@mitre/hdf-converters 2.10.16 → 2.10.17
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/lib/index.d.ts +1 -0
- package/lib/index.js +1 -0
- package/lib/index.js.map +1 -1
- package/lib/package.json +1 -1
- package/lib/src/anchore-grype-mapper.d.ts +11 -0
- package/lib/src/anchore-grype-mapper.js +172 -0
- package/lib/src/anchore-grype-mapper.js.map +1 -0
- package/lib/src/utils/fingerprinting.d.ts +1 -0
- package/lib/src/utils/fingerprinting.js +10 -1
- package/lib/src/utils/fingerprinting.js.map +1 -1
- package/package.json +1 -1
package/lib/index.d.ts
CHANGED
package/lib/index.js
CHANGED
|
@@ -29,6 +29,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
|
|
|
29
29
|
exports.ScoutsuiteNistMappingData = exports.OWaspNistMappingData = exports.NistCciMappingData = exports.NiktoNistMappingData = exports.NessusPluginNistMappingData = exports.CweNistMappingData = exports.CciNistMappingData = exports.AwsConfigMappingData = exports.ASFFResults = void 0;
|
|
30
30
|
var asff_mapper_1 = require("./src/asff-mapper/asff-mapper");
|
|
31
31
|
Object.defineProperty(exports, "ASFFResults", { enumerable: true, get: function () { return asff_mapper_1.ASFFResults; } });
|
|
32
|
+
__exportStar(require("./src/anchore-grype-mapper"), exports);
|
|
32
33
|
__exportStar(require("./src/aws-config-mapper"), exports);
|
|
33
34
|
__exportStar(require("./src/burpsuite-mapper"), exports);
|
|
34
35
|
__exportStar(require("./src/ckl-mapper/checklist-mapper"), exports);
|
package/lib/index.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,6DAA0D;AAAlD,0GAAA,WAAW,OAAA;AACnB,0DAAwC;AACxC,yDAAuC;AACvC,oEAAkD;AAClD,mEAAiD;AACjD,8EAA4D;AAC5D,4EAA0D;AAC1D,qFAAmE;AACnE,qFAAmE;AACnE,qFAAmE;AACnE,yFAAuE;AACvE,uFAAqE;AACrE,wDAAsC;AACtC,yDAAuC;AACvC,uDAAqC;AACrC,qDAAmC;AACnC,0DAAwC;AACxC,0DAAwC;AACxC,4FAA4E;AAC5E,wFAAwE;AACxE,wFAAwE;AACxE,0GAA0F;AAC1F,4FAA4E;AAC5E,wFAAwE;AACxE,4FAA4E;AAC5E,sGAAsF;AACtF,iEAA+C;AAC/C,sDAAoC;AACpC,0DAAwC;AACxC,qDAAmC;AACnC,sDAAoC;AACpC,qDAAmC;AACnC,8DAA4C;AAC5C,0DAAwC;AACxC,oDAAkC;AAClC,yDAAuC;AACvC,sDAAoC;AACpC,0DAAwC;AACxC,yDAAuC;AACvC,2DAAyC;AACzC,yDAAuC;AACvC,6DAA2C;AAC3C,wDAAsC;AACtC,6DAA2C;AAC3C,mDAAiC"}
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,6DAA0D;AAAlD,0GAAA,WAAW,OAAA;AACnB,6DAA2C;AAC3C,0DAAwC;AACxC,yDAAuC;AACvC,oEAAkD;AAClD,mEAAiD;AACjD,8EAA4D;AAC5D,4EAA0D;AAC1D,qFAAmE;AACnE,qFAAmE;AACnE,qFAAmE;AACnE,yFAAuE;AACvE,uFAAqE;AACrE,wDAAsC;AACtC,yDAAuC;AACvC,uDAAqC;AACrC,qDAAmC;AACnC,0DAAwC;AACxC,0DAAwC;AACxC,4FAA4E;AAC5E,wFAAwE;AACxE,wFAAwE;AACxE,0GAA0F;AAC1F,4FAA4E;AAC5E,wFAAwE;AACxE,4FAA4E;AAC5E,sGAAsF;AACtF,iEAA+C;AAC/C,sDAAoC;AACpC,0DAAwC;AACxC,qDAAmC;AACnC,sDAAoC;AACpC,qDAAmC;AACnC,8DAA4C;AAC5C,0DAAwC;AACxC,oDAAkC;AAClC,yDAAuC;AACvC,sDAAoC;AACpC,0DAAwC;AACxC,yDAAuC;AACvC,2DAAyC;AACzC,yDAAuC;AACvC,6DAA2C;AAC3C,wDAAsC;AACtC,6DAA2C;AAC3C,mDAAiC"}
|
package/lib/package.json
CHANGED
|
@@ -0,0 +1,11 @@
|
|
|
1
|
+
import { ExecJSON } from 'inspecjs';
|
|
2
|
+
import { BaseConverter, ILookupPath, MappedTransform } from './base-converter';
