@kubbisec/ai-linux-x64 0.1.15 → 0.1.17

package/bundled/node_modules/@aspm/shared/dist/rbac/better-auth-org-roles.js

@@ -20,7 +20,6 @@ exports.ORG_INVITE_ROLE_OPTIONS = [
 /** All assignable org roles (invites exclude org_administrator by design). */
 exports.ORG_MEMBER_ROLE_OPTIONS = [
     { value: "org_administrator", label: "Administrador da organização" },
-    { value: "org_finance", label: "Financeiro" },
     ...exports.ORG_INVITE_ROLE_OPTIONS,
 ];
 /** Maps legacy Better Auth roles and Kubbisec slugs stored in DB → canonical `OrgRoleSlug`. */

package/bundled/node_modules/@aspm/shared/dist/rbac/better-auth-org-roles.js.map

@@ -1 +1 @@
-{"version":3,"file":"better-auth-org-roles.js","sourceRoot":"","sources":["../../src/rbac/better-auth-org-roles.ts"],"names":[],"mappings":";;;AA0BA,wDAyBC;AAGD,kDAEC;AAtDD,mGAAmG;AACtF,QAAA,4BAA4B,GAAG;IAC1C,iBAAiB,EAAE,mBAAmB;IACtC,WAAW,EAAE,aAAa;IAC1B,qBAAqB,EAAE,uBAAuB;IAC9C,qBAAqB,EAAE,uBAAuB;IAC9C,YAAY,EAAE,cAAc;CACuB,CAAC;AAEzC,QAAA,uBAAuB,GAA4C;IAC9E,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,YAAY,EAAE;IAC7C,EAAE,KAAK,EAAE,uBAAuB,EAAE,KAAK,EAAE,oBAAoB,EAAE;IAC/D,EAAE,KAAK,EAAE,uBAAuB,EAAE,KAAK,EAAE,kBAAkB,EAAE;IAC7D,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,YAAY,EAAE;CAC/C,CAAC;AAEF,8EAA8E;AACjE,QAAA,uBAAuB,GAA4C;IAC9E,EAAE,KAAK,EAAE,mBAAmB,EAAE,KAAK,EAAE,8BAA8B,EAAE;IACrE,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,YAAY,EAAE;IAC7C,GAAG,+BAAuB;CAC3B,CAAC;AAEF,+FAA+F;AAC/F,SAAgB,sBAAsB,CAAC,GAA8B;IACnE,IAAI,CAAC,GAAG;QAAE,OAAO,cAAc,CAAC;IAChC,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACrB,IACE,CAAC,KAAK,mBAAmB;QACzB,CAAC,KAAK,aAAa;QACnB,CAAC,KAAK,uBAAuB;QAC7B,CAAC,KAAK,uBAAuB;QAC7B,CAAC,KAAK,cAAc,EACpB,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IAC9B,IACE,KAAK,KAAK,OAAO;QACjB,KAAK,KAAK,OAAO;QACjB,KAAK,KAAK,eAAe;QACzB,KAAK,KAAK,WAAW,EACrB,CAAC;QACD,OAAO,mBAAmB,CAAC;IAC7B,CAAC;IACD,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,YAAY,EAAE,CAAC;QACjD,OAAO,uBAAuB,CAAC;IACjC,CAAC;IACD,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,8EAA8E;AAC9E,SAAgB,mBAAmB,CAAC,IAAiB;IACnD,OAAO,oCAA4B,CAAC,IAAI,CAAC,CAAC;AAC5C,CAAC"}
+{"version":3,"file":"better-auth-org-roles.js","sourceRoot":"","sources":["../../src/rbac/better-auth-org-roles.ts"],"names":[],"mappings":";;;AAyBA,wDAyBC;AAGD,kDAEC;AArDD,mGAAmG;AACtF,QAAA,4BAA4B,GAAG;IAC1C,iBAAiB,EAAE,mBAAmB;IACtC,WAAW,EAAE,aAAa;IAC1B,qBAAqB,EAAE,uBAAuB;IAC9C,qBAAqB,EAAE,uBAAuB;IAC9C,YAAY,EAAE,cAAc;CACuB,CAAC;AAEzC,QAAA,uBAAuB,GAA4C;IAC9E,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,YAAY,EAAE;IAC7C,EAAE,KAAK,EAAE,uBAAuB,EAAE,KAAK,EAAE,oBAAoB,EAAE;IAC/D,EAAE,KAAK,EAAE,uBAAuB,EAAE,KAAK,EAAE,kBAAkB,EAAE;IAC7D,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,YAAY,EAAE;CAC/C,CAAC;AAEF,8EAA8E;AACjE,QAAA,uBAAuB,GAA4C;IAC9E,EAAE,KAAK,EAAE,mBAAmB,EAAE,KAAK,EAAE,8BAA8B,EAAE;IACrE,GAAG,+BAAuB;CAC3B,CAAC;AAEF,+FAA+F;AAC/F,SAAgB,sBAAsB,CAAC,GAA8B;IACnE,IAAI,CAAC,GAAG;QAAE,OAAO,cAAc,CAAC;IAChC,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACrB,IACE,CAAC,KAAK,mBAAmB;QACzB,CAAC,KAAK,aAAa;QACnB,CAAC,KAAK,uBAAuB;QAC7B,CAAC,KAAK,uBAAuB;QAC7B,CAAC,KAAK,cAAc,EACpB,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IAC9B,IACE,KAAK,KAAK,OAAO;QACjB,KAAK,KAAK,OAAO;QACjB,KAAK,KAAK,eAAe;QACzB,KAAK,KAAK,WAAW,EACrB,CAAC;QACD,OAAO,mBAAmB,CAAC;IAC7B,CAAC;IACD,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,YAAY,EAAE,CAAC;QACjD,OAAO,uBAAuB,CAAC;IACjC,CAAC;IACD,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,8EAA8E;AAC9E,SAAgB,mBAAmB,CAAC,IAAiB;IACnD,OAAO,oCAA4B,CAAC,IAAI,CAAC,CAAC;AAC5C,CAAC"}

package/bundled/node_modules/@aspm/shared/dist/redaction.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"redaction.d.ts","sourceRoot":"","sources":["../src/redaction.ts"],"names":[],"mappings":"AAUA,eAAO,MAAM,cAAc,eAAe,CAAC;AAiD3C,MAAM,MAAM,gBAAgB,GAAG;IAC7B,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;AA+LF,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,CA2ClD;AAED,wBAAgB,qBAAqB,CACnC,CAAC,SAAS;IACR,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,eAAe,CAAC,EAAE,KAAK,CAAC;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC,CAAC;CAChE,EACD,MAAM,EAAE,CAAC,EAAE,OAAO,GAAE,gBAAqB,GAAG,CAAC,CAyB9C"}
+{"version":3,"file":"redaction.d.ts","sourceRoot":"","sources":["../src/redaction.ts"],"names":[],"mappings":"AAUA,eAAO,MAAM,cAAc,eAAe,CAAC;AAiD3C,MAAM,MAAM,gBAAgB,GAAG;IAC7B,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;AAmMF,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,CA2ClD;AAED,wBAAgB,qBAAqB,CACnC,CAAC,SAAS;IACR,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,eAAe,CAAC,EAAE,KAAK,CAAC;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC,CAAC;CAChE,EACD,MAAM,EAAE,CAAC,EAAE,OAAO,GAAE,gBAAqB,GAAG,CAAC,CAyB9C"}

package/bundled/node_modules/@aspm/shared/dist/redaction.js

@@ -88,6 +88,7 @@ function redactString(value) {
         .replace(/\bAIza[0-9A-Za-z_-]{35}\b/g, exports.REDACTED_VALUE)
         .replace(/\b(AccountKey|SharedAccessSignature)=([^;\n]+)/gi, `$1=${exports.REDACTED_VALUE}`)
         .replace(/\b((?:password|passwd|pwd|secret|token|api[_-]?key|client[_-]?secret)\b\s*[:=]\s*)(["'`]?)[^,\s"'`]+/gi, `$1$2${exports.REDACTED_VALUE}`)
+        .replace(/\b((?:postgres(?:ql)?|mysql|mariadb|mongodb(?:\+srv)?|redis|rediss):\/\/)([^/@\s:]*):([^/@\s]+)@/gi, `$1${exports.REDACTED_VALUE}@`)
         .replace(/(https?:\/\/)([^/@\s:]+):([^/@\s]+)@/gi, `$1${exports.REDACTED_VALUE}@`);
 }
 /** Path string for @pinojs/redact / fast-redact. */

