const topN = topIdx >= 0 ? parseInt(argv[topIdx + 1], 10) : 0;
|
|
43
|
+
if (argv.includes("--help") || argv.includes("-h")) {
|
|
44
|
+
console.log(`
|
|
45
|
+
judges finding-risk-score — Calculate composite risk scores
|
|
46
|
+
|
|
47
|
+
Usage:
|
|
48
|
+
judges finding-risk-score --report <path> [--top <n>] [--format table|json]
|
|
49
|
+
|
|
50
|
+
Options:
|
|
51
|
+
--report <path> Report file with findings
|
|
52
|
+
--top <n> Show only top N riskiest findings
|
|
53
|
+
--format <fmt> Output format: table (default), json
|
|
54
|
+
--help, -h Show this help
|
|
55
|
+
|
|
56
|
+
Risk score factors: severity weight * confidence * patch bonus * absence penalty
|
|
57
|
+
`);
|
|
58
|
+
return;
|
|
59
|
+
}
|
|
60
|
+
if (reportIdx < 0) {
|
|
61
|
+
console.error("Missing --report <path>");
|
|
62
|
+
process.exitCode = 1;
|
|
63
|
+
return;
|
|
64
|
+
}
|
|
65
|
+
const reportPath = argv[reportIdx + 1];
|
|
66
|
+
if (!existsSync(reportPath)) {
|
|
67
|
+
console.error(`Report not found: ${reportPath}`);
|
|
68
|
+
process.exitCode = 1;
|
|
69
|
+
return;
|
|
70
|
+
}
|
|
71
|
+
const report = JSON.parse(readFileSync(reportPath, "utf-8"));
|
|
72
|
+
const findings = report.findings ?? [];
|
|
73
|
+
if (findings.length === 0) {
|
|
74
|
+
console.log("No findings to score.");
|
|
75
|
+
return;
|
|
76
|
+
}
|
|
77
|
+
const scored = findings.map(scoreFinding);
|
|
78
|
+
scored.sort((a, b) => b.riskScore - a.riskScore);
|
|
79
|
+
const display = topN > 0 ? scored.slice(0, topN) : scored;
|
|
80
|
+
if (format === "json") {
|
|
81
|
+
console.log(JSON.stringify(display, null, 2));
|
|
82
|
+
return;
|
|
83
|
+
}
|
|
84
|
+
console.log(`\nFinding Risk Scores`);
|
|
85
|
+
console.log("═".repeat(70));
|
|
86
|
+
console.log(` ${"Rank".padEnd(6)} ${"Risk".padEnd(8)} ${"Severity".padEnd(10)} ${"Rule".padEnd(25)} Title`);
|
|
87
|
+
console.log(" " + "─".repeat(65));
|
|
88
|
+
for (let i = 0; i < display.length; i++) {
|
|
89
|
+
const s = display[i];
|
|
90
|
+
console.log(` ${String(i + 1).padEnd(6)} ${String(s.riskScore).padEnd(8)} ${s.severity.padEnd(10)} ${s.ruleId.padEnd(25)} ${s.title}`);
|
|
91
|
+
}
|
|
92
|
+
const totalRisk = scored.reduce((sum, s) => sum + s.riskScore, 0);
|
|
93
|
+
console.log(`\n Total risk: ${Math.round(totalRisk * 100) / 100} across ${scored.length} findings`);
|
|
94
|
+
console.log("═".repeat(70));
|
|
95
|
+
}
|
|
96
|
+
//# sourceMappingURL=finding-risk-score.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"finding-risk-score.js","sourceRoot":"","sources":["../../src/commands/finding-risk-score.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAG9C,+EAA+E;AAE/E,MAAM,eAAe,GAA6B;IAChD,QAAQ,EAAE,EAAE;IACZ,IAAI,EAAE,CAAC;IACP,MAAM,EAAE,CAAC;IACT,GAAG,EAAE,CAAC;IACN,IAAI,EAAE,CAAC;CACR,CAAC;AAUF,SAAS,YAAY,CAAC,CAAU;IAC9B,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,KAAK,GAAG,eAAe,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC7C,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,QAAQ,KAAK,eAAe,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAE5E,MAAM,IAAI,GAAG,CAAC,CAAC,UAAU,IAAI,GAAG,CAAC;IACjC,KAAK,IAAI,IAAI,CAAC;IACd,OAAO,CAAC,IAAI,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC;IAEnC,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;QAC9C,KAAK,IAAI,GAAG,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAClC,CAAC;IAED,IAAI,CAAC,