|
|
3
|
+
export declare class AnchoreGrypeMapper extends BaseConverter {
|
|
4
|
+
withRaw: boolean;
|
|
5
|
+
metadata: Record<string, unknown>;
|
|
6
|
+
controlMatches(matchesPath: string, idTransformer: (value: any) => unknown, impactTransformer: (value: any) => unknown, resultMessageTransformer: (value: any) => unknown): MappedTransform<ExecJSON.Control & ILookupPath, ILookupPath>;
|
|
7
|
+
mapping(): MappedTransform<ExecJSON.Execution & {
|
|
8
|
+
passthrough: unknown;
|
|
9
|
+
}, ILookupPath>;
|
|
10
|
+
constructor(exportJson: string, withRaw?: boolean);
|
|
11
|
+
}
|
|
@@ -0,0 +1,172 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __importDefault = (this && this.__importDefault) || function (mod) {
|
|
3
|
+
return (mod && mod.__esModule) ? mod : { "default": mod };
|
|
4
|
+
};
|
|
5
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
6
|
+
exports.AnchoreGrypeMapper = void 0;
|
|
7
|
+
const inspecjs_1 = require("inspecjs");
|
|
8
|
+
const lodash_1 = __importDefault(require("lodash"));
|
|
9
|
+
const package_json_1 = require("../package.json");
|
|
10
|
+
const base_converter_1 = require("./base-converter");
|
|
11
|
+
const IMPACT_MAPPING = new Map([
|
|
12
|
+
['critical', 0.9],
|
|
13
|
+
['high', 0.7],
|
|
14
|
+
['medium', 0.5],
|
|
15
|
+
['low', 0.3],
|
|
16
|
+
['negligible', 0.0],
|
|
17
|
+
['unknown', 0.5]
|
|
18
|
+
]);
|
|
19
|
+
function skipSeverityNegligibleOrUnknown(controls) {
|
|
20
|
+
if (controls) {
|
|
21
|
+
controls
|
|
22
|
+
.filter((control) => {
|
|
23
|
+
const rating = lodash_1.default.get(control, 'tags.severity', '');
|
|
24
|
+
return rating === 'Negligible' || rating === 'Unknown';
|
|
25
|
+
})
|
|
26
|
+
.map((control) => control.results.map((result) => {
|
|
27
|
+
result.status = inspecjs_1.ExecJSON.ControlResultStatus.Skipped;
|
|
28
|
+
result.skip_message =
|
|
29
|
+
'Manual review required because a Anchore Grype rating severity is set to `negligible` or `unknown`.';
|
|
30
|
+
}));
|
|
31
|
+
}
|
|
32
|
+
return controls;
|
|
33
|
+
}
|
|
34
|
+
function description(data) {
|
|
35
|
+
const vulnerability = data.vulnerability;
|
|
36
|
+
const relatedVulnerabilities = data.relatedVulnerabilities;
|
|
37
|
+
if (!vulnerability.description && relatedVulnerabilities.length > 0) {
|
|
38
|
+
return relatedVulnerabilities.filter((relatedVulnerability) => relatedVulnerability.id === vulnerability.id)[0].description;
|
|
39
|
+
}
|
|
40
|
+
else if (vulnerability.description) {
|
|
41
|
+
return vulnerability.description;
|
|
42
|
+
}
|
|
43
|
+
return 'no description found';
|
|
44
|
+
}
|
|
45
|
+
class AnchoreGrypeMapper extends base_converter_1.BaseConverter {
|
|
46
|
+
controlMatches(matchesPath, idTransformer, impactTransformer, resultMessageTransformer) {
|
|
47
|
+
return {
|
|
48
|
+
path: matchesPath,
|
|
49
|
+
key: 'id',
|
|
50
|
+
tags: {
|
|
51
|
+
nist: ['SA-11', 'RA-5'],
|
|
52
|
+
cveid: { path: 'vulnerability.id' },
|
|
53
|
+
