@kubbisec/ai-linux-x64 0.1.23 → 0.1.24

package/bundled/node_modules/@aspm/shared/dist/redaction.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"redaction.js","sourceRoot":"","sources":["../src/redaction.ts"],"names":[],"mappings":";;;;;;AA4FA,oCAqBC;AAgJD,kDA2CC;AAED,sDA8BC;AA5UD;;;;;;;GAOG;AACH,4DAAwC;AAE3B,QAAA,cAAc,GAAG,YAAY,CAAC;AAE3C,MAAM,mBAAmB,GAAG;IAC1B,aAAa;IACb,QAAQ;IACR,UAAU;IACV,eAAe;IACf,aAAa;IACb,cAAc;IACd,YAAY;IACZ,SAAS;IACT,UAAU;IACV,QAAQ;IACR,YAAY;IACZ,cAAc;IACd,QAAQ;IACR,SAAS;IACT,OAAO;CACR,CAAC;AAEF,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC;IACnC,MAAM;IACN,QAAQ;IACR,OAAO;IACP,UAAU;IACV,oBAAoB;IACpB,KAAK;IACL,QAAQ;IACR,WAAW;CACZ,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC;IACpC,eAAe;IACf,QAAQ;IACR,oBAAoB;IACpB,WAAW;IACX,SAAS;IACT,YAAY;IACZ,YAAY;IACZ,cAAc;CACf,CAAC,CAAC;AAEH,MAAM,wBAAwB,GAAG,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC,CAAC;AACxE,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,aAAa,EAAE,sBAAsB,EAAE,SAAS,CAAC,CAAC,CAAC;AAC9F,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,gBAAgB,EAAE,iBAAiB,CAAC,CAAC,CAAC;AAClG,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAS/B,SAAS,YAAY,CAAC,GAAW;IAC/B,OAAO,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,cAAc,CAAC,GAAW;IACjC,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,wBAAwB,CAAC,GAAG,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3D,OAAO,CACL,oBAAoB,CAAC,GAAG,CAAC,UAAU,CAAC;QACpC,mBAAmB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAC9D,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAW,EAAE,SAAkB;IACxD,MAAM,aAAa,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,mBAAmB,GAAG,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAErE,IAAI,qBAAqB,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACnD,OAAO,qBAAqB,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC,CAAC;IACzE,CAAC;IAED,IAAI,kBAAkB,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,CAAC;QAChD,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED,SAAgB,YAAY,CAAC,KAAa;IACxC,OAAO,KAAK;SACT,OAAO,CACN,4IAA4I,EAC5I,OAAO,sBAAc,EAAE,CACxB;SACA,OAAO,CAAC,uCAAuC,EAAE,KAAK,sBAAc,EAAE,CAAC;SACvE,OAAO,CAAC,mCAAmC,EAAE,KAAK,sBAAc,EAAE,CAAC;SACnE,OAAO,CAAC,qCAAqC,EAAE,sBAAc,CAAC;SAC9D,OAAO,CAAC,gCAAgC,EAAE,sBAAc,CAAC;SACzD,OAAO,CAAC,4BAA4B,EAAE,sBAAc,CAAC;SACrD,OAAO,CAAC,kDAAkD,EAAE,MAAM,sBAAc,EAAE,CAAC;SACnF,OAAO,CACN,wGAAwG,EACxG,OAAO,sBAAc,EAAE,CACxB;SACA,OAAO,CACN,oGAAoG,EACpG,KAAK,sBAAc,GAAG,CACvB;SACA,OAAO,CAAC,wCAAwC,EAAE,KAAK,sBAAc,GAAG,CAAC,CAAC;AAC/E,CAAC;AAED,oDAAoD;AACpD,SAAS,mBAAmB,CAAC,KAA6B;IACxD,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACxE,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAChD,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;YAChB,SAAS;QACX,CAAC;QACD,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACjC,GAAG,IAAI,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,CAAC;aAAM,CAAC;YACN,MAAM,OAAO,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAClE,GAAG,IAAI,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,OAAO,IAAI,CAAC,CAAC,CAAC,MAAM,OAAO,IAAI,CAAC;QAC3D,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,yFAAyF;AACzF,SAAS,OAAO,CAAC,KAA6B;IAC5C,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,QAAQ,CACf,KAA6B,EAC7B,YAAyB,EACzB,SAAsB;IAEtB,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAC1B,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACrB,SAAS,CAAC,GAAG,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED,mFAAmF;AACnF,SAAS,eAAe,CAAI,KAAQ;IAClC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAM,CAAC;AAChD,CAAC;AAED,SAAS,UAAU,CACjB,KAA6B,EAC7B,cAA2B,EAC3B,SAAsB;IAEtB,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAC1B,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACvB,SAAS,CAAC,GAAG,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED;;;GAGG;AACH,SAAS,uBAAuB,CAC9B,KAAc,EACd,KAA6B,EAC7B,YAAgC,EAChC,KAAa,EACb,YAAyB,EACzB,cAA2B,EAC3B,SAAsB;IAEtB,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO;IACT,CAAC;IAED,IAAI,YAAY,KAAK,SAAS,IAAI,iBAAiB,CAAC,YAAY,CAAC,EAAE,CAAC;QAClE,QAAQ,CAAC,KAAK,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;QACzC,OAAO;IACT,CAAC;IAED,IAAI,KAAK,IAAI,mBAAmB,EAAE,CAAC;QACjC,QAAQ,CAAC,KAAK,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;QACzC,OAAO;IACT,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,SAAS,GAAG,KAAK,GAAG,CAAC,CAAC;QAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACtB,MAAM,SAAS,GAAG,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC;YAEhC,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC9C,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC7B,UAAU,CAAC,SAAS,