@mitre/hdf-converters 2.12.2 → 2.13.0

package/README.md

@@ -12,30 +12,31 @@ OHDF Converters supplies several methods to convert various types of security to
 4.  [**burpsuite-mapper**] - BurpSuite Pro XML file
 5.  [**caat-mapper**] - Compliance Assessment and Audit Tracking (CAAT) file
 6.  [**checklist-mapper**] - Checlist Mapper format
-7.  [**conveyor-mapper**] - Conveyor JSON file
-8.  [**cyclonedx-sbom-mapper**] - CycloneDX SBOM JSON file
-9.  [**dbprotect-mapper**] - DBProtect report in "Check Results Details" XML format
-10. [**dependency-track-mapper**] - OWASP Dependency-Track Finding Packaging Format (FPF)
-11. [**fortify-mapper**] - Fortify results FVDL file
-12. [**gosec-mapper**] - gosec results JSON file
-13. [**ionchannel-mapper**] - SBOM data from Ion Channel
-14. [**jfrog-xray-mapper**] - JFrog Xray results JSON file
-15. [**msft-secure-mapper**] - Microsoft Secure Score results file
-16. [**nessus-mapper**] - Nessus XML results file
-17. [**netsparker-mapper**] - Netsparker XML results file
-18. [**neuvector-mapper**] - NeuVector JSON results file
-19. [**nikto-mapper**] - Nikto results JSON file
-20. [**prisma-mapper**] - Prisma Cloud Scan Report CSV file
-21. [**sarif-mapper**] - SARIF JSON file
-22. [**scoutsuite-mapper**] - ScoutSuite results from a Javascript object
-23. [**snyk-mapper**] - Snyk results JSON file
-24. [**sonarqube-mapper**] - SonarQube vulnerabilities for the specified project name and optional branch or pull/merge request ID name from an API
-25. [**splunk-mapper**] - Splunk instance
-26. [**trufflehog-mapper**] - Trufflehog results json file
-27. [**twistlock-mapper**] - Twistlock CLI output file
-28. [**veracode-mapper**] - Veracode Scan Results XML file
-29. [**xccdf-results-mapper**] - SCAP client XCCDF-Results XML report
-30. [**zap-mapper**] - OWASP ZAP results JSON
+7.  [**checkov-mapper**] - Convert checkov json output files
+8.  [**conveyor-mapper**] - Conveyor JSON file
+9.  [**cyclonedx-sbom-mapper**] - CycloneDX SBOM JSON file
+10. [**dbprotect-mapper**] - DBProtect report in "Check Results Details" XML format
+11. [**dependency-track-mapper**] - OWASP Dependency-Track Finding Packaging Format (FPF)
+12. [**fortify-mapper**] - Fortify results FVDL file
+13. [**gosec-mapper**] - gosec results JSON file
+14. [**ionchannel-mapper**] - SBOM data from Ion Channel
+15. [**jfrog-xray-mapper**] - JFrog Xray results JSON file
+16. [**msft-secure-mapper**] - Microsoft Secure Score results file
+17. [**nessus-mapper**] - Nessus XML results file
+18. [**netsparker-mapper**] - Netsparker XML results file
+19. [**neuvector-mapper**] - NeuVector JSON results file
+20. [**nikto-mapper**] - Nikto results JSON file
+21. [**prisma-mapper**] - Prisma Cloud Scan Report CSV file
+22. [**sarif-mapper**] - SARIF JSON file
+23. [**scoutsuite-mapper**] - ScoutSuite results from a Javascript object
+24. [**snyk-mapper**] - Snyk results JSON file
+25. [**sonarqube-mapper**] - SonarQube vulnerabilities for the specified project name and optional branch or pull/merge request ID name from an API
+26. [**splunk-mapper**] - Splunk instance
+27. [**trufflehog-mapper**] - Trufflehog results json file
+28. [**twistlock-mapper**] - Twistlock CLI output file
+29. [**veracode-mapper**] - Veracode Scan Results XML file
+30. [**xccdf-results-mapper**] - SCAP client XCCDF-Results XML report
+31. [**zap-mapper**] - OWASP ZAP results JSON
 