severity: { path: 'vulnerability.severity' }
|
|
54
|
+
},
|
|
55
|
+
descriptions: [
|
|
56
|
+
{
|
|
57
|
+
data: {
|
|
58
|
+
path: 'vulnerability.fix',
|
|
59
|
+
transformer: (data) => data.state == 'fixed'
|
|
60
|
+
? `vulnerability is ${lodash_1.default.get(data, 'state')} for versions ${lodash_1.default.get(data, 'versions').join(', ')}`
|
|
61
|
+
: `vulnerability is not known to be fixed in any versions`
|
|
62
|
+
},
|
|
63
|
+
label: 'fix'
|
|
64
|
+
},
|
|
65
|
+
{
|
|
66
|
+
data: {
|
|
67
|
+
path: 'relatedVulnerabilities',
|
|
68
|
+
transformer: (data) => `${JSON.stringify(lodash_1.default.get(data, 'cvss'), null, 2)}`
|
|
69
|
+
},
|
|
70
|
+
label: 'check'
|
|
71
|
+
}
|
|
72
|
+
],
|
|
73
|
+
refs: {
|
|
74
|
+
transformer: (data) => {
|
|
75
|
+
const vuln_urls = lodash_1.default.get(data, 'vulnerability.urls');
|
|
76
|
+
const relatedVulnerabilities = lodash_1.default.get(data, 'relatedVulnerabilities');
|
|
77
|
+
let relatedVulnerabilitiesUrls = [];
|
|
78
|
+
if (relatedVulnerabilities) {
|
|
79
|
+
relatedVulnerabilitiesUrls = relatedVulnerabilities.map((element) => element.urls);
|
|
80
|
+
}
|
|
81
|
+
return vuln_urls.concat(...relatedVulnerabilitiesUrls).map((element) => ({ url: element }));
|
|
82
|
+
}
|
|
83
|
+
},
|
|
84
|
+
source_location: {},
|
|
85
|
+
title: {
|
|
86
|
+
transformer: (data) => `Grype found a vulnerability to ${lodash_1.default.get(data, 'vulnerability.id')} in ${lodash_1.default.get(this.metadata, 'source.target.userInput')}`
|
|
87
|
+
},
|
|
88
|
+
id: {
|
|
89
|
+
transformer: idTransformer
|
|
90
|
+
},
|
|
91
|
+
desc: {
|
|
92
|
+
transformer: description
|
|
93
|
+
},
|
|
94
|
+
impact: {
|
|
95
|
+
path: 'vulnerability.severity',
|
|
96
|
+
transformer: impactTransformer
|
|
97
|
+
},
|
|
98
|
+
code: {
|
|
99
|
+
transformer: (data) => `${JSON.stringify(lodash_1.default.omitBy(lodash_1.default.pick(data, ['vulnerability', 'relatedVulnerabilities']), (value) => value === null || value === ''), null, 2)}`
|
|
100
|
+
},
|
|
101
|
+
arrayTransformer: skipSeverityNegligibleOrUnknown,
|
|
102
|
+
results: [
|
|
103
|
+
{
|
|
104
|
+
status: inspecjs_1.ExecJSON.ControlResultStatus.Failed,
|
|
105
|
+
code_desc: {
|
|
106
|
+
transformer: (data) => `${JSON.stringify(lodash_1.default.get(data, 'matchDetails'), null, 2)}`
|
|
107
|
+
},
|
|
108
|
+
message: {
|
|
109
|
+
transformer: resultMessageTransformer
|
|
110
|
+
},
|
|
111
|
+
start_time: lodash_1.default.get(this.metadata, 'descriptor.timestamp')
|
|
112
|
+
}
|
|
113
|
+
]
|
|
114
|
+
};
|
|
115
|
+
}
|
|
116
|
+
mapping() {
|
|
117
|
+
return {
|
|
118
|
+
platform: {
|
|
119
|
+
name: 'Heimdall Tools',
|
|
120
|
+
release: package_json_1.version,
|
|
121
|
+
target_id: null
|
|
122
|
+
},
|
|
123
|
+
version: package_json_1.version,
|
|
124
|
+
statistics: {
|
|
125
|
+
duration: null
|
|
126
|
+
},
|
|
127
|
+
profiles: [
|
|
128
|
+
{
|
|
129
|
+
name: 'Anchore - Grype',
|
|
130
|
+
title: 'Anchore Grype Matches',
|
|
131
|
+
