@kubbisec/ai-linux-x64 0.1.14 → 0.1.16

package/bundled/node_modules/@aspm/shared/dist/dto/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/dto/index.ts"],"names":[],"mappings":";;;AAAA,qFAI2C;AAHzC,kJAAA,+BAA+B,OAAA;AAC/B,gJAAA,6BAA6B,OAAA;AAC7B,8IAAA,2BAA2B,OAAA;AAE7B,uEAAmE;AAA1D,iIAAA,qBAAqB,OAAA;AAC9B,2EAAuE;AAA9D,qIAAA,uBAAuB,OAAA;AAChC,2DAc8B;AAb5B,wHAAA,kBAAkB,OAAA;AAClB,yHAAA,mBAAmB,OAAA;AACnB,wHAAA,kBAAkB,OAAA;AAClB,qHAAA,eAAe,OAAA;AACf,yHAAA,mBAAmB,OAAA;AACnB,iHAAA,WAAW,OAAA;AAOX,sHAAA,gBAAgB,OAAA;AAElB,yDAA2E;AAAlE,oHAAA,eAAe,OAAA;AAAE,wHAAA,mBAAmB,OAAA;AAC7C,mEAA+D;AAAtD,6HAAA,mBAAmB,OAAA;AAC5B,uEAGoC;AAFlC,kIAAA,sBAAsB,OAAA;AACtB,0IAAA,8BAA8B,OAAA;AAEhC,6CAgBuB;AAdrB,4GAAA,aAAa,OAAA;AAIb,iHAAA,kBAAkB,OAAA;AAIlB,uGAAA,QAAQ,OAAA;AAKR,kHAAA,mBAAmB,OAAA;AAErB,mEAA+D;AAAtD,6HAAA,mBAAmB,OAAA;AAC5B,uEAAmE;AAA1D,iIAAA,qBAAqB,OAAA;AAC9B,6EAAyE;AAAhE,uIAAA,wBAAwB,OAAA;AACjC,uEAAmE;AAA1D,iIAAA,qBAAqB,OAAA;AAC9B,uEAAoE;AAA3D,kIAAA,sBAAsB,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/dto/index.ts"],"names":[],"mappings":";;;AAAA,qFAI2C;AAHzC,kJAAA,+BAA+B,OAAA;AAC/B,gJAAA,6BAA6B,OAAA;AAC7B,8IAAA,2BAA2B,OAAA;AAE7B,uEAAmF;AAA1E,iIAAA,qBAAqB,OAAA;AAAE,0HAAA,cAAc,OAAA;AAC9C,2EAA8F;AAArF,qIAAA,uBAAuB,OAAA;AAAE,mIAAA,qBAAqB,OAAA;AACvD,2DAc8B;AAb5B,wHAAA,kBAAkB,OAAA;AAClB,yHAAA,mBAAmB,OAAA;AACnB,wHAAA,kBAAkB,OAAA;AAClB,qHAAA,eAAe,OAAA;AACf,yHAAA,mBAAmB,OAAA;AACnB,iHAAA,WAAW,OAAA;AAOX,sHAAA,gBAAgB,OAAA;AAElB,yDAA2E;AAAlE,oHAAA,eAAe,OAAA;AAAE,wHAAA,mBAAmB,OAAA;AAC7C,mEAA+D;AAAtD,6HAAA,mBAAmB,OAAA;AAC5B,uEAGoC;AAFlC,kIAAA,sBAAsB,OAAA;AACtB,0IAAA,8BAA8B,OAAA;AAEhC,6CAgBuB;AAdrB,4GAAA,aAAa,OAAA;AAIb,iHAAA,kBAAkB,OAAA;AAIlB,uGAAA,QAAQ,OAAA;AAKR,kHAAA,mBAAmB,OAAA;AAErB,mEAA+D;AAAtD,6HAAA,mBAAmB,OAAA;AAC5B,uEAAmE;AAA1D,iIAAA,qBAAqB,OAAA;AAC9B,6EAAyE;AAAhE,uIAAA,wBAAwB,OAAA;AACjC,uEAAmE;AAA1D,iIAAA,qBAAqB,OAAA;AAC9B,uEAAoE;AAA3D,kIAAA,sBAAsB,OAAA"}

package/bundled/node_modules/@aspm/shared/dist/index.d.ts

@@ -1,3 +1,4 @@
+export * from "./security";
 export * from "./ai";
 export * from "./assistant";
 export * from "./cli-user-error";
@@ -10,5 +11,6 @@ export * from "./redaction";
 export * from "./severity-map";
 export * from "./sonar-safe-string";
 export * from "./sort-findings";
+export * from "./project-scanner-summary";
 export * from "./trusted-path";
 //# sourceMappingURL=index.d.ts.map

package/bundled/node_modules/@aspm/shared/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,MAAM,CAAC;AACrB,cAAc,aAAa,CAAC;AAC5B,cAAc,kBAAkB,CAAC;AACjC,cAAc,OAAO,CAAC;AACtB,cAAc,mBAAmB,CAAC;AAClC,cAAc,SAAS,CAAC;AACxB,cAAc,gCAAgC,CAAC;AAC/C,cAAc,QAAQ,CAAC;AACvB,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,qBAAqB,CAAC;AACpC,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,MAAM,CAAC;AACrB,cAAc,aAAa,CAAC;AAC5B,cAAc,kBAAkB,CAAC;AACjC,cAAc,OAAO,CAAC;AACtB,cAAc,mBAAmB,CAAC;AAClC,cAAc,SAAS,CAAC;AACxB,cAAc,gCAAgC,CAAC;AAC/C,cAAc,QAAQ,CAAC;AACvB,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,qBAAqB,CAAC;AACpC,cAAc,iBAAiB,CAAC;AAChC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,gBAAgB,CAAC"}

package/bundled/node_modules/@aspm/shared/dist/index.js

@@ -14,6 +14,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./security"), exports);
 __exportStar(require("./ai"), exports);
 __exportStar(require("./assistant"), exports);
 __exportStar(require("./cli-user-error"), exports);
@@ -26,5 +27,6 @@ __exportStar(require("./redaction"), exports);
 __exportStar(require("./severity-map"), exports);
 __exportStar(require("./sonar-safe-string"), exports);
 __exportStar(require("./sort-findings"), exports);
+__exportStar(require("./project-scanner-summary"), exports);
 __exportStar(require("./trusted-path"), exports);
 //# sourceMappingURL=index.js.map

package/bundled/node_modules/@aspm/shared/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,uCAAqB;AACrB,8CAA4B;AAC5B,mDAAiC;AACjC,wCAAsB;AACtB,oDAAkC;AAClC,0CAAwB;AACxB,iEAA+C;AAC/C,yCAAuB;AACvB,8CAA4B;AAC5B,iDAA+B;AAC/B,sDAAoC;AACpC,kDAAgC;AAChC,iDAA+B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,6CAA2B;AAC3B,uCAAqB;AACrB,8CAA4B;AAC5B,mDAAiC;AACjC,wCAAsB;AACtB,oDAAkC;AAClC,0CAAwB;AACxB,iEAA+C;AAC/C,yCAAuB;AACvB,8CAA4B;AAC5B,iDAA+B;AAC/B,sDAAoC;AACpC,kDAAgC;AAChC,4DAA0C;AAC1C,iDAA+B"}

package/bundled/node_modules/@aspm/shared/dist/project-scanner-summary.d.ts

@@ -0,0 +1,21 @@
+import { ScanSource } from "./enums";
+/** Scanners surfaced on project detail scanner tabs. */
+export declare const PROJECT_SCANNER_SUMMARY_SOURCES: readonly [ScanSource.TRIVY, ScanSource.SEMGREP, ScanSource.SONAR];
+export type ProjectScannerSummarySource = (typeof PROJECT_SCANNER_SUMMARY_SOURCES)[number];
+export type ProjectScannerSourceSummary = {
+    totalActive: number;
+    criticalCount: number;
+    highCount: number;
+    mediumCount: number;
+    lowCount: number;
+    infoCount: number;
+    latestReportId: string | null;
+    latestReportImportedAt: string | null;
+};
+export type ProjectScannerSummaryResponse = {
+    summaries: Partial<Record<ScanSource, ProjectScannerSourceSummary>>;
+};
+export declare function isScanSource(value: string): value is ScanSource;
+export declare function parseProjectScannerSummarySources(raw: string | undefined | null): ProjectScannerSummarySource[];
+export declare function emptyProjectScannerSourceSummary(): ProjectScannerSourceSummary;
+//# sourceMappingURL=project-scanner-summary.d.ts.map