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC;QAC9B,KAAK,IAAI,GAAG,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACtC,CAAC;IAED,OAAO;QACL,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC,GAAG,GAAG;QACxC,OAAO;KACR,CAAC;AACJ,CAAC;AAED,+EAA+E;AAE/E,MAAM,UAAU,mBAAmB,CAAC,IAAc;IAChD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IAC9D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAE9D,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;CAaf,CAAC,CAAC;QACC,OAAO;IACT,CAAC;IAED,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;QACzC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;IACvC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,KAAK,CAAC,qBAAqB,UAAU,EAAE,CAAC,CAAC;QACjD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAA6B,CAAC;IACzF,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC;IAEvC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;QACrC,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAC1C,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;IAEjD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAE1D,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC9C,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;IACrC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5B,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;IAC7G,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAEnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACrB,OAAO,CAAC,GAAG,CACT,KAAK,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,CAC3H,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IAClE,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,GAAG,CAAC,GAAG,GAAG,WAAW,MAAM,CAAC,MAAM,WAAW,CAAC,CAAC;IACrG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;AAC9B,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"finding-trend-forecast.d.ts","sourceRoot":"","sources":["../../src/commands/finding-trend-forecast.ts"],"names":[],"mappings":"AAAA;;GAEG;AAyBH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CA2G5D"}
|
|
@@ -0,0 +1,107 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Finding-trend-forecast — Forecast finding trends from historical data.
|
|
3
|
+
*/
|
|
4
|
+
import { readFileSync, existsSync } from "fs";
|
|
5
|
+
// ─── CLI ────────────────────────────────────────────────────────────────────
|
|
6
|
+
export function runFindingTrendForecast(argv) {
|
|
7
|
+
const historyIdx = argv.indexOf("--history");
|
|
8
|
+
const periodsIdx = argv.indexOf("--periods");
|
|
9
|
+
const formatIdx = argv.indexOf("--format");
|
|
10
|
+
const format = formatIdx >= 0 ? argv[formatIdx + 1] : "table";
|
|
11
|
+
const forecastPeriods = periodsIdx >= 0 ? parseInt(argv[periodsIdx + 1], 10) : 1;
|
|
12
|
+
if (argv.includes("--help") || argv.includes("-h")) {
|
|
13
|
+
console.log(`
|
|
14
|
+
judges finding-trend-forecast — Forecast finding trends
|
|
15
|
+
|
|
16
|
+
Usage:
|
|
17
|
+
judges finding-trend-forecast --history <path> [--periods <n>]
|
|
18
|
+
[--format table|json]
|
|
19
|
+
|
|
20
|
+
Options:
|
|
21
|
+
--history <path> History file with periodic data
|
|
22
|
+
--periods <n> Number of periods to forecast (default: 1)
|
|
23
|
+
--format <fmt> Output format: table (default), json
|
|
24
|
+
--help, -h Show this help
|
|
25
|
+
|
|
26
|
+
History file format (JSON array):
|
|
27
|
+
[{"period":"2026-W10","totalFindings":50,"criticalCount":2,"highCount":8,"passRate":85}, ...]