package/bundled/node_modules/@aspm/shared/dist/redaction.js.map

@@ -1 +1 @@
-{"version":3,"file":"redaction.js","sourceRoot":"","sources":["../src/redaction.ts"],"names":[],"mappings":";;;;;;AA6PA,kDA2CC;AAED,sDA8BC;AAxUD;;;;;;;GAOG;AACH,4DAAwC;AAE3B,QAAA,cAAc,GAAG,YAAY,CAAC;AAE3C,MAAM,mBAAmB,GAAG;IAC1B,aAAa;IACb,QAAQ;IACR,UAAU;IACV,eAAe;IACf,aAAa;IACb,cAAc;IACd,YAAY;IACZ,SAAS;IACT,UAAU;IACV,QAAQ;IACR,YAAY;IACZ,cAAc;IACd,QAAQ;IACR,SAAS;IACT,OAAO;CACR,CAAC;AAEF,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC;IACnC,MAAM;IACN,QAAQ;IACR,OAAO;IACP,UAAU;IACV,oBAAoB;IACpB,KAAK;IACL,QAAQ;IACR,WAAW;CACZ,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC;IACpC,eAAe;IACf,QAAQ;IACR,oBAAoB;IACpB,WAAW;IACX,SAAS;IACT,YAAY;IACZ,YAAY;IACZ,cAAc;CACf,CAAC,CAAC;AAEH,MAAM,wBAAwB,GAAG,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC,CAAC;AACxE,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,aAAa,EAAE,sBAAsB,EAAE,SAAS,CAAC,CAAC,CAAC;AAC9F,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,gBAAgB,EAAE,iBAAiB,CAAC,CAAC,CAAC;AAClG,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAS/B,SAAS,YAAY,CAAC,GAAW;IAC/B,OAAO,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,cAAc,CAAC,GAAW;IACjC,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,wBAAwB,CAAC,GAAG,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3D,OAAO,CACL,oBAAoB,CAAC,GAAG,CAAC,UAAU,CAAC;QACpC,mBAAmB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAC9D,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAW,EAAE,SAAkB;IACxD,MAAM,aAAa,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,mBAAmB,GAAG,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAErE,IAAI,qBAAqB,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACnD,OAAO,qBAAqB,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC,CAAC;IACzE,CAAC;IAED,IAAI,kBAAkB,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,CAAC;QAChD,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,KAAK;SACT,OAAO,CACN,4IAA4I,EAC5I,OAAO,sBAAc,EAAE,CACxB;SACA,OAAO,CAAC,uCAAuC,EAAE,KAAK,sBAAc,EAAE,CAAC;SACvE,OAAO,CAAC,mCAAmC,EAAE,KAAK,sBAAc,EAAE,CAAC;SACnE,OAAO,CAAC,qCAAqC,EAAE,sBAAc,CAAC;SAC9D,OAAO,CAAC,gCAAgC,EAAE,sBAAc,CAAC;SACzD,OAAO,CAAC,4BAA4B,EAAE,sBAAc,CAAC;SACrD,OAAO,CAAC,kDAAkD,EAAE,MAAM,sBAAc,EAAE,CAAC;SACnF,OAAO,CACN,wGAAwG,EACxG,OAAO,sBAAc,EAAE,CACxB;SACA,OAAO,CAAC,wCAAwC,EAAE,KAAK,sBAAc,GAAG,CAAC,CAAC;AAC/E,CAAC;AAED,oDAAoD;AACpD,SAAS,mBAAmB,CAAC,KAA6B;IACxD,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACxE,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAChD,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;YAChB,SAAS;QACX,CAAC;QACD,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACjC,GAAG,IAAI,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,CAAC;aAAM,CAAC;YACN,MAAM,OAAO,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAClE,GAAG,IAAI,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,OAAO,IAAI,CAAC,CAAC,CAAC,MAAM,OAAO,IAAI,CAAC;QAC3D,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,yFAAyF;AACzF,SAAS,OAAO,CAAC,KAA6B;IAC5C,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,QAAQ,CACf,KAA6B,EAC7B,YAAyB,EACzB,SAAsB;IAEtB,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAC1B,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACrB,SAAS,CAAC,GAAG,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED,mFAAmF;AACnF,SAAS,eAAe,CAAI,KAAQ;IAClC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAM,CAAC;AAChD,CAAC;AAED,SAAS,UAAU,CACjB,KAA6B,EAC7B,cAA2B,EAC3B,SAAsB;IAEtB,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAC1B,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACvB,SAAS,CAAC,GAAG,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED;;;GAGG;AACH,SAAS,uBAAuB,CAC9B,KAAc,EACd,KAA6B,EAC7B,YAAgC,EAChC,KAAa,EACb,YAAyB,EACzB,cAA2B,EAC3B,SAAsB;IAEtB,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO;IACT,CAAC;IAED,IAAI,YAAY,KAAK,SAAS,IAAI,iBAAiB,CAAC,YAAY,CAAC,EAAE,CAAC;QAClE,QAAQ,CAAC,KAAK,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;QACzC,OAAO;IACT,CAAC;IAED,IAAI,KAAK,IAAI,mBAAmB,EAAE,CAAC;QACjC,QAAQ,CAAC,KAAK,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;QACzC,OAAO;IACT,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,SAAS,GAAG,KAAK,GAAG,CAAC,CAAC;QAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACtB,MAAM,SAAS,GAAG,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC;YAEhC,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC9C,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC7B,UAAU,CAAC,SAAS,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC;gBACnD,CAAC;gBACD,SAAS;YACX,CAAC;YAED,IAAI,SAAS,IAAI,mBAAmB,EAAE,CAAC;gBACrC,QAAQ,CAAC,SAAS,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;gBAC7C,SAAS;YACX,CAAC;YAED,uBAAuB,CACrB,IAAI,EACJ,SAAS,EACT,YAAY,EACZ,SAAS,EACT,YAAY,EACZ,cAAc,EACd,SAAS,CACV,CAAC;QACJ,CAAC;QACD,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAG,KAAuB,CAAC;IACtC,KAAK,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3D,MAAM,SAAS,GAAG,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC,CAAC;QAEvC,IAAI,iBAAiB,CAAC,QAAQ,EAAE,YAAY,CAAC,EAAE,CAAC;YAC9C,QAAQ,CAAC,SAAS,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;YAC7C,SAAS;QACX,CAAC;QAED,IAAI,UAAU,KAAK,IAAI,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;YAC1D,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;gBACnC,UAAU,CAAC,SAAS,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC;YACnD,CAAC;YACD,SAAS;QACX,CAAC;QAED,MAAM,SAAS,GAAG,KAAK,GAAG,CAAC,CAAC;QAC5B,IAAI,SAAS,IAAI,mBAAmB,EAAE,CAAC;YACrC,QAAQ,CAAC,SAAS,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;YAC7C,SAAS;QACX,CAAC;QAED,uBAAuB,CACrB,UAAU,EACV,SAAS,EACT,QAAQ,EACR,SAAS,EACT,YAAY,EACZ,cAAc,EACd,SAAS,CACV,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAgB,mBAAmB,CAAI,KAAQ;IAC7C,IAAI,KAAK,IAAI,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,YAAY,CAAC,KAAK,CAAM,CAAC;QAClC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IACvC,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IACzC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IAEpC,uBAAuB,CAAC,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,YAAY,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC;IAE1F,IAAI,SAAS,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,MAAM,GAAG,IAAA,gBAAU,EAAC;QACxB,KAAK,EAAE,CAAC,GAAG,SAAS,CAAC;QACrB,SAAS,EAAE,KAAK;QAChB,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,CAAC,CAAC,CAAU,EAAE,OAAgB,EAAE,EAAE;YACxC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAE,OAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACzF,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;YAC1B,IAAI,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;gBACzB,OAAO,sBAAc,CAAC;YACxB,CAAC;YACD,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;gBACpD,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC;YACzB,CAAC;YACD,OAAO,CAAC,CAAC;QACX,CAAC,CAA4B;KAC9B,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAExC,CAAC;IACF,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;QACtC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,GAAG,CAAC;QACxC,OAAO,IAAS,CAAC;IACnB,CAAC;IACD,OAAO,GAAQ,CAAC;AAClB,CAAC;AAED,SAAgB,qBAAqB,CAKnC,MAAS,EAAE,UAA4B,EAAE;IACzC,MAAM,EAAE,aAAa,GAAG,IAAI,EAAE,cAAc,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IAEhE,OAAO;QACL,GAAG,MAAM;QACT,GAAG,CAAC,cAAc,IAAI,MAAM,CAAC,QAAQ;YACnC,CAAC,CAAC,EAAE,QAAQ,EAAE,mBAAmB,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE;YACpD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC;YACvC,CAAC,CAAC;gBACE,eAAe,EAAE,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,aAAa,EAAE,EAAE;oBAC5D,MAAM,EAAE,OAAO,EAAE,GAAG,mBAAmB,EAAE,GAAG,aAAa,CAAC;oBAC1D,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;oBAC3D,OAAO;wBACL,GAAG,mBAAmB,CAAC,mBAAmB,CAAC;wBAC3C,GAAG,CAAC,UAAU;4BACZ,CAAC,CAAC;gCACE,OAAO,EAAE,aAAa,IAAI,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO;6BAC3E;4BACH,CAAC,CAAC,EAAE,CAAC;qBACR,CAAC;gBACJ,CAAC,CAAC;aACH;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC"}
