@mitre/hdf-converters 2.10.19 → 2.10.20
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +21 -20
- package/lib/index.d.ts +1 -0
- package/lib/index.js +1 -0
- package/lib/index.js.map +1 -1
- package/lib/package.json +1 -1
- package/lib/src/dependency-track-mapper.d.ts +9 -0
- package/lib/src/dependency-track-mapper.js +197 -0
- package/lib/src/dependency-track-mapper.js.map +1 -0
- package/lib/src/utils/fingerprinting.d.ts +1 -0
- package/lib/src/utils/fingerprinting.js +2 -0
- package/lib/src/utils/fingerprinting.js.map +1 -1
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -15,26 +15,27 @@ OHDF Converters supplies several methods to convert various types of security to
|
|
|
15
15
|
7. [**conveyor-mapper**] - Conveyor JSON file
|
|
16
16
|
8. [**cyclonedx-sbom-mapper**] - CycloneDX SBOM JSON file
|
|
17
17
|
9. [**dbprotect-mapper**] - DBProtect report in "Check Results Details" XML format
|
|
18
|
-
10. [**
|
|
19
|
-
11. [**
|
|
20
|
-
12. [**
|
|
21
|
-
13. [**
|
|
22
|
-
14. [**
|
|
23
|
-
15. [**
|
|
24
|
-
16. [**
|
|
25
|
-
17. [**
|
|
26
|
-
18. [**
|
|
27
|
-
19. [**
|
|
28
|
-
20. [**
|
|
29
|
-
21. [**
|
|
30
|
-
22. [**
|
|
31
|
-
23. [**
|
|
32
|
-
24. [**
|
|
33
|
-
25. [**
|
|
34
|
-
26. [**
|
|
35
|
-
27. [**
|
|
36
|
-
28. [**
|
|
37
|
-
29. [**
|
|
18
|
+
10. [**dependency-track-mapper**] - OWASP Dependency-Track Finding Packaging Format (FPF)
|
|
19
|
+
11. [**fortify-mapper**] - Fortify results FVDL file
|
|
20
|
+
12. [**gosec-mapper**] - gosec results JSON file
|
|
21
|
+
13. [**ionchannel-mapper**] - SBOM data from Ion Channel
|
|
22
|
+
14. [**jfrog-xray-mapper**] - JFrog Xray results JSON file
|
|
23
|
+
15. [**msft-secure-mapper**] - Microsoft Secure Score results file
|
|
24
|
+
16. [**nessus-mapper**] - Nessus XML results file
|
|
25
|
+
17. [**netsparker-mapper**] - Netsparker XML results file
|
|
26
|
+
18. [**neuvector-mapper**] - NeuVector JSON results file
|
|
27
|
+
19. [**nikto-mapper**] - Nikto results JSON file
|
|
28
|
+
20. [**prisma-mapper**] - Prisma Cloud Scan Report CSV file
|
|
29
|
+
21. [**sarif-mapper**] - SARIF JSON file
|
|
30
|
+
22. [**scoutsuite-mapper**] - ScoutSuite results from a Javascript object
|
|
31
|
+
23. [**snyk-mapper**] - Snyk results JSON file
|
|
32
|
+
24. [**sonarqube-mapper**] - SonarQube vulnerabilities for the specified project name and optional branch or pull/merge request ID name from an API
|
|
33
|
+
25. [**splunk-mapper**] - Splunk instance
|
|
34
|
+
26. [**trufflehog-mapper**] - Trufflehog results json file
|
|
35
|
+
27. [**twistlock-mapper**] - Twistlock CLI output file
|
|
36
|
+
28. [**veracode-mapper**] - Veracode Scan Results XML file
|
|
37
|
+
29. [**xccdf-results-mapper**] - SCAP client XCCDF-Results XML report
|
|
38
|
+
30. [**zap-mapper**] - OWASP ZAP results JSON
|
|
38
39
|
|
|
39
40
|
### NOTICE
|
|
40
41
|
|
package/lib/index.d.ts
CHANGED
|
@@ -22,6 +22,7 @@ export * from './src/converters-from-hdf/xccdf/reverse-xccdf-mapper';
|
|
|
22
22
|
export * from './src/conveyor-mapper';
|
|
23
23
|
export * from './src/cyclonedx-sbom-mapper';
|
|
24
24
|
export * from './src/dbprotect-mapper';
|
|
25
|
+
export * from './src/dependency-track-mapper';
|
|
25
26
|