 ### NOTICE
 

package/lib/data/converters/csv2json.d.ts

@@ -1 +1,2 @@
 export {};
+//# sourceMappingURL=csv2json.d.ts.map

package/lib/data/converters/csv2json.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"csv2json.d.ts","sourceRoot":"","sources":["../../../data/converters/csv2json.ts"],"names":[],"mappings":""}

package/lib/data/converters/csv2json.js

@@ -3,9 +3,9 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-const csv2json_1 = __importDefault(require("csv2json"));
 const fs_1 = require("fs");
 const path_1 = __importDefault(require("path"));
+const csv2json_1 = __importDefault(require("csv2json"));
 const files = [
     'aws-config-mapping.csv',
     'cwe-nist-mapping.csv',

package/lib/data/converters/csv2json.js.map

@@ -1 +1 @@
-{"version":3,"file":"csv2json.js","sourceRoot":"","sources":["../../../data/converters/csv2json.ts"],"names":[],"mappings":";;;;;AAAA,wDAAgC;AAChC,2BAAuD;AACvD,gDAAwB;AAExB,MAAM,KAAK,GAAG;IACZ,wBAAwB;IACxB,sBAAsB;IACtB,iCAAiC;IACjC,wBAAwB;IACxB,wBAAwB;IACxB,6BAA6B;CAC9B,CAAC;AAEF,IAAI;IACF,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpC,IAAI;QACF,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACrC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;YACrB,IAAA,qBAAgB,EAAC,cAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;iBAC3C,IAAI,CAAC,IAAA,kBAAQ,GAAE,CAAC;iBAChB,IAAI,CACH,IAAA,sBAAiB,EACf,cAAI,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CACvD,CACF,CAAC;QACN,CAAC,CAAC,CAAC;KACJ;IAAC,MAAM;QACN,OAAO,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAC;QAChE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;KACjB;CACF;AAAC,MAAM;IACN,OAAO,CAAC,KAAK,CACX,oDAAoD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACxE,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;CACjB"}
+{"version":3,"file":"csv2json.js","sourceRoot":"","sources":["../../../data/converters/csv2json.ts"],"names":[],"mappings":";;;;;AAAA,2BAAuD;AACvD,gDAAwB;AACxB,wDAAgC;AAEhC,MAAM,KAAK,GAAG;IACZ,wBAAwB;IACxB,sBAAsB;IACtB,iCAAiC;IACjC,wBAAwB;IACxB,wBAAwB;IACxB,6BAA6B;CAC9B,CAAC;AAEF,IAAI,CAAC;IACH,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACrC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;YACrB,IAAA,qBAAgB,EAAC,cAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;iBAC3C,IAAI,CAAC,IAAA,kBAAQ,GAAE,CAAC;iBAChB,IAAI,CACH,IAAA,sBAAiB,EACf,cAAI,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CACvD,CACF,CAAC;QACN,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAC;QAChE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAAC,MAAM,CAAC;IACP,OAAO,CAAC,KAAK,CACX,oDAAoD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACxE,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC","sourcesContent":["import {createReadStream, createWriteStream} from 'fs';\nimport path from 'path';\nimport csv2json from 'csv2json';\n\nconst files = [\n  'aws-config-mapping.csv',\n  'cwe-nist-mapping.csv',\n  'nessus-plugins-nist-mapping.csv',\n  'nikto-nist-mapping.csv',\n  'owasp-nist-mapping.csv',\n  'scoutsuite-nist-mapping.csv'\n];\n\ntry {\n  const pathToFiles = process.argv[2];\n  try {\n    const pathToOutput = process.argv[3];\n    files.forEach((file) => {\n      createReadStream(path.join(pathToFiles, file))\n        .pipe(csv2json())\n        .pipe(\n          createWriteStream(\n            path.join(pathToOutput, file.replace('.csv', '.json'))\n          )\n        );\n    });\n  } catch {\n    console.error(`You must provide the path to an output folder.`);\n    process.exit(1);\n  }\n} catch {\n  console.error(\n    `You must provide the path to a folder containing ${files.join(', ')}.`\n  );\n  process.exit(1);\n}\n"]}

package/lib/data/converters/xml2json.d.ts

@@ -12,3 +12,4 @@ export interface ICCIList {
         }[];
     };
 }
+//# sourceMappingURL=xml2json.d.ts.map

package/lib/data/converters/xml2json.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"xml2json.d.ts","sourceRoot":"","sources":["../../../data/converters/xml2json.ts"],"names":[],"mappings":"AASA,MAAM,WAAW,QAAQ;IACvB,QAAQ,EAAE;QACR,SAAS,EAAE;YACT,QAAQ,EAAE;gBACR,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBAC1B,UAAU,EAAE;oBACV,SAAS,EAAE;wBACT,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;qBAC3B,EAAE,CAAC;iBACL,EAAE,CAAC;aACL,EAAE,CAAC;SACL,EAAE,CAAC;KACL,CAAC;CACH"}