version: lodash_1.default.get(this.metadata, 'descriptor.version'),
|
|
132
|
+
maintainer: null,
|
|
133
|
+
summary: null,
|
|
134
|
+
license: null,
|
|
135
|
+
copyright: null,
|
|
136
|
+
copyright_email: null,
|
|
137
|
+
supports: [],
|
|
138
|
+
attributes: [],
|
|
139
|
+
depends: [],
|
|
140
|
+
groups: [],
|
|
141
|
+
status: 'loaded',
|
|
142
|
+
controls: [
|
|
143
|
+
{
|
|
144
|
+
...this.controlMatches('wrapper.matches', (data) => `Grype/${lodash_1.default.get(data, 'vulnerability.id')}`, (0, base_converter_1.impactMapping)(IMPACT_MAPPING), (data) => `${JSON.stringify(lodash_1.default.get(data, 'artifact'), null, 2)}`)
|
|
145
|
+
},
|
|
146
|
+
{
|
|
147
|
+
...this.controlMatches('wrapper.ignoredMatches', (data) => `Grype-Ignored-Match/${lodash_1.default.get(data, 'vulnerability.id')}`, () => 0, (data) => `This finding is ignored due to the following applied ignored rules:\n${JSON.stringify(lodash_1.default.get(data, 'appliedIgnoreRules'), null, 2)}\nArtifact Information:\n${JSON.stringify(lodash_1.default.get(data, 'artifact'), null, 2)}`)
|
|
148
|
+
}
|
|
149
|
+
],
|
|
150
|
+
sha256: ''
|
|
151
|
+
}
|
|
152
|
+
],
|
|
153
|
+
passthrough: {
|
|
154
|
+
transformer: (data) => {
|
|
155
|
+
return {
|
|
156
|
+
auxiliary_data: [{ name: '', data: lodash_1.default.omit([]) }],
|
|
157
|
+
...(this.withRaw && { raw: data })
|
|
158
|
+
};
|
|
159
|
+
}
|
|
160
|
+
}
|
|
161
|
+
};
|
|
162
|
+
}
|
|
163
|
+
constructor(exportJson, withRaw = false) {
|
|
164
|
+
const temp = JSON.parse(exportJson);
|
|
165
|
+
super({ wrapper: lodash_1.default.pick(temp, ['matches', 'ignoredMatches']) });
|
|
166
|
+
this.metadata = lodash_1.default.omit(temp, ['matches', 'ignoredMatches']);
|
|
167
|
+
this.withRaw = withRaw;
|
|
168
|
+
this.setMappings(this.mapping());
|
|
169
|
+
}
|
|
170
|
+
}
|
|
171
|
+
exports.AnchoreGrypeMapper = AnchoreGrypeMapper;
|
|
172
|
+
//# sourceMappingURL=anchore-grype-mapper.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"anchore-grype-mapper.js","sourceRoot":"","sources":["../../src/anchore-grype-mapper.ts"],"names":[],"mappings":";;;;;;AAAA,uCAAkC;AAClC,oDAAuB;AACvB,kDAAgE;AAChE,qDAK0B;AAE1B,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC;IAClD,CAAC,UAAU,EAAE,GAAG,CAAC;IACjB,CAAC,MAAM,EAAE,GAAG,CAAC;IACb,CAAC,QAAQ,EAAE,GAAG,CAAC;IACf,CAAC,KAAK,EAAE,GAAG,CAAC;IACZ,CAAC,YAAY,EAAE,GAAG,CAAC;IACnB,CAAC,SAAS,EAAE,GAAG,CAAC;CACjB,CAAC,CAAC;AAGH,SAAS,+BAA+B,CAAC,QAAmB;IAC1D,IAAI,QAAQ,EAAE;QACX,QAA+B;aAE7B,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE;YAClB,MAAM,MAAM,GAAG,gBAAC,CAAC,GAAG,CAAC,OAAO,EAAE,eAAe,EAAE,EAAE,CAAW,CAAC;YAE7D,OAAO,MAAM,KAAK,YAAY,IAAI,MAAM,KAAK,SAAS,CAAC;QACzD,CAAC,CAAC;aAED,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CACf,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;YAC7B,MAAM,CAAC,MAAM,GAAG,mBAAQ,CAAC,mBAAmB,CAAC,OAAO,CAAC;YACrD,MAAM,CAAC,YAAY;gBACjB,qGAAqG,CAAC;QAC1G,CAAC,CAAC,CACH,CAAC;KACL;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,WAAW,CAAC,IAA6B;IAChD,MAAM,aAAa,GAAG,IAAI,CAAC,aAAwC,CAAC;IACpE,MAAM,sBAAsB,GAAG,IAAI,CAAC,sBAGjC,CAAC;IACJ,IAAI,CAAC,aAAa,CAAC,WAAW,IAAI,sBAAsB,CAAC,MAAM,GAAG,CAAC,EAAE;QACnE,OAAO,sBAAsB,CAAC,MAAM,CAClC,CAAC,oBAAoB,EAAE,EAAE,CAAC,oBAAoB,CAAC,EAAE,KAAK,aAAa,CAAC,EAAE,CACvE,CAAC,CAAC,CAAC,CAAC,WAAqB,CAAC;KAC5B;SAAM,IAAI,aAAa,CAAC,WAAW,EAAE;QACpC,OAAO,aAAa,CAAC,WAAqB,CAAC;KAC5C;IACD,OAAO,sBAAsB,CAAC;AAChC,CAAC;AAED,MAAa,kBAAmB,SAAQ,8BAAa;IAInD,cAAc,CACZ,WAAmB,EACnB,aAAsC,EACtC,iBAA0C,EAC1C,wBAAiD;QAEjD,OAAO;YACL,IAAI,EAAE,WAAW;YACjB,GAAG,EAAE,IAAI;YACT,IAAI,EAAE;gBACJ,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC;gBACvB,KAAK,EAAE,EAAC,IAAI,EAAE,kBAAkB,EAAC;gBACjC,QAAQ,EAAE,EAAC,IAAI,EAAE,wBAAwB,EAAC;aAC3C;YACD,YAAY,EAAE;gBACZ;oBACE,IAAI,EAAE;wBACJ,IAAI,EAAE,mBAAmB;wBACzB,WAAW,EAAE,CAAC,IAA6B,EAAU,EAAE,CACrD,IAAI,CAAC,KAAK,IAAI,OAAO;4BACnB,CAAC,CAAC,oBAAoB,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,iBAAkB,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,CAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;4BAC7G,CAAC,CAAC,wDAAwD;qBAC/D;oBACD,KAAK,EAAE,KAAK;iBACb;gBACD;oBACE,IAAI,EAAE;wBACJ,IAAI,EAAE,wBAAwB;wBAC9B,WAAW,EAAE,CAAC,IAA6B,EAAU,EAAE,CACrD,GAAG,IAAI,CAAC,SAAS,CAAC,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;qBACpD;oBACD,KAAK,EAAE,OAAO;iBACf;aACF;YACD,IAAI,EAAE;gBACJ,WAAW,EAAE,CAAC,IAA6B,EAAE,EAAE;oBAC7C,MAAM,SAAS,GAAG,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,oBAAoB,CAG/C,CAAC;oBACJ,MAAM,sBAAsB,GAAG,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,wBAAwB,CAAC,CAAC;oBACrE,IAAI,0BAA0B,GAAG,EAG9B,CAAC;oBACJ,IAAI,sBAAsB,EAAE;wBAC1B,0BAA0B,GACxB,sBACD,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAA8B,CAAC;qBAC/D;oBACD,OACE,SAAS,CAAC,MAAM,CACd,GAAG,0BAA0B,CAEhC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAC,GAAG,EAAE,OAAO,EAAC,CAAC,CAAC,CAAC;gBACvC,CAAC;aACiC;YACpC,eAAe,EAAE,EAAE;YACnB,KAAK,EAAE;gBACL,WAAW,EAAE,CAAC,IAA6B,EAAU,EAAE,CACrD,kCAAkC,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,kBAAkB,CAAC,OAAO,gBAAC,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,yBAAyB,CAAW,EAAE;aACtI;YACD,EAAE,EAAE;gBACF,WAAW,EAAE,aAAa;aAC3B;YACD,IAAI,EAAE;gBACJ,WAAW,EAAE,WAAW;aACzB;YACD,MAAM,EAAE;gBACN,IAAI,EAAE,wBAAwB;gBAC9B,WAAW,EAAE,iBAAiB;aAC/B;YACD,IAAI,EAAE;gBACJ,WAAW,EAAE,CAAC,IAA6B,EAAU,EAAE,CACrD,GAAG,IAAI,CAAC,SAAS,CACf,gBAAC,CAAC,MAAM,CACN,gBAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,eAAe,EAAE,wBAAwB,CAAC,CAAC,EACzD,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE,CAC1C,EACD,IAAI,EACJ,CAAC,CACF,EAAE;aACN;YACD,gBAAgB,EAAE,+BAA+B;YACjD,OAAO,EAAE;gBACP;oBACE,MAAM,EAAE,mBAAQ,CAAC,mBAAmB,CAAC,MAAM;oBAC3C,SAAS,EAAE;wBACT,WAAW,EAAE,CAAC,IAA6B,EAAU,EAAE,CACrD,GAAG,IAAI,CAAC,SAAS,CAAC,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;qBAC5D;oBACD,OAAO,EAAE;wBACP,WAAW,EAAE,wBAAwB;qBACtC;oBACD,UAAU,EAAE,gBAAC,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,sBAAsB,CAAW;iBACnE;aACF;SACF,CAAC;IACJ,CAAC;IAED,OAAO;QAIL,OAAO;YACL,QAAQ,EAAE;gBACR,