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC;gBACnD,CAAC;gBACD,SAAS;YACX,CAAC;YAED,IAAI,SAAS,IAAI,mBAAmB,EAAE,CAAC;gBACrC,QAAQ,CAAC,SAAS,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;gBAC7C,SAAS;YACX,CAAC;YAED,uBAAuB,CACrB,IAAI,EACJ,SAAS,EACT,YAAY,EACZ,SAAS,EACT,YAAY,EACZ,cAAc,EACd,SAAS,CACV,CAAC;QACJ,CAAC;QACD,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAG,KAAuB,CAAC;IACtC,KAAK,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3D,MAAM,SAAS,GAAG,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC,CAAC;QAEvC,IAAI,iBAAiB,CAAC,QAAQ,EAAE,YAAY,CAAC,EAAE,CAAC;YAC9C,QAAQ,CAAC,SAAS,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;YAC7C,SAAS;QACX,CAAC;QAED,IAAI,UAAU,KAAK,IAAI,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;YAC1D,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;gBACnC,UAAU,CAAC,SAAS,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC;YACnD,CAAC;YACD,SAAS;QACX,CAAC;QAED,MAAM,SAAS,GAAG,KAAK,GAAG,CAAC,CAAC;QAC5B,IAAI,SAAS,IAAI,mBAAmB,EAAE,CAAC;YACrC,QAAQ,CAAC,SAAS,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;YAC7C,SAAS;QACX,CAAC;QAED,uBAAuB,CACrB,UAAU,EACV,SAAS,EACT,QAAQ,EACR,SAAS,EACT,YAAY,EACZ,cAAc,EACd,SAAS,CACV,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAgB,mBAAmB,CAAI,KAAQ;IAC7C,IAAI,KAAK,IAAI,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,YAAY,CAAC,KAAK,CAAM,CAAC;QAClC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IACvC,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IACzC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IAEpC,uBAAuB,CAAC,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,YAAY,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC;IAE1F,IAAI,SAAS,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,MAAM,GAAG,IAAA,gBAAU,EAAC;QACxB,KAAK,EAAE,CAAC,GAAG,SAAS,CAAC;QACrB,SAAS,EAAE,KAAK;QAChB,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,CAAC,CAAC,CAAU,EAAE,OAAgB,EAAE,EAAE;YACxC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAE,OAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACzF,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;YAC1B,IAAI,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;gBACzB,OAAO,sBAAc,CAAC;YACxB,CAAC;YACD,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;gBACpD,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC;YACzB,CAAC;YACD,OAAO,CAAC,CAAC;QACX,CAAC,CAA4B;KAC9B,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAExC,CAAC;IACF,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;QACtC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,GAAG,CAAC;QACxC,OAAO,IAAS,CAAC;IACnB,CAAC;IACD,OAAO,GAAQ,CAAC;AAClB,CAAC;AAED,SAAgB,qBAAqB,CAKnC,MAAS,EAAE,UAA4B,EAAE;IACzC,MAAM,EAAE,aAAa,GAAG,IAAI,EAAE,cAAc,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IAEhE,OAAO;QACL,GAAG,MAAM;QACT,GAAG,CAAC,cAAc,IAAI,MAAM,CAAC,QAAQ;YACnC,CAAC,CAAC,EAAE,QAAQ,EAAE,mBAAmB,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE;YACpD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC;YACvC,CAAC,CAAC;gBACE,eAAe,EAAE,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,aAAa,EAAE,EAAE;oBAC5D,MAAM,EAAE,OAAO,EAAE,GAAG,mBAAmB,EAAE,GAAG,aAAa,CAAC;oBAC1D,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;oBAC3D,OAAO;wBACL,GAAG,mBAAmB,CAAC,mBAAmB,CAAC;wBAC3C,GAAG,CAAC,UAAU;4BACZ,CAAC,CAAC;gCACE,OAAO,EAAE,aAAa,IAAI,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO;6BAC3E;4BACH,CAAC,CAAC,EAAE,CAAC;qBACR,CAAC;gBACJ,CAAC,CAAC;aACH;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC"}

package/bundled/node_modules/@aspm/shared/dist/redaction.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=redaction.test.d.ts.map

package/bundled/node_modules/@aspm/shared/dist/redaction.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"redaction.test.d.ts","sourceRoot":"","sources":["../src/redaction.test.ts"],"names":[],"mappings":""}

package/bundled/node_modules/@aspm/shared/dist/redaction.test.js

@@ -1,626 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-const vitest_1 = require("vitest");
-const redaction_1 = require("./redaction");
-// ---------------------------------------------------------------------------
-// Helpers
-// ---------------------------------------------------------------------------
-function makeReport(overrides = {}) {
-    return {
-        source: "GITLEAKS",
-        scanType: "secrets",
-        target: "repo",
-        metadata: {},
-        vulnerabilities: [],
-        ...overrides,
-    };
-}
-function makeVuln(rawData = {}) {
-    return {
-        title: "test",
-        rawData,
-    };
-}
-// ---------------------------------------------------------------------------
-// Gitleaks rawData