export * from './src/fortify-mapper';
|
|
26
27
|
export * from './src/gosec-mapper';
|
|
27
28
|
export * from './src/ionchannel-mapper';
|
package/lib/index.js
CHANGED
|
@@ -52,6 +52,7 @@ __exportStar(require("./src/converters-from-hdf/xccdf/reverse-xccdf-mapper"), ex
|
|
|
52
52
|
__exportStar(require("./src/conveyor-mapper"), exports);
|
|
53
53
|
__exportStar(require("./src/cyclonedx-sbom-mapper"), exports);
|
|
54
54
|
__exportStar(require("./src/dbprotect-mapper"), exports);
|
|
55
|
+
__exportStar(require("./src/dependency-track-mapper"), exports);
|
|
55
56
|
__exportStar(require("./src/fortify-mapper"), exports);
|
|
56
57
|
__exportStar(require("./src/gosec-mapper"), exports);
|
|
57
58
|
__exportStar(require("./src/ionchannel-mapper"), exports);
|
package/lib/index.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,6DAA0D;AAAlD,0GAAA,WAAW,OAAA;AACnB,4FAA4E;AAC5E,wFAAwE;AACxE,wFAAwE;AACxE,0GAA0F;AAC1F,4FAA4E;AAC5E,wFAAwE;AACxE,4FAA4E;AAC5E,sGAAsF;AACtF,6DAA2C;AAC3C,0DAAwC;AACxC,yDAAuC;AACvC,8EAA4D;AAC5D,oEAAkD;AAClD,4EAA0D;AAC1D,mEAAiD;AACjD,qFAAmE;AACnE,qFAAmE;AACnE,qFAAmE;AACnE,yFAAuE;AACvE,uFAAqE;AACrE,wDAAsC;AACtC,8DAA4C;AAC5C,yDAAuC;AACvC,uDAAqC;AACrC,qDAAmC;AACnC,0DAAwC;AACxC,0DAAwC;AACxC,iEAA+C;AAC/C,sDAAoC;AACpC,0DAAwC;AACxC,yDAAuC;AACvC,qDAAmC;AACnC,sDAAoC;AACpC,qDAAmC;AACnC,0DAAwC;AACxC,oDAAkC;AAClC,yDAAuC;AACvC,sDAAoC;AACpC,0DAAwC;AACxC,yDAAuC;AACvC,2DAAyC;AACzC,yDAAuC;AACvC,6DAA2C;AAC3C,wDAAsC;AACtC,6DAA2C;AAC3C,mDAAiC"}
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,6DAA0D;AAAlD,0GAAA,WAAW,OAAA;AACnB,4FAA4E;AAC5E,wFAAwE;AACxE,wFAAwE;AACxE,0GAA0F;AAC1F,4FAA4E;AAC5E,wFAAwE;AACxE,4FAA4E;AAC5E,sGAAsF;AACtF,6DAA2C;AAC3C,0DAAwC;AACxC,yDAAuC;AACvC,8EAA4D;AAC5D,oEAAkD;AAClD,4EAA0D;AAC1D,mEAAiD;AACjD,qFAAmE;AACnE,qFAAmE;AACnE,qFAAmE;AACnE,yFAAuE;AACvE,uFAAqE;AACrE,wDAAsC;AACtC,8DAA4C;AAC5C,yDAAuC;AACvC,gEAA8C;AAC9C,uDAAqC;AACrC,qDAAmC;AACnC,0DAAwC;AACxC,0DAAwC;AACxC,iEAA+C;AAC/C,sDAAoC;AACpC,0DAAwC;AACxC,yDAAuC;AACvC,qDAAmC;AACnC,sDAAoC;AACpC,qDAAmC;AACnC,0DAAwC;AACxC,oDAAkC;AAClC,yDAAuC;AACvC,sDAAoC;AACpC,0DAAwC;AACxC,yDAAuC;AACvC,2DAAyC;AACzC,yDAAuC;AACvC,6DAA2C;AAC3C,wDAAsC;AACtC,6DAA2C;AAC3C,mDAAiC"}
|
package/lib/package.json
CHANGED
|
@@ -0,0 +1,9 @@
|
|
|
1
|
+
import { ExecJSON } from 'inspecjs';
|
|
2
|
+
import { BaseConverter, ILookupPath, MappedTransform } from './base-converter';
|
|
3
|
+
export declare class DependencyTrackMapper extends BaseConverter {
|
|
4
|
+
withRaw: boolean;
|
|
5
|
+
mappings: MappedTransform<ExecJSON.Execution & {
|
|
6
|
+
passthrough: unknown;
|
|
7
|
+
}, ILookupPath>;
|
|
8
|
+
constructor(dtJson: string, withRaw?: boolean);
|
|
9
|
+
}
|
|
@@ -0,0 +1,197 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
|
|
3
|
+
if (k2 === undefined) k2 = k;
|
|
4
|
+
var desc = Object.getOwnPropertyDescriptor(m, k);
|
|
5
|
+
if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
|
|
6
|
+
desc = { enumerable: true, get: function() { return m[k]; } };
|
|
7
|
+
}
|
|
8
|
+
Object.defineProperty(o, k2, desc);
|
|
9
|
+
}) : (function(o, m, k, k2) {
|
|
10
|
+
if (k2 === undefined) k2 = k;
|
|
11
|
+
o[k2] = m[k];
|
|
12
|
+
}));
|
|
13
|
+
var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
|
|
14
|
+