package/bundled/node_modules/@aspm/shared/dist/project-scanner-summary.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-scanner-summary.d.ts","sourceRoot":"","sources":["../src/project-scanner-summary.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAErC,wDAAwD;AACxD,eAAO,MAAM,+BAA+B,mEAIlC,CAAC;AAEX,MAAM,MAAM,2BAA2B,GAAG,CAAC,OAAO,+BAA+B,CAAC,CAAC,MAAM,CAAC,CAAC;AAE3F,MAAM,MAAM,2BAA2B,GAAG;IACxC,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAC;CACvC,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG;IAC1C,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,2BAA2B,CAAC,CAAC,CAAC;CACrE,CAAC;AAIF,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,UAAU,CAE/D;AAED,wBAAgB,iCAAiC,CAC/C,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAC7B,2BAA2B,EAAE,CAuB/B;AAED,wBAAgB,gCAAgC,IAAI,2BAA2B,CAW9E"}

package/bundled/node_modules/@aspm/shared/dist/project-scanner-summary.js

@@ -0,0 +1,56 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PROJECT_SCANNER_SUMMARY_SOURCES = void 0;
+exports.isScanSource = isScanSource;
+exports.parseProjectScannerSummarySources = parseProjectScannerSummarySources;
+exports.emptyProjectScannerSourceSummary = emptyProjectScannerSourceSummary;
+const enums_1 = require("./enums");
+/** Scanners surfaced on project detail scanner tabs. */
+exports.PROJECT_SCANNER_SUMMARY_SOURCES = [
+    enums_1.ScanSource.TRIVY,
+    enums_1.ScanSource.SEMGREP,
+    enums_1.ScanSource.SONAR,
+];
+const SCAN_SOURCE_SET = new Set(Object.values(enums_1.ScanSource));
+function isScanSource(value) {
+    return SCAN_SOURCE_SET.has(value);
+}
+function parseProjectScannerSummarySources(raw) {
+    if (!raw?.trim()) {
+        return [...exports.PROJECT_SCANNER_SUMMARY_SOURCES];
+    }
+    const parsed = [];
+    const seen = new Set();
+    for (const part of raw.split(",")) {
+        const token = part.trim().toUpperCase();
+        if (!token)
+            continue;
+        if (!isScanSource(token)) {
+            throw new Error(`Invalid scanner source: ${part.trim()}`);
+        }
+        if (!exports.PROJECT_SCANNER_SUMMARY_SOURCES.includes(token)) {
+            throw new Error(`Unsupported scanner source for summary: ${part.trim()}`);
+        }
+        if (seen.has(token))
+            continue;
+        seen.add(token);
+        parsed.push(token);
+    }
+    if (parsed.length === 0) {
+        return [...exports.PROJECT_SCANNER_SUMMARY_SOURCES];
+    }
+    return parsed;
+}
+function emptyProjectScannerSourceSummary() {
+    return {
+        totalActive: 0,
+        criticalCount: 0,
+        highCount: 0,
+        mediumCount: 0,
+        lowCount: 0,
+        infoCount: 0,
+        latestReportId: null,
+        latestReportImportedAt: null,
+    };
+}
+//# sourceMappingURL=project-scanner-summary.js.map

package/bundled/node_modules/@aspm/shared/dist/project-scanner-summary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-scanner-summary.js","sourceRoot":"","sources":["../src/project-scanner-summary.ts"],"names":[],"mappings":";;;AA4BA,oCAEC;AAED,8EAyBC;AAED,4EAWC;AAtED,mCAAqC;AAErC,wDAAwD;AAC3C,QAAA,+BAA+B,GAAG;IAC7C,kBAAU,CAAC,KAAK;IAChB,kBAAU,CAAC,OAAO;IAClB,kBAAU,CAAC,KAAK;CACR,CAAC;AAmBX,MAAM,eAAe,GAAG,IAAI,GAAG,CAAS,MAAM,CAAC,MAAM,CAAC,kBAAU,CAAC,CAAC,CAAC;AAEnE,SAAgB,YAAY,CAAC,KAAa;IACxC,OAAO,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AACpC,CAAC;AAED,SAAgB,iCAAiC,CAC/C,GAA8B;IAE9B,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,uCAA+B,CAAC,CAAC;IAC9C,CAAC;IACD,MAAM,MAAM,GAAkC,EAAE,CAAC;IACjD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACxC,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,2BAA2B,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,CAAC,uCAA+B,CAAC,QAAQ,CAAC,KAAoC,CAAC,EAAE,CAAC;YACpF,MAAM,IAAI,KAAK,CAAC,2CAA2C,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,SAAS;QAC9B,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC,KAAoC,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,uCAA+B,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAgB,gCAAgC;IAC9C,OAAO;QACL,WAAW,EAAE,CAAC;QACd,aAAa,EAAE,CAAC;QAChB,SAAS,EAAE,CAAC;QACZ,WAAW,EAAE,CAAC;QACd,QAAQ,EAAE,CAAC;QACX,SAAS,EAAE,CAAC;QACZ,cAAc,EAAE,IAAI;QACpB,sBAAsB,EAAE,IAAI;KAC7B,CAAC;AACJ,CAAC"}

package/bundled/node_modules/@aspm/shared/dist/rbac/better-auth-org-roles.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"better-auth-org-roles.d.ts","sourceRoot":"","sources":["../../src/rbac/better-auth-org-roles.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAE1D,mGAAmG;AACnG,eAAO,MAAM,4BAA4B;;;;;;CAMY,CAAC;AAEtD,eAAO,MAAM,uBAAuB,EAAE;IAAE,KAAK,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,EAK1E,CAAC;AAEF,8EAA8E;AAC9E,eAAO,MAAM,uBAAuB,EAAE;IAAE,KAAK,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,EAI1E,CAAC;AAEF,+FAA+F;AAC/F,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,WAAW,CAyBlF;AAED,8EAA8E;AAC9E,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,WAAW,GAAG,WAAW,CAElE"}
+{"version":3,"file":"better-auth-org-roles.d.ts","sourceRoot":"","sources":["../../src/rbac/better-auth-org-roles.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAE1D,mGAAmG;AACnG,eAAO,MAAM,4BAA4B;;;;;;CAMY,CAAC;AAEtD,eAAO,MAAM,uBAAuB,EAAE;IAAE,KAAK,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,EAK1E,CAAC;AAEF,8EAA8E;AAC9E,eAAO,MAAM,uBAAuB,EAAE;IAAE,KAAK,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,EAG1E,CAAC;AAEF,+FAA+F;AAC/F,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,WAAW,CAyBlF;AAED,8EAA8E;AAC9E,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,WAAW,GAAG,WAAW,CAElE"}

package/bundled/node_modules/@aspm/shared/dist/rbac/better-auth-org-roles.js

@@ -20,7 +20,6 @@ exports.ORG_INVITE_ROLE_OPTIONS = [
 /** All assignable org roles (invites exclude org_administrator by design). */
 exports.ORG_MEMBER_ROLE_OPTIONS = [
     { value: "org_administrator", label: "Administrador da organização" },
-    { value: "org_finance", label: "Financeiro" },
     ...exports.ORG_INVITE_ROLE_OPTIONS,
 ];
 /** Maps legacy Better Auth roles and Kubbisec slugs stored in DB → canonical `OrgRoleSlug`. */