-// ---------------------------------------------------------------------------
-(0, vitest_1.describe)("sanitizeReportPayload — Gitleaks rawData", () => {
-    (0, vitest_1.it)("redacts GitHub PAT (ghp_ prefix)", () => {
-        const report = makeReport({
-            vulnerabilities: [
-                makeVuln({
-                    RuleID: "github-pat",
-                    Secret: "ghp_1234567890abcdefghijklmnopqrst",
-                    File: "config.yml",
-                }),
-            ],
-        });
-        const sanitized = (0, redaction_1.sanitizeReportPayload)(report);
-        (0, vitest_1.expect)(sanitized.vulnerabilities[0].rawData.Secret).toBe(redaction_1.REDACTED_VALUE);
-        (0, vitest_1.expect)(sanitized.vulnerabilities[0].rawData.RuleID).toBe("github-pat");
-        (0, vitest_1.expect)(sanitized.vulnerabilities[0].rawData.File).toBe("config.yml");
-    });
-    (0, vitest_1.it)("redacts GitHub PAT variants (gho_, ghu_, ghs_, ghr_)", () => {
-        for (const prefix of ["gho_", "ghu_", "ghs_", "ghr_"]) {
-            const pat = `${prefix}1234567890abcdefghijklmnopqrst`;
-            const report = makeReport({
-                vulnerabilities: [makeVuln({ Secret: pat })],
-            });
-            const sanitized = (0, redaction_1.sanitizeReportPayload)(report);
-            (0, vitest_1.expect)(sanitized.vulnerabilities[0].rawData.Secret).toBe(redaction_1.REDACTED_VALUE);
-        }
-    });
-    (0, vitest_1.it)("redacts AWS access key (AKIA prefix)", () => {
-        const report = makeReport({
-            vulnerabilities: [
-                makeVuln({
-                    Secret: "AKIAIOSFODNN7EXAMPLE",
-                    RuleID: "aws-access-key",
-                }),
-            ],
-        });
-        const sanitized = (0, redaction_1.sanitizeReportPayload)(report);
-        (0, vitest_1.expect)(sanitized.vulnerabilities[0].rawData.Secret).toBe(redaction_1.REDACTED_VALUE);
-    });
-    (0, vitest_1.it)("redacts AWS temporary key (ASIA prefix)", () => {
-        const report = makeReport({
-            vulnerabilities: [
-                makeVuln({ Secret: "ASIAIOSFODNN7EXAMPLE" }),
-            ],
-        });
-        const sanitized = (0, redaction_1.sanitizeReportPayload)(report);
-        (0, vitest_1.expect)(sanitized.vulnerabilities[0].rawData.Secret).toBe(redaction_1.REDACTED_VALUE);
-    });
-    (0, vitest_1.it)("redacts generic secret key", () => {
-        const report = makeReport({
-            vulnerabilities: [
-                makeVuln({
-                    Secret: "my-super-secret-value",
-                    RuleID: "generic-api-key",
-                }),
-            ],
-        });
-        const sanitized = (0, redaction_1.sanitizeReportPayload)(report);
-        (0, vitest_1.expect)(sanitized.vulnerabilities[0].rawData.Secret).toBe(redaction_1.REDACTED_VALUE);
-    });
-    (0, vitest_1.it)("redacts Match field (exact sensitive key)", () => {
-        const report = makeReport({
-            vulnerabilities: [
-                makeVuln({
-                    Match: "GH_TOKEN=ghp_abc123def456ghi789jkl",
-                    RuleID: "github-pat",
-                }),
-            ],
-        });
-        const sanitized = (0, redaction_1.sanitizeReportPayload)(report);
-        (0, vitest_1.expect)(sanitized.vulnerabilities[0].rawData.Match).toBe(redaction_1.REDACTED_VALUE);
-    });
-    (0, vitest_1.it)("preserves non-sensitive Gitleaks fields", () => {
-        const report = makeReport({
-            vulnerabilities: [
-                makeVuln({
-                    RuleID: "rule-001",
-                    File: "src/config.ts",
-                    StartLine: 42,
-                    EndLine: 42,
-                    Entropy: 3.5,
-                }),
-            ],
-        });
-        const sanitized = (0, redaction_1.sanitizeReportPayload)(report);
-        (0, vitest_1.expect)(sanitized.vulnerabilities[0].rawData.RuleID).toBe("rule-001");
-        (0, vitest_1.expect)(sanitized.vulnerabilities[0].rawData.File).toBe("src/config.ts");
-        (0, vitest_1.expect)(sanitized.vulnerabilities[0].rawData.StartLine).toBe(42);
-        (0, vitest_1.expect)(sanitized.vulnerabilities[0].rawData.EndLine).toBe(42);
-        (0, vitest_1.expect)(sanitized.vulnerabilities[0].rawData.Entropy).toBe(3.5);
-    });
-});
-// ---------------------------------------------------------------------------
-// Trivy rawData
-// ---------------------------------------------------------------------------
-(0, vitest_1.describe)("sanitizeReportPayload — Trivy rawData", () => {
-    (0, vitest_1.it)("redacts Bearer token in string values", () => {