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,sBAAoB;gBAC7B,SAAS,EAAE,IAAI;aAChB;YACD,OAAO,EAAE,sBAAoB;YAC7B,UAAU,EAAE;gBACV,QAAQ,EAAE,IAAI;aACf;YACD,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,iBAAiB;oBACvB,KAAK,EAAE,uBAAuB;oBAC9B,OAAO,EAAE,gBAAC,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,oBAAoB,CAAW;oBAC7D,UAAU,EAAE,IAAI;oBAChB,OAAO,EAAE,IAAI;oBACb,OAAO,EAAE,IAAI;oBACb,SAAS,EAAE,IAAI;oBACf,eAAe,EAAE,IAAI;oBACrB,QAAQ,EAAE,EAAE;oBACZ,UAAU,EAAE,EAAE;oBACd,OAAO,EAAE,EAAE;oBACX,MAAM,EAAE,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE;wBACR;4BACE,GAAG,IAAI,CAAC,cAAc,CACpB,iBAAiB,EACjB,CAAC,IAA6B,EAAU,EAAE,CACxC,SAAS,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,kBAAkB,CAAC,EAAE,EAC5C,IAAA,8BAAa,EAAC,cAAc,CAAC,EAC7B,CAAC,IAA6B,EAAU,EAAE,CACxC,GAAG,IAAI,CAAC,SAAS,CAAC,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CACxD;yBACF;wBACD;4BACE,GAAG,IAAI,CAAC,cAAc,CACpB,wBAAwB,EACxB,CAAC,IAA6B,EAAU,EAAE,CACxC,uBAAuB,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,kBAAkB,CAAC,EAAE,EAC1D,GAAG,EAAE,CAAC,CAAC,EACP,CAAC,IAA6B,EAAU,EAAE,CACxC,wEAAwE,IAAI,CAAC,SAAS,CAAC,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,oBAAoB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,4BAA4B,IAAI,CAAC,SAAS,CAAC,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CACnN;yBACF;qBACF;oBACD,MAAM,EAAE,EAAE;iBACX;aACF;YACD,WAAW,EAAE;gBACX,WAAW,EAAE,CAAC,IAAyB,EAA2B,EAAE;oBAClE,OAAO;wBACL,cAAc,EAAE,CAAC,EAAC,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,gBAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAC,CAAC;wBAC9C,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAC,GAAG,EAAE,IAAI,EAAC,CAAC;qBACjC,CAAC;gBACJ,CAAC;aACF;SACF,CAAC;IACJ,CAAC;IACD,YAAY,UAAkB,EAAE,OAAO,GAAG,KAAK;QAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACpC,KAAK,CAAC,EAAC,OAAO,EAAE,gBAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC,EAAC,CAAC,CAAC;QAC9D,IAAI,CAAC,QAAQ,GAAG,gBAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC,CAAC;QAC5D,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IACnC,CAAC;CACF;AA/KD,gDA+KC"}
|
|
@@ -33,6 +33,7 @@ var INPUT_TYPES;
|
|
|
33
33
|
INPUT_TYPES["CONVEYOR"] = "conveyor";
|
|
34
34
|
INPUT_TYPES["FORTIFY"] = "fortify";
|
|
35
35
|
INPUT_TYPES["GOSEC"] = "gosec";
|
|
36
|
+
INPUT_TYPES["GRYPE"] = "grype";
|
|
36
37
|
INPUT_TYPES["IONCHANNEL"] = "ionchannel";
|
|
37
38
|
INPUT_TYPES["JFROG"] = "jfrog";
|
|
38
39
|
INPUT_TYPES["MSFT_SEC_SCORE"] = "msft_secure_score";
|
|
@@ -100,7 +101,15 @@ const fileTypeFingerprints = {
|
|
|
100
101
|
[INPUT_TYPES.NOT_FOUND]: [],
|
|
101
102
|
[INPUT_TYPES.VERACODE]: [],
|
|
102
103
|
[INPUT_TYPES.GOSEC]: ['Golang errors', 'Issues'],
|
|
103
|
-
[INPUT_TYPES.CYCLONEDX_SBOM]: ['bomFormat', 'metadata', 'specVersion']
|
|
104
|
+
[INPUT_TYPES.CYCLONEDX_SBOM]: ['bomFormat', 'metadata', 'specVersion'],
|
|
105
|
+
[INPUT_TYPES.GRYPE]: [
|
|
106
|
+
'matches.vulnerability',
|
|
107
|
+
'matches.relatedVulnerabilities',
|
|
108
|
+
'matches.matchDetails',
|
|
109
|
+
