@loxia-labs/loxia-autopilot-one 1.0.1 → 1.0.3

package/src/analyzers/ConfigValidator.js

@@ -1,690 +1 @@
-/**
- * ConfigValidator - Validate configuration files for errors and security issues
- *
- * Validates common configuration files:
- * - package.json, tsconfig.json (JSON Schema)
- * - Dockerfile (hadolint)
- * - docker-compose.yml (yamllint)
- * - Kubernetes YAML (checkov, yamllint)
- * - Terraform (checkov)
- * - .env files (secret detection)
- * - GitHub Actions workflows (yamllint)
- */
-
-import { exec } from 'child_process';
-import { promisify } from 'util';
-import path from 'path';
-import fs from 'fs/promises';
-import { STATIC_ANALYSIS } from '../utilities/constants.js';
-
-const execAsync = promisify(exec);
-
-class ConfigValidator {
-  constructor(logger = null) {
-    this.logger = logger;
-    this.availableScanners = null;
-    this.scannerCache = new Map();
-  }
-
-  /**
-   * Detect which validation tools are available
-   * @returns {Promise<Object>} Available validators
-   */
-  async detectAvailableValidators() {
-    // Return cached result if available
-    if (this.availableScanners !== null) {
-      return this.availableScanners;
-    }
-
-    const available = {
-      checkov: false,
-      hadolint: false,
-      yamllint: false,
-      jsonSchema: false
-    };
-
-    // Check for checkov (Infrastructure as Code scanner)
-    try {
-      await execAsync('checkov --version', { timeout: 5000 });
-      available.checkov = true;
-      this.logger?.debug('checkov detected');
-    } catch (error) {
-      this.logger?.debug('checkov not available', { error: error.message });
-    }
-
-    // Check for hadolint (Dockerfile linter)
-    try {
-      await execAsync('hadolint --version', { timeout: 5000 });
-      available.hadolint = true;
-      this.logger?.debug('hadolint detected');
-    } catch (error) {
-      this.logger?.debug('hadolint not available', { error: error.message });
-    }
-
-    // Check for yamllint (YAML linter)
-    try {
-      await execAsync('yamllint --version', { timeout: 5000 });
-      available.yamllint = true;
-      this.logger?.debug('yamllint detected');
-    } catch (error) {
-      this.logger?.debug('yamllint not available', { error: error.message });
-    }
-
-    // Check for ajv (JSON Schema validation - npm package)
-    try {
-      await import('ajv');
-      available.jsonSchema = true;
-      this.logger?.debug('JSON Schema validation available');
-    } catch (error) {
-      this.logger?.debug('ajv not available', { error: error.message });
-    }
-
-    this.availableScanners = available;
-    return available;
-  }
-
-  /**
-   * Validate a configuration file
-   * @param {string} filePath - Path to config file
-   * @param {Object} options - Validation options
-   * @returns {Promise<Array>} Validation issues
-   */
-  async validate(filePath, options = {}) {
-    const issues = [];
-    const available = await this.detectAvailableValidators();
-    const fileType = this.detectFileType(filePath);
-
-    this.logger?.debug('Validating config file', { filePath, fileType });
-
-    // Route to appropriate validator based on file type
-    switch (fileType) {
-      case 'dockerfile':
-        if (available.hadolint) {
-          const hadolintIssues = await this.validateDockerfile(filePath, options);
-          issues.push(...hadolintIssues);
-        }
-        if (available.checkov) {
-          const checkovIssues = await this.validateWithCheckov(filePath, 'dockerfile', options);
-          issues.push(...checkovIssues);
-        }
-        break;
-
-      case 'docker-compose':
-        if (available.yamllint) {
-          const yamlIssues = await this.validateYAML(filePath, options);
-          issues.push(...yamlIssues);
-        }
-        if (available.checkov) {
-          const checkovIssues = await this.validateWithCheckov(filePath, 'docker_compose', options);
-          issues.push(...checkovIssues);
-        }
-        break;
-
-      case 'kubernetes':
-        if (available.yamllint) {
-          const yamlIssues = await this.validateYAML(filePath, options);
-          issues.push(...yamlIssues);
-        }
-        if (available.checkov) {
-          const checkovIssues = await this.validateWithCheckov(filePath, 'kubernetes', options);
-          issues.push(...checkovIssues);
-        }
-        break;
-
-      case 'terraform':
-        if (available.checkov) {
-          const checkovIssues = await this.validateWithCheckov(filePath, 'terraform', options);
-          issues.push(...checkovIssues);
-        }
-        break;
-
-      case 'package.json':
-        if (available.jsonSchema) {
-          const schemaIssues = await this.validatePackageJson(filePath, options);
-          issues.push(...schemaIssues);
-        }
-        break;
-
-      case 'tsconfig.json':
-        if (available.jsonSchema) {
-          const schemaIssues = await this.validateTsConfig(filePath, options);
-          issues.push(...schemaIssues);
-        }
-        break;
-
-      case 'github-actions':
-        if (available.yamllint) {
-          const yamlIssues = await this.validateYAML(filePath, options);
-          issues.push(...yamlIssues);