|
|
28
|
+
`);
|
|
29
|
+
return;
|
|
30
|
+
}
|
|
31
|
+
if (historyIdx < 0) {
|
|
32
|
+
console.error("Missing --history <path>");
|
|
33
|
+
process.exitCode = 1;
|
|
34
|
+
return;
|
|
35
|
+
}
|
|
36
|
+
const historyPath = argv[historyIdx + 1];
|
|
37
|
+
if (!existsSync(historyPath)) {
|
|
38
|
+
console.error(`History file not found: ${historyPath}`);
|
|
39
|
+
process.exitCode = 1;
|
|
40
|
+
return;
|
|
41
|
+
}
|
|
42
|
+
const entries = JSON.parse(readFileSync(historyPath, "utf-8"));
|
|
43
|
+
if (entries.length < 2) {
|
|
44
|
+
console.log("Need at least 2 historical data points for forecasting.");
|
|
45
|
+
return;
|
|
46
|
+
}
|
|
47
|
+
// Simple linear regression on totalFindings
|
|
48
|
+
const forecasts = [];
|
|
49
|
+
const n = entries.length;
|
|
50
|
+
for (let p = 0; p < forecastPeriods; p++) {
|
|
51
|
+
const xValues = entries.map((_, i) => i);
|
|
52
|
+
const yTotal = entries.map((e) => e.totalFindings);
|
|
53
|
+
const yCritical = entries.map((e) => e.criticalCount);
|
|
54
|
+
const yHigh = entries.map((e) => e.highCount);
|
|
55
|
+
const slopeTotal = linearSlope(xValues, yTotal);
|
|
56
|
+
const slopeCritical = linearSlope(xValues, yCritical);
|
|
57
|
+
const slopeHigh = linearSlope(xValues, yHigh);
|
|
58
|
+
const predictedFindings = Math.max(0, Math.round(yTotal[n - 1] + slopeTotal * (p + 1)));
|
|
59
|
+
const predictedCritical = Math.max(0, Math.round(yCritical[n - 1] + slopeCritical * (p + 1)));
|
|
60
|
+
const predictedHigh = Math.max(0, Math.round(yHigh[n - 1] + slopeHigh * (p + 1)));
|
|
61
|
+
let trend;
|
|
62
|
+
if (slopeTotal < -1)
|
|
63
|
+
trend = "improving";
|
|
64
|
+
else if (slopeTotal > 1)
|
|
65
|
+
trend = "declining";
|
|
66
|
+
else
|
|
67
|
+
trend = "stable";
|
|
68
|
+
const confidence = Math.max(0.3, Math.min(0.95, 1 - p * 0.15));
|
|
69
|
+
forecasts.push({
|
|
70
|
+
nextPeriod: `${entries[n - 1].period}+${p + 1}`,
|
|
71
|
+
predictedFindings,
|
|
72
|
+
predictedCritical,
|
|
73
|
+
predictedHigh,
|
|
74
|
+
trend,
|
|
75
|
+
confidence: Math.round(confidence * 100) / 100,
|
|
76
|
+
});
|
|
77
|
+
}
|
|
78
|
+
if (format === "json") {
|
|
79
|
+
console.log(JSON.stringify(forecasts, null, 2));
|
|
80
|
+
return;
|
|
81
|
+
}
|
|
82
|
+
console.log(`\nFinding Trend Forecast`);
|
|
83
|
+
console.log("═".repeat(70));
|
|
84
|
+
// Historical
|
|
85
|
+
console.log(" Historical:");
|
|
86
|
+
for (const e of entries) {
|
|
87
|
+
console.log(` ${e.period.padEnd(15)} ${String(e.totalFindings).padEnd(8)} findings (${e.criticalCount} critical, ${e.highCount} high)`);
|
|
88
|
+
}
|
|
89
|
+
console.log("\n Forecast:");
|
|
90
|
+
for (const f of forecasts) {
|
|
91
|
+
console.log(` ${f.nextPeriod.padEnd(15)} ${String(f.predictedFindings).padEnd(8)} findings (${f.predictedCritical} critical, ${f.predictedHigh} high)`);
|
|
92
|
+
console.log(`${"".padEnd(20)} Trend: ${f.trend}, Confidence: ${f.confidence}`);
|
|
93
|
+
}
|
|
94
|
+
console.log("═".repeat(70));
|
|
95
|
+
}
|
|
96
|
+
function linearSlope(x, y) {
|
|
97
|
+
const n = x.length;
|
|
98
|
+
const sumX = x.reduce((a, b) => a + b, 0);
|
|
99
|
+
const sumY = y.reduce((a, b) => a + b, 0);
|
|
100
|
+
const sumXY = x.reduce((a, xi, i) => a + xi * y[i], 0);
|
|
101
|
+
const sumX2 = x.reduce((a, xi) => a + xi * xi, 0);
|
|
102
|
+
const denom = n * sumX2 - sumX * sumX;
|
|
103
|
+
if (denom === 0)
|
|
104
|
+
return 0;
|
|
105
|
+
return (n * sumXY - sumX * sumY) / denom;
|
|
106
|
+
}
|
|
107
|
+