+{"version":3,"file":"redaction.js","sourceRoot":"","sources":["../src/redaction.ts"],"names":[],"mappings":";;;;;;AAiQA,kDA2CC;AAED,sDA8BC;AA5UD;;;;;;;GAOG;AACH,4DAAwC;AAE3B,QAAA,cAAc,GAAG,YAAY,CAAC;AAE3C,MAAM,mBAAmB,GAAG;IAC1B,aAAa;IACb,QAAQ;IACR,UAAU;IACV,eAAe;IACf,aAAa;IACb,cAAc;IACd,YAAY;IACZ,SAAS;IACT,UAAU;IACV,QAAQ;IACR,YAAY;IACZ,cAAc;IACd,QAAQ;IACR,SAAS;IACT,OAAO;CACR,CAAC;AAEF,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC;IACnC,MAAM;IACN,QAAQ;IACR,OAAO;IACP,UAAU;IACV,oBAAoB;IACpB,KAAK;IACL,QAAQ;IACR,WAAW;CACZ,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC;IACpC,eAAe;IACf,QAAQ;IACR,oBAAoB;IACpB,WAAW;IACX,SAAS;IACT,YAAY;IACZ,YAAY;IACZ,cAAc;CACf,CAAC,CAAC;AAEH,MAAM,wBAAwB,GAAG,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC,CAAC;AACxE,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,aAAa,EAAE,sBAAsB,EAAE,SAAS,CAAC,CAAC,CAAC;AAC9F,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,gBAAgB,EAAE,iBAAiB,CAAC,CAAC,CAAC;AAClG,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAS/B,SAAS,YAAY,CAAC,GAAW;IAC/B,OAAO,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,cAAc,CAAC,GAAW;IACjC,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,wBAAwB,CAAC,GAAG,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3D,OAAO,CACL,oBAAoB,CAAC,GAAG,CAAC,UAAU,CAAC;QACpC,mBAAmB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAC9D,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAW,EAAE,SAAkB;IACxD,MAAM,aAAa,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,mBAAmB,GAAG,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAErE,IAAI,qBAAqB,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACnD,OAAO,qBAAqB,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC,CAAC;IACzE,CAAC;IAED,IAAI,kBAAkB,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,CAAC;QAChD,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,KAAK;SACT,OAAO,CACN,4IAA4I,EAC5I,OAAO,sBAAc,EAAE,CACxB;SACA,OAAO,CAAC,uCAAuC,EAAE,KAAK,sBAAc,EAAE,CAAC;SACvE,OAAO,CAAC,mCAAmC,EAAE,KAAK,sBAAc,EAAE,CAAC;SACnE,OAAO,CAAC,qCAAqC,EAAE,sBAAc,CAAC;SAC9D,OAAO,CAAC,gCAAgC,EAAE,sBAAc,CAAC;SACzD,OAAO,CAAC,4BAA4B,EAAE,sBAAc,CAAC;SACrD,OAAO,CAAC,kDAAkD,EAAE,MAAM,sBAAc,EAAE,CAAC;SACnF,OAAO,CACN,wGAAwG,EACxG,OAAO,sBAAc,EAAE,CACxB;SACA,OAAO,CACN,oGAAoG,EACpG,KAAK,sBAAc,GAAG,CACvB;SACA,OAAO,CAAC,wCAAwC,EAAE,KAAK,sBAAc,GAAG,CAAC,CAAC;AAC/E,CAAC;AAED,oDAAoD;AACpD,SAAS,mBAAmB,CAAC,KAA6B;IACxD,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACxE,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAChD,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;YAChB,SAAS;QACX,CAAC;QACD,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACjC,GAAG,IAAI,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,CAAC;aAAM,CAAC;YACN,MAAM,OAAO,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAClE,GAAG,IAAI,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,OAAO,IAAI,CAAC,CAAC,CAAC,MAAM,OAAO,IAAI,CAAC;QAC3D,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,yFAAyF;AACzF,SAAS,OAAO,CAAC,KAA6B;IAC5C,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,QAAQ,CACf,KAA6B,EAC7B,YAAyB,EACzB,SAAsB;IAEtB,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAC1B,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACrB,SAAS,CAAC,GAAG,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED,mFAAmF;AACnF,SAAS,eAAe,CAAI,KAAQ;IAClC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAM,CAAC;AAChD,CAAC;AAED,SAAS,UAAU,CACjB,KAA6B,EAC7B,cAA2B,EAC3B,SAAsB;IAEtB,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAC1B,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACvB,SAAS,CAAC,GAAG,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED;;;GAGG;AACH,SAAS,uBAAuB,CAC9B,KAAc,EACd,KAA6B,EAC7B,YAAgC,EAChC,KAAa,EACb,YAAyB,EACzB,cAA2B,EAC3B,SAAsB;IAEtB,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO;IACT,CAAC;IAED,IAAI,YAAY,KAAK,SAAS,IAAI,iBAAiB,CAAC,YAAY,CAAC,EAAE,CAAC;QAClE,QAAQ,CAAC,KAAK,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;QACzC,OAAO;IACT,CAAC;IAED,IAAI,KAAK,IAAI,mBAAmB,EAAE,CAAC;QACjC,QAAQ,CAAC,KAAK,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;QACzC,OAAO;IACT,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,SAAS,GAAG,KAAK,GAAG,CAAC,CAAC;QAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACtB,MAAM,SAAS,GAAG,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC;YAEhC,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC9C,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC7B,UAAU,CAAC,SAAS,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC;gBACnD,CAAC;gBACD,SAAS;YACX,CAAC;YAED,IAAI,SAAS,IAAI,mBAAmB,EAAE,CAAC;gBACrC,QAAQ,CAAC,SAAS,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;gBAC7C,SAAS;YACX,CAAC;YAED,uBAAuB,CACrB,IAAI,EACJ,SAAS,EACT,YAAY,EACZ,SAAS,EACT,YAAY,EACZ,cAAc,EACd,SAAS,CACV,CAAC;QACJ,CAAC;QACD,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAG,KAAuB,CAAC;IACtC,KAAK,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3D,MAAM,SAAS,GAAG,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC,CAAC;QAEvC,IAAI,iBAAiB,CAAC,QAAQ,EAAE,YAAY,CAAC,EAAE,CAAC;YAC9C,QAAQ,CAAC,SAAS,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;YAC7C,SAAS;QACX,CAAC;QAED,IAAI,UAAU,KAAK,IAAI,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;YAC1D,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;gBACnC,UAAU,CAAC,SAAS,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC;YACnD,CAAC;YACD,SAAS;QACX,CAAC;QAED,MAAM,SAAS,GAAG,KAAK,GAAG,CAAC,CAAC;QAC5B,IAAI,SAAS,IAAI,mBAAmB,EAAE,CAAC;YACrC,QAAQ,CAAC,SAAS,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;YAC7C,SAAS;QACX,CAAC;QAED,uBAAuB,CACrB,UAAU,EACV,SAAS,EACT,QAAQ,EACR,SAAS,EACT,YAAY,EACZ,cAAc,EACd,SAAS,CACV,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAgB,mBAAmB,CAAI,KAAQ;IAC7C,IAAI,KAAK,IAAI,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,YAAY,CAAC,KAAK,CAAM,CAAC;QAClC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IACvC,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IACzC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IAEpC,uBAAuB,CAAC,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,YAAY,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC;IAE1F,IAAI,SAAS,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,MAAM,GAAG,IAAA,gBAAU,EAAC;QACxB,KAAK,EAAE,CAAC,GAAG,SAAS,CAAC;QACrB,SAAS,EAAE,KAAK;QAChB,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,CAAC,CAAC,CAAU,EAAE,OAAgB,EAAE,EAAE;YACxC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAE,OAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACzF,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;YAC1B,IAAI,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;gBACzB,OAAO,sBAAc,CAAC;YACxB,CAAC;YACD,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;gBACpD,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC;YACzB,CAAC;YACD,OAAO,CAAC,CAAC;QACX,CAAC,CAA4B;KAC9B,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAExC,CAAC;IACF,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;QACtC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,GAAG,CAAC;QACxC,OAAO,IAAS,CAAC;IACnB,CAAC;IACD,OAAO,GAAQ,CAAC;AAClB,CAAC;AAED,SAAgB,qBAAqB,CAKnC,MAAS,EAAE,UAA4B,EAAE;IACzC,MAAM,EAAE,aAAa,GAAG,IAAI,EAAE,cAAc,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IAEhE,OAAO;QACL,GAAG,MAAM;QACT,GAAG,CAAC,cAAc,IAAI,MAAM,CAAC,QAAQ;YACnC,CAAC,CAAC,EAAE,QAAQ,EAAE,mBAAmB,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE;YACpD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC;YACvC,CAAC,CAAC;gBACE,eAAe,EAAE,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,aAAa,EAAE,EAAE;oBAC5D,MAAM,EAAE,OAAO,EAAE,GAAG,mBAAmB,EAAE,GAAG,aAAa,CAAC;oBAC1D,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;oBAC3D,OAAO;wBACL,GAAG,mBAAmB,CAAC,mBAAmB,CAAC;wBAC3C,GAAG,CAAC,UAAU;4BACZ,CAAC,CAAC;gCACE,OAAO,EAAE,aAAa,IAAI,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO;6BAC3E;4BACH,CAAC,CAAC,EAAE,CAAC;qBACR,CAAC;gBACJ,CAAC,CAAC;aACH;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC"}