-        }
-        break;
-
-      case 'env':
-        // Always check .env files for secrets (no external tool needed)
-        const secretIssues = await this.validateEnvFile(filePath, options);
-        issues.push(...secretIssues);
-        break;
-
-      case 'yaml':
-        if (available.yamllint) {
-          const yamlIssues = await this.validateYAML(filePath, options);
-          issues.push(...yamlIssues);
-        }
-        break;
-
-      default:
-        this.logger?.warn('Unknown config file type', { filePath, fileType });
-        return [];
-    }
-
-    return this.normalizeResults(issues);
-  }
-
-  /**
-   * Validate Dockerfile using hadolint
-   * @private
-   */
-  async validateDockerfile(filePath, options = {}) {
-    try {
-      const result = await execAsync(
-        `hadolint --format json "${filePath}"`,
-        {
-          maxBuffer: 10 * 1024 * 1024,
-          timeout: 30000
-        }
-      );
-
-      const output = JSON.parse(result.stdout);
-      return this.parseHadolintResults(output, filePath);
-    } catch (error) {
-      // hadolint exits with non-zero if issues found
-      if (error.stdout) {
-        try {
-          const output = JSON.parse(error.stdout);
-          return this.parseHadolintResults(output, filePath);
-        } catch (parseError) {
-          this.logger?.error('Failed to parse hadolint output', {
-            error: parseError.message
-          });
-        }
-      }
-      this.logger?.error('hadolint validation failed', { error: error.message });
-      return [];
-    }
-  }
-
-  /**
-   * Parse hadolint results
-   * @private
-   */
-  parseHadolintResults(output, filePath) {
-    const issues = [];
-
-    if (Array.isArray(output)) {
-      for (const issue of output) {
-        issues.push({
-          file: filePath,
-          line: issue.line || 1,
-          column: issue.column || 1,
-          severity: this.mapHadolintSeverity(issue.level),
-          rule: issue.code,
-          message: issue.message,
-          category: 'dockerfile',
-          validator: 'hadolint'
-        });
-      }
-    }
-
-    return issues;
-  }
-
-  /**
-   * Validate YAML files using yamllint
-   * @private
-   */
-  async validateYAML(filePath, options = {}) {
-    try {
-      const result = await execAsync(
-        `yamllint -f parsable "${filePath}"`,
-        {
-          maxBuffer: 10 * 1024 * 1024,
-          timeout: 30000
-        }
-      );
-
-      return this.parseYamllintResults(result.stdout, filePath);
-    } catch (error) {
-      // yamllint exits with non-zero if issues found
-      if (error.stdout) {
-        return this.parseYamllintResults(error.stdout, filePath);
-      }
-      this.logger?.error('yamllint validation failed', { error: error.message });
-      return [];
-    }
-  }
-
-  /**
-   * Parse yamllint results
-   * @private
-   */
-  parseYamllintResults(output, filePath) {
-    const issues = [];
-    const lines = output.split('\n').filter(line => line.trim());
-
-    for (const line of lines) {
-      // Format: file:line:column: [level] message (rule)
-      const match = line.match(/^(.+?):(\d+):(\d+):\s*\[(\w+)\]\s*(.+?)\s*\((.+?)\)/);
-      if (match) {
-        const [, file, lineNum, col, level, message, rule] = match;
-        issues.push({
-          file: filePath,
-          line: parseInt(lineNum, 10),
-          column: parseInt(col, 10),
-          severity: this.mapYamllintSeverity(level),
-          rule: rule,
-          message: message,
-          category: 'yaml',
-          validator: 'yamllint'
-        });
-      }
-    }
-
-    return issues;
-  }
-
-  /**
-   * Validate with checkov (Infrastructure as Code)
-   * @private
-   */
-  async validateWithCheckov(filePath, framework, options = {}) {
-    try {
-      const result = await execAsync(
-        `checkov -f "${filePath}" --framework ${framework} --output json --compact`,
-        {
-          maxBuffer: 10 * 1024 * 1024,
-          timeout: 60000
-        }
-      );
-
-      const output = JSON.parse(result.stdout);
-      return this.parseCheckovResults(output, filePath);
-    } catch (error) {
-      // checkov exits with non-zero if issues found
-      if (error.stdout) {
-        try {
-          const output = JSON.parse(error.stdout);
-          return this.parseCheckovResults(output, filePath);
-        } catch (parseError) {
-          this.logger?.error('Failed to parse checkov output', {
-            error: parseError.message
-          });
-        }
-      }
-      this.logger?.error('checkov validation failed', { error: error.message });
-      return [];
-    }
-  }
-
-  /**
-   * Parse checkov results
-   * @private
-   */
-  parseCheckovResults(output, filePath) {
-    const issues = [];
-
-    if (output.results && output.results.failed_checks) {
-      for (const check of output.results.failed_checks) {
-        issues.push({
-          file: filePath,
-          line: check.file_line_range ? check.file_line_range[0] : 1,
-          column: 1,
-          severity: this.mapCheckovSeverity(check.check_class),
-          rule: check.check_id,
-          message: check.check_name || check.check_id,