//# sourceMappingURL=finding-trend-forecast.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"finding-trend-forecast.js","sourceRoot":"","sources":["../../src/commands/finding-trend-forecast.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAqB9C,+EAA+E;AAE/E,MAAM,UAAU,uBAAuB,CAAC,IAAc;IACpD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC7C,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IAC9D,MAAM,eAAe,GAAG,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAEjF,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;CAef,CAAC,CAAC;QACC,OAAO;IACT,CAAC;IAED,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;QACnB,OAAO,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC1C,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC;IACzC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7B,OAAO,CAAC,KAAK,CAAC,2BAA2B,WAAW,EAAE,CAAC,CAAC;QACxD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAmB,CAAC;IAEjF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,GAAG,CAAC,yDAAyD,CAAC,CAAC;QACvE,OAAO;IACT,CAAC;IAED,4CAA4C;IAC5C,MAAM,SAAS,GAAe,EAAE,CAAC;IACjC,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;IAEzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,eAAe,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;QACnD,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;QACtD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAE9C,MAAM,UAAU,GAAG,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAChD,MAAM,aAAa,GAAG,WAAW,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACtD,MAAM,SAAS,GAAG,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAE9C,MAAM,iBAAiB,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACxF,MAAM,iBAAiB,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,aAAa,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9F,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAElF,IAAI,KAA2C,CAAC;QAChD,IAAI,UAAU,GAAG,CAAC,CAAC;YAAE,KAAK,GAAG,WAAW,CAAC;aACpC,IAAI,UAAU,GAAG,CAAC;YAAE,KAAK,GAAG,WAAW,CAAC;;YACxC,KAAK,GAAG,QAAQ,CAAC;QAEtB,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;QAE/D,SAAS,CAAC,IAAI,CAAC;YACb,UAAU,EAAE,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE;YAC/C,iBAAiB;YACjB,iBAAiB;YACjB,aAAa;YACb,KAAK;YACL,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC,GAAG,GAAG;SAC/C,CAAC,CAAC;IACL,CAAC;IAED,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAChD,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;IACxC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAE5B,aAAa;IACb,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC7B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CACT,OAAO,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,aAAa,cAAc,CAAC,CAAC,SAAS,QAAQ,CAC9H,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC7B,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CACT,OAAO,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,iBAAiB,cAAc,CAAC,CAAC,aAAa,QAAQ,CAC9I,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,KAAK,iBAAiB,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;IACjF,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,WAAW,CAAC,CAAW,EAAE,CAAW;IAC3C,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;IACnB,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,CAAC,GAAG,KAAK,GAAG,IAAI,GAAG,IAAI,CAAC;IACtC,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAC1B,OAAO,CAAC,CAAC,GAAG,KAAK,GAAG,IAAI,GAAG,IAAI,CAAC,GAAG,KAAK,CAAC;AAC3C,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"review-compliance-map.d.ts","sourceRoot":"","sources":["../../src/commands/review-compliance-map.ts"],"names":[],"mappings":"AAAA;;GAEG;AAwCH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CA4F3D"}
|
|
@@ -0,0 +1,111 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Review-compliance-map — Map findings to compliance frameworks.