package/bundled/node_modules/@aspm/shared/dist/security/aspm-gate-rules.d.ts

@@ -0,0 +1,19 @@
+export type AspmGateRules = {
+    vulnerabilities?: {
+        max_by_severity: Record<string, number>;
+    };
+    coverage?: {
+        min_line_pct: number;
+    };
+};
+export declare const DEFAULT_ASPM_GATE_RULES: AspmGateRules;
+/** Base64 payload for `aspm gate --rules` (wraps rules in `{ rules: ... }`). */
+export declare function encodeAspmGateRulesBase64(rules?: AspmGateRules): string;
+/** Pretty JSON for `aspm gate --rules-file` (wraps rules in `{ rules: ... }`). */
+export declare function formatAspmGateRulesJson(rules?: AspmGateRules): string;
+/**
+ * GitHub Actions step with human-readable gate rules JSON and `aspm gate --rules-file`.
+ * Same semantics as Naus `aspm_gate`, without base64 or Node wrappers in the YAML.
+ */
+export declare function buildAspmGateGithubWorkflowStep(rules?: AspmGateRules, projectId?: string): string;
+//# sourceMappingURL=aspm-gate-rules.d.ts.map

package/bundled/node_modules/@aspm/shared/dist/security/aspm-gate-rules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"aspm-gate-rules.d.ts","sourceRoot":"","sources":["../../src/security/aspm-gate-rules.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,aAAa,GAAG;IAC1B,eAAe,CAAC,EAAE;QAChB,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;KACzC,CAAC;IACF,QAAQ,CAAC,EAAE;QACT,YAAY,EAAE,MAAM,CAAC;KACtB,CAAC;CACH,CAAC;AAEF,eAAO,MAAM,uBAAuB,EAAE,aAOrC,CAAC;AAeF,gFAAgF;AAChF,wBAAgB,yBAAyB,CACvC,KAAK,GAAE,aAAuC,GAC7C,MAAM,CAIR;AAED,kFAAkF;AAClF,wBAAgB,uBAAuB,CACrC,KAAK,GAAE,aAAuC,GAC7C,MAAM,CAIR;AAWD;;;GAGG;AACH,wBAAgB,+BAA+B,CAC7C,KAAK,GAAE,aAAuC,EAC9C,SAAS,CAAC,EAAE,MAAM,GACjB,MAAM,CAaR"}

package/bundled/node_modules/@aspm/shared/dist/security/aspm-gate-rules.js

@@ -0,0 +1,61 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_ASPM_GATE_RULES = void 0;
+exports.encodeAspmGateRulesBase64 = encodeAspmGateRulesBase64;
+exports.formatAspmGateRulesJson = formatAspmGateRulesJson;
+exports.buildAspmGateGithubWorkflowStep = buildAspmGateGithubWorkflowStep;
+exports.DEFAULT_ASPM_GATE_RULES = {
+    vulnerabilities: {
+        max_by_severity: {
+            CRITICAL: 0,
+            HIGH: 0,
+        },
+    },
+};
+function encodeUtf8ToBase64(value) {
+    const bufferCtor = globalThis.Buffer;
+    if (bufferCtor) {
+        return bufferCtor.from(value, "utf8").toString("base64");
+    }
+    const bytes = new TextEncoder().encode(value);
+    let binary = "";
+    for (const byte of bytes) {
+        binary += String.fromCharCode(byte);
+    }
+    return btoa(binary);
+}
+/** Base64 payload for `aspm gate --rules` (wraps rules in `{ rules: ... }`). */
+function encodeAspmGateRulesBase64(rules = exports.DEFAULT_ASPM_GATE_RULES) {
+    const body = rules && Object.keys(rules).length > 0 ? { rules } : {};
+    return encodeUtf8ToBase64(JSON.stringify(body));
+}
+/** Pretty JSON for `aspm gate --rules-file` (wraps rules in `{ rules: ... }`). */
+function formatAspmGateRulesJson(rules = exports.DEFAULT_ASPM_GATE_RULES) {
+    const body = rules && Object.keys(rules).length > 0 ? { rules } : {};
+    return JSON.stringify(body, null, 2);
+}
+const KUBBISEC_GATE_RULES_FILENAME = "kubbisec-gate-rules.json";
+function indentForYamlRunBlock(text, indent = "          ") {
+    return text
+        .split("\n")
+        .map((line) => (line.length > 0 ? `${indent}${line}` : line))
+        .join("\n");
+}
+/**
+ * GitHub Actions step with human-readable gate rules JSON and `aspm gate --rules-file`.
+ * Same semantics as Naus `aspm_gate`, without base64 or Node wrappers in the YAML.
+ */
+function buildAspmGateGithubWorkflowStep(rules = exports.DEFAULT_ASPM_GATE_RULES, projectId) {
+    const rulesJson = indentForYamlRunBlock(formatAspmGateRulesJson(rules));
+    const projectRef = projectId ?? `\${{ vars.KUBBISEC_PROJECT }}`;
+    return `      # Quality gate KubbiSec: avalia os relatórios locais desta job (modelo Naus aspm_gate)
+      - name: KubbiSec ASPM gate
+        env:
+          KUBBISEC_PROJECT: ${projectRef}
+        run: |
+          cat > ${KUBBISEC_GATE_RULES_FILENAME} <<'EOF'
+${rulesJson}
+          EOF
+          aspm gate --rules-file ${KUBBISEC_GATE_RULES_FILENAME} -p ${projectRef}`;
+}
+//# sourceMappingURL=aspm-gate-rules.js.map

package/bundled/node_modules/@aspm/shared/dist/security/aspm-gate-rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aspm-gate-rules.js","sourceRoot":"","sources":["../../src/security/aspm-gate-rules.ts"],"names":[],"mappings":";;;AAgCA,8DAMC;AAGD,0DAMC;AAeD,0EAgBC;AArEY,QAAA,uBAAuB,GAAkB;IACpD,eAAe,EAAE;QACf,eAAe,EAAE;YACf,QAAQ,EAAE,CAAC;YACX,IAAI,EAAE,CAAC;SACR;KACF;CACF,CAAC;AAEF,SAAS,kBAAkB,CAAC,KAAa;IACvC,MAAM,UAAU,GAAI,UAAuG,CAAC,MAAM,CAAC;IACnI,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC;AACtB,CAAC;AAED,gFAAgF;AAChF,SAAgB,yBAAyB,CACvC,QAAuB,+BAAuB;IAE9C,MAAM,IAAI,GACR,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1D,OAAO,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,kFAAkF;AAClF,SAAgB,uBAAuB,CACrC,QAAuB,+BAAuB;IAE9C,MAAM,IAAI,GACR,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1D,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,4BAA4B,GAAG,0BAA0B,CAAC;AAEhE,SAAS,qBAAqB,CAAC,IAAY,EAAE,MAAM,GAAG,YAAY;IAChE,OAAO,IAAI;SACR,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;SAC5D,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,SAAgB,+BAA+B,CAC7C,QAAuB,+BAAuB,EAC9C,SAAkB;IAElB,MAAM,SAAS,GAAG,qBAAqB,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAC,CAAC;IACxE,MAAM,UAAU,GAAG,SAAS,IAAI,+BAA+B,CAAC;IAEhE,OAAO;;;8BAGqB,UAAU;;kBAEtB,4BAA4B;EAC5C,SAAS;;mCAEwB,4BAA4B,OAAO,UAAU,EAAE,CAAC;AACnF,CAAC"}

package/bundled/node_modules/@aspm/shared/dist/security/build-aspm-security-matrix-pipeline-yaml.d.ts