package/bundled/node_modules/@aspm/shared/dist/rbac/better-auth-org-roles.js.map

@@ -1 +1 @@
-{"version":3,"file":"better-auth-org-roles.js","sourceRoot":"","sources":["../../src/rbac/better-auth-org-roles.ts"],"names":[],"mappings":";;;AA0BA,wDAyBC;AAGD,kDAEC;AAtDD,mGAAmG;AACtF,QAAA,4BAA4B,GAAG;IAC1C,iBAAiB,EAAE,mBAAmB;IACtC,WAAW,EAAE,aAAa;IAC1B,qBAAqB,EAAE,uBAAuB;IAC9C,qBAAqB,EAAE,uBAAuB;IAC9C,YAAY,EAAE,cAAc;CACuB,CAAC;AAEzC,QAAA,uBAAuB,GAA4C;IAC9E,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,YAAY,EAAE;IAC7C,EAAE,KAAK,EAAE,uBAAuB,EAAE,KAAK,EAAE,oBAAoB,EAAE;IAC/D,EAAE,KAAK,EAAE,uBAAuB,EAAE,KAAK,EAAE,kBAAkB,EAAE;IAC7D,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,YAAY,EAAE;CAC/C,CAAC;AAEF,8EAA8E;AACjE,QAAA,uBAAuB,GAA4C;IAC9E,EAAE,KAAK,EAAE,mBAAmB,EAAE,KAAK,EAAE,8BAA8B,EAAE;IACrE,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,YAAY,EAAE;IAC7C,GAAG,+BAAuB;CAC3B,CAAC;AAEF,+FAA+F;AAC/F,SAAgB,sBAAsB,CAAC,GAA8B;IACnE,IAAI,CAAC,GAAG;QAAE,OAAO,cAAc,CAAC;IAChC,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACrB,IACE,CAAC,KAAK,mBAAmB;QACzB,CAAC,KAAK,aAAa;QACnB,CAAC,KAAK,uBAAuB;QAC7B,CAAC,KAAK,uBAAuB;QAC7B,CAAC,KAAK,cAAc,EACpB,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IAC9B,IACE,KAAK,KAAK,OAAO;QACjB,KAAK,KAAK,OAAO;QACjB,KAAK,KAAK,eAAe;QACzB,KAAK,KAAK,WAAW,EACrB,CAAC;QACD,OAAO,mBAAmB,CAAC;IAC7B,CAAC;IACD,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,YAAY,EAAE,CAAC;QACjD,OAAO,uBAAuB,CAAC;IACjC,CAAC;IACD,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,8EAA8E;AAC9E,SAAgB,mBAAmB,CAAC,IAAiB;IACnD,OAAO,oCAA4B,CAAC,IAAI,CAAC,CAAC;AAC5C,CAAC"}
+{"version":3,"file":"better-auth-org-roles.js","sourceRoot":"","sources":["../../src/rbac/better-auth-org-roles.ts"],"names":[],"mappings":";;;AAyBA,wDAyBC;AAGD,kDAEC;AArDD,mGAAmG;AACtF,QAAA,4BAA4B,GAAG;IAC1C,iBAAiB,EAAE,mBAAmB;IACtC,WAAW,EAAE,aAAa;IAC1B,qBAAqB,EAAE,uBAAuB;IAC9C,qBAAqB,EAAE,uBAAuB;IAC9C,YAAY,EAAE,cAAc;CACuB,CAAC;AAEzC,QAAA,uBAAuB,GAA4C;IAC9E,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,YAAY,EAAE;IAC7C,EAAE,KAAK,EAAE,uBAAuB,EAAE,KAAK,EAAE,oBAAoB,EAAE;IAC/D,EAAE,KAAK,EAAE,uBAAuB,EAAE,KAAK,EAAE,kBAAkB,EAAE;IAC7D,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,YAAY,EAAE;CAC/C,CAAC;AAEF,8EAA8E;AACjE,QAAA,uBAAuB,GAA4C;IAC9E,EAAE,KAAK,EAAE,mBAAmB,EAAE,KAAK,EAAE,8BAA8B,EAAE;IACrE,GAAG,+BAAuB;CAC3B,CAAC;AAEF,+FAA+F;AAC/F,SAAgB,sBAAsB,CAAC,GAA8B;IACnE,IAAI,CAAC,GAAG;QAAE,OAAO,cAAc,CAAC;IAChC,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACrB,IACE,CAAC,KAAK,mBAAmB;QACzB,CAAC,KAAK,aAAa;QACnB,CAAC,KAAK,uBAAuB;QAC7B,CAAC,KAAK,uBAAuB;QAC7B,CAAC,KAAK,cAAc,EACpB,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IAC9B,IACE,KAAK,KAAK,OAAO;QACjB,KAAK,KAAK,OAAO;QACjB,KAAK,KAAK,eAAe;QACzB,KAAK,KAAK,WAAW,EACrB,CAAC;QACD,OAAO,mBAAmB,CAAC;IAC7B,CAAC;IACD,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,YAAY,EAAE,CAAC;QACjD,OAAO,uBAAuB,CAAC;IACjC,CAAC;IACD,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,8EAA8E;AAC9E,SAAgB,mBAAmB,CAAC,IAAiB;IACnD,OAAO,oCAA4B,CAAC,IAAI,CAAC,CAAC;AAC5C,CAAC"}

package/bundled/node_modules/@aspm/shared/dist/redaction.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"redaction.d.ts","sourceRoot":"","sources":["../src/redaction.ts"],"names":[],"mappings":"AAUA,eAAO,MAAM,cAAc,eAAe,CAAC;AAiD3C,MAAM,MAAM,gBAAgB,GAAG;IAC7B,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;AA+LF,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,CA2ClD;AAED,wBAAgB,qBAAqB,CACnC,CAAC,SAAS;IACR,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,eAAe,CAAC,EAAE,KAAK,CAAC;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC,CAAC;CAChE,EACD,MAAM,EAAE,CAAC,EAAE,OAAO,GAAE,gBAAqB,GAAG,CAAC,CAyB9C"}
+{"version":3,"file":"redaction.d.ts","sourceRoot":"","sources":["../src/redaction.ts"],"names":[],"mappings":"AAUA,eAAO,MAAM,cAAc,eAAe,CAAC;AAiD3C,MAAM,MAAM,gBAAgB,GAAG;IAC7B,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;AAmMF,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,CA2ClD;AAED,wBAAgB,qBAAqB,CACnC,CAAC,SAAS;IACR,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,eAAe,CAAC,EAAE,KAAK,CAAC;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC,CAAC;CAChE,EACD,MAAM,EAAE,CAAC,EAAE,OAAO,GAAE,gBAAqB,GAAG,CAAC,CAyB9C"}

package/bundled/node_modules/@aspm/shared/dist/redaction.js

@@ -88,6 +88,7 @@ function redactString(value) {
         .replace(/\bAIza[0-9A-Za-z_-]{35}\b/g, exports.REDACTED_VALUE)
         .replace(/\b(AccountKey|SharedAccessSignature)=([^;\n]+)/gi, `$1=${exports.REDACTED_VALUE}`)
         .replace(/\b((?:password|passwd|pwd|secret|token|api[_-]?key|client[_-]?secret)\b\s*[:=]\s*)(["'`]?)[^,\s"'`]+/gi, `$1$2${exports.REDACTED_VALUE}`)
+        .replace(/\b((?:postgres(?:ql)?|mysql|mariadb|mongodb(?:\+srv)?|redis|rediss):\/\/)([^/@\s:]*):([^/@\s]+)@/gi, `$1${exports.REDACTED_VALUE}@`)
         .replace(/(https?:\/\/)([^/@\s:]+):([^/@\s]+)@/gi, `$1${exports.REDACTED_VALUE}@`);
 }
 /** Path string for @pinojs/redact / fast-redact. */