-          category: 'security',
-          validator: 'checkov',
-          remediation: check.guideline,
-          cwe: check.cwe,
-          references: check.guideline ? [check.guideline] : []
-        });
-      }
-    }
-
-    return issues;
-  }
-
-  /**
-   * Validate package.json using JSON Schema
-   * @private
-   */
-  async validatePackageJson(filePath, options = {}) {
-    try {
-      const Ajv = (await import('ajv')).default;
-      const addFormats = (await import('ajv-formats')).default;
-
-      const content = await fs.readFile(filePath, 'utf-8');
-      const packageJson = JSON.parse(content);
-
-      const ajv = new Ajv({ allErrors: true, strict: false });
-      addFormats(ajv);
-
-      // Basic package.json schema (simplified)
-      const schema = {
-        type: 'object',
-        required: ['name', 'version'],
-        properties: {
-          name: { type: 'string', pattern: '^(?:@[a-z0-9-~][a-z0-9-._~]*/)?[a-z0-9-~][a-z0-9-._~]*$' },
-          version: { type: 'string' },
-          description: { type: 'string' },
-          main: { type: 'string' },
-          type: { type: 'string', enum: ['module', 'commonjs'] },
-          scripts: { type: 'object' },
-          dependencies: { type: 'object' },
-          devDependencies: { type: 'object' }
-        },
-        additionalProperties: true
-      };
-
-      const validate = ajv.compile(schema);
-      const valid = validate(packageJson);
-
-      if (!valid && validate.errors) {
-        return validate.errors.map(error => ({
-          file: filePath,
-          line: 1,
-          column: 1,
-          severity: STATIC_ANALYSIS.SEVERITY.ERROR,
-          rule: 'json-schema',
-          message: error.instancePath ? `${error.instancePath} ${error.message}` : `must have required property '${error.params.missingProperty}'`,
-          category: 'validation',
-          validator: 'json-schema'
-        }));
-      }
-
-      return [];
-    } catch (error) {
-      this.logger?.error('package.json validation failed', { error: error.message });
-      return [{
-        file: filePath,
-        line: 1,
-        column: 1,
-        severity: STATIC_ANALYSIS.SEVERITY.ERROR,
-        rule: 'json-parse',
-        message: `Invalid JSON: ${error.message}`,
-        category: 'syntax',
-        validator: 'json-parse'
-      }];
-    }
-  }
-
-  /**
-   * Validate tsconfig.json using JSON Schema
-   * @private
-   */
-  async validateTsConfig(filePath, options = {}) {
-    try {
-      const content = await fs.readFile(filePath, 'utf-8');
-      const tsconfig = JSON.parse(content);
-
-      const issues = [];
-
-      // Check for common misconfigurations
-      if (tsconfig.compilerOptions) {
-        const opts = tsconfig.compilerOptions;
-
-        // Check for strict mode
-        if (!opts.strict) {
-          issues.push({
-            file: filePath,
-            line: 1,
-            column: 1,
-            severity: STATIC_ANALYSIS.SEVERITY.WARNING,
-            rule: 'strict-mode',
-            message: 'Consider enabling "strict" mode for better type safety',
-            category: 'best-practice',
-            validator: 'tsconfig-validator'
-          });
-        }
-
-        // Check for noImplicitAny
-        if (opts.noImplicitAny === false) {
-          issues.push({
-            file: filePath,
-            line: 1,
-            column: 1,
-            severity: STATIC_ANALYSIS.SEVERITY.WARNING,
-            rule: 'no-implicit-any',
-            message: 'Disabling noImplicitAny reduces type safety',
-            category: 'best-practice',
-            validator: 'tsconfig-validator'
-          });
-        }
-      }
-
-      return issues;
-    } catch (error) {
-      this.logger?.error('tsconfig.json validation failed', { error: error.message });
-      return [{
-        file: filePath,
-        line: 1,
-        column: 1,
-        severity: STATIC_ANALYSIS.SEVERITY.ERROR,
-        rule: 'json-parse',
-        message: `Invalid JSON: ${error.message}`,
-        category: 'syntax',
-        validator: 'json-parse'
-      }];
-    }
-  }
-
-  /**
-   * Validate .env file for security issues
-   * @private
-   */
-  async validateEnvFile(filePath, options = {}) {
-    try {
-      const content = await fs.readFile(filePath, 'utf-8');
-      const issues = [];
-      const lines = content.split('\n');
-
-      const secretPatterns = [
-        { pattern: /password|passwd|pwd/i, name: 'password' },
-        { pattern: /api[_-]?key/i, name: 'API key' },
-        { pattern: /secret/i, name: 'secret' },
-        { pattern: /token/i, name: 'token' },
-        { pattern: /private[_-]?key/i, name: 'private key' },
-        { pattern: /aws[_-]?access/i, name: 'AWS credentials' }
-      ];
-
-      lines.forEach((line, index) => {
-        const trimmed = line.trim();
-
-        // Skip comments and empty lines
-        if (!trimmed || trimmed.startsWith('#')) return;
-
-        // Check for hardcoded values (not references to other env vars)
-        if (trimmed.includes('=')) {
-          const [key, value] = trimmed.split('=');
-          const keyLower = key.toLowerCase();