@@ -0,0 +1,3 @@
+import type { BuildAspmSecurityMatrixPipelineOptions } from "./security-tool.types";
+export declare function buildAspmSecurityMatrixPipelineYaml(tools: readonly string[], options?: BuildAspmSecurityMatrixPipelineOptions): string;
+//# sourceMappingURL=build-aspm-security-matrix-pipeline-yaml.d.ts.map

package/bundled/node_modules/@aspm/shared/dist/security/build-aspm-security-matrix-pipeline-yaml.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-aspm-security-matrix-pipeline-yaml.d.ts","sourceRoot":"","sources":["../../src/security/build-aspm-security-matrix-pipeline-yaml.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,sCAAsC,EAEvC,MAAM,uBAAuB,CAAC;AAqB/B,wBAAgB,mCAAmC,CACjD,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,OAAO,CAAC,EAAE,sCAAsC,GAC/C,MAAM,CAkCR"}

package/bundled/node_modules/@aspm/shared/dist/security/build-aspm-security-matrix-pipeline-yaml.js

@@ -0,0 +1,54 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildAspmSecurityMatrixPipelineYaml = buildAspmSecurityMatrixPipelineYaml;
+const aspm_gate_rules_1 = require("./aspm-gate-rules");
+const security_tool_catalog_1 = require("./security-tool-catalog");
+function formatGateRulesYaml(gateRules) {
+    const lines = [];
+    if (gateRules.vulnerabilities?.max_by_severity) {
+        lines.push("        vulnerabilities:");
+        lines.push("          max_by_severity:");
+        for (const [severity, max] of Object.entries(gateRules.vulnerabilities.max_by_severity)) {
+            lines.push(`            ${severity}: ${max}`);
+        }
+    }
+    if (gateRules.coverage?.min_line_pct != null) {
+        lines.push("        coverage:");
+        lines.push(`          min_line_pct: ${gateRules.coverage.min_line_pct}`);
+    }
+    return lines.join("\n");
+}
+function buildAspmSecurityMatrixPipelineYaml(tools, options) {
+    const normalized = (0, security_tool_catalog_1.normalizeSecurityTools)(tools);
+    const pipelineName = options?.pipelineName?.trim() || "kubbisec-security";
+    const matrixStrategy = options?.matrixStrategy ?? "fanout";
+    const gateRules = options?.gateRules ?? aspm_gate_rules_1.DEFAULT_ASPM_GATE_RULES;
+    const parallelBlock = normalized.map((tool) => `        - tool: ${tool}`).join("\n");
+    const gateYaml = formatGateRulesYaml(gateRules);
+    return `name: "${pipelineName}"
+description: Pipeline de segurança KubbiSec ASPM (matriz gerada automaticamente)
+
+stages:
+  - security
+  - gate
+
+run:
+  - kubbisec_security:
+      display_name: "KubbiSec ASPM: matriz de segurança"
+      stage: security
+      kind: aspm_matrix
+      mode: scan-and-upload
+      matrix_strategy: ${matrixStrategy}
+      parallel:
+${parallelBlock}
+  - kubbisec_gate:
+      display_name: "KubbiSec ASPM gate"
+      stage: gate
+      kind: aspm_gate
+      rules:
+${gateYaml}
+      depends_on:
+        - kubbisec_security
+`;
+}
+//# sourceMappingURL=build-aspm-security-matrix-pipeline-yaml.js.map

package/bundled/node_modules/@aspm/shared/dist/security/build-aspm-security-matrix-pipeline-yaml.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-aspm-security-matrix-pipeline-yaml.js","sourceRoot":"","sources":["../../src/security/build-aspm-security-matrix-pipeline-yaml.ts"],"names":[],"mappings":";;AAyBA,kFAqCC;AA9DD,uDAA4D;AAK5D,mEAAiE;AAEjE,SAAS,mBAAmB,CAC1B,SAA2E;IAE3E,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,SAAS,CAAC,eAAe,EAAE,eAAe,EAAE,CAAC;QAC/C,KAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QACvC,KAAK,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QACzC,KAAK,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,eAAe,CAAC,eAAe,CAAC,EAAE,CAAC;YACxF,KAAK,CAAC,IAAI,CAAC,eAAe,QAAQ,KAAK,GAAG,EAAE,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IACD,IAAI,SAAS,CAAC,QAAQ,EAAE,YAAY,IAAI,IAAI,EAAE,CAAC;QAC7C,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC,2BAA2B,SAAS,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAgB,mCAAmC,CACjD,KAAwB,EACxB,OAAgD;IAEhD,MAAM,UAAU,GAAG,IAAA,8CAAsB,EAAC,KAAK,CAAqB,CAAC;IACrE,MAAM,YAAY,GAAG,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,mBAAmB,CAAC;IAC1E,MAAM,cAAc,GAAG,OAAO,EAAE,cAAc,IAAI,QAAQ,CAAC;IAC3D,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS,IAAI,yCAAuB,CAAC;IAEhE,MAAM,aAAa,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrF,MAAM,QAAQ,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAEhD,OAAO,UAAU,YAAY;;;;;;;;;;;;;yBAaN,cAAc;;EAErC,aAAa;;;;;;EAMb,QAAQ;;;CAGT,CAAC;AACF,CAAC"}

package/bundled/node_modules/@aspm/shared/dist/security/build-github-security-workflow-yaml.d.ts

@@ -0,0 +1,4 @@
+import type { BuildGithubSecurityWorkflowOptions } from "./security-tool.types";
+export declare function buildGithubSecurityWorkflowYaml(tools: readonly string[], options: BuildGithubSecurityWorkflowOptions): string;
+export declare const DEFAULT_GITHUB_WORKFLOW_TRIGGERS: BuildGithubSecurityWorkflowOptions["events"];
+//# sourceMappingURL=build-github-security-workflow-yaml.d.ts.map

package/bundled/node_modules/@aspm/shared/dist/security/build-github-security-workflow-yaml.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-github-security-workflow-yaml.d.ts","sourceRoot":"","sources":["../../src/security/build-github-security-workflow-yaml.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kCAAkC,EAAkB,MAAM,uBAAuB,CAAC;AAkDhG,wBAAgB,+BAA+B,CAC7C,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,OAAO,EAAE,kCAAkC,GAC1C,MAAM,CAgBR;AAED,eAAO,MAAM,gCAAgC,EAAE,kCAAkC,CAAC,QAAQ,CAOzF,CAAC"}

package/bundled/node_modules/@aspm/shared/dist/security/build-github-security-workflow-yaml.js

@@ -0,0 +1,72 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_GITHUB_WORKFLOW_TRIGGERS = void 0;
+exports.buildGithubSecurityWorkflowYaml = buildGithubSecurityWorkflowYaml;
+const security_tool_catalog_1 = require("./security-tool-catalog");
+const github_workflow_tool_jobs_1 = require("./github-workflow-tool-jobs");
+function buildOnBlock(events) {
+    const lines = ["on:"];
+    if (events.push) {
+        const branches = events.pushBranches.filter(Boolean);
+        if (branches.length > 0) {
+            lines.push("  push:");
+            lines.push("    branches:");
+            for (const branch of branches) {
+                lines.push(`      - ${branch}`);
+            }
+        }
+        else {
+            lines.push("  push:");
+        }
+    }
+    if (events.pullRequest) {
+        lines.push("  pull_request:");
+    }
+    if (events.workflowDispatch) {
+        lines.push("  workflow_dispatch:");
+    }
+    if (events.schedule && events.scheduleCron.trim()) {
+        lines.push("  schedule:");
+        lines.push("    - cron: " + JSON.stringify(events.scheduleCron.trim()));
+    }
+    if (lines.length === 1) {
+        lines.push("  workflow_dispatch:");
+    }
+    return lines.join("\n");
+}
+function buildPermissionsBlock(tools) {
+    const needsCodeScanning = tools.some((tool) => tool === "gitleaks" || tool === "osv");
+    if (!needsCodeScanning) {
+        return `permissions:
+  contents: read`;
+    }
+    return `permissions:
+  contents: read
+  actions: read
+  security-events: write`;
+}
+function buildGithubSecurityWorkflowYaml(tools, options) {
+    const normalized = (0, security_tool_catalog_1.normalizeSecurityTools)(tools);
+    const workflowName = options.workflowName.trim() || "KubbiSec Security";
+    const onBlock = buildOnBlock(options.events);
+    const permissionsBlock = buildPermissionsBlock(normalized);
+    const { jobsYaml } = (0, github_workflow_tool_jobs_1.buildGithubToolJobsSection)(normalized, options.inlineEnv);
+    return `name: ${JSON.stringify(workflowName)}
+
+${onBlock}
+
+${permissionsBlock}
+
+jobs:
+${jobsYaml}
+`;
+}
+exports.DEFAULT_GITHUB_WORKFLOW_TRIGGERS = {
+    push: true,
+    pushBranches: ["main"],
+    pullRequest: true,
+    workflowDispatch: true,
+    schedule: false,
+    scheduleCron: "0 6 * * 1",
+};
+//# sourceMappingURL=build-github-security-workflow-yaml.js.map