-        const report = makeReport({
-            vulnerabilities: [
-                makeVuln({
-                    detail: "Exposed: Bearer eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.long.payload",
-                    pkgName: "app",
-                }),
-            ],
-        });
-        const sanitized = (0, redaction_1.sanitizeReportPayload)(report);
-        (0, vitest_1.expect)(sanitized.vulnerabilities[0].rawData.detail).toBe("Exposed: Bearer [REDACTED]");
-    });
-    (0, vitest_1.it)("redacts Basic auth in string values", () => {
-        const report = makeReport({
-            vulnerabilities: [
-                makeVuln({
-                    detail: "Auth header uses Basic dXNlcjpwYXNzd29yZA==",
-                }),
-            ],
-        });
-        const sanitized = (0, redaction_1.sanitizeReportPayload)(report);
-        (0, vitest_1.expect)(sanitized.vulnerabilities[0].rawData.detail).toBe("Auth header uses Basic [REDACTED]");
-    });
-    (0, vitest_1.it)("redacts URLs with embedded credentials", () => {
-        const report = makeReport({
-            vulnerabilities: [
-                makeVuln({
-                    detail: "Connection string: postgres://admin:s3cret@db.example.com:5432/mydb",
-                }),
-            ],
-        });
-        const sanitized = (0, redaction_1.sanitizeReportPayload)(report);
-        (0, vitest_1.expect)(sanitized.vulnerabilities[0].rawData.detail).toBe("Connection string: postgres://[REDACTED]@db.example.com:5432/mydb");
-    });
-    (0, vitest_1.it)("redacts env-var-style secret patterns (KEY=VALUE)", () => {
-        const report = makeReport({
-            vulnerabilities: [
-                makeVuln({
-                    lineContent: "export DATABASE_PASSWORD=supersecret123 && npm start",
-                }),
-            ],
-        });
-        const sanitized = (0, redaction_1.sanitizeReportPayload)(report);
-        (0, vitest_1.expect)(sanitized.vulnerabilities[0].rawData.lineContent).toBe("export DATABASE_PASSWORD=[REDACTED] && npm start");
-    });
-    (0, vitest_1.it)("redacts nested sensitive objects in Trivy misconfig", () => {
-        const report = makeReport({
-            vulnerabilities: [
-                makeVuln({
-                    misconfig: {
-                        config: {
-                            credentials: {
-                                accessKey: "AKIAIOSFODNN7EXAMPLE",
-                                secretKey: "wJalrXUtnFEMI/K7MDENG/bPxRfiCY",
-                            },
-                        },
-                        type: "kubernetes",
-                    },
-                }),
-            ],
-        });
-        const sanitized = (0, redaction_1.sanitizeReportPayload)(report);
-        const misconfig = sanitized.vulnerabilities[0].rawData
-            .misconfig;
-        const config = misconfig.config;
-        const creds = config.credentials;
-        (0, vitest_1.expect)(creds.accessKey).toBe(redaction_1.REDACTED_VALUE);
-        (0, vitest_1.expect)(creds.secretKey).toBe(redaction_1.REDACTED_VALUE);
-        (0, vitest_1.expect)(misconfig.type).toBe("kubernetes");
-    });
-});
-// ---------------------------------------------------------------------------
-// Metadata — headers and env vars
-// ---------------------------------------------------------------------------
-(0, vitest_1.describe)("sanitizeReportPayload — metadata headers", () => {
-    (0, vitest_1.it)("redacts authorization header", () => {
-        const report = makeReport({
-            metadata: {
-                headers: {
-                    authorization: "Bearer ghp_abc123",
-                    accept: "application/json",
-                },
-            },
-        });
-        const sanitized = (0, redaction_1.sanitizeReportPayload)(report);
-        (0, vitest_1.expect)(sanitized.metadata.headers.authorization).toBe(redaction_1.REDACTED_VALUE);
-        (0, vitest_1.expect)(sanitized.metadata.headers.accept).toBe("application/json");
-    });
-    (0, vitest_1.it)("redacts cookie header", () => {
-        const report = makeReport({
-            metadata: {
-                headers: {
-                    cookie: "session=abc123; token=secret",
-                },
-            },
-        });
-        const sanitized = (0, redaction_1.sanitizeReportPayload)(report);
-        (0, vitest_1.expect)(sanitized.metadata.headers.cookie).toBe(redaction_1.REDACTED_VALUE);
-    });
-    (0, vitest_1.it)("redacts x-api-key header", () => {
-        const report = makeReport({
-            metadata: {
-                headers: {