-          const valueTrimmed = value?.trim() || '';
-
-          // Check if value looks like a real secret (not empty, not a placeholder)
-          const looksLikeSecret = valueTrimmed &&
-                                  valueTrimmed !== '' &&
-                                  !valueTrimmed.startsWith('$') && // Not env var reference
-                                  valueTrimmed !== 'your-key-here' &&
-                                  valueTrimmed !== 'changeme' &&
-                                  valueTrimmed.length > 5;
-
-          if (looksLikeSecret) {
-            for (const { pattern, name } of secretPatterns) {
-              if (pattern.test(keyLower)) {
-                issues.push({
-                  file: filePath,
-                  line: index + 1,
-                  column: 1,
-                  severity: STATIC_ANALYSIS.SEVERITY.CRITICAL,
-                  rule: 'hardcoded-secret',
-                  message: `Potential hardcoded ${name} detected in .env file`,
-                  category: 'security',
-                  validator: 'env-validator',
-                  remediation: 'Use environment-specific .env files and add .env to .gitignore'
-                });
-                break;
-              }
-            }
-          }
-        }
-      });
-
-      return issues;
-    } catch (error) {
-      this.logger?.error('.env validation failed', { error: error.message });
-      return [];
-    }
-  }
-
-  /**
-   * Detect configuration file type
-   * @private
-   */
-  detectFileType(filePath) {
-    const basename = path.basename(filePath).toLowerCase();
-    const dirname = path.dirname(filePath);
-
-    // Exact filename matches
-    if (basename === 'dockerfile') return 'dockerfile';
-    if (basename === 'docker-compose.yml' || basename === 'docker-compose.yaml') return 'docker-compose';
-    if (basename === 'package.json') return 'package.json';
-    if (basename === 'tsconfig.json') return 'tsconfig.json';
-    if (basename === '.env' || basename.endsWith('.env')) return 'env';
-
-    // Path-based detection
-    if (dirname.includes('.github/workflows')) return 'github-actions';
-    if (dirname.includes('kubernetes') || dirname.includes('k8s')) return 'kubernetes';
-
-    // Extension-based detection
-    const ext = path.extname(filePath).toLowerCase();
-    if (ext === '.tf' || ext === '.tfvars') return 'terraform';
-    if (ext === '.yml' || ext === '.yaml') return 'yaml';
-    if (ext === '.json') return 'json';
-
-    return 'unknown';
-  }
-
-  /**
-   * Normalize all validator results to common format
-   * @private
-   */
-  normalizeResults(results) {
-    return results.map(result => ({
-      file: result.file,
-      line: result.line || 1,
-      column: result.column || 1,
-      severity: result.severity || STATIC_ANALYSIS.SEVERITY.WARNING,
-      rule: result.rule || 'unknown',
-      message: result.message || 'Validation issue detected',
-      category: result.category || 'validation',
-      validator: result.validator,
-      cwe: result.cwe || null,
-      remediation: result.remediation || null,
-      references: result.references || []
-    }));
-  }
-
-  /**
-   * Map hadolint severity to our standard
-   * @private
-   */
-  mapHadolintSeverity(level) {
-    const map = {
-      'error': STATIC_ANALYSIS.SEVERITY.ERROR,
-      'warning': STATIC_ANALYSIS.SEVERITY.WARNING,
-      'info': STATIC_ANALYSIS.SEVERITY.INFO,
-      'style': STATIC_ANALYSIS.SEVERITY.INFO
-    };
-    return map[level?.toLowerCase()] || STATIC_ANALYSIS.SEVERITY.WARNING;
-  }
-
-  /**
-   * Map yamllint severity to our standard
-   * @private
-   */
-  mapYamllintSeverity(level) {
-    const map = {
-      'error': STATIC_ANALYSIS.SEVERITY.ERROR,
-      'warning': STATIC_ANALYSIS.SEVERITY.WARNING
-    };
-    return map[level?.toLowerCase()] || STATIC_ANALYSIS.SEVERITY.WARNING;
-  }
-
-  /**
-   * Map checkov severity to our standard
-   * @private
-   */
-  mapCheckovSeverity(checkClass) {
-    // checkov uses check_class to categorize severity
-    // Most security issues are treated as errors
-    return STATIC_ANALYSIS.SEVERITY.ERROR;
-  }
-
-  /**
-   * Get validator status report
-   * @returns {Promise<Object>} Validator availability and status
-   */
-  async getValidatorStatus() {
-    const available = await this.detectAvailableValidators();
-    return {
-      validators: available,
-      recommendations: this.getInstallRecommendations(available)
-    };
-  }
-
-  /**
-   * Get installation recommendations for missing validators
-   * @private
-   */
-  getInstallRecommendations(available) {
-    const recommendations = [];
-
-    if (!available.checkov) {
-      recommendations.push({
-        validator: 'checkov',
-        reason: 'Infrastructure as Code security scanning (Docker, Kubernetes, Terraform)',
-        install: 'pip install checkov',
-        priority: 'high'
-      });
-    }
-
-    if (!available.hadolint) {
-      recommendations.push({
-        validator: 'hadolint',
-        reason: 'Dockerfile linting and best practices',
-        install: 'Download from https://github.com/hadolint/hadolint/releases',
-        priority: 'high'
-      });
-    }
-