package/bundled/node_modules/@aspm/shared/dist/security/build-github-security-workflow-yaml.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-github-security-workflow-yaml.js","sourceRoot":"","sources":["../../src/security/build-github-security-workflow-yaml.ts"],"names":[],"mappings":";;;AAoDA,0EAmBC;AAvED,mEAAiE;AACjE,2EAAyE;AAGzE,SAAS,YAAY,CAAC,MAAoD;IACxE,MAAM,KAAK,GAAa,CAAC,KAAK,CAAC,CAAC;IAEhC,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAChB,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACrD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YAC5B,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;gBAC9B,KAAK,CAAC,IAAI,CAAC,WAAW,MAAM,EAAE,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAChC,CAAC;IAED,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACrC,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,CAAC;QAClD,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC1B,KAAK,CAAC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC1E,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACrC,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAuB;IACpD,MAAM,iBAAiB,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,UAAU,IAAI,IAAI,KAAK,KAAK,CAAC,CAAC;IACtF,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvB,OAAO;iBACM,CAAC;IAChB,CAAC;IACD,OAAO;;;yBAGgB,CAAC;AAC1B,CAAC;AAED,SAAgB,+BAA+B,CAC7C,KAAwB,EACxB,OAA2C;IAE3C,MAAM,UAAU,GAAG,IAAA,8CAAsB,EAAC,KAAK,CAAqB,CAAC;IACrE,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,mBAAmB,CAAC;IACxE,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7C,MAAM,gBAAgB,GAAG,qBAAqB,CAAC,UAAU,CAAC,CAAC;IAC3D,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAA,sDAA0B,EAAC,UAAU,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IAE/E,OAAO,SAAS,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC;;EAE5C,OAAO;;EAEP,gBAAgB;;;EAGhB,QAAQ;CACT,CAAC;AACF,CAAC;AAEY,QAAA,gCAAgC,GAAiD;IAC5F,IAAI,EAAE,IAAI;IACV,YAAY,EAAE,CAAC,MAAM,CAAC;IACtB,WAAW,EAAE,IAAI;IACjB,gBAAgB,EAAE,IAAI;IACtB,QAAQ,EAAE,KAAK;IACf,YAAY,EAAE,WAAW;CAC1B,CAAC"}

package/bundled/node_modules/@aspm/shared/dist/security/github-workflow-action-pins.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Pinned GitHub Actions / images for KubbiSec workflow templates.
+ * Prefer stable major/minor tags maintained by vendors; pin SHAs in production if policy requires.
+ *
+ * @see https://github.com/aquasecurity/trivy/security/advisories/GHSA-69fq-xp46-6x23 (trivy-action >= v0.35.0)
+ */
+export declare const GITHUB_CHECKOUT_ACTION = "actions/checkout@v4";
+/** aquasecurity/trivy-action — filesystem scan with JSON for `aspm upload`. */
+export declare const TRIVY_ACTION = "aquasecurity/trivy-action@v0.35.0";
+/** anchore/sbom-action — CycloneDX JSON SBOM for `aspm upload`. */
+export declare const SBOM_ACTION = "anchore/sbom-action@v0";
+/** gitleaks/gitleaks-action — Node 24 / LTS track (org repos may need GITLEAKS_LICENSE). */
+export declare const GITLEAKS_ACTION = "gitleaks/gitleaks-action@v3";
+/** google/osv-scanner-action sub-actions (scanner + SARIF reporter). */
+export declare const OSV_SCANNER_ACTION = "google/osv-scanner-action/osv-scanner-action@v2.3.8";
+export declare const OSV_REPORTER_ACTION = "google/osv-scanner-action/osv-reporter-action@v2.3.8";
+/** Upload SARIF to GitHub Security tab (Code Scanning). */
+export declare const CODEQL_UPLOAD_SARIF_ACTION = "github/codeql-action/upload-sarif@v4";
+/** Tag root for reusable OSV workflows (documentação). */
+export declare const OSV_SCANNER_ACTION_REF = "google/osv-scanner-action@v2.3.8";
+/** SonarSource/sonarqube-scan-action — SonarQube Server 2026.1 LTA docs recommend v7. */
+export declare const SONAR_SCAN_ACTION = "SonarSource/sonarqube-scan-action@v7";
+/** Official Semgrep image (semgrep/semgrep-action is deprecated). */
+export declare const SEMGREP_CONTAINER_IMAGE = "semgrep/semgrep:latest";
+/** Pinned Gitleaks CLI when JSON report is required for ASPM (action defaults to SARIF). */
+export declare const GITLEAKS_CLI_VERSION = "8.21.2";
+//# sourceMappingURL=github-workflow-action-pins.d.ts.map

package/bundled/node_modules/@aspm/shared/dist/security/github-workflow-action-pins.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-workflow-action-pins.d.ts","sourceRoot":"","sources":["../../src/security/github-workflow-action-pins.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,wBAAwB,CAAC;AAE5D,+EAA+E;AAC/E,eAAO,MAAM,YAAY,sCAAsC,CAAC;AAEhE,mEAAmE;AACnE,eAAO,MAAM,WAAW,2BAA2B,CAAC;AAEpD,4FAA4F;AAC5F,eAAO,MAAM,eAAe,gCAAgC,CAAC;AAE7D,wEAAwE;AACxE,eAAO,MAAM,kBAAkB,wDAAwD,CAAC;AACxF,eAAO,MAAM,mBAAmB,yDAAyD,CAAC;AAE1F,2DAA2D;AAC3D,eAAO,MAAM,0BAA0B,yCAAyC,CAAC;AAEjF,0DAA0D;AAC1D,eAAO,MAAM,sBAAsB,qCAAqC,CAAC;AAEzE,yFAAyF;AACzF,eAAO,MAAM,iBAAiB,yCAAyC,CAAC;AAExE,qEAAqE;AACrE,eAAO,MAAM,uBAAuB,2BAA2B,CAAC;AAEhE,4FAA4F;AAC5F,eAAO,MAAM,oBAAoB,WAAW,CAAC"}

package/bundled/node_modules/@aspm/shared/dist/security/github-workflow-action-pins.js

@@ -0,0 +1,30 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GITLEAKS_CLI_VERSION = exports.SEMGREP_CONTAINER_IMAGE = exports.SONAR_SCAN_ACTION = exports.OSV_SCANNER_ACTION_REF = exports.CODEQL_UPLOAD_SARIF_ACTION = exports.OSV_REPORTER_ACTION = exports.OSV_SCANNER_ACTION = exports.GITLEAKS_ACTION = exports.SBOM_ACTION = exports.TRIVY_ACTION = exports.GITHUB_CHECKOUT_ACTION = void 0;
+/**
+ * Pinned GitHub Actions / images for KubbiSec workflow templates.
+ * Prefer stable major/minor tags maintained by vendors; pin SHAs in production if policy requires.
+ *
+ * @see https://github.com/aquasecurity/trivy/security/advisories/GHSA-69fq-xp46-6x23 (trivy-action >= v0.35.0)
+ */
+exports.GITHUB_CHECKOUT_ACTION = "actions/checkout@v4";
+/** aquasecurity/trivy-action — filesystem scan with JSON for `aspm upload`. */
+exports.TRIVY_ACTION = "aquasecurity/trivy-action@v0.35.0";
+/** anchore/sbom-action — CycloneDX JSON SBOM for `aspm upload`. */
+exports.SBOM_ACTION = "anchore/sbom-action@v0";
+/** gitleaks/gitleaks-action — Node 24 / LTS track (org repos may need GITLEAKS_LICENSE). */
+exports.GITLEAKS_ACTION = "gitleaks/gitleaks-action@v3";
+/** google/osv-scanner-action sub-actions (scanner + SARIF reporter). */
+exports.OSV_SCANNER_ACTION = "google/osv-scanner-action/osv-scanner-action@v2.3.8";
+exports.OSV_REPORTER_ACTION = "google/osv-scanner-action/osv-reporter-action@v2.3.8";
+/** Upload SARIF to GitHub Security tab (Code Scanning). */
+exports.CODEQL_UPLOAD_SARIF_ACTION = "github/codeql-action/upload-sarif@v4";
+/** Tag root for reusable OSV workflows (documentação). */
+exports.OSV_SCANNER_ACTION_REF = "google/osv-scanner-action@v2.3.8";
+/** SonarSource/sonarqube-scan-action — SonarQube Server 2026.1 LTA docs recommend v7. */
+exports.SONAR_SCAN_ACTION = "SonarSource/sonarqube-scan-action@v7";
+/** Official Semgrep image (semgrep/semgrep-action is deprecated). */
+exports.SEMGREP_CONTAINER_IMAGE = "semgrep/semgrep:latest";
+/** Pinned Gitleaks CLI when JSON report is required for ASPM (action defaults to SARIF). */
+exports.GITLEAKS_CLI_VERSION = "8.21.2";
+//# sourceMappingURL=github-workflow-action-pins.js.map