-                    "x-api-key": "sk-live-12345",
-                },
-            },
-        });
-        const sanitized = (0, redaction_1.sanitizeReportPayload)(report);
-        (0, vitest_1.expect)(sanitized.metadata.headers["x-api-key"]).toBe(redaction_1.REDACTED_VALUE);
-    });
-    (0, vitest_1.it)("redacts proxy-authorization header", () => {
-        const report = makeReport({
-            metadata: {
-                headers: {
-                    "proxy-authorization": "Basic dXNlcjpwYXNz",
-                },
-            },
-        });
-        const sanitized = (0, redaction_1.sanitizeReportPayload)(report);
-        (0, vitest_1.expect)(sanitized.metadata.headers["proxy-authorization"]).toBe(redaction_1.REDACTED_VALUE);
-    });
-    (0, vitest_1.it)("redacts set-cookie header", () => {
-        const report = makeReport({
-            metadata: {
-                headers: {
-                    "set-cookie": "id=abc; HttpOnly",
-                },
-            },
-        });
-        const sanitized = (0, redaction_1.sanitizeReportPayload)(report);
-        (0, vitest_1.expect)(sanitized.metadata.headers["set-cookie"]).toBe(redaction_1.REDACTED_VALUE);
-    });
-    (0, vitest_1.it)("preserves non-sensitive headers", () => {
-        const report = makeReport({
-            metadata: {
-                headers: {
-                    "content-type": "application/json",
-                    accept: "text/html",
-                    "user-agent": "curl/7.88",
-                },
-            },
-        });
-        const sanitized = (0, redaction_1.sanitizeReportPayload)(report);
-        (0, vitest_1.expect)(sanitized.metadata.headers["content-type"]).toBe("application/json");
-        (0, vitest_1.expect)(sanitized.metadata.headers.accept).toBe("text/html");
-        (0, vitest_1.expect)(sanitized.metadata.headers["user-agent"]).toBe("curl/7.88");
-    });
-});
-(0, vitest_1.describe)("sanitizeReportPayload — metadata env vars", () => {
-    (0, vitest_1.it)("redacts GITHUB_TOKEN", () => {
-        const report = makeReport({
-            metadata: {
-                env: {
-                    GITHUB_TOKEN: "ghp_abc123",
-                    NODE_ENV: "production",
-                },
-            },
-        });
-        const sanitized = (0, redaction_1.sanitizeReportPayload)(report);
-        (0, vitest_1.expect)(sanitized.metadata.env.GITHUB_TOKEN).toBe(redaction_1.REDACTED_VALUE);
-        (0, vitest_1.expect)(sanitized.metadata.env.NODE_ENV).toBe("production");
-    });
-    (0, vitest_1.it)("redacts AWS_SECRET_ACCESS_KEY", () => {
-        const report = makeReport({
-            metadata: {
-                env: {
-                    AWS_SECRET_ACCESS_KEY: "wJalrXUtnFEMI/K7MDENG",
-                },
-            },
-        });
-        const sanitized = (0, redaction_1.sanitizeReportPayload)(report);
-        (0, vitest_1.expect)(sanitized.metadata.env.AWS_SECRET_ACCESS_KEY).toBe(redaction_1.REDACTED_VALUE);
-    });
-    (0, vitest_1.it)("redacts DATABASE_URL with embedded password", () => {
-        const report = makeReport({
-            metadata: {
-                env: {
-                    DATABASE_URL: "postgres://admin:s3cret@db:5432/mydb",
-                },
-            },
-        });
-        const sanitized = (0, redaction_1.sanitizeReportPayload)(report);
-        (0, vitest_1.expect)(sanitized.metadata.env.DATABASE_URL).toBe("postgres://[REDACTED]@db:5432/mydb");
-    });
-    (0, vitest_1.it)("redacts any key containing 'token' in env", () => {
-        const report = makeReport({
-            metadata: {
-                env: {
-                    MY_CUSTOM_TOKEN: "some-value",
-                    SAFE_VAR: "ok",
-                },
-            },
-        });
-        const sanitized = (0, redaction_1.sanitizeReportPayload)(report);
-        (0, vitest_1.expect)(sanitized.metadata.env.MY_CUSTOM_TOKEN).toBe(redaction_1.REDACTED_VALUE);
-        (0, vitest_1.expect)(sanitized.metadata.env.SAFE_VAR).toBe("ok");
-    });
-    (0, vitest_1.it)("redacts any key containing 'secret' in env", () => {
-        const report = makeReport({
-            metadata: {
-                env: {
-                    JWT_SECRET: "my-jwt-secret",
-                },
-            },
-        });
-        const sanitized = (0, redaction_1.sanitizeReportPayload)(report);
-        (0, vitest_1.expect)(sanitized.metadata.env.JWT_SECRET).toBe(redaction_1.REDACTED_VALUE);
-    });
-    (0, vitest_1.it)("redacts any key containing 'password' in env", () => {
-        const report = makeReport({
-            metadata: {
-                env: {