Object.defineProperty(o, "default", { enumerable: true, value: v });
|
|
15
|
+
}) : function(o, v) {
|
|
16
|
+
o["default"] = v;
|
|
17
|
+
});
|
|
18
|
+
var __importStar = (this && this.__importStar) || function (mod) {
|
|
19
|
+
if (mod && mod.__esModule) return mod;
|
|
20
|
+
var result = {};
|
|
21
|
+
if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
|
|
22
|
+
__setModuleDefault(result, mod);
|
|
23
|
+
return result;
|
|
24
|
+
};
|
|
25
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
26
|
+
exports.DependencyTrackMapper = void 0;
|
|
27
|
+
const inspecjs_1 = require("inspecjs");
|
|
28
|
+
const _ = __importStar(require("lodash"));
|
|
29
|
+
const package_json_1 = require("../package.json");
|
|
30
|
+
const base_converter_1 = require("./base-converter");
|
|
31
|
+
const CweNistMapping_1 = require("./mappings/CweNistMapping");
|
|
32
|
+
const global_1 = require("./utils/global");
|
|
33
|
+
const IMPACT_MAPPING = new Map([
|
|
34
|
+
['critical', 0.9],
|
|
35
|
+
['high', 0.7],
|
|
36
|
+
['medium', 0.5],
|
|
37
|
+
['low', 0.3],
|
|
38
|
+
['info', 0],
|
|
39
|
+
['unassigned', 0.5]
|
|
40
|
+
]);
|
|
41
|
+
const CWE_NIST_MAPPING = new CweNistMapping_1.CweNistMapping();
|
|
42
|
+
function nistTags(input) {
|
|
43
|
+
const cwes = input.map((cweId) => cweId.toString());
|
|
44
|
+
return CWE_NIST_MAPPING.nistFilter(cwes, global_1.DEFAULT_STATIC_CODE_ANALYSIS_NIST_TAGS);
|
|
45
|
+
}
|
|
46
|
+
function getVersion(file) {
|
|
47
|
+
return `${_.get(file, 'version')} ${_.get(file, 'meta.version')}`;
|
|
48
|
+
}
|
|
49
|
+
function getTitle(finding) {
|
|
50
|
+
const title = _.get(finding, 'vulnerability.title');
|
|
51
|
+
return `${_.get(finding, 'component.purl')}${title ? ' - ' + title : ''}`;
|
|
52
|
+
}
|
|
53
|
+
function getCweIds(cwes) {
|
|
54
|
+
if (!cwes) {
|
|
55
|
+
return [];
|
|
56
|
+
}
|
|
57
|
+
return cwes.map(({ cweId }) => cweId);
|
|
58
|
+
}
|
|
59
|
+
function getCweNames(cwes) {
|
|
60
|
+
if (!cwes) {
|
|
61
|
+
return [];
|
|
62
|
+
}
|
|
63
|
+
return cwes.map(({ name }) => name);
|
|
64
|
+
}
|
|
65
|
+
class DependencyTrackMapper extends base_converter_1.BaseConverter {
|
|
66
|
+
constructor(dtJson, withRaw = false) {
|
|
67
|
+
super(JSON.parse(dtJson));
|
|
68
|
+
this.mappings = {
|
|
69
|
+
platform: {
|
|
70
|
+
name: { path: 'meta.application' },
|
|
71
|
+
release: { transformer: getVersion },
|
|
72
|
+
target_id: { path: 'meta.baseUrl' }
|
|
73
|
+
},
|
|
74
|
+
version: package_json_1.version,
|
|
75
|
+
statistics: {},
|
|
76
|
+
profiles: [
|
|
77
|
+
{
|
|
78
|
+
name: { path: 'project.uuid' },
|
|
79
|
+
version: { path: 'project.version' },
|
|
80
|
+
title: { path: 'project.name' },
|
|
81
|
+
summary: { path: 'project.description' },
|
|
82
|
+
supports: [],
|
|
83
|
+
attributes: [],
|
|
84
|
+
groups: [],
|
|
85
|
+
status: 'loaded',
|
|
86
|
+
controls: [
|
|
87
|
+
{
|
|
88
|
+
path: 'findings',
|
|
89
|
+
key: 'id',
|
|
90
|
+
tags: {
|
|
91
|
+
cweIds: { path: 'vulnerability.cwes', transformer: getCweIds },
|
|
92
|
+
cweNames: { path: 'vulnerability.cwes', transformer: getCweNames },
|
|
93
|
+
nist: {
|
|
94
|
+
path: 'vulnerability.cwes',
|
|
95
|
+
transformer: (cwes) => nistTags(getCweIds(cwes))
|
|
96
|
+
},
|
|