package/bundled/node_modules/@aspm/shared/dist/redaction.js.map

@@ -1 +1 @@
-{"version":3,"file":"redaction.js","sourceRoot":"","sources":["../src/redaction.ts"],"names":[],"mappings":";;;;;;AA6PA,kDA2CC;AAED,sDA8BC;AAxUD;;;;;;;GAOG;AACH,4DAAwC;AAE3B,QAAA,cAAc,GAAG,YAAY,CAAC;AAE3C,MAAM,mBAAmB,GAAG;IAC1B,aAAa;IACb,QAAQ;IACR,UAAU;IACV,eAAe;IACf,aAAa;IACb,cAAc;IACd,YAAY;IACZ,SAAS;IACT,UAAU;IACV,QAAQ;IACR,YAAY;IACZ,cAAc;IACd,QAAQ;IACR,SAAS;IACT,OAAO;CACR,CAAC;AAEF,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC;IACnC,MAAM;IACN,QAAQ;IACR,OAAO;IACP,UAAU;IACV,oBAAoB;IACpB,KAAK;IACL,QAAQ;IACR,WAAW;CACZ,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC;IACpC,eAAe;IACf,QAAQ;IACR,oBAAoB;IACpB,WAAW;IACX,SAAS;IACT,YAAY;IACZ,YAAY;IACZ,cAAc;CACf,CAAC,CAAC;AAEH,MAAM,wBAAwB,GAAG,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC,CAAC;AACxE,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,aAAa,EAAE,sBAAsB,EAAE,SAAS,CAAC,CAAC,CAAC;AAC9F,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,gBAAgB,EAAE,iBAAiB,CAAC,CAAC,CAAC;AAClG,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAS/B,SAAS,YAAY,CAAC,GAAW;IAC/B,OAAO,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,cAAc,CAAC,GAAW;IACjC,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,wBAAwB,CAAC,GAAG,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3D,OAAO,CACL,oBAAoB,CAAC,GAAG,CAAC,UAAU,CAAC;QACpC,mBAAmB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAC9D,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAW,EAAE,SAAkB;IACxD,MAAM,aAAa,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,mBAAmB,GAAG,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAErE,IAAI,qBAAqB,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACnD,OAAO,qBAAqB,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC,CAAC;IACzE,CAAC;IAED,IAAI,kBAAkB,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,CAAC;QAChD,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,KAAK;SACT,OAAO,CACN,4IAA4I,EAC5I,OAAO,sBAAc,EAAE,CACxB;SACA,OAAO,CAAC,uCAAuC,EAAE,KAAK,sBAAc,EAAE,CAAC;SACvE,OAAO,CAAC,mCAAmC,EAAE,KAAK,sBAAc,EAAE,CAAC;SACnE,OAAO,CAAC,qCAAqC,EAAE,sBAAc,CAAC;SAC9D,OAAO,CAAC,gCAAgC,EAAE,sBAAc,CAAC;SACzD,OAAO,CAAC,4BAA4B,EAAE,sBAAc,CAAC;SACrD,OAAO,CAAC,kDAAkD,EAAE,MAAM,sBAAc,EAAE,CAAC;SACnF,OAAO,CACN,wGAAwG,EACxG,OAAO,sBAAc,EAAE,CACxB;SACA,OAAO,CAAC,wCAAwC,EAAE,KAAK,sBAAc,GAAG,CAAC,CAAC;AAC/E,CAAC;AAED,oDAAoD;AACpD,SAAS,mBAAmB,CAAC,KAA6B;IACxD,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACxE,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAChD,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;YAChB,SAAS;QACX,CAAC;QACD,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACjC,GAAG,IAAI,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,CAAC;aAAM,CAAC;YACN,MAAM,OAAO,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAClE,GAAG,IAAI,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,OAAO,IAAI,CAAC,CAAC,CAAC,MAAM,OAAO,IAAI,CAAC;QAC3D,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,yFAAyF;AACzF,SAAS,OAAO,CAAC,KAA6B;IAC5C,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,QAAQ,CACf,KAA6B,EAC7B,YAAyB,EACzB,SAAsB;IAEtB,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAC1B,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACrB,SAAS,CAAC,GAAG,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED,mFAAmF;AACnF,SAAS,eAAe,CAAI,KAAQ;IAClC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAM,CAAC;AAChD,CAAC;AAED,SAAS,UAAU,CACjB,KAA6B,EAC7B,cAA2B,EAC3B,SAAsB;IAEtB,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAC1B,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACvB,SAAS,CAAC,GAAG,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED;;;GAGG;AACH,SAAS,uBAAuB,CAC9B,KAAc,EACd,KAA6B,EAC7B,YAAgC,EAChC,KAAa,EACb,YAAyB,EACzB,cAA2B,EAC3B,SAAsB;IAEtB,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO;IACT,CAAC;IAED,IAAI,YAAY,KAAK,SAAS,IAAI,iBAAiB,CAAC,YAAY,CAAC,EAAE,CAAC;QAClE,QAAQ,CAAC,KAAK,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;QACzC,OAAO;IACT,CAAC;IAED,IAAI,KAAK,IAAI,mBAAmB,EAAE,CAAC;QACjC,QAAQ,CAAC,KAAK,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;QACzC,OAAO;IACT,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,SAAS,GAAG,KAAK,GAAG,CAAC,CAAC;QAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACtB,MAAM,SAAS,GAAG,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC;YAEhC,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC9C,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC7B,UAAU,CAAC,SAAS,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC;gBACnD,CAAC;gBACD,SAAS;YACX,CAAC;YAED,IAAI,SAAS,IAAI,mBAAmB,EAAE,CAAC;gBACrC,QAAQ,CAAC,SAAS,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;gBAC7C,SAAS;YACX,CAAC;YAED,uBAAuB,CACrB,IAAI,EACJ,SAAS,EACT,YAAY,EACZ,SAAS,EACT,YAAY,EACZ,cAAc,EACd,SAAS,CACV,CAAC;QACJ,CAAC;QACD,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAG,KAAuB,CAAC;IACtC,KAAK,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3D,MAAM,SAAS,GAAG,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC,CAAC;QAEvC,IAAI,iBAAiB,CAAC,QAAQ,EAAE,YAAY,CAAC,EAAE,CAAC;YAC9C,QAAQ,CAAC,SAAS,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;YAC7C,SAAS;QACX,CAAC;QAED,IAAI,UAAU,KAAK,IAAI,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;YAC1D,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;gBACnC,UAAU,CAAC,SAAS,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC;YACnD,CAAC;YACD,SAAS;QACX,CAAC;QAED,MAAM,SAAS,GAAG,KAAK,GAAG,CAAC,CAAC;QAC5B,IAAI,SAAS,IAAI,mBAAmB,EAAE,CAAC;YACrC,QAAQ,CAAC,SAAS,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;YAC7C,SAAS;QACX,CAAC;QAED,uBAAuB,CACrB,UAAU,EACV,SAAS,EACT,QAAQ,EACR,SAAS,EACT,YAAY,EACZ,cAAc,EACd,SAAS,CACV,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAgB,mBAAmB,CAAI,KAAQ;IAC7C,IAAI,KAAK,IAAI,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,YAAY,CAAC,KAAK,CAAM,CAAC;QAClC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IACvC,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IACzC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IAEpC,uBAAuB,CAAC,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,YAAY,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC;IAE1F,IAAI,SAAS,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,MAAM,GAAG,IAAA,gBAAU,EAAC;QACxB,KAAK,EAAE,CAAC,GAAG,SAAS,CAAC;QACrB,SAAS,EAAE,KAAK;QAChB,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,CAAC,CAAC,CAAU,EAAE,OAAgB,EAAE,EAAE;YACxC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAE,OAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACzF,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;YAC1B,IAAI,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;gBACzB,OAAO,sBAAc,CAAC;YACxB,CAAC;YACD,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;gBACpD,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC;YACzB,CAAC;YACD,OAAO,CAAC,CAAC;QACX,CAAC,CAA4B;KAC9B,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAExC,CAAC;IACF,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;QACtC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,GAAG,CAAC;QACxC,OAAO,IAAS,CAAC;IACnB,CAAC;IACD,OAAO,GAAQ,CAAC;AAClB,CAAC;AAED,SAAgB,qBAAqB,CAKnC,MAAS,EAAE,UAA4B,EAAE;IACzC,MAAM,EAAE,aAAa,GAAG,IAAI,EAAE,cAAc,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IAEhE,OAAO;QACL,GAAG,MAAM;QACT,GAAG,CAAC,cAAc,IAAI,MAAM,CAAC,QAAQ;YACnC,CAAC,CAAC,EAAE,QAAQ,EAAE,mBAAmB,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE;YACpD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC;YACvC,CAAC,CAAC;gBACE,eAAe,EAAE,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,aAAa,EAAE,EAAE;oBAC5D,MAAM,EAAE,OAAO,EAAE,GAAG,mBAAmB,EAAE,GAAG,aAAa,CAAC;oBAC1D,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;oBAC3D,OAAO;wBACL,GAAG,mBAAmB,CAAC,mBAAmB,CAAC;wBAC3C,GAAG,CAAC,UAAU;4BACZ,CAAC,CAAC;gCACE,OAAO,EAAE,aAAa,IAAI,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO;6BAC3E;4BACH,CAAC,CAAC,EAAE,CAAC;qBACR,CAAC;gBACJ,CAAC,CAAC;aACH;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC"}