-    if (!available.yamllint) {
-      recommendations.push({
-        validator: 'yamllint',
-        reason: 'YAML file validation',
-        install: 'pip install yamllint',
-        priority: 'medium'
-      });
-    }
-
-    if (!available.jsonSchema) {
-      recommendations.push({
-        validator: 'ajv (JSON Schema)',
-        reason: 'JSON configuration validation',
-        install: 'npm install ajv ajv-formats',
-        priority: 'medium'
-      });
-    }
-
-    return recommendations;
-  }
-}
-
-export default ConfigValidator;
+const a0_0x271c1c=a0_0x5021;(function(_0x150aa3,_0x483e44){const _0x3fd058=a0_0x5021,_0x35e91b=_0x150aa3();while(!![]){try{const _0x2eafc8=parseInt(_0x3fd058(0x131))/0x1+-parseInt(_0x3fd058(0x153))/0x2+parseInt(_0x3fd058(0x189))/0x3+-parseInt(_0x3fd058(0x161))/0x4*(parseInt(_0x3fd058(0x142))/0x5)+-parseInt(_0x3fd058(0x16f))/0x6+parseInt(_0x3fd058(0x19b))/0x7+parseInt(_0x3fd058(0x192))/0x8*(parseInt(_0x3fd058(0x134))/0x9);if(_0x2eafc8===_0x483e44)break;else _0x35e91b['push'](_0x35e91b['shift']());}catch(_0xbd959){_0x35e91b['push'](_0x35e91b['shift']());}}}(a0_0x4ada,0x83457));import{exec}from'child_process';import{promisify}from'util';function a0_0x4ada(){const _0x288d8b=['u0vwrvjjvfK','D2fYBG','nde4mdq2m21ct3D6CG','CgfJA2fNzs5QC29UihzHBgLKyxrPB24GzMfPBgvK','zxjYB3i','rMfPBgvKihrVihbHCNnLignOzwnRB3yGB3v0Chv0','CgfJA2fNzs5QC29U','CgLWigLUC3rHBgWGEwfTBgXPBNq','zgv0zwn0qxzHAwXHyMXLvMfSAwrHDg9YCW','y2HLy2TVDG','ANnVBI1Zy2HLBwe','lNLTBa','z2L0AhvIlwfJDgLVBNm','sw52ywXPzcbku09ooIa','AgfKB2XPBNq','zg9JA2vYzMLSzq','Aw5ZDgfUy2vqyxrO','C3rKB3v0','C3bSAxq','sLnptIbJB25MAwD1CMf0Aw9UihzHBgLKyxrPB24','DMfSAwrHDgvzqu1m','nJC5nZmZrKPeAuLh','ANnVBI1WyxjZzq','CMvTzwrPyxrPB24','mtm3nJuYm3Dcq3HIta','ANnVBLnJAgvTyq','y2HLy2TFy2XHC3m','Ew91CI1RzxKTAgvYzq','vxnLigvUDMLYB25Tzw50lxnWzwnPzMLJic5LBNyGzMLSzxmGyw5KigfKzcaUzw52ihrVic5NAxrPz25VCMu','ywP2','yxzHAwXHyMXLu2nHBM5LCNm','DhjPBq','ChvZAa','BwfWq2HLy2TVDLnLDMvYAxr5','Bg9Nz2vY','EwfTBa','zgvIDwC','z2v0sw5ZDgfSBfjLy29TBwvUzgf0Aw9UCW','mtGXodvNruTbrK0','ANnVBG','y29Kzq','vMfSAwrHDgLUzYbJB25MAwCGzMLSzq','vMfSAwrHDgLVBIbPC3n1zsbKzxrLy3rLza','DMfSAwrHDgvxAxrOq2HLy2TVDG','BwvZC2fNzq','zxjYB3jZ','DgvYCMfMB3jT','AgfKB2XPBNqGls1MB3jTyxqGANnVBIaI','rg9JA2vYzMLSzsbSAw50Aw5NigfUzcbIzxn0ihbYywn0AwnLCW','zgLYBMfTzq','v0fstKLorW','DhnJB25MAwCUANnVBG','ug90zw50AwfSigHHCMrJB2rLzca','AgfKB2XPBNqGBM90igf2ywLSywjSzq','BgLUzq','mtCWode2nfbkq0Xxva','zg9JA2vYlwnVBxbVC2uUEw1S','zMLSzq','y29TCgLSzq','C2vJDxjPDhK','DMfSAwrHDgLVBG','AgfYzgnVzgvKlxnLy3jLDa','CgfYC2vdAgvJA292uMvZDwX0CW','BxvZDcbOyxzLihjLCxvPCMvKihbYB3bLCNr5icC','y2HHBMDLBwu','BgvUz3rO','DMfSAwrHDg9Y','AgLNAa','CMvHzezPBgu','odm2wMrrqvn1','DMfSAwrHDgvfBNzgAwXL','Dg9mB3DLCKnHC2u','CgfYyw1Z','yMvZDc1WCMfJDgLJzq','BwfWwwfTBgXPBNrtzxzLCML0Eq','A3vIzxjUzxrLCW','Bgv2zwW','lMDPDgH1yI93B3jRzMXVD3m','igrLDgvJDgvKigLUic5LBNyGzMLSzq','rvjst1i','Dw5RBM93BG','BwfWsgfKB2XPBNrtzxzLCML0Eq','CgfYC2viywrVBgLUDfjLC3vSDhm','mJmXmdC1mgzlswj4uG','rMfPBgvKihrVihbHCNnLigHHzg9SAw50ig91Dhb1Da','BwLZC2LUz1bYB3bLCNr5','CgfYC2u','wufntcbMAwXLihzHBgLKyxrPB24','C2nHBM5LCKnHy2HL','EwfTBgXPBNqGDMfSAwrHDgLVBIbMywLSzwq','ywP2icHku09oifnJAgvTysK','C2v2zxjPDhK','EwfTBgXPBNq','BwvKAxvT','DxrMltG','C3LUDgf4','DhnJB25MAwCUANnVBIb2ywXPzgf0Aw9UigzHAwXLza','y2HLy2TVDIaTlxzLCNnPB24','Aw5JBhvKzxm','EwfTBgXPBNqGzgv0zwn0zwq','BM9YBwfSAxPLuMvZDwX0CW','zMLSzv9SAw5Lx3jHBMDL','y2HLy2TFAwq','C3rYAwn0lw1Vzgu','C3rYAw5N','CgLWigLUC3rHBgWGy2HLy2TVDG','zMfPBgvKx2nOzwnRCW','AgfKB2XPBNqGDMfSAwrHDgLVBIbMywLSzwq','C3rHCNrZv2L0Aa','mJqWmZCZmKrZCvv4uW','CNvSzq','qvDtignYzwrLBNrPywXZ','zgv0zwn0rMLSzvr5Cgu','lNrM','lNrMDMfYCW','zg9JA2vYlwnVBxbVC2u','CMvZDwX0CW','B2jQzwn0','mJr6CMjbsLK','z3vPzgvSAw5L','CgfYC2vzyw1SBgLUDfjLC3vSDhm','ywP2lwzVCM1HDhm','C3rYAwn0','lNLHBwW','zw52lxzHBgLKyxrVCG'];a0_0x4ada=function(){return _0x288d8b;};return a0_0x4ada();}import a0_0x93ea92 from'path';import a0_0x110e41 from'fs/promises';import{STATIC_ANALYSIS}from'../utilities/constants.js';const execAsync=promisify(exec);class ConfigValidator{constructor(_0x40cb36=null){const _0x56703c=a0_0x5021;this['logger']=_0x40cb36,this[_0x56703c(0x13a)]=null,this[_0x56703c(0x174)]=new Map();}async[a0_0x271c1c(0x124)](){const _0x1d5fa0=a0_0x271c1c;if(this['availableScanners']!==null)return this[_0x1d5fa0(0x13a)];const _0x55ed33={'checkov':![],'hadolint':![],'yamllint':![],'jsonSchema':![]};try{await execAsync(_0x1d5fa0(0x17d),{'timeout':0x1388}),_0x55ed33['checkov']=!![],this[_0x1d5fa0(0x13e)]?.['debug']('checkov\x20detected');}catch(_0x1a6027){this[_0x1d5fa0(0x13e)]?.[_0x1d5fa0(0x140)]('checkov\x20not\x20available',{'error':_0x1a6027[_0x1d5fa0(0x148)]});}try{await execAsync('hadolint\x20--version',{'timeout':0x1388}),_0x55ed33[_0x1d5fa0(0x12a)]=!![],this[_0x1d5fa0(0x13e)]?.[_0x1d5fa0(0x140)]('hadolint\x20detected');}catch(_0x1e12ae){this['logger']?.['debug'](_0x1d5fa0(0x151),{'error':_0x1e12ae[_0x1d5fa0(0x148)]});}try{await execAsync('yamllint\x20--version',{'timeout':0x1388}),_0x55ed33[_0x1d5fa0(0x178)]=!![],this['logger']?.['debug'](_0x1d5fa0(0x17f));}catch(_0x3fac13){this['logger']?.['debug']('yamllint\x20not\x20available',{'error':_0x3fac13[_0x1d5fa0(0x148)]});}try{await import(_0x1d5fa0(0x139)),_0x55ed33['jsonSchema']=!![],this['logger']?.