97
|
+
cci: {
|
|
98
|
+
path: 'vulnerability.cwes',
|
|
99
|
+
transformer: (cwes) => (0, global_1.getCCIsForNISTTags)(nistTags(getCweIds(cwes)))
|
|
100
|
+
},
|
|
101
|
+
componentUuid: { path: 'component.uuid' },
|
|
102
|
+
componentName: { path: 'component.name' },
|
|
103
|
+
componentGroup: { path: 'component.group' },
|
|
104
|
+
componentVersion: { path: 'component.version' },
|
|
105
|
+
componentLatestVersion: { path: 'component.latestVersion' },
|
|
106
|
+
componentPurl: { path: 'component.purl' },
|
|
107
|
+
componentCpe: { path: 'component.cpe' },
|
|
108
|
+
componentProject: { path: 'component.project' },
|
|
109
|
+
vulnerabilityUuid: { path: 'vulnerability.uuid' },
|
|
110
|
+
vulnerabilitySource: { path: 'vulnerability.source' },
|
|
111
|
+
vulnerabilityVulnId: { path: 'vulnerability.vulnId' },
|
|
112
|
+
vulnerabilityTitle: { path: 'vulnerability.title' },
|
|
113
|
+
vulnerabilitySubtitle: { path: 'vulnerability.subtitle' },
|
|
114
|
+
vulnerabilityAliases: {
|
|
115
|
+
path: 'vulnerability.aliases',
|
|
116
|
+
transformer: (aliases) => JSON.stringify(aliases, null, 2)
|
|
117
|
+
},
|
|
118
|
+
vulnerabilityCvssV2BaseScore: {
|
|
119
|
+
path: 'vulnerability.cvssV2BaseScore'
|
|
120
|
+
},
|
|
121
|
+
vulnerabilityCvssV3BaseScore: {
|
|
122
|
+
path: 'vulnerability.cvssV3BaseScore'
|
|
123
|
+
},
|
|
124
|
+
vulnerabilityOwaspLikelihoodScore: {
|
|
125
|
+
path: 'vulnerability.owaspLikelihoodScore'
|
|
126
|
+
},
|
|
127
|
+
vulnerabilityOwaspTechnicalImpactScore: {
|
|
128
|
+
path: 'vulnerability.owaspTechnicalImpactScore'
|
|
129
|
+
},
|
|
130
|
+
vulnerabilityOwaspBusinessImpactScore: {
|
|
131
|
+
path: 'vulnerability.owaspBusinessImpactScore'
|
|
132
|
+
},
|
|
133
|
+
vulnerabilitySeverityRank: { path: 'vulnerability.severityRank' },
|
|
134
|
+
vulnerabilityEpssScore: { path: 'vulnerability.epssScore' },
|
|
135
|
+
vulnerabilityEpssPercentile: {
|
|
136
|
+
path: 'vulnerability.epssPercentile'
|
|
137
|
+
},
|
|
138
|
+
vulnerabilityCweId: { path: 'vulnerability.cweId' },
|
|
139
|
+
vulnerabilityCweName: { path: 'vulnerability.cweName' },
|
|
140
|
+
attributionAnalyzerIdentity: {
|
|
141
|
+
path: 'attribution.analyzerIdentity'
|
|
142
|
+
},
|
|
143
|
+
attributionAttributedOn: { path: 'attribution.attributedOn' },
|
|
144
|
+
attributionAlternateIdentifier: {
|
|
145
|
+
path: 'attribution.alternateIdentifier'
|
|
146
|
+
},
|
|
147
|
+
attributionReferenceUrl: { path: 'attribution.referenceUrl' },
|
|
148
|
+
analysisState: { path: 'analysis.state' },
|
|
149
|
+
analysisIsSuppressed: { path: 'analysis.isSuppressed' }
|
|
150
|
+
},
|
|
151
|
+
refs: [],
|
|
152
|
+
source_location: {},
|
|
153
|
+
title: { transformer: getTitle },
|
|
154
|
+
id: { path: 'matrix' },
|
|
155
|
+
desc: { path: 'vulnerability.description' },
|
|
156
|
+
descriptions: [
|
|
157
|
+
{
|
|
158
|
+
data: { path: 'vulnerability.description' },
|
|
159
|
+
label: 'check'
|
|
160
|
+
},
|
|
161
|
+
{
|
|
162
|
+
data: { path: 'vulnerability.recommendation' },
|
|
163
|
+
label: 'fix'
|
|
164
|
+
}
|
|
165
|
+
],
|
|
166
|
+
impact: {
|
|
167
|
+
path: 'vulnerability.severity',
|
|
168
|
+
transformer: (0, base_converter_1.impactMapping)(IMPACT_MAPPING)
|
|