+{"version":3,"file":"redaction.js","sourceRoot":"","sources":["../src/redaction.ts"],"names":[],"mappings":";;;;;;AAiQA,kDA2CC;AAED,sDA8BC;AA5UD;;;;;;;GAOG;AACH,4DAAwC;AAE3B,QAAA,cAAc,GAAG,YAAY,CAAC;AAE3C,MAAM,mBAAmB,GAAG;IAC1B,aAAa;IACb,QAAQ;IACR,UAAU;IACV,eAAe;IACf,aAAa;IACb,cAAc;IACd,YAAY;IACZ,SAAS;IACT,UAAU;IACV,QAAQ;IACR,YAAY;IACZ,cAAc;IACd,QAAQ;IACR,SAAS;IACT,OAAO;CACR,CAAC;AAEF,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC;IACnC,MAAM;IACN,QAAQ;IACR,OAAO;IACP,UAAU;IACV,oBAAoB;IACpB,KAAK;IACL,QAAQ;IACR,WAAW;CACZ,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC;IACpC,eAAe;IACf,QAAQ;IACR,oBAAoB;IACpB,WAAW;IACX,SAAS;IACT,YAAY;IACZ,YAAY;IACZ,cAAc;CACf,CAAC,CAAC;AAEH,MAAM,wBAAwB,GAAG,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC,CAAC;AACxE,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,aAAa,EAAE,sBAAsB,EAAE,SAAS,CAAC,CAAC,CAAC;AAC9F,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,gBAAgB,EAAE,iBAAiB,CAAC,CAAC,CAAC;AAClG,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAS/B,SAAS,YAAY,CAAC,GAAW;IAC/B,OAAO,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,cAAc,CAAC,GAAW;IACjC,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,wBAAwB,CAAC,GAAG,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3D,OAAO,CACL,oBAAoB,CAAC,GAAG,CAAC,UAAU,CAAC;QACpC,mBAAmB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAC9D,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAW,EAAE,SAAkB;IACxD,MAAM,aAAa,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,mBAAmB,GAAG,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAErE,IAAI,qBAAqB,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACnD,OAAO,qBAAqB,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC,CAAC;IACzE,CAAC;IAED,IAAI,kBAAkB,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,CAAC;QAChD,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,KAAK;SACT,OAAO,CACN,4IAA4I,EAC5I,OAAO,sBAAc,EAAE,CACxB;SACA,OAAO,CAAC,uCAAuC,EAAE,KAAK,sBAAc,EAAE,CAAC;SACvE,OAAO,CAAC,mCAAmC,EAAE,KAAK,sBAAc,EAAE,CAAC;SACnE,OAAO,CAAC,qCAAqC,EAAE,sBAAc,CAAC;SAC9D,OAAO,CAAC,gCAAgC,EAAE,sBAAc,CAAC;SACzD,OAAO,CAAC,4BAA4B,EAAE,sBAAc,CAAC;SACrD,OAAO,CAAC,kDAAkD,EAAE,MAAM,sBAAc,EAAE,CAAC;SACnF,OAAO,CACN,wGAAwG,EACxG,OAAO,sBAAc,EAAE,CACxB;SACA,OAAO,CACN,oGAAoG,EACpG,KAAK,sBAAc,GAAG,CACvB;SACA,OAAO,CAAC,wCAAwC,EAAE,KAAK,sBAAc,GAAG,CAAC,CAAC;AAC/E,CAAC;AAED,oDAAoD;AACpD,SAAS,mBAAmB,CAAC,KAA6B;IACxD,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACxE,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAChD,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;YAChB,SAAS;QACX,CAAC;QACD,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACjC,GAAG,IAAI,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,CAAC;aAAM,CAAC;YACN,MAAM,OAAO,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAClE,GAAG,IAAI,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,OAAO,IAAI,CAAC,CAAC,CAAC,MAAM,OAAO,IAAI,CAAC;QAC3D,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,yFAAyF;AACzF,SAAS,OAAO,CAAC,KAA6B;IAC5C,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,QAAQ,CACf,KAA6B,EAC7B,YAAyB,EACzB,SAAsB;IAEtB,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAC1B,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACrB,SAAS,CAAC,GAAG,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED,mFAAmF;AACnF,SAAS,eAAe,CAAI,KAAQ;IAClC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAM,CAAC;AAChD,CAAC;AAED,SAAS,UAAU,CACjB,KAA6B,EAC7B,cAA2B,EAC3B,SAAsB;IAEtB,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAC1B,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACvB,SAAS,CAAC,GAAG,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED;;;GAGG;AACH,SAAS,uBAAuB,CAC9B,KAAc,EACd,KAA6B,EAC7B,YAAgC,EAChC,KAAa,EACb,YAAyB,EACzB,cAA2B,EAC3B,SAAsB;IAEtB,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO;IACT,CAAC;IAED,IAAI,YAAY,KAAK,SAAS,IAAI,iBAAiB,CAAC,YAAY,CAAC,EAAE,CAAC;QAClE,QAAQ,CAAC,KAAK,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;QACzC,OAAO;IACT,CAAC;IAED,IAAI,KAAK,IAAI,mBAAmB,EAAE,CAAC;QACjC,QAAQ,CAAC,KAAK,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;QACzC,OAAO;IACT,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,SAAS,GAAG,KAAK,GAAG,CAAC,CAAC;QAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACtB,MAAM,SAAS,GAAG,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC;YAEhC,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC9C,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC7B,UAAU,CAAC,SAAS,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC;gBACnD,CAAC;gBACD,SAAS;YACX,CAAC;YAED,IAAI,SAAS,IAAI,mBAAmB,EAAE,CAAC;gBACrC,QAAQ,CAAC,SAAS,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;gBAC7C,SAAS;YACX,CAAC;YAED,uBAAuB,CACrB,IAAI,EACJ,SAAS,EACT,YAAY,EACZ,SAAS,EACT,YAAY,EACZ,cAAc,EACd,SAAS,CACV,CAAC;QACJ,CAAC;QACD,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAG,KAAuB,CAAC;IACtC,KAAK,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3D,MAAM,SAAS,GAAG,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC,CAAC;QAEvC,IAAI,iBAAiB,CAAC,QAAQ,EAAE,YAAY,CAAC,EAAE,CAAC;YAC9C,QAAQ,CAAC,SAAS,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;YAC7C,SAAS;QACX,CAAC;QAED,IAAI,UAAU,KAAK,IAAI,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;YAC1D,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;gBACnC,UAAU,CAAC,SAAS,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC;YACnD,CAAC;YACD,SAAS;QACX,CAAC;QAED,MAAM,SAAS,GAAG,KAAK,GAAG,CAAC,CAAC;QAC5B,IAAI,SAAS,IAAI,mBAAmB,EAAE,CAAC;YACrC,QAAQ,CAAC,SAAS,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;YAC7C,SAAS;QACX,CAAC;QAED,uBAAuB,CACrB,UAAU,EACV,SAAS,EACT,QAAQ,EACR,SAAS,EACT,YAAY,EACZ,cAAc,EACd,SAAS,CACV,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAgB,mBAAmB,CAAI,KAAQ;IAC7C,IAAI,KAAK,IAAI,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,YAAY,CAAC,KAAK,CAAM,CAAC;QAClC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IACvC,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IACzC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IAEpC,uBAAuB,CAAC,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,YAAY,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC;IAE1F,IAAI,SAAS,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,MAAM,GAAG,IAAA,gBAAU,EAAC;QACxB,KAAK,EAAE,CAAC,GAAG,SAAS,CAAC;QACrB,SAAS,EAAE,KAAK;QAChB,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,CAAC,CAAC,CAAU,EAAE,OAAgB,EAAE,EAAE;YACxC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAE,OAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACzF,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;YAC1B,IAAI,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;gBACzB,OAAO,sBAAc,CAAC;YACxB,CAAC;YACD,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;gBACpD,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC;YACzB,CAAC;YACD,OAAO,CAAC,CAAC;QACX,CAAC,CAA4B;KAC9B,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAExC,CAAC;IACF,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;QACtC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,GAAG,CAAC;QACxC,OAAO,IAAS,CAAC;IACnB,CAAC;IACD,OAAO,GAAQ,CAAC;AAClB,CAAC;AAED,SAAgB,qBAAqB,CAKnC,MAAS,EAAE,UAA4B,EAAE;IACzC,MAAM,EAAE,aAAa,GAAG,IAAI,EAAE,cAAc,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IAEhE,OAAO;QACL,GAAG,MAAM;QACT,GAAG,CAAC,cAAc,IAAI,MAAM,CAAC,QAAQ;YACnC,CAAC,CAAC,EAAE,QAAQ,EAAE,mBAAmB,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE;YACpD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC;YACvC,CAAC,CAAC;gBACE,eAAe,EAAE,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,aAAa,EAAE,EAAE;oBAC5D,MAAM,EAAE,OAAO,EAAE,GAAG,mBAAmB,EAAE,GAAG,aAAa,CAAC;oBAC1D,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;oBAC3D,OAAO;wBACL,GAAG,mBAAmB,CAAC,mBAAmB,CAAC;wBAC3C,GAAG,CAAC,UAAU;4BACZ,CAAC,CAAC;gCACE,OAAO,EAAE,aAAa,IAAI,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO;6BAC3E;4BACH,CAAC,CAAC,EAAE,CAAC;qBACR,CAAC;gBACJ,CAAC,CAAC;aACH;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC"}