[_0x1d5fa0(0x140)]('JSON\x20Schema\x20validation\x20available');}catch(_0xb494e0){this['logger']?.['debug']('ajv\x20not\x20available',{'error':_0xb494e0[_0x1d5fa0(0x148)]});}return this[_0x1d5fa0(0x13a)]=_0x55ed33,_0x55ed33;}async['validate'](_0x188ab1,_0x563622={}){const _0x5c2ad7=a0_0x271c1c,_0x291894=[],_0x5d68eb=await this['detectAvailableValidators'](),_0x5bfd30=this[_0x5c2ad7(0x18c)](_0x188ab1);this['logger']?.[_0x5c2ad7(0x140)](_0x5c2ad7(0x145),{'filePath':_0x188ab1,'fileType':_0x5bfd30});switch(_0x5bfd30){case'dockerfile':if(_0x5d68eb['hadolint']){const _0x16f097=await this['validateDockerfile'](_0x188ab1,_0x563622);_0x291894[_0x5c2ad7(0x13c)](..._0x16f097);}if(_0x5d68eb['checkov']){const _0x49f71c=await this['validateWithCheckov'](_0x188ab1,'dockerfile',_0x563622);_0x291894['push'](..._0x49f71c);}break;case _0x5c2ad7(0x18f):if(_0x5d68eb[_0x5c2ad7(0x178)]){const _0x387b8d=await this[_0x5c2ad7(0x130)](_0x188ab1,_0x563622);_0x291894[_0x5c2ad7(0x13c)](..._0x387b8d);}if(_0x5d68eb[_0x5c2ad7(0x125)]){const _0x59ed27=await this['validateWithCheckov'](_0x188ab1,'docker_compose',_0x563622);_0x291894[_0x5c2ad7(0x13c)](..._0x59ed27);}break;case _0x5c2ad7(0x167):if(_0x5d68eb['yamllint']){const _0x30fc38=await this[_0x5c2ad7(0x130)](_0x188ab1,_0x563622);_0x291894[_0x5c2ad7(0x13c)](..._0x30fc38);}if(_0x5d68eb['checkov']){const _0x1bc14e=await this[_0x5c2ad7(0x147)](_0x188ab1,_0x5c2ad7(0x167),_0x563622);_0x291894[_0x5c2ad7(0x13c)](..._0x1bc14e);}break;case'terraform':if(_0x5d68eb['checkov']){const _0x3a2b32=await this[_0x5c2ad7(0x147)](_0x188ab1,'terraform',_0x563622);_0x291894[_0x5c2ad7(0x13c)](..._0x3a2b32);}break;case _0x5c2ad7(0x122):if(_0x5d68eb[_0x5c2ad7(0x135)]){const _0x9ca265=await this['validatePackageJson'](_0x188ab1,_0x563622);_0x291894[_0x5c2ad7(0x13c)](..._0x9ca265);}break;case _0x5c2ad7(0x14f):if(_0x5d68eb['jsonSchema']){const _0x520947=await this['validateTsConfig'](_0x188ab1,_0x563622);_0x291894[_0x5c2ad7(0x13c)](..._0x520947);}break;case _0x5c2ad7(0x128):if(_0x5d68eb['yamllint']){const _0x38f97b=await this[_0x5c2ad7(0x130)](_0x188ab1,_0x563622);_0x291894[_0x5c2ad7(0x13c)](..._0x38f97b);}break;case'env':const _0x4fcc23=await this[_0x5c2ad7(0x162)](_0x188ab1,_0x563622);_0x291894['push'](..._0x4fcc23);break;case'yaml':if(_0x5d68eb[_0x5c2ad7(0x178)]){const _0x235ee0=await this[_0x5c2ad7(0x130)](_0x188ab1,_0x563622);_0x291894[_0x5c2ad7(0x13c)](..._0x235ee0);}break;default:this[_0x5c2ad7(0x13e)]?.[_0x5c2ad7(0x19a)]('Unknown\x20config\x20file\x20type',{'filePath':_0x188ab1,'fileType':_0x5bfd30});return[];}return this['normalizeResults'](_0x291894);}async['validateDockerfile'](_0x9577e3,_0x2394e3={}){const _0xd8a849=a0_0x271c1c;try{const _0x28b04f=await execAsync(_0xd8a849(0x14b)+_0x9577e3+'\x22',{'maxBuffer':0xa*0x400*0x400,'timeout':0x7530}),_0x248246=JSON[_0xd8a849(0x172)](_0x28b04f['stdout']);return this[_0xd8a849(0x16e)](_0x248246,_0x9577e3);}catch(_0x5f1360){if(_0x5f1360['stdout'])try{const _0x1e7d03=JSON[_0xd8a849(0x172)](_0x5f1360['stdout']);return this[_0xd8a849(0x16e)](_0x1e7d03,_0x9577e3);}catch(_0x5aa668){this[_0xd8a849(0x13e)]?.[_0xd8a849(0x19d)](_0xd8a849(0x170),{'error':_0x5aa668['message']});}return this[_0xd8a849(0x13e)]?.['error'](_0xd8a849(0x187),{'error':_0x5f1360['message']}),[];}}[a0_0x271c1c(0x16e)](_0x151185,_0x4cf6b1){const _0x59ed34=a0_0x271c1c,_0x578758=[];if(Array['isArray'](_0x151185))for(const _0x5b688f of _0x151185){_0x578758[_0x59ed34(0x13c)]({'file':_0x4cf6b1,'line':_0x5b688f[_0x59ed34(0x152)]||0x1,'column':_0x5b688f['column']||0x1,'severity':this[_0x59ed34(0x16d)](_0x5b688f[_0x59ed34(0x168)]),'rule':_0x5b688f[_0x59ed34(0x144)],'message':_0x5b688f[_0x59ed34(0x148)],'category':'dockerfile','validator':_0x59ed34(0x12a)});}return _0x578758;}async['validateYAML'](_0x290904,_0x2d8d3f={}){const _0x385f1e=a0_0x271c1c;try{const _0x245937=await execAsync('yamllint\x20-f\x20parsable\x20\x22'+_0x290904+'\x22',{'maxBuffer':0xa*0x400*0x400,'timeout':0x7530});return this[_0x385f1e(0x194)](_0x245937[_0x385f1e(0x12d)],_0x290904);}catch(_0x38ff87){if(_0x38ff87['stdout'])return this['parseYamllintResults'](_0x38ff87[_0x385f1e(0x12d)],_0x290904);return this['logger']?.[_0x385f1e(0x19d)](_0x385f1e(0x175),{'error':_0x38ff87[_0x385f1e(0x148)]}),[];}}['parseYamllintResults'](_0x2a0aa8,_0x20f3b4){const _0x4696a2=a0_0x271c1c,_0x4ca861=[],_0x3e36c3=_0x2a0aa8[_0x4696a2(0x12e)]('\x0a')['filter'](_0x4919b2=>_0x4919b2[_0x4696a2(0x13b)]());for(const _0x525979 of _0x3e36c3){const _0x57481a=_0x525979['match'](/^(.+?):(\d+):(\d+):\s*\[(\w+)\]\s*(.+?)\s*\((.+?)\)/);if(_0x57481a){const [,_0x4bdc0e,_0xa53462,_0x3dd132,_0x2a7a59,_0x43a980,_0x2594a7]=_0x57481a;_0x4ca861['push']({'file':_0x20f3b4,'line':parseInt(_0xa53462,0xa),'column':parseInt(_0x3dd132,0xa),'severity':this[_0x4696a2(0x166)](_0x2a7a59),'rule':_0x2594a7,'message':_0x43a980,'category':'yaml','validator':'yamllint'});}}return _0x4ca861;}async[a0_0x271c1c(0x147)](_0x48d896,_0x54ab1c,_0x289402={}){const _0x202575=a0_0x271c1c;try{const _0x41fee9=await execAsync('checkov\x20-f\x20\x22'+_0x48d896+'\x22\x20--framework\x20'+_0x54ab1c+'\x20--output\x20json\x20--compact',{'maxBuffer':0xa*0x400*0x400,'timeout':0xea60}),_0x554e8d=JSON[_0x202575(0x172)](_0x41fee9[_0x202575(0x12d)]);return this[_0x202575(0x15a)](_0x554e8d,_0x48d896);}catch(_0x8dcb7a){if(_0x8dcb7a['stdout'])try{const _0xf71fad=JSON[_0x202575(0x172)](_0x8dcb7a['stdout']);return this['parseCheckovResults'](_0xf71fad,_0x48d896);}catch(_0x8bbe2d){this['logger']?.