-                    DB_PASSWORD: "p4ssw0rd",
-                },
-            },
-        });
-        const sanitized = (0, redaction_1.sanitizeReportPayload)(report);
-        (0, vitest_1.expect)(sanitized.metadata.env.DB_PASSWORD).toBe(redaction_1.REDACTED_VALUE);
-    });
-});
-// ---------------------------------------------------------------------------
-// secretHash and fingerprint preservation
-// ---------------------------------------------------------------------------
-(0, vitest_1.describe)("sanitizeReportPayload — secretHash and fingerprint preserved", () => {
-    (0, vitest_1.it)("preserves secretHash in rawData", () => {
-        const report = makeReport({
-            vulnerabilities: [
-                makeVuln({
-                    Secret: "ghp_abc123def456",
-                    secretHash: "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
-                }),
-            ],
-        });
-        const sanitized = (0, redaction_1.sanitizeReportPayload)(report);
-        (0, vitest_1.expect)(sanitized.vulnerabilities[0].rawData.Secret).toBe(redaction_1.REDACTED_VALUE);
-        (0, vitest_1.expect)(sanitized.vulnerabilities[0].rawData.secretHash).toBe("sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855");
-    });
-    (0, vitest_1.it)("preserves fingerprint in rawData", () => {
-        const report = makeReport({
-            vulnerabilities: [
-                makeVuln({
-                    fingerprint: "abc123def456abc123def456abc123def456abc123def456abc123def456ab12",
-                    Secret: "a-real-secret",
-                }),
-            ],
-        });
-        const sanitized = (0, redaction_1.sanitizeReportPayload)(report);
-        (0, vitest_1.expect)(sanitized.vulnerabilities[0].rawData.Secret).toBe(redaction_1.REDACTED_VALUE);
-        (0, vitest_1.expect)(sanitized.vulnerabilities[0].rawData.fingerprint).toBe("abc123def456abc123def456abc123def456abc123def456abc123def456ab12");
-    });
-    (0, vitest_1.it)("preserves SecretHash (mixed case)", () => {
-        const report = makeReport({
-            vulnerabilities: [
-                makeVuln({
-                    SecretHash: "sha256:abcdef123456",
-                }),
-            ],
-        });
-        const sanitized = (0, redaction_1.sanitizeReportPayload)(report);
-        (0, vitest_1.expect)(sanitized.vulnerabilities[0].rawData.SecretHash).toBe("sha256:abcdef123456");
-    });
-    (0, vitest_1.it)("preserves FINGERPRINT (uppercase)", () => {
-        const report = makeReport({
-            vulnerabilities: [
-                makeVuln({
-                    FINGERPRINT: "fp-001-abc-def",
-                }),
-            ],
-        });
-        const sanitized = (0, redaction_1.sanitizeReportPayload)(report);
-        (0, vitest_1.expect)(sanitized.vulnerabilities[0].rawData.FINGERPRINT).toBe("fp-001-abc-def");
-    });
-});
-// ---------------------------------------------------------------------------
-// Redaction options
-// ---------------------------------------------------------------------------
-(0, vitest_1.describe)("sanitizeReportPayload — options", () => {
-    (0, vitest_1.it)("skips metadata redaction when redactMetadata=false", () => {
-        const report = makeReport({
-            metadata: {
-                env: {
-                    SECRET_KEY: "should-not-be-redacted",
-                },
-            },
-            vulnerabilities: [makeVuln({ Secret: "ghp_abc123" })],
-        });
-        const sanitized = (0, redaction_1.sanitizeReportPayload)(report, {
-            redactMetadata: false,
-        });
-        // metadata NOT redacted
-        (0, vitest_1.expect)(sanitized.metadata.env.SECRET_KEY).toBe("should-not-be-redacted");
-        // rawData still redacted
-        (0, vitest_1.expect)(sanitized.vulnerabilities[0].rawData.Secret).toBe(redaction_1.REDACTED_VALUE);
-    });
-    (0, vitest_1.it)("skips rawData redaction when redactRawData=false", () => {
-        const report = makeReport({
-            metadata: {
-                env: {
-                    GITHUB_TOKEN: "ghp_abc123",
-                },
-            },
-            vulnerabilities: [makeVuln({ Secret: "ghp_abc123def456" })],
-        });
-        const sanitized = (0, redaction_1.sanitizeReportPayload)(report, {
-            redactRawData: false,
-        });
-        // metadata still redacted
-        (0, vitest_1.expect)(sanitized.metadata.env.GITHUB_TOKEN).toBe(redaction_1.REDACTED_VALUE);
-        // rawData NOT redacted
-        (0, vitest_1.expect)(sanitized.vulnerabilities[0].rawData.Secret).toBe("ghp_abc123def456");
-    });