|
|
3
|
+
*/
|
|
4
|
+
import { readFileSync, existsSync } from "fs";
|
|
5
|
+
// ─── Framework mappings ─────────────────────────────────────────────────────
|
|
6
|
+
const COMPLIANCE_MAP = {
|
|
7
|
+
"sql-injection": [
|
|
8
|
+
{ framework: "OWASP", control: "A03:2021-Injection" },
|
|
9
|
+
{ framework: "CWE", control: "CWE-89" },
|
|
10
|
+
{ framework: "PCI-DSS", control: "6.5.1" },
|
|
11
|
+
],
|
|
12
|
+
xss: [
|
|
13
|
+
{ framework: "OWASP", control: "A07:2021-XSS" },
|
|
14
|
+
{ framework: "CWE", control: "CWE-79" },
|
|
15
|
+
],
|
|
16
|
+
"hardcoded-secret": [
|
|
17
|
+
{ framework: "OWASP", control: "A02:2021-Crypto" },
|
|
18
|
+
{ framework: "CWE", control: "CWE-798" },
|
|
19
|
+
{ framework: "SOC2", control: "CC6.1" },
|
|
20
|
+
],
|
|
21
|
+
"insecure-auth": [
|
|
22
|
+
{ framework: "OWASP", control: "A07:2021-Auth" },
|
|
23
|
+
{ framework: "CWE", control: "CWE-287" },
|
|
24
|
+
],
|
|
25
|
+
"path-traversal": [
|
|
26
|
+
{ framework: "OWASP", control: "A01:2021-BAC" },
|
|
27
|
+
{ framework: "CWE", control: "CWE-22" },
|
|
28
|
+
],
|
|
29
|
+
};
|
|
30
|
+
// ─── CLI ────────────────────────────────────────────────────────────────────
|
|
31
|
+
export function runReviewComplianceMap(argv) {
|
|
32
|
+
const reportIdx = argv.indexOf("--report");
|
|
33
|
+
const frameworkIdx = argv.indexOf("--framework");
|
|
34
|
+
const formatIdx = argv.indexOf("--format");
|
|
35
|
+
const format = formatIdx >= 0 ? argv[formatIdx + 1] : "table";
|
|
36
|
+
const frameworkFilter = frameworkIdx >= 0 ? argv[frameworkIdx + 1] : "";
|
|
37
|
+
if (argv.includes("--help") || argv.includes("-h")) {
|
|
38
|
+
console.log(`
|
|
39
|
+
judges review-compliance-map — Map findings to compliance frameworks
|
|
40
|
+
|
|
41
|
+
Usage:
|
|
42
|
+
judges review-compliance-map --report <path> [--framework <name>]
|
|
43
|
+
[--format table|json]
|
|
44
|
+
|
|
45
|
+
Options:
|
|
46
|
+
--report <path> Report file with findings
|
|
47
|
+
--framework <name> Filter by framework (OWASP, CWE, PCI-DSS, SOC2)
|
|
48
|
+
--format <fmt> Output format: table (default), json
|
|
49
|
+
--help, -h Show this help
|
|
50
|
+
`);
|
|
51
|
+
return;
|
|
52
|
+
}
|
|
53
|
+
if (reportIdx < 0) {
|
|
54
|
+
console.error("Missing --report <path>");
|
|
55
|
+
process.exitCode = 1;
|
|
56
|
+
return;
|
|
57
|
+
}
|
|
58
|
+
const reportPath = argv[reportIdx + 1];
|
|
59
|
+
if (!existsSync(reportPath)) {
|
|
60
|
+
console.error(`Report not found: ${reportPath}`);
|
|
61
|
+
process.exitCode = 1;
|
|
62
|
+
return;
|
|
63
|
+
}
|
|
64
|
+
const report = JSON.parse(readFileSync(reportPath, "utf-8"));
|
|
65
|
+
const findings = report.findings ?? [];
|
|
66
|
+
const hits = [];
|
|
67
|
+
for (const f of findings) {
|
|
68
|
+
const ruleKey = f.ruleId.split("/").pop() ?? f.ruleId;
|
|
69
|
+
let mappings = COMPLIANCE_MAP[ruleKey] ?? [];
|
|
70
|
+
if (frameworkFilter.length > 0) {
|
|
71
|
+
mappings = mappings.filter((m) => m.framework.toLowerCase() === frameworkFilter.toLowerCase());
|
|
72
|
+
}
|
|
73
|
+
if (mappings.length > 0) {
|
|
74
|
+
hits.push({ ruleId: f.ruleId, title: f.title, frameworks: mappings });
|
|
75
|
+
}
|
|
76
|
+
}
|
|
77
|
+
if (format === "json") {
|
|
78
|
+
console.log(JSON.stringify(hits, null, 2));
|
|
79
|
+
return;
|
|
80
|
+
}
|
|
81
|
+
console.log(`\nCompliance Mapping`);
|
|
82
|
+
console.log("═".repeat(70));
|
|
83
|
+
if (hits.length === 0) {
|
|
84
|
+
console.log(" No compliance mappings found for the given findings.");
|
|
85
|
+
}
|
|
86
|
+
else {
|
|
87
|
+
for (const h of hits) {
|
|
88
|
+
console.log(` ${h.ruleId}`);
|
|
89
|
+
console.log(` ${h.title}`);
|
|
90
|
+
for (const m of h.frameworks) {
|
|
91
|
+
console.log(` → ${m.framework}: ${m.control}`);
|
|
92
|
+
}
|
|
93
|
+
console.log("");
|
|
94
|
+
}
|
|