package/bundled/node_modules/@aspm/shared/dist/security/github-workflow-action-pins.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-workflow-action-pins.js","sourceRoot":"","sources":["../../src/security/github-workflow-action-pins.ts"],"names":[],"mappings":";;;AAAA;;;;;GAKG;AACU,QAAA,sBAAsB,GAAG,qBAAqB,CAAC;AAE5D,+EAA+E;AAClE,QAAA,YAAY,GAAG,mCAAmC,CAAC;AAEhE,mEAAmE;AACtD,QAAA,WAAW,GAAG,wBAAwB,CAAC;AAEpD,4FAA4F;AAC/E,QAAA,eAAe,GAAG,6BAA6B,CAAC;AAE7D,wEAAwE;AAC3D,QAAA,kBAAkB,GAAG,qDAAqD,CAAC;AAC3E,QAAA,mBAAmB,GAAG,sDAAsD,CAAC;AAE1F,2DAA2D;AAC9C,QAAA,0BAA0B,GAAG,sCAAsC,CAAC;AAEjF,0DAA0D;AAC7C,QAAA,sBAAsB,GAAG,kCAAkC,CAAC;AAEzE,yFAAyF;AAC5E,QAAA,iBAAiB,GAAG,sCAAsC,CAAC;AAExE,qEAAqE;AACxD,QAAA,uBAAuB,GAAG,wBAAwB,CAAC;AAEhE,4FAA4F;AAC/E,QAAA,oBAAoB,GAAG,QAAQ,CAAC"}

package/bundled/node_modules/@aspm/shared/dist/security/github-workflow-tool-jobs.d.ts

@@ -0,0 +1,7 @@
+import type { GithubWorkflowInlineEnv, SecurityToolId } from "./security-tool.types";
+export declare const KUBBISEC_SCANS_JOB_ID = "kubbisec-scans";
+export declare function buildGithubToolJobsSection(tools: SecurityToolId[], inlineEnv?: GithubWorkflowInlineEnv): {
+    jobIds: string[];
+    jobsYaml: string;
+};
+//# sourceMappingURL=github-workflow-tool-jobs.d.ts.map

package/bundled/node_modules/@aspm/shared/dist/security/github-workflow-tool-jobs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-workflow-tool-jobs.d.ts","sourceRoot":"","sources":["../../src/security/github-workflow-tool-jobs.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,uBAAuB,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAErF,eAAO,MAAM,qBAAqB,mBAAmB,CAAC;AAyKtD,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,cAAc,EAAE,EACvB,SAAS,CAAC,EAAE,uBAAuB,GAClC;IACD,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB,CAkBA"}

package/bundled/node_modules/@aspm/shared/dist/security/github-workflow-tool-jobs.js

@@ -0,0 +1,184 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.KUBBISEC_SCANS_JOB_ID = void 0;
+exports.buildGithubToolJobsSection = buildGithubToolJobsSection;
+const aspm_gate_rules_1 = require("./aspm-gate-rules");
+const github_workflow_action_pins_1 = require("./github-workflow-action-pins");
+exports.KUBBISEC_SCANS_JOB_ID = "kubbisec-scans";
+const ASPM_INSTALL_STEP = `      - name: Install ASPM CLI
+        run: npm install -g @kubbisec/aspm`;
+const CHECKOUT_STEP = `      - uses: ${github_workflow_action_pins_1.GITHUB_CHECKOUT_ACTION}`;
+const CHECKOUT_FULL_HISTORY_STEP = `      - uses: ${github_workflow_action_pins_1.GITHUB_CHECKOUT_ACTION}
+        with:
+          fetch-depth: 0`;
+/**
+ * KubbiSec job env — API URL is omitted (ASPM CLI defaults to https://api.kubbisec.com).
+ * Only secret key + org/project identifiers are required in CI.
+ */
+function buildKubbisecScansJobEnv(inlineEnv) {
+    if (inlineEnv) {
+        return `    env:
+      KUBBISEC_API_KEY: \${{ secrets.KUBBISEC_API_KEY }}
+      KUBBISEC_ORG_ID: ${JSON.stringify(inlineEnv.orgId)}`;
+    }
+    return `    env:
+      KUBBISEC_API_KEY: \${{ secrets.KUBBISEC_API_KEY }}
+      KUBBISEC_ORG_ID: \${{ vars.KUBBISEC_ORG_ID }}`;
+}
+const GITHUB_PROJECT_VAR_REF = "${{ vars.KUBBISEC_PROJECT }}";
+function projectRef(inlineEnv) {
+    return inlineEnv?.projectId ?? GITHUB_PROJECT_VAR_REF;
+}
+/** Scanner-specific steps (official actions where JSON output is compatible with `aspm upload`). */
+function buildToolScanSteps(tool, inlineEnv) {
+    const p = projectRef(inlineEnv);
+    switch (tool) {
+        case "trivy":
+            return `      - name: Trivy filesystem scan
+        uses: ${github_workflow_action_pins_1.TRIVY_ACTION}
+        with:
+          scan-type: fs
+          scan-ref: .
+          format: json
+          output: trivy-report.json
+          exit-code: "0"
+
+      - name: Upload Trivy report
+        run: aspm upload trivy-report.json -s trivy -p ${p}`;
+        case "gitleaks":
+            return `      - name: Gitleaks (GitHub Security)
+        uses: ${github_workflow_action_pins_1.GITLEAKS_ACTION}
+        continue-on-error: true
+        env:
+          GITHUB_TOKEN: \${{ secrets.GITHUB_TOKEN }}
+          GITLEAKS_ENABLE_UPLOAD_ARTIFACT: "true"
+          GITLEAKS_VERSION: "${github_workflow_action_pins_1.GITLEAKS_CLI_VERSION}"
+
+      - name: Gitleaks scan (JSON para KubbiSec ASPM)
+        run: |
+          curl -sSL https://github.com/gitleaks/gitleaks/releases/download/v${github_workflow_action_pins_1.GITLEAKS_CLI_VERSION}/gitleaks_${github_workflow_action_pins_1.GITLEAKS_CLI_VERSION}_linux_x64.tar.gz | tar -xz -C /usr/local/bin
+          gitleaks detect --source . --report-format json --report-path gitleaks-report.json --exit-code 0 || true
+
+      - name: Upload Gitleaks report
+        run: aspm upload gitleaks-report.json -s gitleaks -p ${p}`;
+        case "syft":
+            return `      - name: Generate SBOM
+        uses: ${github_workflow_action_pins_1.SBOM_ACTION}
+        with:
+          path: .
+          format: cyclonedx-json
+          output-file: sbom.cdx.json
+          upload-artifact: false
+          upload-release-assets: false
+
+      - name: Upload SBOM
+        run: aspm upload sbom.cdx.json -s syft -p ${p}`;
+        case "osv":
+            return `      - name: OSV scan (JSON para KubbiSec ASPM)
+        uses: ${github_workflow_action_pins_1.OSV_SCANNER_ACTION}
+        continue-on-error: true
+        with:
+          scan-args: |-
+            --recursive
+            --format=json
+            --output=osv-report.json
+            ./
+
+      - name: OSV SARIF (GitHub Security)
+        uses: ${github_workflow_action_pins_1.OSV_REPORTER_ACTION}
+        continue-on-error: true
+        with:
+          scan-args: |-
+            --output=osv-results.sarif
+            --new=osv-report.json
+            --gh-annotations=false
+            --fail-on-vuln=false
+
+      - name: Upload OSV SARIF to GitHub Security
+        uses: ${github_workflow_action_pins_1.CODEQL_UPLOAD_SARIF_ACTION}
+        if: always()
+        continue-on-error: true
+        with:
+          sarif_file: osv-results.sarif
+          category: kubbisec-osv
+
+      - name: Upload OSV report to KubbiSec
+        run: aspm upload osv-report.json -s osv -p ${p}`;
+        case "semgrep":
+            return `      # semgrep/semgrep-action está deprecated — imagem oficial semgrep/semgrep (Semgrep docs).
+      - name: Semgrep scan
+        run: |
+          docker run --rm -v "$PWD:/src" -w /src ${github_workflow_action_pins_1.SEMGREP_CONTAINER_IMAGE} \\
+            semgrep scan --config auto --json -o semgrep-report.json .
+
+      - name: Upload Semgrep report
+        run: aspm upload semgrep-report.json -s semgrep -p ${p}`;
+        case "sonar":
+            return `      # Configure secrets.SONAR_TOKEN, vars.SONAR_HOST_URL (SonarCloud: https://sonarcloud.io), vars.SONAR_PROJECT_KEY
+      - name: SonarQube scan (SonarSource GitHub Action)
+        uses: ${github_workflow_action_pins_1.SONAR_SCAN_ACTION}
+        env:
+          SONAR_TOKEN: \${{ secrets.SONAR_TOKEN }}
+          SONAR_HOST_URL: \${{ vars.SONAR_HOST_URL }}
+        with:
+          args: >
+            -Dsonar.projectKey=\${{ vars.SONAR_PROJECT_KEY }}
+
+      - name: Export Sonar issues (JSON para KubbiSec ASPM)
+        run: |
+          if [ -n "$SONAR_HOST_URL" ] && [ -n "$SONAR_TOKEN" ]; then
+            curl -sS -H "Authorization: Bearer $SONAR_TOKEN" \\
+              "$SONAR_HOST_URL/api/issues/search?componentKeys=$SONAR_PROJECT_KEY&ps=500" \\
+              -o sonar-report.json || echo '{}' > sonar-report.json
+          else
+            echo '{}' > sonar-report.json
+          fi
+        env:
+          SONAR_HOST_URL: \${{ vars.SONAR_HOST_URL }}
+          SONAR_TOKEN: \${{ secrets.SONAR_TOKEN }}
+          SONAR_PROJECT_KEY: \${{ vars.SONAR_PROJECT_KEY }}
+
+      - name: Upload Sonar report to KubbiSec
+        run: aspm upload sonar-report.json -s sonar -p ${p}`;
+        case "nmap":
+            return `      - name: Install Nmap
+        run: sudo apt-get update && sudo apt-get install -y nmap
+
+      - name: Nmap scan placeholder
+        run: |
+          echo "Configure NMAP_TARGET (vars) para varredura real; gerando placeholder."
+          echo '{}' > nmap-report.json
+
+      - name: Upload Nmap report
+        run: aspm upload nmap-report.json -s nmap -p ${p}`;
+        case "skipfish":
+            return `      - name: Install Skipfish
+        run: sudo apt-get update && sudo apt-get install -y skipfish
+
+      - name: Skipfish scan placeholder
+        run: |
+          echo "Configure SKIPFISH_TARGET (vars) para DAST real; gerando placeholder."
+          echo '{}' > skipfish-report.json
+
+      - name: Upload Skipfish report
+        run: aspm upload skipfish-report.json -s skipfish -p ${p}`;
+    }
+}
+function buildGithubToolJobsSection(tools, inlineEnv) {
+    const checkout = tools.includes("gitleaks") ? CHECKOUT_FULL_HISTORY_STEP : CHECKOUT_STEP;
+    const kubbisecScansJobEnv = buildKubbisecScansJobEnv(inlineEnv);
+    const toolSteps = tools.map((tool) => buildToolScanSteps(tool, inlineEnv)).join("\n\n");
+    const jobsYaml = `  ${exports.KUBBISEC_SCANS_JOB_ID}:
+    runs-on: ubuntu-latest
+${kubbisecScansJobEnv}
+    steps:
+${checkout}
+
+${ASPM_INSTALL_STEP}
+
+${toolSteps}
+
+${(0, aspm_gate_rules_1.buildAspmGateGithubWorkflowStep)(undefined, inlineEnv?.projectId)}`;
+    return { jobIds: [exports.KUBBISEC_SCANS_JOB_ID], jobsYaml };
+}
+//# sourceMappingURL=github-workflow-tool-jobs.js.map