-    (0, vitest_1.it)("skips both when both options are false", () => {
-        const report = makeReport({
-            metadata: {
-                env: { API_KEY: "keep-it" },
-            },
-            vulnerabilities: [makeVuln({ Secret: "keep-it-too" })],
-        });
-        const sanitized = (0, redaction_1.sanitizeReportPayload)(report, {
-            redactRawData: false,
-            redactMetadata: false,
-        });
-        (0, vitest_1.expect)(sanitized.metadata.env.API_KEY).toBe("keep-it");
-        (0, vitest_1.expect)(sanitized.vulnerabilities[0].rawData.Secret).toBe("keep-it-too");
-    });
-    (0, vitest_1.it)("defaults to redacting everything", () => {
-        const report = makeReport({
-            metadata: { env: { TOKEN: "redact-me" } },
-            vulnerabilities: [makeVuln({ Secret: "redact-me-too" })],
-        });
-        const sanitized = (0, redaction_1.sanitizeReportPayload)(report);
-        (0, vitest_1.expect)(sanitized.metadata.env.TOKEN).toBe(redaction_1.REDACTED_VALUE);
-        (0, vitest_1.expect)(sanitized.vulnerabilities[0].rawData.Secret).toBe(redaction_1.REDACTED_VALUE);
-    });
-});
-// ---------------------------------------------------------------------------
-// Edge cases
-// ---------------------------------------------------------------------------
-(0, vitest_1.describe)("sanitizeReportPayload — edge cases", () => {
-    (0, vitest_1.it)("handles report with no metadata and no vulnerabilities", () => {
-        const report = makeReport();
-        delete report.metadata;
-        delete report.vulnerabilities;
-        const sanitized = (0, redaction_1.sanitizeReportPayload)(report);
-        (0, vitest_1.expect)(sanitized.source).toBe("GITLEAKS");
-        (0, vitest_1.expect)(sanitized).not.toHaveProperty("metadata");
-        (0, vitest_1.expect)(sanitized).not.toHaveProperty("vulnerabilities");
-    });
-    (0, vitest_1.it)("handles empty metadata and empty vulnerabilities", () => {
-        const report = makeReport({
-            metadata: {},
-            vulnerabilities: [],
-        });
-        const sanitized = (0, redaction_1.sanitizeReportPayload)(report);
-        (0, vitest_1.expect)(sanitized.metadata).toEqual({});
-        (0, vitest_1.expect)(sanitized.vulnerabilities).toEqual([]);
-    });
-    (0, vitest_1.it)("handles vulnerability with no rawData", () => {
-        const report = makeReport({
-            vulnerabilities: [{ title: "no-raw-data" }],
-        });
-        const sanitized = (0, redaction_1.sanitizeReportPayload)(report);
-        (0, vitest_1.expect)(sanitized.vulnerabilities[0].title).toBe("no-raw-data");
-        (0, vitest_1.expect)(sanitized.vulnerabilities[0]).not.toHaveProperty("rawData");
-    });
-    (0, vitest_1.it)("handles null and undefined values in rawData", () => {
-        const report = makeReport({
-            vulnerabilities: [
-                makeVuln({
-                    key1: null,
-                    key2: undefined,
-                    key3: "safe-value",
-                    Secret: "redact-me",
-                }),
-            ],
-        });
-        const sanitized = (0, redaction_1.sanitizeReportPayload)(report);
-        (0, vitest_1.expect)(sanitized.vulnerabilities[0].rawData.key1).toBeNull();
-        (0, vitest_1.expect)(sanitized.vulnerabilities[0].rawData.key2).toBeUndefined();
-        (0, vitest_1.expect)(sanitized.vulnerabilities[0].rawData.key3).toBe("safe-value");
-        (0, vitest_1.expect)(sanitized.vulnerabilities[0].rawData.Secret).toBe(redaction_1.REDACTED_VALUE);
-    });
-    (0, vitest_1.it)("redacts secrets in arrays", () => {
-        const report = makeReport({
-            vulnerabilities: [
-                makeVuln({
-                    tokens: ["ghp_abc123", "safe-public-id"],
-                    secrets: ["AKIAIOSFODNN7"],
-                }),
-            ],
-        });
-        const sanitized = (0, redaction_1.sanitizeReportPayload)(report);
-        // Bearer/GitHub patterns are redacted at string level
-        (0, vitest_1.expect)(sanitized.vulnerabilities[0].rawData.tokens).toEqual([
-            redaction_1.REDACTED_VALUE,
-            "safe-public-id",
-        ]);
-        // "secrets" key is sensitive so entire value is REDACTED
-        (0, vitest_1.expect)(sanitized.vulnerabilities[0].rawData.secrets).toBe(redaction_1.REDACTED_VALUE);
-    });
-    (0, vitest_1.it)("redacts at max depth", () => {
-        // Build a deeply nested object with a secret at level 25
-        let nested = { Secret: "deep-secret" };
-        for (let i = 0; i < 24; i++) {
-            nested = { level: nested };
-        }