'matches.artifact',
|
|
110
|
+
'distro',
|
|
111
|
+
'descriptor'
|
|
112
|
+
]
|
|
104
113
|
};
|
|
105
114
|
function fingerprint(guessOptions) {
|
|
106
115
|
try {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"fingerprinting.js","sourceRoot":"","sources":["../../../src/utils/fingerprinting.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,0CAA4B;AAE5B,IAAY,
|
|
1
|
+
{"version":3,"file":"fingerprinting.js","sourceRoot":"","sources":["../../../src/utils/fingerprinting.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,0CAA4B;AAE5B,IAAY,WA0BX;AA1BD,WAAY,WAAW;IACrB,4BAAa,CAAA;IACb,4BAAa,CAAA;IACb,sCAAuB,CAAA;IACvB,oCAAqB,CAAA;IACrB,kCAAmB,CAAA;IACnB,8BAAe,CAAA;IACf,8BAAe,CAAA;IACf,wCAAyB,CAAA;IACzB,8BAAe,CAAA;IACf,mDAAoC,CAAA;IACpC,8BAAe,CAAA;IACf,8BAAe,CAAA;IACf,gDAAiC,CAAA;IACjC,4BAAa,CAAA;IACb,wCAAyB,CAAA;IACzB,sCAAuB,CAAA;IACvB,0BAAW,CAAA;IACX,gCAAiB,CAAA;IACjB,8BAAe,CAAA;IACf,wCAAyB,CAAA;IACzB,wCAAyB,CAAA;IACzB,uCAAwB,CAAA;IACxB,gCAAiB,CAAA;IACjB,oCAAqB,CAAA;IACrB,6BAAc,CAAA;AAChB,CAAC,EA1BW,WAAW,GAAX,mBAAW,KAAX,mBAAW,QA0BtB;AAGD,MAAM,oBAAoB,GAAkC;IAC1D,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,EAAE,cAAc,EAAE,YAAY,CAAC;IAC9D,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC,mBAAmB,EAAE,cAAc,CAAC;IAC7D,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,+BAA+B,EAAE,WAAW,CAAC;IAC7E,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE;QACxB,aAAa;QACb,SAAS;QACT,QAAQ;QACR,cAAc;KACf;IACD,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,aAAa,EAAE,MAAM,CAAC;IAC5C,CAAC,WAAW,CAAC,cAAc,CAAC,EAAE,CAAC,aAAa,EAAE,UAAU,CAAC;IACzD,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,iBAAiB,CAAC;IACxE,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC;IACnD,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE;QAClB,aAAa;QACb,QAAQ;QACR,SAAS;QACT,iBAAiB;QACjB,gCAAgC;KACjC;IACD,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE;QACxB,YAAY;QACZ,cAAc;QACd,cAAc;QACd,aAAa;KACd;IACD,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE;QACvB,mCAAmC;QACnC,sCAAsC;QACtC,wBAAwB;QACxB,mBAAmB;QACnB,UAAU;QACV,wBAAwB;QACxB,2BAA2B;KAC5B;IACD,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,YAAY,EAAE,UAAU,EAAE,MAAM,CAAC;IAErD,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE;IACtB,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,EAAE;IAC3B,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,EAAE;IACxB,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,EAAE;IACxB,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,EAAE;IAC5B,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,EAAE;IACvB,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,EAAE;IAC5B,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,EAAE;IAC5B,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,EAAE;IAC3B,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,EAAE;IAC1B,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,eAAe,EAAE,QAAQ,CAAC;IAChD,CAAC,WAAW,CAAC,cAAc,CAAC,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