[_0x202575(0x19d)](_0x202575(0x121),{'error':_0x8bbe2d[_0x202575(0x148)]});}return this[_0x202575(0x13e)]?.[_0x202575(0x19d)]('checkov\x20validation\x20failed',{'error':_0x8dcb7a[_0x202575(0x148)]}),[];}}[a0_0x271c1c(0x15a)](_0x4009dc,_0xe45095){const _0x11f162=a0_0x271c1c,_0x19125e=[];if(_0x4009dc['results']&&_0x4009dc['results'][_0x11f162(0x186)])for(const _0x2b627e of _0x4009dc[_0x11f162(0x190)][_0x11f162(0x186)]){_0x19125e[_0x11f162(0x13c)]({'file':_0xe45095,'line':_0x2b627e['file_line_range']?_0x2b627e[_0x11f162(0x181)][0x0]:0x1,'column':0x1,'severity':this[_0x11f162(0x13d)](_0x2b627e[_0x11f162(0x136)]),'rule':_0x2b627e['check_id'],'message':_0x2b627e['check_name']||_0x2b627e[_0x11f162(0x182)],'category':_0x11f162(0x157),'validator':'checkov','remediation':_0x2b627e[_0x11f162(0x193)],'cwe':_0x2b627e['cwe'],'references':_0x2b627e[_0x11f162(0x193)]?[_0x2b627e['guideline']]:[]});}return _0x19125e;}async['validatePackageJson'](_0x99a87f,_0x319cd9={}){const _0x4902b3=a0_0x271c1c;try{const _0x44ae93=(await import(_0x4902b3(0x139)))['default'],_0x27c9f=(await import(_0x4902b3(0x195)))['default'],_0x22a26e=await a0_0x110e41['readFile'](_0x99a87f,'utf-8'),_0x9caa7c=JSON[_0x4902b3(0x172)](_0x22a26e),_0x421efd=new _0x44ae93({'allErrors':!![],'strict':![]});_0x27c9f(_0x421efd);const _0x4a88bd={'type':'object','required':['name','version'],'properties':{'name':{'type':_0x4902b3(0x184),'pattern':'^(?:@[a-z0-9-~][a-z0-9-._~]*/)?[a-z0-9-~][a-z0-9-._~]*$'},'version':{'type':'string'},'description':{'type':'string'},'main':{'type':_0x4902b3(0x184)},'type':{'type':'string','enum':['module','commonjs']},'scripts':{'type':_0x4902b3(0x191)},'dependencies':{'type':'object'},'devDependencies':{'type':'object'}},'additionalProperties':!![]},_0x117cc3=_0x421efd[_0x4902b3(0x156)](_0x4a88bd),_0x1599e6=_0x117cc3(_0x9caa7c);if(!_0x1599e6&&_0x117cc3['errors'])return _0x117cc3[_0x4902b3(0x149)]['map'](_0x45bab5=>({'file':_0x99a87f,'line':0x1,'column':0x1,'severity':STATIC_ANALYSIS['SEVERITY'][_0x4902b3(0x16b)],'rule':_0x4902b3(0x126),'message':_0x45bab5[_0x4902b3(0x12c)]?_0x45bab5['instancePath']+'\x20'+_0x45bab5[_0x4902b3(0x148)]:_0x4902b3(0x15b)+_0x45bab5[_0x4902b3(0x164)][_0x4902b3(0x171)]+'\x27','category':_0x4902b3(0x158),'validator':'json-schema'}));return[];}catch(_0x10fe52){return this[_0x4902b3(0x13e)]?.[_0x4902b3(0x19d)](_0x4902b3(0x19c),{'error':_0x10fe52['message']}),[{'file':_0x99a87f,'line':0x1,'column':0x1,'severity':STATIC_ANALYSIS[_0x4902b3(0x199)]['ERROR'],'rule':'json-parse','message':_0x4902b3(0x129)+_0x10fe52['message'],'category':_0x4902b3(0x17b),'validator':_0x4902b3(0x132)}];}}async['validateTsConfig'](_0x357c41,_0x41bc21={}){const _0x3e3687=a0_0x271c1c;try{const _0x4cebac=await a0_0x110e41[_0x3e3687(0x160)](_0x357c41,_0x3e3687(0x17a)),_0x30e347=JSON[_0x3e3687(0x172)](_0x4cebac),_0x1dbcdf=[];if(_0x30e347['compilerOptions']){const _0xbb4db1=_0x30e347['compilerOptions'];!_0xbb4db1[_0x3e3687(0x196)]&&_0x1dbcdf[_0x3e3687(0x13c)]({'file':_0x357c41,'line':0x1,'column':0x1,'severity':STATIC_ANALYSIS['SEVERITY']['WARNING'],'rule':_0x3e3687(0x183),'message':'Consider\x20enabling\x20\x22strict\x22\x20mode\x20for\x20better\x20type\x20safety','category':_0x3e3687(0x165),'validator':'tsconfig-validator'}),_0xbb4db1['noImplicitAny']===![]&&_0x1dbcdf[_0x3e3687(0x13c)]({'file':_0x357c41,'line':0x1,'column':0x1,'severity':STATIC_ANALYSIS['SEVERITY'][_0x3e3687(0x14e)],'rule':'no-implicit-any','message':'Disabling\x20noImplicitAny\x20reduces\x20type\x20safety','category':'best-practice','validator':'tsconfig-validator'});}return _0x1dbcdf;}catch(_0x254da7){return this[_0x3e3687(0x13e)]?.[_0x3e3687(0x19d)](_0x3e3687(0x17c),{'error':_0x254da7['message']}),[{'file':_0x357c41,'line':0x1,'column':0x1,'severity':STATIC_ANALYSIS[_0x3e3687(0x199)][_0x3e3687(0x16b)],'rule':_0x3e3687(0x132),'message':_0x3e3687(0x129)+_0x254da7[_0x3e3687(0x148)],'category':_0x3e3687(0x17b),'validator':'json-parse'}];}}async[a0_0x271c1c(0x162)](_0x159fcd,_0x44c65b={}){const _0x364880=a0_0x271c1c;try{const _0x3da7ca=await a0_0x110e41['readFile'](_0x159fcd,_0x364880(0x17a)),_0x2448d0=[],_0x2e9558=_0x3da7ca['split']('\x0a'),_0x5d904c=[{'pattern':/password|passwd|pwd/i,'name':'password'},{'pattern':/api[_-]?key/i,'name':'API\x20key'},{'pattern':/secret/i,'name':'secret'},{'pattern':/token/i,'name':'token'},{'pattern':/private[_-]?key/i,'name':'private\x20key'},{'pattern':/aws[_-]?access/i,'name':_0x364880(0x18b)}];return _0x2e9558['forEach']((_0x10d18a,_0x4c0113)=>{const _0x2f1145=_0x364880,_0x1e221d=_0x10d18a[_0x2f1145(0x13b)]();if(!_0x1e221d||_0x1e221d['startsWith']('#'))return;if(_0x1e221d[_0x2f1145(0x17e)]('=')){const [_0x3e6bec,_0x54a176]=_0x1e221d[_0x2f1145(0x12e)]('='),_0x2c5db5=_0x3e6bec['toLowerCase'](),_0x305bd2=_0x54a176?.[_0x2f1145(0x13b)]()||'',_0x22f52a=_0x305bd2&&_0x305bd2!==''&&!_0x305bd2[_0x2f1145(0x188)]('$')&&_0x305bd2!==_0x2f1145(0x137)&&_0x305bd2!