-        const report = makeReport({
-            vulnerabilities: [makeVuln({ deep: nested })],
-        });
-        const sanitized = (0, redaction_1.sanitizeReportPayload)(report);
-        // At depth >= 20, value is replaced with [REDACTED]
-        const deep = sanitized.vulnerabilities[0].rawData.deep;
-        let current = deep;
-        for (let i = 0; i < 19; i++) {
-            current = current.level;
-        }
-        (0, vitest_1.expect)(current).toBe(redaction_1.REDACTED_VALUE);
-    });
-    (0, vitest_1.it)("preserves report-level fields not named metadata/vulnerabilities", () => {
-        const report = makeReport({
-            source: "TRIVY",
-            scanType: "vuln",
-            target: "registry/app:latest",
-            extraField: "preserve-me",
-        });
-        const sanitized = (0, redaction_1.sanitizeReportPayload)(report);
-        (0, vitest_1.expect)(sanitized.source).toBe("TRIVY");
-        (0, vitest_1.expect)(sanitized.scanType).toBe("vuln");
-        (0, vitest_1.expect)(sanitized.target).toBe("registry/app:latest");
-        (0, vitest_1.expect)(sanitized.extraField).toBe("preserve-me");
-    });
-    (0, vitest_1.it)("redacts env-var key=value pattern in non-env context", () => {
-        const report = makeReport({
-            vulnerabilities: [
-                makeVuln({
-                    log: "Starting with SONAR_TOKEN=abc123def and DB_PASSWORD=p4ss",
-                }),
-            ],
-        });
-        const sanitized = (0, redaction_1.sanitizeReportPayload)(report);
-        (0, vitest_1.expect)(sanitized.vulnerabilities[0].rawData.log).toBe("Starting with SONAR_TOKEN=[REDACTED] and DB_PASSWORD=[REDACTED]");
-    });
-});
-// ---------------------------------------------------------------------------
-// redactSensitiveData (standalone)
-// ---------------------------------------------------------------------------
-(0, vitest_1.describe)("redactSensitiveData — standalone", () => {
-    (0, vitest_1.it)("redacts top-level sensitive keys", () => {
-        (0, vitest_1.expect)((0, redaction_1.redactSensitiveData)({ password: "pw123", name: "safe" })).toEqual({
-            password: redaction_1.REDACTED_VALUE,
-            name: "safe",
-        });
-    });
-    (0, vitest_1.it)("redacts nested sensitive keys", () => {
-        (0, vitest_1.expect)((0, redaction_1.redactSensitiveData)({
-            config: { apiKey: "sk-123", host: "localhost" },
-        })).toEqual({
-            config: { apiKey: redaction_1.REDACTED_VALUE, host: "localhost" },
-        });
-    });
-    (0, vitest_1.it)("redacts Bearer/Basic/auth patterns in string values", () => {
-        (0, vitest_1.expect)((0, redaction_1.redactSensitiveData)({
-            headerValue: "Bearer abc123def456ghi789",
-        })).toEqual({
-            headerValue: `Bearer ${redaction_1.REDACTED_VALUE}`,
-        });
-    });
-    (0, vitest_1.it)("redacts GitHub PAT in any string value", () => {
-        (0, vitest_1.expect)((0, redaction_1.redactSensitiveData)({
-            log: "found token ghp_1234567890abcdefghijklmnopqrst here",
-        })).toEqual({
-            log: `found token ${redaction_1.REDACTED_VALUE} here`,
-        });
-    });
-    (0, vitest_1.it)("redacts AWS key in any string value", () => {
-        (0, vitest_1.expect)((0, redaction_1.redactSensitiveData)({
-            output: "key is AKIAIOSFODNN7EXAMPLE exposed",
-        })).toEqual({
-            output: `key is ${redaction_1.REDACTED_VALUE} exposed`,
-        });
-    });
-    (0, vitest_1.it)("redacts URL credentials", () => {
-        (0, vitest_1.expect)((0, redaction_1.redactSensitiveData)({
-            url: "https://user:pass@host/path",
-        })).toEqual({
-            url: `https://${redaction_1.REDACTED_VALUE}@host/path`,
-        });
-    });
-    (0, vitest_1.it)("preserves secretHash and fingerprint as keys", () => {
-        (0, vitest_1.expect)((0, redaction_1.redactSensitiveData)({
-            secretHash: "sha256:abc123",
-            fingerprint: "fp-001",
-        })).toEqual({
-            secretHash: "sha256:abc123",
-            fingerprint: "fp-001",
-        });
-    });
-    (0, vitest_1.it)("passes through primitives unchanged", () => {
-        (0, vitest_1.expect)((0, redaction_1.redactSensitiveData)("plain string")).toBe("plain string");
-        (0, vitest_1.expect)((0, redaction_1.redactSensitiveData)(42)).toBe(42);
-        (0, vitest_1.expect)((0, redaction_1.redactSensitiveData)(true)).toBe(true);
-        (0, vitest_1.expect)((0, redaction_1.redactSensitiveData)(null)).toBeNull();
-    });
-});
-//# sourceMappingURL=redaction.test.js.map