package/bundled/node_modules/@aspm/shared/dist/security/aspm-gate-rules.d.ts

@@ -0,0 +1,19 @@
+export type AspmGateRules = {
+    vulnerabilities?: {
+        max_by_severity: Record<string, number>;
+    };
+    coverage?: {
+        min_line_pct: number;
+    };
+};
+export declare const DEFAULT_ASPM_GATE_RULES: AspmGateRules;
+/** Base64 payload for `aspm gate --rules` (wraps rules in `{ rules: ... }`). */
+export declare function encodeAspmGateRulesBase64(rules?: AspmGateRules): string;
+/** Pretty JSON for `aspm gate --rules-file` (wraps rules in `{ rules: ... }`). */
+export declare function formatAspmGateRulesJson(rules?: AspmGateRules): string;
+/**
+ * GitHub Actions step with human-readable gate rules JSON and `aspm gate --rules-file`.
+ * Same semantics as Naus `aspm_gate`, without base64 or Node wrappers in the YAML.
+ */
+export declare function buildAspmGateGithubWorkflowStep(rules?: AspmGateRules, projectId?: string): string;
+//# sourceMappingURL=aspm-gate-rules.d.ts.map

package/bundled/node_modules/@aspm/shared/dist/security/aspm-gate-rules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"aspm-gate-rules.d.ts","sourceRoot":"","sources":["../../src/security/aspm-gate-rules.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,aAAa,GAAG;IAC1B,eAAe,CAAC,EAAE;QAChB,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;KACzC,CAAC;IACF,QAAQ,CAAC,EAAE;QACT,YAAY,EAAE,MAAM,CAAC;KACtB,CAAC;CACH,CAAC;AAEF,eAAO,MAAM,uBAAuB,EAAE,aAOrC,CAAC;AAeF,gFAAgF;AAChF,wBAAgB,yBAAyB,CACvC,KAAK,GAAE,aAAuC,GAC7C,MAAM,CAIR;AAED,kFAAkF;AAClF,wBAAgB,uBAAuB,CACrC,KAAK,GAAE,aAAuC,GAC7C,MAAM,CAIR;AAWD;;;GAGG;AACH,wBAAgB,+BAA+B,CAC7C,KAAK,GAAE,aAAuC,EAC9C,SAAS,CAAC,EAAE,MAAM,GACjB,MAAM,CAaR"}

package/bundled/node_modules/@aspm/shared/dist/security/aspm-gate-rules.js

@@ -0,0 +1,61 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_ASPM_GATE_RULES = void 0;
+exports.encodeAspmGateRulesBase64 = encodeAspmGateRulesBase64;
+exports.formatAspmGateRulesJson = formatAspmGateRulesJson;
+exports.buildAspmGateGithubWorkflowStep = buildAspmGateGithubWorkflowStep;
+exports.DEFAULT_ASPM_GATE_RULES = {
+    vulnerabilities: {
+        max_by_severity: {
+            CRITICAL: 0,
+            HIGH: 0,
+        },
+    },
+};
+function encodeUtf8ToBase64(value) {
+    const bufferCtor = globalThis.Buffer;
+    if (bufferCtor) {
+        return bufferCtor.from(value, "utf8").toString("base64");
+    }
+    const bytes = new TextEncoder().encode(value);
+    let binary = "";
+    for (const byte of bytes) {
+        binary += String.fromCharCode(byte);
+    }
+    return btoa(binary);
+}
+/** Base64 payload for `aspm gate --rules` (wraps rules in `{ rules: ... }`). */
+function encodeAspmGateRulesBase64(rules = exports.DEFAULT_ASPM_GATE_RULES) {
+    const body = rules && Object.keys(rules).length > 0 ? { rules } : {};
+    return encodeUtf8ToBase64(JSON.stringify(body));
+}
+/** Pretty JSON for `aspm gate --rules-file` (wraps rules in `{ rules: ... }`). */
+function formatAspmGateRulesJson(rules = exports.DEFAULT_ASPM_GATE_RULES) {
+    const body = rules && Object.keys(rules).length > 0 ? { rules } : {};
+    return JSON.stringify(body, null, 2);
+}
+const KUBBISEC_GATE_RULES_FILENAME = "kubbisec-gate-rules.json";
+function indentForYamlRunBlock(text, indent = "          ") {
+    return text
+        .split("\n")
+        .map((line) => (line.length > 0 ? `${indent}${line}` : line))
+        .join("\n");
+}
+/**
+ * GitHub Actions step with human-readable gate rules JSON and `aspm gate --rules-file`.
+ * Same semantics as Naus `aspm_gate`, without base64 or Node wrappers in the YAML.
+ */
+function buildAspmGateGithubWorkflowStep(rules = exports.DEFAULT_ASPM_GATE_RULES, projectId) {
+    const rulesJson = indentForYamlRunBlock(formatAspmGateRulesJson(rules));
+    const projectRef = projectId ?? `\${{ vars.KUBBISEC_PROJECT }}`;
+    return `      # Quality gate KubbiSec: avalia os relatórios locais desta job (modelo Naus aspm_gate)
+      - name: KubbiSec ASPM gate
+        env:
+          KUBBISEC_PROJECT: ${projectRef}
+        run: |
+          cat > ${KUBBISEC_GATE_RULES_FILENAME} <<'EOF'
+${rulesJson}
+          EOF
+          aspm gate --rules-file ${KUBBISEC_GATE_RULES_FILENAME} -p ${projectRef}`;
+}
+//# sourceMappingURL=aspm-gate-rules.js.map

package/bundled/node_modules/@aspm/shared/dist/security/aspm-gate-rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aspm-gate-rules.js","sourceRoot":"","sources":["../../src/security/aspm-gate-rules.ts"],"names":[],"mappings":";;;AAgCA,8DAMC;AAGD,0DAMC;AAeD,0EAgBC;AArEY,QAAA,uBAAuB,GAAkB;IACpD,eAAe,EAAE;QACf,eAAe,EAAE;YACf,QAAQ,EAAE,CAAC;YACX,IAAI,EAAE,CAAC;SACR;KACF;CACF,CAAC;AAEF,SAAS,kBAAkB,CAAC,KAAa;IACvC,MAAM,UAAU,GAAI,UAAuG,CAAC,MAAM,CAAC;IACnI,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC;AACtB,CAAC;AAED,gFAAgF;AAChF,SAAgB,yBAAyB,CACvC,QAAuB,+BAAuB;IAE9C,MAAM,IAAI,GACR,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1D,OAAO,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,kFAAkF;AAClF,SAAgB,uBAAuB,CACrC,QAAuB,+BAAuB;IAE9C,MAAM,IAAI,GACR,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1D,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,4BAA4B,GAAG,0BAA0B,CAAC;AAEhE,SAAS,qBAAqB,CAAC,IAAY,EAAE,MAAM,GAAG,YAAY;IAChE,OAAO,IAAI;SACR,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;SAC5D,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,SAAgB,+BAA+B,CAC7C,QAAuB,+BAAuB,EAC9C,SAAkB;IAElB,MAAM,SAAS,GAAG,qBAAqB,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAC,CAAC;IACxE,MAAM,UAAU,GAAG,SAAS,IAAI,+BAA+B,CAAC;IAEhE,OAAO;;;8BAGqB,UAAU;;kBAEtB,4BAA4B;EAC5C,SAAS;;mCAEwB,4BAA4B,OAAO,UAAU,EAAE,CAAC;AACnF,CAAC"}

package/bundled/node_modules/@aspm/shared/dist/security/build-aspm-security-matrix-pipeline-yaml.d.ts

@@ -0,0 +1,3 @@
+import type { BuildAspmSecurityMatrixPipelineOptions } from "./security-tool.types";
+export declare function buildAspmSecurityMatrixPipelineYaml(tools: readonly string[], options?: BuildAspmSecurityMatrixPipelineOptions): string;
+//# sourceMappingURL=build-aspm-security-matrix-pipeline-yaml.d.ts.map

package/bundled/node_modules/@aspm/shared/dist/security/build-aspm-security-matrix-pipeline-yaml.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-aspm-security-matrix-pipeline-yaml.d.ts","sourceRoot":"","sources":["../../src/security/build-aspm-security-matrix-pipeline-yaml.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,sCAAsC,EAEvC,MAAM,uBAAuB,CAAC;AAqB/B,wBAAgB,mCAAmC,CACjD,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,OAAO,CAAC,EAAE,sCAAsC,GAC/C,MAAM,CAkCR"}

package/bundled/node_modules/@aspm/shared/dist/security/build-aspm-security-matrix-pipeline-yaml.js

@@ -0,0 +1,54 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildAspmSecurityMatrixPipelineYaml = buildAspmSecurityMatrixPipelineYaml;
+const aspm_gate_rules_1 = require("./aspm-gate-rules");
+const security_tool_catalog_1 = require("./security-tool-catalog");
+function formatGateRulesYaml(gateRules) {
+    const lines = [];
+    if (gateRules.vulnerabilities?.max_by_severity) {
+        lines.push("        vulnerabilities:");
+        lines.push("          max_by_severity:");
+        for (const [severity, max] of Object.entries(gateRules.vulnerabilities.max_by_severity)) {
+            lines.push(`            ${severity}: ${max}`);
+        }
+    }
+    if (gateRules.coverage?.min_line_pct != null) {
+        lines.push("        coverage:");
+        lines.push(`          min_line_pct: ${gateRules.coverage.min_line_pct}`);
+    }
+    return lines.join("\n");
+}
+function buildAspmSecurityMatrixPipelineYaml(tools, options) {
+    const normalized = (0, security_tool_catalog_1.normalizeSecurityTools)(tools);
+    const pipelineName = options?.pipelineName?.trim() || "kubbisec-security";
+    const matrixStrategy = options?.matrixStrategy ?? "fanout";
+    const gateRules = options?.gateRules ?? aspm_gate_rules_1.DEFAULT_ASPM_GATE_RULES;
+    const parallelBlock = normalized.map((tool) => `        - tool: ${tool}`).join("\n");
+    const gateYaml = formatGateRulesYaml(gateRules);
+    return `name: "${pipelineName}"
+description: Pipeline de segurança KubbiSec ASPM (matriz gerada automaticamente)
+
+stages:
+  - security
+  - gate
+
+run:
+  - kubbisec_security:
+      display_name: "KubbiSec ASPM: matriz de segurança"
+      stage: security
+      kind: aspm_matrix
+      mode: scan-and-upload
+      matrix_strategy: ${matrixStrategy}
+      parallel:
+${parallelBlock}
+  - kubbisec_gate:
+      display_name: "KubbiSec ASPM gate"
+      stage: gate
+      kind: aspm_gate
+      rules:
+${gateYaml}
+      depends_on:
+        - kubbisec_security
+`;
+}
+//# sourceMappingURL=build-aspm-security-matrix-pipeline-yaml.js.map