==_0x2f1145(0x15c)&&_0x305bd2[_0x2f1145(0x15d)]>0x5;if(_0x22f52a)for(const {pattern:_0x1c11eb,name:_0x52ba33}of _0x5d904c){if(_0x1c11eb['test'](_0x2c5db5)){_0x2448d0[_0x2f1145(0x13c)]({'file':_0x159fcd,'line':_0x4c0113+0x1,'column':0x1,'severity':STATIC_ANALYSIS[_0x2f1145(0x199)]['CRITICAL'],'rule':_0x2f1145(0x159),'message':_0x2f1145(0x150)+_0x52ba33+_0x2f1145(0x16a),'category':'security','validator':_0x2f1145(0x198),'remediation':_0x2f1145(0x138)});break;}}}}),_0x2448d0;}catch(_0x2b68ba){return this['logger']?.['error']('.env\x20validation\x20failed',{'error':_0x2b68ba['message']}),[];}}[a0_0x271c1c(0x18c)](_0x2a2f02){const _0x5e3951=a0_0x271c1c,_0x56546a=a0_0x93ea92['basename'](_0x2a2f02)[_0x5e3951(0x163)](),_0x5ecc41=a0_0x93ea92[_0x5e3951(0x14d)](_0x2a2f02);if(_0x56546a==='dockerfile')return _0x5e3951(0x12b);if(_0x56546a===_0x5e3951(0x154)||_0x56546a==='docker-compose.yaml')return'docker-compose';if(_0x56546a===_0x5e3951(0x122))return'package.json';if(_0x56546a==='tsconfig.json')return'tsconfig.json';if(_0x56546a==='.env'||_0x56546a['endsWith']('.env'))return'env';if(_0x5ecc41[_0x5e3951(0x17e)](_0x5e3951(0x169)))return _0x5e3951(0x128);if(_0x5ecc41[_0x5e3951(0x17e)]('kubernetes')||_0x5ecc41[_0x5e3951(0x17e)]('k8s'))return _0x5e3951(0x167);const _0x5e9b88=a0_0x93ea92['extname'](_0x2a2f02)[_0x5e3951(0x163)]();if(_0x5e9b88===_0x5e3951(0x18d)||_0x5e9b88===_0x5e3951(0x18e))return _0x5e3951(0x14a);if(_0x5e9b88===_0x5e3951(0x127)||_0x5e9b88===_0x5e3951(0x197))return _0x5e3951(0x13f);if(_0x5e9b88==='.json')return _0x5e3951(0x143);return _0x5e3951(0x16c);}[a0_0x271c1c(0x180)](_0x4b4264){const _0x7f6348=a0_0x271c1c;return _0x4b4264['map'](_0x2469f7=>({'file':_0x2469f7[_0x7f6348(0x155)],'line':_0x2469f7[_0x7f6348(0x152)]||0x1,'column':_0x2469f7['column']||0x1,'severity':_0x2469f7[_0x7f6348(0x177)]||STATIC_ANALYSIS['SEVERITY'][_0x7f6348(0x14e)],'rule':_0x2469f7[_0x7f6348(0x18a)]||_0x7f6348(0x16c),'message':_0x2469f7[_0x7f6348(0x148)]||_0x7f6348(0x146),'category':_0x2469f7['category']||_0x7f6348(0x158),'validator':_0x2469f7[_0x7f6348(0x15e)],'cwe':_0x2469f7['cwe']||null,'remediation':_0x2469f7[_0x7f6348(0x133)]||null,'references':_0x2469f7['references']||[]}));}['mapHadolintSeverity'](_0xc2cdbc){const _0x109218=a0_0x271c1c,_0x1e8ac4={'error':STATIC_ANALYSIS[_0x109218(0x199)]['ERROR'],'warning':STATIC_ANALYSIS[_0x109218(0x199)][_0x109218(0x14e)],'info':STATIC_ANALYSIS[_0x109218(0x199)]['INFO'],'style':STATIC_ANALYSIS['SEVERITY']['INFO']};return _0x1e8ac4[_0xc2cdbc?.['toLowerCase']()]||STATIC_ANALYSIS['SEVERITY']['WARNING'];}['mapYamllintSeverity'](_0x2e9f96){const _0x5cfb55=a0_0x271c1c,_0x2a0b46={'error':STATIC_ANALYSIS[_0x5cfb55(0x199)][_0x5cfb55(0x16b)],'warning':STATIC_ANALYSIS[_0x5cfb55(0x199)]['WARNING']};return _0x2a0b46[_0x2e9f96?.[_0x5cfb55(0x163)]()]||STATIC_ANALYSIS['SEVERITY']['WARNING'];}['mapCheckovSeverity'](_0x2565df){const _0x551de5=a0_0x271c1c;return STATIC_ANALYSIS['SEVERITY'][_0x551de5(0x16b)];}async['getValidatorStatus'](){const _0x52bd9f=a0_0x271c1c,_0x5512a8=await this[_0x52bd9f(0x124)]();return{'validators':_0x5512a8,'recommendations':this['getInstallRecommendations'](_0x5512a8)};}[a0_0x271c1c(0x141)](_0x235060){const _0x3cfe23=a0_0x271c1c,_0x2219a4=[];return!_0x235060[_0x3cfe23(0x125)]&&_0x2219a4['push']({'validator':_0x3cfe23(0x125),'reason':'Infrastructure\x20as\x20Code\x20security\x20scanning\x20(Docker,\x20Kubernetes,\x20Terraform)','install':_0x3cfe23(0x185),'priority':_0x3cfe23(0x15f)}),!_0x235060[_0x3cfe23(0x12a)]&&_0x2219a4[_0x3cfe23(0x13c)]({'validator':_0x3cfe23(0x12a),'reason':_0x3cfe23(0x14c),'install':'Download from https://github.com/hadolint/hadolint/releases','priority':'high'}),!_0x235060[_0x3cfe23(0x178)]&&_0x2219a4[_0x3cfe23(0x13c)]({'validator':'yamllint','reason':_0x3cfe23(0x173),'install':_0x3cfe23(0x123),'priority':_0x3cfe23(0x179)}),!_0x235060['jsonSchema']&&_0x2219a4['push']({'validator':_0x3cfe23(0x176),'reason':_0x3cfe23(0x12f),'install':'npm\x20install\x20ajv\x20ajv-formats','priority':'medium'}),_0x2219a4;}}function a0_0x5021(_0x3396ca,_0x5c3ac4){_0x3396ca=_0x3396ca-0x121;const _0x4ada90=a0_0x4ada();let _0x50214b=_0x4ada90[_0x3396ca];if(a0_0x5021['VFySla']===undefined){var _0x1d674f=function(_0x3ef6a6){const _0x47f929='abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=';let _0x93ea92='',_0x110e41='';for(let _0x40cb36=0x0,_0x55ed33,_0x1a6027,_0x1e12ae=0x0;_0x1a6027=_0x3ef6a6['charAt'](_0x1e12ae++);~_0x1a6027&&(_0x55ed33=_0x40cb36%0x4?_0x55ed33*0x40+_0x1a6027:_0x1a6027,_0x40cb36++%0x4)?_0x93ea92+=String['fromCharCode'](0xff&_0x55ed33>>(-0x2*_0x40cb36&0x6)):0x0){_0x1a6027=_0x47f929['indexOf'](_0x1a6027);}for(let _0x3fac13=0x0,_0xb494e0=_0x93ea92['length'];_0x3fac13<_0xb494e0;_0x3fac13++){_0x110e41+='%'+('00'+_0x93ea92['charCodeAt'](_0x3fac13)['toString'](0x10))['slice'](-0x2);}return decodeURIComponent(_0x110e41);};a0_0x5021['JqVOCZ']=_0x1d674f,a0_0x5021['eBVWXp']={},a0_0x5021['VFySla']=!![];}const _0x2ac695=_0x4ada90[0x0],_0x40356a=_0x3396ca+_0x2ac695,_0x471e62=a0_0x5021['eBVWXp'][_0x40356a];return!_0x471e62?(_0x50214b=a0_0x5021['JqVOCZ'](_0x50214b),a0_0x5021['eBVWXp'][_0x40356a]=_0x50214b):_0x50214b=_0x471e62,_0x50214b;}export default ConfigValidator;