package/bundled/node_modules/@aspm/shared/dist/security/github-workflow-tool-jobs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-workflow-tool-jobs.js","sourceRoot":"","sources":["../../src/security/github-workflow-tool-jobs.ts"],"names":[],"mappings":";;;AAwLA,gEAwBC;AAhND,uDAAoE;AACpE,+EAWuC;AAG1B,QAAA,qBAAqB,GAAG,gBAAgB,CAAC;AAEtD,MAAM,iBAAiB,GAAG;2CACiB,CAAC;AAE5C,MAAM,aAAa,GAAG,iBAAiB,oDAAsB,EAAE,CAAC;AAEhE,MAAM,0BAA0B,GAAG,iBAAiB,oDAAsB;;yBAEjD,CAAC;AAE1B;;;GAGG;AACH,SAAS,wBAAwB,CAAC,SAAmC;IACnE,IAAI,SAAS,EAAE,CAAC;QACd,OAAO;;yBAEc,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;IACzD,CAAC;IACD,OAAO;;oDAE2C,CAAC;AACrD,CAAC;AAED,MAAM,sBAAsB,GAAG,8BAA8B,CAAC;AAE9D,SAAS,UAAU,CAAC,SAAmC;IACrD,OAAO,SAAS,EAAE,SAAS,IAAI,sBAAsB,CAAC;AACxD,CAAC;AAED,oGAAoG;AACpG,SAAS,kBAAkB,CAAC,IAAoB,EAAE,SAAmC;IACnF,MAAM,CAAC,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;IAEhC,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,OAAO;YACV,OAAO;gBACG,0CAAY;;;;;;;;;yDAS6B,CAAC,EAAE,CAAC;QACzD,KAAK,UAAU;YACb,OAAO;gBACG,6CAAe;;;;;+BAKA,kDAAoB;;;;8EAI2B,kDAAoB,aAAa,kDAAoB;;;;+DAIpE,CAAC,EAAE,CAAC;QAC/D,KAAK,MAAM;YACT,OAAO;gBACG,yCAAW;;;;;;;;;oDASyB,CAAC,EAAE,CAAC;QACpD,KAAK,KAAK;YACR,OAAO;gBACG,gDAAkB;;;;;;;;;;gBAUlB,iDAAmB;;;;;;;;;;gBAUnB,wDAA0B;;;;;;;;qDAQW,CAAC,EAAE,CAAC;QACrD,KAAK,SAAS;YACZ,OAAO;;;mDAGsC,qDAAuB;;;;6DAIb,CAAC,EAAE,CAAC;QAC7D,KAAK,OAAO;YACV,OAAO;;gBAEG,+CAAiB;;;;;;;;;;;;;;;;;;;;;;;yDAuBwB,CAAC,EAAE,CAAC;QACzD,KAAK,MAAM;YACT,OAAO;;;;;;;;;uDAS0C,CAAC,EAAE,CAAC;QACvD,KAAK,UAAU;YACb,OAAO;;;;;;;;;+DASkD,CAAC,EAAE,CAAC;IACjE,CAAC;AACH,CAAC;AAED,SAAgB,0BAA0B,CACxC,KAAuB,EACvB,SAAmC;IAKnC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,aAAa,CAAC;IACzF,MAAM,mBAAmB,GAAG,wBAAwB,CAAC,SAAS,CAAC,CAAC;IAChE,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAExF,MAAM,QAAQ,GAAG,KAAK,6BAAqB;;EAE3C,mBAAmB;;EAEnB,QAAQ;;EAER,iBAAiB;;EAEjB,SAAS;;EAET,IAAA,iDAA+B,EAAC,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,CAAC;IAEnE,OAAO,EAAE,MAAM,EAAE,CAAC,6BAAqB,CAAC,EAAE,QAAQ,EAAE,CAAC;AACvD,CAAC"}

package/bundled/node_modules/@aspm/shared/dist/security/index.d.ts

@@ -0,0 +1,7 @@
+export * from "./security-tool.types";
+export * from "./security-tool-catalog";
+export * from "./aspm-gate-rules";
+export * from "./build-aspm-security-matrix-pipeline-yaml";
+export * from "./build-github-security-workflow-yaml";
+export * from "./github-workflow-action-pins";
+//# sourceMappingURL=index.d.ts.map

package/bundled/node_modules/@aspm/shared/dist/security/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/security/index.ts"],"names":[],"mappings":"AAAA,cAAc,uBAAuB,CAAC;AACtC,cAAc,yBAAyB,CAAC;AACxC,cAAc,mBAAmB,CAAC;AAClC,cAAc,4CAA4C,CAAC;AAC3D,cAAc,uCAAuC,CAAC;AACtD,cAAc,+BAA+B,CAAC"}

package/bundled/node_modules/@aspm/shared/dist/security/index.js

@@ -0,0 +1,23 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./security-tool.types"), exports);
+__exportStar(require("./security-tool-catalog"), exports);
+__exportStar(require("./aspm-gate-rules"), exports);
+__exportStar(require("./build-aspm-security-matrix-pipeline-yaml"), exports);
+__exportStar(require("./build-github-security-workflow-yaml"), exports);
+__exportStar(require("./github-workflow-action-pins"), exports);
+//# sourceMappingURL=index.js.map