169
|
+
},
|
|
170
|
+
code: {
|
|
171
|
+
transformer: (finding) => JSON.stringify(finding, null, 2)
|
|
172
|
+
},
|
|
173
|
+
results: [
|
|
174
|
+
{
|
|
175
|
+
status: inspecjs_1.ExecJSON.ControlResultStatus.Failed,
|
|
176
|
+
code_desc: { path: 'vulnerability.recommendation' },
|
|
177
|
+
start_time: { path: '$.meta.timestamp' }
|
|
178
|
+
}
|
|
179
|
+
]
|
|
180
|
+
}
|
|
181
|
+
],
|
|
182
|
+
sha256: ''
|
|
183
|
+
}
|
|
184
|
+
],
|
|
185
|
+
passthrough: {
|
|
186
|
+
transformer: (data) => {
|
|
187
|
+
return {
|
|
188
|
+
...(this.withRaw && { raw: data })
|
|
189
|
+
};
|
|
190
|
+
}
|
|
191
|
+
}
|
|
192
|
+
};
|
|
193
|
+
this.withRaw = withRaw;
|
|
194
|
+
}
|
|
195
|
+
}
|
|
196
|
+
exports.DependencyTrackMapper = DependencyTrackMapper;
|
|
197
|
+
//# sourceMappingURL=dependency-track-mapper.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"dependency-track-mapper.js","sourceRoot":"","sources":["../../src/dependency-track-mapper.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCAAkC;AAClC,0CAA4B;AAC5B,kDAAgE;AAChE,qDAK0B;AAC1B,8DAAyD;AACzD,2CAGwB;AAOxB,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC;IAClD,CAAC,UAAU,EAAE,GAAG,CAAC;IACjB,CAAC,MAAM,EAAE,GAAG,CAAC;IACb,CAAC,QAAQ,EAAE,GAAG,CAAC;IACf,CAAC,KAAK,EAAE,GAAG,CAAC;IACZ,CAAC,MAAM,EAAE,CAAC,CAAC;IACX,CAAC,YAAY,EAAE,GAAG,CAAC;CACpB,CAAC,CAAC;AACH,MAAM,gBAAgB,GAAG,IAAI,+BAAc,EAAE,CAAC;AAE9C,SAAS,QAAQ,CAAC,KAAe;IAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC5D,OAAO,gBAAgB,CAAC,UAAU,CAChC,IAAI,EACJ,+CAAsC,CACvC,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,IAAa;IAC/B,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,CAAC;AACpE,CAAC;AAED,SAAS,QAAQ,CAAC,OAAgB;IAChC,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;IACpD,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AAC5E,CAAC;AAED,SAAS,SAAS,CAAC,IAA6B;IAC9C,IAAI,CAAC,IAAI,EAAE;QACT,OAAO,EAAE,CAAC;KACX;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAC,KAAK,EAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,WAAW,CAAC,IAA6B;IAChD,IAAI,CAAC,IAAI,EAAE;QACT,OAAO,EAAE,CAAC;KACX;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAC,IAAI,EAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;AACpC,CAAC;AAED,MAAa,qBAAsB,SAAQ,8BAAa;IAyItD,YAAY,MAAc,EAAE,OAAO,GAAG,KAAK;QACzC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QAvI5B,aAAQ,GAGJ;YACF,QAAQ,EAAE;gBACR,IAAI,EAAE,EAAC,IAAI,EAAE,kBAAkB,EAAC;gBAChC,OAAO,EAAE,EAAC,WAAW,EAAE,UAAU,EAAC;gBAClC,SAAS,EAAE,EAAC,IAAI,EAAE,cAAc,EAAC;aAClC;YACD,OAAO,EAAE,sBAAoB;YAC7B,UAAU,EAAE,EAAE;YACd,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,EAAC,IAAI,EAAE,cAAc,EAAC;oBAC5B,OAAO,EAAE,EAAC,IAAI,EAAE,iBAAiB,EAAC;oBAClC,KAAK,EAAE,EAAC,IAAI,EAAE,cAAc,EAAC;oBAC7B,OAAO,EAAE,EAAC,IAAI,EAAE,qBAAqB,EAAC;oBACtC,QAAQ,EAAE,EAAE;oBACZ,UAAU,EAAE,EAAE;oBACd,MAAM,EAAE,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE;wBACR;4BACE,IAAI,EAAE,UAAU;4BAChB,GAAG,EAAE,IAAI;4BACT,IAAI,EAAE;gCAEJ,MAAM,EAAE,EAAC,IAAI,EAAE,oBAAoB,EAAE,WAAW,EAAE,SAAS,EAAC;gCAC5D,QAAQ,EAAE,EAAC,IAAI,EAAE,oBAAoB,EAAE,WAAW,EAAE,WAAW,EAAC;gCAChE,IAAI,EAAE;oCACJ,IAAI,EAAE,oBAAoB;oCAC1B,WAAW,EAAE,CAAC,IAAiB,EAAE,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;iCAC9D;gCACD,GAAG,EAAE;oCACH,IAAI,EAAE,oBAAoB;oCAC1B,WAAW,EAAE,CAAC,IAAiB,EAAE,EAAE,CACjC,IAAA,2BAAkB,EAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;iCAChD;gCACD,aAAa,EAAE,EAAC,IAAI,EAAE,gBAAgB,EAAC;gCACvC,aAAa,EAAE,EAAC,IAAI,EAAE,gBAAgB,EAAC;gCACvC,cAAc,EAAE,EAAC,IAAI,EAAE,iBAAiB,EAAC;gCACzC,gBAAgB,EAAE,EAAC,IAAI,EAAE,mBAAmB,EAAC;gCAC7C,sBAAsB,EAAE,EAAC,IAAI,EAAE,yBAAyB,EAAC;gCACzD,aAAa,EAAE,EAAC,IAAI,EAAE,gBAAgB,EAAC;gCACvC,YAAY,EAAE,EAAC,IAAI,EAAE,eAAe,EAAC;gCACrC,gBAAgB,EAAE,EAAC,IAAI,EAAE,mBAAmB,EAAC;gCAC7C,iBAAiB,EAAE,EAAC,IAAI,EAAE,oBAAoB,EAAC;gCAC/C,mBAAmB,EAAE,EAAC,IAAI,EAAE,sBAAsB,EAAC;gCACnD,mBAAmB,EAAE,EAAC,IAAI,EAAE,sBAAsB,EAAC;gCACnD,kBAAkB,EAAE,EAAC,IAAI,EAAE,qBAAqB,EAAC;gCACjD,qBAAqB,EAAE,EAAC,IAAI,EAAE,wBAAwB,EAAC;gCACvD,oBAAoB,EAAE;oCACpB,IAAI,EAAE,uBAAuB;oCAC7B,WAAW,EAAE,CAAC,OAAsC,EAAU,EAAE,CAC9D,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;iCACnC;gCACD,4BAA4B,EAAE;oCAC5B,IAAI,EAAE,+BAA+B;iCACtC;gCACD,4BAA4B,EAAE;oCAC5B,IAAI,EAAE,+BAA+B;iCACtC;gCACD,iCAAiC,EAAE;oCACjC,IAAI,EAAE,oCAAoC;iCAC3C;gCACD,sCAAsC,EAAE;oCACtC,IAAI,EAAE,yCAAyC;iCAChD;gCACD,qCAAqC,EAAE;oCACrC,IAAI,EAAE,wCAAwC;iCAC/C;gCACD,yBAAyB,EAAE,EAAC,IAAI,EAAE,4BAA4B,EAAC;gCAC/D,sBAAsB,EAAE,EAAC,IAAI,EAAE,yBAAyB,EAAC;gCACzD,2BAA2B,EAAE;oCAC3B,IAAI,EAAE,8BAA8B;iCACrC;gCAED,kBAAkB,EAAE,EAAC,IAAI,EAAE,qBAAqB,EAAC;gCACjD,oBAAoB,EAAE,EAAC,IAAI,EAAE,uBAAuB,EAAC;gCACrD,2BAA2B,EAAE;oCAC3B,IAAI,EAAE,8BAA8B;iCACrC;gCACD,uBAAuB,EAAE,EAAC,IAAI,EAAE,0BAA0B,EAAC;gCAC3D,8BAA8B,EAAE;oCAC9B,IAAI,EAAE,iCAAiC;iCACxC;gCACD,uBAAuB,EAAE,EAAC,IAAI,EAAE,0BAA0B,EAAC;gCAC3D,aAAa,EAAE,EAAC,IAAI,EAAE,gBAAgB,EAAC;gCACvC,oBAAoB,EAAE,EAAC,IAAI,EAAE,uBAAuB,EAAC;6BACtD;4BACD,IAAI,EAAE,EAAE;4BACR,eAAe,EAAE,EAAE;4BACnB,KAAK,EAAE,EAAC,WAAW,EAAE,QAAQ,EAAC;4BAC9B,EAAE,EAAE,EAAC,IAAI,EAAE,QAAQ,EAAC;4BACpB,IAAI,EAAE,EAAC,IAAI,EAAE,2BAA2B,EAAC;4BACzC,YAAY,EAAE;gCACZ;oCACE,IAAI,EAAE,EAAC,IAAI,EAAE,2BAA2B,EAAC;oCACzC,KAAK,EAAE,OAAO;iCACf;gCACD;oCACE,IAAI,EAAE,EAAC,IAAI,EAAE,8BAA8B,EAAC;oCAC5C,KAAK,EAAE,KAAK;iCACb;6BACF;4BACD,MAAM,EAAE;gCACN,IAAI,EAAE,wBAAwB;gCAC9B,WAAW,EAAE,IAAA,8BAAa,EAAC,cAAc,CAAC;6BAC3C;4BACD,IAAI,EAAE;gCACJ,WAAW,EAAE,CAAC,OAAgC,EAAU,EAAE,CACxD,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;6BACnC;4BACD,OAAO,EAAE;gCACP;oCACE,MAAM,EAAE,mBAAQ,CAAC,mBAAmB,CAAC,MAAM;oCAE3C,SAAS,EAAE,EAAC,IAAI,EAAE,8BAA8B,EAAC;oCACjD,UAAU,EAAE,EAAC,IAAI,EAAE,kBAAkB,EAAC;iCACvC;6BACF;yBACF;qBACF;oBACD,MAAM,EAAE,EAAE;iBACX;aACF;YACD,WAAW,EAAE;gBACX,WAAW,EAAE,CAAC,IAA6B,EAA2B,EAAE;oBACtE,OAAO;wBACL,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAC,GAAG,EAAE,IAAI,EAAC,CAAC;qBACjC,CAAC;gBACJ,CAAC;aACF;SACF,CAAC;QAGA,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;CACF;AA7ID,sDA6IC"}
|
|
@@ -31,6 +31,7 @@ var INPUT_TYPES;
|
|
|
31
31
|
INPUT_TYPES["BURP"] = "burp";
|
|
32
32
|
INPUT_TYPES["CHECKLIST"] = "checklist";
|
|
33
33
|
INPUT_TYPES["CONVEYOR"] = "conveyor";
|
|
34
|
+
INPUT_TYPES["DEPENDENCY_TRACK"] = "dependencyTrack";
|
|
34
35
|
INPUT_TYPES["FORTIFY"] = "fortify";
|
|
35
36
|
INPUT_TYPES["GOSEC"] = "gosec";
|
|
36
37
|
INPUT_TYPES["GRYPE"] = "grype";
|
|
@@ -58,6 +59,7 @@ const fileTypeFingerprints = {
|
|
|
58
59
|
[INPUT_TYPES.ASFF]: ['Findings', 'AwsAccountId', 'ProductArn'],
|
|
59
60
|
[INPUT_TYPES.CONVEYOR]: ['api_error_message', 'api_response'],