package/bundled/node_modules/@aspm/shared/dist/security/build-aspm-security-matrix-pipeline-yaml.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-aspm-security-matrix-pipeline-yaml.js","sourceRoot":"","sources":["../../src/security/build-aspm-security-matrix-pipeline-yaml.ts"],"names":[],"mappings":";;AAyBA,kFAqCC;AA9DD,uDAA4D;AAK5D,mEAAiE;AAEjE,SAAS,mBAAmB,CAC1B,SAA2E;IAE3E,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,SAAS,CAAC,eAAe,EAAE,eAAe,EAAE,CAAC;QAC/C,KAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QACvC,KAAK,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QACzC,KAAK,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,eAAe,CAAC,eAAe,CAAC,EAAE,CAAC;YACxF,KAAK,CAAC,IAAI,CAAC,eAAe,QAAQ,KAAK,GAAG,EAAE,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IACD,IAAI,SAAS,CAAC,QAAQ,EAAE,YAAY,IAAI,IAAI,EAAE,CAAC;QAC7C,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC,2BAA2B,SAAS,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAgB,mCAAmC,CACjD,KAAwB,EACxB,OAAgD;IAEhD,MAAM,UAAU,GAAG,IAAA,8CAAsB,EAAC,KAAK,CAAqB,CAAC;IACrE,MAAM,YAAY,GAAG,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,mBAAmB,CAAC;IAC1E,MAAM,cAAc,GAAG,OAAO,EAAE,cAAc,IAAI,QAAQ,CAAC;IAC3D,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS,IAAI,yCAAuB,CAAC;IAEhE,MAAM,aAAa,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrF,MAAM,QAAQ,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAEhD,OAAO,UAAU,YAAY;;;;;;;;;;;;;yBAaN,cAAc;;EAErC,aAAa;;;;;;EAMb,QAAQ;;;CAGT,CAAC;AACF,CAAC"}

package/bundled/node_modules/@aspm/shared/dist/security/build-github-security-workflow-yaml.d.ts

@@ -0,0 +1,4 @@
+import type { BuildGithubSecurityWorkflowOptions } from "./security-tool.types";
+export declare function buildGithubSecurityWorkflowYaml(tools: readonly string[], options: BuildGithubSecurityWorkflowOptions): string;
+export declare const DEFAULT_GITHUB_WORKFLOW_TRIGGERS: BuildGithubSecurityWorkflowOptions["events"];
+//# sourceMappingURL=build-github-security-workflow-yaml.d.ts.map

package/bundled/node_modules/@aspm/shared/dist/security/build-github-security-workflow-yaml.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-github-security-workflow-yaml.d.ts","sourceRoot":"","sources":["../../src/security/build-github-security-workflow-yaml.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kCAAkC,EAAkB,MAAM,uBAAuB,CAAC;AAkDhG,wBAAgB,+BAA+B,CAC7C,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,OAAO,EAAE,kCAAkC,GAC1C,MAAM,CAgBR;AAED,eAAO,MAAM,gCAAgC,EAAE,kCAAkC,CAAC,QAAQ,CAOzF,CAAC"}

package/bundled/node_modules/@aspm/shared/dist/security/build-github-security-workflow-yaml.js

@@ -0,0 +1,72 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_GITHUB_WORKFLOW_TRIGGERS = void 0;
+exports.buildGithubSecurityWorkflowYaml = buildGithubSecurityWorkflowYaml;
+const security_tool_catalog_1 = require("./security-tool-catalog");
+const github_workflow_tool_jobs_1 = require("./github-workflow-tool-jobs");
+function buildOnBlock(events) {
+    const lines = ["on:"];
+    if (events.push) {
+        const branches = events.pushBranches.filter(Boolean);
+        if (branches.length > 0) {
+            lines.push("  push:");
+            lines.push("    branches:");
+            for (const branch of branches) {
+                lines.push(`      - ${branch}`);
+            }
+        }
+        else {
+            lines.push("  push:");
+        }
+    }
+    if (events.pullRequest) {
+        lines.push("  pull_request:");
+    }
+    if (events.workflowDispatch) {
+        lines.push("  workflow_dispatch:");
+    }
+    if (events.schedule && events.scheduleCron.trim()) {
+        lines.push("  schedule:");
+        lines.push("    - cron: " + JSON.stringify(events.scheduleCron.trim()));
+    }
+    if (lines.length === 1) {
+        lines.push("  workflow_dispatch:");
+    }
+    return lines.join("\n");
+}
+function buildPermissionsBlock(tools) {
+    const needsCodeScanning = tools.some((tool) => tool === "gitleaks" || tool === "osv");
+    if (!needsCodeScanning) {
+        return `permissions:
+  contents: read`;
+    }
+    return `permissions:
+  contents: read
+  actions: read
+  security-events: write`;
+}
+function buildGithubSecurityWorkflowYaml(tools, options) {
+    const normalized = (0, security_tool_catalog_1.normalizeSecurityTools)(tools);
+    const workflowName = options.workflowName.trim() || "KubbiSec Security";
+    const onBlock = buildOnBlock(options.events);
+    const permissionsBlock = buildPermissionsBlock(normalized);
+    const { jobsYaml } = (0, github_workflow_tool_jobs_1.buildGithubToolJobsSection)(normalized, options.inlineEnv);
+    return `name: ${JSON.stringify(workflowName)}
+
+${onBlock}
+
+${permissionsBlock}
+
+jobs:
+${jobsYaml}
+`;
+}
+exports.DEFAULT_GITHUB_WORKFLOW_TRIGGERS = {
+    push: true,
+    pushBranches: ["main"],
+    pullRequest: true,
+    workflowDispatch: true,
+    schedule: false,
+    scheduleCron: "0 6 * * 1",
+};
+//# sourceMappingURL=build-github-security-workflow-yaml.js.map

package/bundled/node_modules/@aspm/shared/dist/security/build-github-security-workflow-yaml.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-github-security-workflow-yaml.js","sourceRoot":"","sources":["../../src/security/build-github-security-workflow-yaml.ts"],"names":[],"mappings":";;;AAoDA,0EAmBC;AAvED,mEAAiE;AACjE,2EAAyE;AAGzE,SAAS,YAAY,CAAC,MAAoD;IACxE,MAAM,KAAK,GAAa,CAAC,KAAK,CAAC,CAAC;IAEhC,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAChB,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACrD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YAC5B,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;gBAC9B,KAAK,CAAC,IAAI,CAAC,WAAW,MAAM,EAAE,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAChC,CAAC;IAED,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACrC,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,CAAC;QAClD,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC1B,KAAK,CAAC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC1E,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACrC,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAuB;IACpD,MAAM,iBAAiB,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,UAAU,IAAI,IAAI,KAAK,KAAK,CAAC,CAAC;IACtF,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvB,OAAO;iBACM,CAAC;IAChB,CAAC;IACD,OAAO;;;yBAGgB,CAAC;AAC1B,CAAC;AAED,SAAgB,+BAA+B,CAC7C,KAAwB,EACxB,OAA2C;IAE3C,MAAM,UAAU,GAAG,IAAA,8CAAsB,EAAC,KAAK,CAAqB,CAAC;IACrE,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,mBAAmB,CAAC;IACxE,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7C,MAAM,gBAAgB,GAAG,qBAAqB,CAAC,UAAU,CAAC,CAAC;IAC3D,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAA,sDAA0B,EAAC,UAAU,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IAE/E,OAAO,SAAS,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC;;EAE5C,OAAO;;EAEP,gBAAgB;;;EAGhB,QAAQ;CACT,CAAC;AACF,CAAC;AAEY,QAAA,gCAAgC,GAAiD;IAC5F,IAAI,EAAE,IAAI;IACV,YAAY,EAAE,CAAC,MAAM,CAAC;IACtB,WAAW,EAAE,IAAI;IACjB,gBAAgB,EAAE,IAAI;IACtB,QAAQ,EAAE,KAAK;IACf,YAAY,EAAE,WAAW;CAC1B,CAAC"}