,aAAa,CAAC;IACtE,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE;QACnB,uBAAuB;QACvB,gCAAgC;QAChC,sBAAsB;QACtB,kBAAkB;QAClB,QAAQ;QACR,YAAY;KACb;CACF,CAAC;AAEF,SAAgB,WAAW,CAAC,YAG3B;IACC,IAAI;QACF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAE1D,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,MAAM,CAC/D,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACP,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM;gBACxD,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM;gBACnD,CAAC,CAAC,EAAC,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM,EAAC;gBACpE,CAAC,CAAC;oBACE,GAAG,CAAC;oBACJ,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM;iBAC3D,CAAC;QACR,CAAC,CAC4C,CAAC;QAChD,MAAM,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;QAChC,IAAI,aAAa,CAAC,KAAK,KAAK,CAAC,EAAE;YAC7B,OAAO,MAAM,CAAC;SACf;KACF;IAAC,MAAM;QACN,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAExD,IAAI,YAAY,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE;YAC3D,OAAO,WAAW,CAAC,MAAM,CAAC;SAC3B;aAAM,IACL,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC;YAC/C,YAAY,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAC3D;YACA,OAAO,WAAW,CAAC,KAAK,CAAC;SAC1B;aAAM,IACL,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,4BAA4B,CAAC;YACrD,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,yBAAyB,CAAC,EAClD;YACA,OAAO,WAAW,CAAC,UAAU,CAAC;SAC/B;aAAM,IAAI,YAAY,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE;YAChE,OAAO,WAAW,CAAC,OAAO,CAAC;SAC5B;aAAM,IACL,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;YAClD,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,EACnD;YACA,OAAO,WAAW,CAAC,IAAI,CAAC;SACzB;aAAM,IAAI,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC,EAAE;YACjE,OAAO,WAAW,CAAC,IAAI,CAAC;SACzB;aAAM,IAAI,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC,EAAE;YACjE,OAAO,WAAW,CAAC,UAAU,CAAC;SAC/B;aAAM,IACL,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC1C,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YAC5C,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YAC5C,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,EAC1C;YACA,OAAO,WAAW,CAAC,UAAU,CAAC;SAC/B;aAAM,IACL,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;YAClC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAChC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAChC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC;YACvC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;YAC9B,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,EAClC;YACA,OAAO,WAAW,CAAC,MAAM,CAAC;SAC3B;aAAM,IACL,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YAC5C,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,EAClD;YACA,OAAO,WAAW,CAAC,QAAQ,CAAC;SAC7B;aAAM,IACL,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;YAC/C,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAC3C,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAC/C;YACA,OAAO,WAAW,CAAC,SAAS,CAAC;SAC9B;KACF;IACD,OAAO,WAAW,CAAC,SAAS,CAAC;AAC/B,CAAC;AA/ED,kCA+EC"}
|