|
|
60
61
|
[INPUT_TYPES.CYCLONEDX_SBOM]: ['bomFormat', 'metadata', 'specVersion'],
|
|
62
|
+
[INPUT_TYPES.DEPENDENCY_TRACK]: ['version', 'meta', 'project', 'findings'],
|
|
61
63
|
[INPUT_TYPES.FORTIFY]: ['FVDL', 'FVDL.EngineData.EngineVersion', 'FVDL.UUID'],
|
|
62
64
|
[INPUT_TYPES.GOSEC]: ['Golang errors', 'Issues'],
|
|
63
65
|
[INPUT_TYPES.GRYPE]: [
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"fingerprinting.js","sourceRoot":"","sources":["../../../src/utils/fingerprinting.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,0CAA4B;AAE5B,IAAY,
|
|
1
|
+
{"version":3,"file":"fingerprinting.js","sourceRoot":"","sources":["../../../src/utils/fingerprinting.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,0CAA4B;AAE5B,IAAY,WA4BX;AA5BD,WAAY,WAAW;IACrB,4BAAa,CAAA;IACb,4BAAa,CAAA;IACb,sCAAuB,CAAA;IACvB,oCAAqB,CAAA;IACrB,mDAAoC,CAAA;IACpC,kCAAmB,CAAA;IACnB,8BAAe,CAAA;IACf,8BAAe,CAAA;IACf,wCAAyB,CAAA;IACzB,8BAAe,CAAA;IACf,mDAAoC,CAAA;IACpC,8BAAe,CAAA;IACf,8BAAe,CAAA;IACf,gDAAiC,CAAA;IACjC,4BAAa,CAAA;IACb,wCAAyB,CAAA;IACzB,sCAAuB,CAAA;IACvB,0BAAW,CAAA;IACX,gCAAiB,CAAA;IACjB,sCAAuB,CAAA;IACvB,8BAAe,CAAA;IACf,wCAAyB,CAAA;IACzB,wCAAyB,CAAA;IACzB,uCAAwB,CAAA;IACxB,gCAAiB,CAAA;IACjB,oCAAqB,CAAA;IACrB,6BAAc,CAAA;AAChB,CAAC,EA5BW,WAAW,GAAX,mBAAW,KAAX,mBAAW,QA4BtB;AAGD,MAAM,oBAAoB,GAAkC;IAC1D,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,EAAE,cAAc,EAAE,YAAY,CAAC;IAC9D,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC,mBAAmB,EAAE,cAAc,CAAC;IAC7D,CAAC,WAAW,CAAC,cAAc,CAAC,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,aAAa,CAAC;IACtE,CAAC,WAAW,CAAC,gBAAgB,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC;IAC1E,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,+BAA+B,EAAE,WAAW,CAAC;IAC7E,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,eAAe,EAAE,QAAQ,CAAC;IAChD,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE;QACnB,uBAAuB;QACvB,gCAAgC;QAChC,sBAAsB;QACtB,kBAAkB;QAClB,QAAQ;QACR,YAAY;KACb;IACD,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE;QACxB,aAAa;QACb,SAAS;QACT,QAAQ;QACR,cAAc;KACf;IACD,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,aAAa,EAAE,MAAM,CAAC;IAC5C,CAAC,WAAW,CAAC,cAAc,CAAC,EAAE,CAAC,aAAa,EAAE,UAAU,CAAC;IACzD,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE;QACvB,gBAAgB;QAChB,0BAA0B;QAC1B,sBAAsB;QACtB,gBAAgB;QAChB,mBAAmB;QACnB,uBAAuB;QACvB,wBAAwB;KACzB;IACD,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,iBAAiB,CAAC;IACxE,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC;IACnD,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE;QAClB,aAAa;QACb,QAAQ;QACR,SAAS;QACT,iBAAiB;QACjB,gCAAgC;KACjC;IACD,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE;QACxB,YAAY;QACZ,cAAc;QACd,cAAc;QACd,aAAa;KACd;IACD,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE;QACvB,mCAAmC;QACnC,sCAAsC;QACtC,wBAAwB;QACxB,mBAAmB;QACnB,UAAU;QACV,wBAAwB;QACxB,2BAA2B;KAC5B;IACD,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,YAAY,EAAE,UAAU,EAAE,MAAM,CAAC;IAErD,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE;IACtB,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,EAAE;IAC3B,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,EAAE;IAC5B,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,EAAE;IACxB,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,EAAE;IAC5B,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,EAAE;IACxB,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,EAAE;IAC5B,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,EAAE;IAC1B,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,EAAE;IACvB,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,EAAE;CAC5B,CAAC;AAEF,SAAgB,WAAW,CAAC,YAG3B;IACC,IAAI;QACF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAE1D,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,MAAM,CAC/D,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACP,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM;gBACxD,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM;gBACnD,CAAC,CAAC,EAAC,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM,EAAC;gBACpE,CAAC,CAAC;oBACE,GAAG,CAAC;oBACJ,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM;iBAC3D,CAAC;QACR,CAAC,CAC4C,CAAC;QAChD,MAAM,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;QAChC,IAAI,aAAa,CAAC,KAAK,KAAK,CAAC,EAAE;YAC7B,OAAO,MAAM,CAAC;SACf;KACF;IAAC,MAAM;QACN,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAExD,IAAI,YAAY,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE;YAC3D,OAAO,WAAW,CAAC,MAAM,CAAC;SAC3B;aAAM,IACL,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC;YAC/C,YAAY,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAC3D;YACA,OAAO,WAAW,CAAC,KAAK,CAAC;SAC1B;aAAM,IACL,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,4BAA4B,CAAC;YACrD,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,yBAAyB,CAAC,EAClD;YACA,OAAO,WAAW,CAAC,UAAU,CAAC;SAC/B;aAAM,IAAI,YAAY,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE;YAChE,OAAO,WAAW,CAAC,OAAO,CAAC;SAC5B;aAAM,IACL,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;YAClD,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,EACnD;YACA,OAAO,WAAW,CAAC,IAAI,CAAC;SACzB;aAAM,IAAI,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC,EAAE;YACjE,OAAO,WAAW,CAAC,IAAI,CAAC;SACzB;aAAM,IAAI,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC,EAAE;YACjE,OAAO,WAAW,CAAC,UAAU,CAAC;SAC/B;aAAM,IACL,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC1C,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YAC5C,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YAC5C,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,EAC1C;YACA,OAAO,WAAW,CAAC,UAAU,CAAC;SAC/B;aAAM,IACL,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;YAClC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAChC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAChC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC;YACvC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;YAC9B,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,EAClC;YACA,OAAO,WAAW,CAAC,MAAM,CAAC;SAC3B;aAAM,IACL,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YAC5C,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,EAClD;YACA,OAAO,WAAW,CAAC,QAAQ,CAAC;SAC7B;aAAM,IACL,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;YAC/C,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAC3C,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAC/C;YACA,OAAO,WAAW,CAAC,SAAS,CAAC;SAC9B;KACF;IACD,OAAO,WAAW,CAAC,SAAS,CAAC;AAC/B,CAAC;AA/ED,kCA+EC"}
|