package/bundled/node_modules/@aspm/shared/dist/security/github-workflow-action-pins.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Pinned GitHub Actions / images for KubbiSec workflow templates.
+ * Prefer stable major/minor tags maintained by vendors; pin SHAs in production if policy requires.
+ *
+ * @see https://github.com/aquasecurity/trivy/security/advisories/GHSA-69fq-xp46-6x23 (trivy-action >= v0.35.0)
+ */
+export declare const GITHUB_CHECKOUT_ACTION = "actions/checkout@v4";
+/** aquasecurity/trivy-action — filesystem scan with JSON for `aspm upload`. */
+export declare const TRIVY_ACTION = "aquasecurity/trivy-action@v0.35.0";
+/** anchore/sbom-action — CycloneDX JSON SBOM for `aspm upload`. */
+export declare const SBOM_ACTION = "anchore/sbom-action@v0";
+/** gitleaks/gitleaks-action — Node 24 / LTS track (org repos may need GITLEAKS_LICENSE). */
+export declare const GITLEAKS_ACTION = "gitleaks/gitleaks-action@v3";
+/** google/osv-scanner-action sub-actions (scanner + SARIF reporter). */
+export declare const OSV_SCANNER_ACTION = "google/osv-scanner-action/osv-scanner-action@v2.3.8";
+export declare const OSV_REPORTER_ACTION = "google/osv-scanner-action/osv-reporter-action@v2.3.8";
+/** Upload SARIF to GitHub Security tab (Code Scanning). */
+export declare const CODEQL_UPLOAD_SARIF_ACTION = "github/codeql-action/upload-sarif@v4";
+/** Tag root for reusable OSV workflows (documentação). */
+export declare const OSV_SCANNER_ACTION_REF = "google/osv-scanner-action@v2.3.8";
+/** SonarSource/sonarqube-scan-action — SonarQube Server 2026.1 LTA docs recommend v7. */
+export declare const SONAR_SCAN_ACTION = "SonarSource/sonarqube-scan-action@v7";
+/** Official Semgrep image (semgrep/semgrep-action is deprecated). */
+export declare const SEMGREP_CONTAINER_IMAGE = "semgrep/semgrep:latest";
+/** Pinned Gitleaks CLI when JSON report is required for ASPM (action defaults to SARIF). */
+export declare const GITLEAKS_CLI_VERSION = "8.21.2";
+//# sourceMappingURL=github-workflow-action-pins.d.ts.map

package/bundled/node_modules/@aspm/shared/dist/security/github-workflow-action-pins.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-workflow-action-pins.d.ts","sourceRoot":"","sources":["../../src/security/github-workflow-action-pins.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,wBAAwB,CAAC;AAE5D,+EAA+E;AAC/E,eAAO,MAAM,YAAY,sCAAsC,CAAC;AAEhE,mEAAmE;AACnE,eAAO,MAAM,WAAW,2BAA2B,CAAC;AAEpD,4FAA4F;AAC5F,eAAO,MAAM,eAAe,gCAAgC,CAAC;AAE7D,wEAAwE;AACxE,eAAO,MAAM,kBAAkB,wDAAwD,CAAC;AACxF,eAAO,MAAM,mBAAmB,yDAAyD,CAAC;AAE1F,2DAA2D;AAC3D,eAAO,MAAM,0BAA0B,yCAAyC,CAAC;AAEjF,0DAA0D;AAC1D,eAAO,MAAM,sBAAsB,qCAAqC,CAAC;AAEzE,yFAAyF;AACzF,eAAO,MAAM,iBAAiB,yCAAyC,CAAC;AAExE,qEAAqE;AACrE,eAAO,MAAM,uBAAuB,2BAA2B,CAAC;AAEhE,4FAA4F;AAC5F,eAAO,MAAM,oBAAoB,WAAW,CAAC"}

package/bundled/node_modules/@aspm/shared/dist/security/github-workflow-action-pins.js

@@ -0,0 +1,30 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GITLEAKS_CLI_VERSION = exports.SEMGREP_CONTAINER_IMAGE = exports.SONAR_SCAN_ACTION = exports.OSV_SCANNER_ACTION_REF = exports.CODEQL_UPLOAD_SARIF_ACTION = exports.OSV_REPORTER_ACTION = exports.OSV_SCANNER_ACTION = exports.GITLEAKS_ACTION = exports.SBOM_ACTION = exports.TRIVY_ACTION = exports.GITHUB_CHECKOUT_ACTION = void 0;
+/**
+ * Pinned GitHub Actions / images for KubbiSec workflow templates.
+ * Prefer stable major/minor tags maintained by vendors; pin SHAs in production if policy requires.
+ *
+ * @see https://github.com/aquasecurity/trivy/security/advisories/GHSA-69fq-xp46-6x23 (trivy-action >= v0.35.0)
+ */
+exports.GITHUB_CHECKOUT_ACTION = "actions/checkout@v4";
+/** aquasecurity/trivy-action — filesystem scan with JSON for `aspm upload`. */
+exports.TRIVY_ACTION = "aquasecurity/trivy-action@v0.35.0";
+/** anchore/sbom-action — CycloneDX JSON SBOM for `aspm upload`. */
+exports.SBOM_ACTION = "anchore/sbom-action@v0";
+/** gitleaks/gitleaks-action — Node 24 / LTS track (org repos may need GITLEAKS_LICENSE). */
+exports.GITLEAKS_ACTION = "gitleaks/gitleaks-action@v3";
+/** google/osv-scanner-action sub-actions (scanner + SARIF reporter). */
+exports.OSV_SCANNER_ACTION = "google/osv-scanner-action/osv-scanner-action@v2.3.8";
+exports.OSV_REPORTER_ACTION = "google/osv-scanner-action/osv-reporter-action@v2.3.8";
+/** Upload SARIF to GitHub Security tab (Code Scanning). */
+exports.CODEQL_UPLOAD_SARIF_ACTION = "github/codeql-action/upload-sarif@v4";
+/** Tag root for reusable OSV workflows (documentação). */
+exports.OSV_SCANNER_ACTION_REF = "google/osv-scanner-action@v2.3.8";
+/** SonarSource/sonarqube-scan-action — SonarQube Server 2026.1 LTA docs recommend v7. */
+exports.SONAR_SCAN_ACTION = "SonarSource/sonarqube-scan-action@v7";
+/** Official Semgrep image (semgrep/semgrep-action is deprecated). */
+exports.SEMGREP_CONTAINER_IMAGE = "semgrep/semgrep:latest";
+/** Pinned Gitleaks CLI when JSON report is required for ASPM (action defaults to SARIF). */
+exports.GITLEAKS_CLI_VERSION = "8.21.2";
+//# sourceMappingURL=github-workflow-action-pins.js.map

package/bundled/node_modules/@aspm/shared/dist/security/github-workflow-action-pins.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-workflow-action-pins.js","sourceRoot":"","sources":["../../src/security/github-workflow-action-pins.ts"],"names":[],"mappings":";;;AAAA;;;;;GAKG;AACU,QAAA,sBAAsB,GAAG,qBAAqB,CAAC;AAE5D,+EAA+E;AAClE,QAAA,YAAY,GAAG,mCAAmC,CAAC;AAEhE,mEAAmE;AACtD,QAAA,WAAW,GAAG,wBAAwB,CAAC;AAEpD,4FAA4F;AAC/E,QAAA,eAAe,GAAG,6BAA6B,CAAC;AAE7D,wEAAwE;AAC3D,QAAA,kBAAkB,GAAG,qDAAqD,CAAC;AAC3E,QAAA,mBAAmB,GAAG,sDAAsD,CAAC;AAE1F,2DAA2D;AAC9C,QAAA,0BAA0B,GAAG,sCAAsC,CAAC;AAEjF,0DAA0D;AAC7C,QAAA,sBAAsB,GAAG,kCAAkC,CAAC;AAEzE,yFAAyF;AAC5E,QAAA,iBAAiB,GAAG,sCAAsC,CAAC;AAExE,qEAAqE;AACxD,QAAA,uBAAuB,GAAG,wBAAwB,CAAC;AAEhE,4FAA4F;AAC/E,QAAA,oBAAoB,GAAG,QAAQ,CAAC"}

package/bundled/node_modules/@aspm/shared/dist/security/github-workflow-tool-jobs.d.ts

@@ -0,0 +1,7 @@
+import type { GithubWorkflowInlineEnv, SecurityToolId } from "./security-tool.types";
+export declare const KUBBISEC_SCANS_JOB_ID = "kubbisec-scans";
+export declare function buildGithubToolJobsSection(tools: SecurityToolId[], inlineEnv?: GithubWorkflowInlineEnv): {
+    jobIds: string[];
+    jobsYaml: string;
+};
+//# sourceMappingURL=github-workflow-tool-jobs.d.ts.map

package/bundled/node_modules/@aspm/shared/dist/security/github-workflow-tool-jobs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-workflow-tool-jobs.d.ts","sourceRoot":"","sources":["../../src/security/github-workflow-tool-jobs.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,uBAAuB,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAErF,eAAO,MAAM,qBAAqB,mBAAmB,CAAC;AAyKtD,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,cAAc,EAAE,EACvB,SAAS,CAAC,EAAE,uBAAuB,GAClC;IACD,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB,CAkBA"}