95
|
+
}
|
|
96
|
+
// Summary by framework
|
|
97
|
+
const frameworkCounts = {};
|
|
98
|
+
for (const h of hits) {
|
|
99
|
+
for (const m of h.frameworks) {
|
|
100
|
+
frameworkCounts[m.framework] = (frameworkCounts[m.framework] ?? 0) + 1;
|
|
101
|
+
}
|
|
102
|
+
}
|
|
103
|
+
if (Object.keys(frameworkCounts).length > 0) {
|
|
104
|
+
console.log(" Summary by Framework:");
|
|
105
|
+
for (const [fw, count] of Object.entries(frameworkCounts)) {
|
|
106
|
+
console.log(` ${fw.padEnd(12)} ${count} finding(s)`);
|
|
107
|
+
}
|
|
108
|
+
}
|
|
109
|
+
console.log("═".repeat(70));
|
|
110
|
+
}
|
|
111
|
+
//# sourceMappingURL=review-compliance-map.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"review-compliance-map.js","sourceRoot":"","sources":["../../src/commands/review-compliance-map.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAG9C,+EAA+E;AAE/E,MAAM,cAAc,GAA6D;IAC/E,eAAe,EAAE;QACf,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,oBAAoB,EAAE;QACrD,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE;QACvC,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE;KAC3C;IACD,GAAG,EAAE;QACH,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE;QAC/C,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE;KACxC;IACD,kBAAkB,EAAE;QAClB,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE;QAClD,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE;QACxC,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE;KACxC;IACD,eAAe,EAAE;QACf,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE;QAChD,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE;KACzC;IACD,gBAAgB,EAAE;QAChB,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE;QAC/C,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE;KACxC;CACF,CAAC;AAQF,+EAA+E;AAE/E,MAAM,UAAU,sBAAsB,CAAC,IAAc;IACnD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IAC9D,MAAM,eAAe,GAAG,YAAY,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAExE,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;CAYf,CAAC,CAAC;QACC,OAAO;IACT,CAAC;IAED,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;QACzC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;IACvC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,KAAK,CAAC,qBAAqB,UAAU,EAAE,CAAC,CAAC;QACjD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAA6B,CAAC;IACzF,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC;IAEvC,MAAM,IAAI,GAAoB,EAAE,CAAC;IAEjC,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC;QACtD,IAAI,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAE7C,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,eAAe,CAAC,WAAW,EAAE,CAAC,CAAC;QACjG,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IAED,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC3C,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IACpC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAE5B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,wDAAwD,CAAC,CAAC;IACxE,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;YAC7B,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YAC9B,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;gBAC7B,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YACpD,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,uBAAuB;IACvB,MAAM,eAAe,GAA2B,EAAE,CAAC;IACnD,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;YAC7B,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5C,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;QACvC,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;YAC1D,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;AAC9B,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"review-gate-config.d.ts","sourceRoot":"","sources":["../../src/commands/review-gate-config.ts"],"names":[],"mappings":"AAAA;;GAEG;AAmCH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CA8JxD"}
|