package/lib/data/converters/xml2json.js

@@ -1,33 +1,10 @@
 "use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
-};
 var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 const fs_1 = __importDefault(require("fs"));
-const _ = __importStar(require("lodash"));
+const lodash_1 = __importDefault(require("lodash"));
 const xml2js_1 = __importDefault(require("xml2js"));
 const parser = new xml2js_1.default.Parser();
 const pathToInfile = process.argv[2];
@@ -41,14 +18,18 @@ else {
             console.error(`Failed to read ${pathToInfile}: ${readFileError}`);
         }
         else {
+            // Parse XML to JS Object
             parser.parseString(data, (parseFileError, converted) => {
                 if (parseFileError) {
                     console.error(`Failed to parse ${pathToInfile}: ${parseFileError}`);
                 }
                 else {
+                    // Stores our CCI->NIST mapping
                     const result = {};
+                    // For all cci items
                     converted.cci_list.cci_items[0].cci_item.forEach((cciItem) => {
-                        const newestReference = _.maxBy(cciItem.references[0].reference, (item) => _.get(item, '$.version'));
+                        // Get the latest reference
+                        const newestReference = lodash_1.default.maxBy(cciItem.references[0].reference, (item) => lodash_1.default.get(item, '$.version'));
                         if (newestReference) {
                             result[cciItem.$.id] = newestReference.$.index;
                         }

package/lib/data/converters/xml2json.js.map

@@ -1 +1 @@
-{"version":3,"file":"xml2json.js","sourceRoot":"","sources":["../../../data/converters/xml2json.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,4CAAoB;AACpB,0CAA4B;AAC5B,oDAA4B;AAE5B,MAAM,MAAM,GAAG,IAAI,gBAAM,CAAC,MAAM,EAAE,CAAC;AACnC,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACrC,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAkBtC,IAAI,CAAC,YAAY,IAAI,CAAC,aAAa,EAAE;IACnC,OAAO,CAAC,KAAK,CAAC,4DAA4D,CAAC,CAAC;CAC7E;KAAM;IACL,YAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,UAAU,aAAa,EAAE,IAAI;QACrD,IAAI,aAAa,EAAE;YACjB,OAAO,CAAC,KAAK,CAAC,kBAAkB,YAAY,KAAK,aAAa,EAAE,CAAC,CAAC;SACnE;aAAM;YAEL,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,cAAmB,EAAE,SAAmB,EAAE,EAAE;gBACpE,IAAI,cAAc,EAAE;oBAClB,OAAO,CAAC,KAAK,CAAC,mBAAmB,YAAY,KAAK,cAAc,EAAE,CAAC,CAAC;iBACrE;qBAAM;oBAEL,MAAM,MAAM,GAA2B,EAAE,CAAC;oBAE1C,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;wBAE3D,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAC7B,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,EAC/B,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,CAAC,CACnC,CAAC;wBACF,IAAI,eAAe,EAAE;4BACnB,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC;yBAChD;6BAAM;4BACL,OAAO,CAAC,KAAK,CAAC,8BAA8B,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;yBAC7D;oBACH,CAAC,CAAC,CAAC;oBACH,YAAE,CAAC,aAAa,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;iBACzD;YACH,CAAC,CAAC,CAAC;SACJ;IACH,CAAC,CAAC,CAAC;CACJ"}
+{"version":3,"file":"xml2json.js","sourceRoot":"","sources":["../../../data/converters/xml2json.ts"],"names":[],"mappings":";;;;;AAAA,4CAAoB;AACpB,oDAAuB;AACvB,oDAA4B;AAE5B,MAAM,MAAM,GAAG,IAAI,gBAAM,CAAC,MAAM,EAAE,CAAC;AACnC,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACrC,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAkBtC,IAAI,CAAC,YAAY,IAAI,CAAC,aAAa,EAAE,CAAC;IACpC,OAAO,CAAC,KAAK,CAAC,4DAA4D,CAAC,CAAC;AAC9E,CAAC;KAAM,CAAC;IACN,YAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,UAAU,aAAa,EAAE,IAAI;QACrD,IAAI,aAAa,EAAE,CAAC;YAClB,OAAO,CAAC,KAAK,CAAC,kBAAkB,YAAY,KAAK,aAAa,EAAE,CAAC,CAAC;QACpE,CAAC;aAAM,CAAC;YACN,yBAAyB;YACzB,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,cAAmB,EAAE,SAAmB,EAAE,EAAE;gBACpE,IAAI,cAAc,EAAE,CAAC;oBACnB,OAAO,CAAC,KAAK,CAAC,mBAAmB,YAAY,KAAK,cAAc,EAAE,CAAC,CAAC;gBACtE,CAAC;qBAAM,CAAC;oBACN,+BAA+B;oBAC/B,MAAM,MAAM,GAA2B,EAAE,CAAC;oBAC1C,oBAAoB;oBACpB,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;wBAC3D,2BAA2B;wBAC3B,MAAM,eAAe,GAAG,gBAAC,CAAC,KAAK,CAC7B,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,EAC/B,CAAC,IAAI,EAAE,EAAE,CAAC,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,CAAC,CACnC,CAAC;wBACF,IAAI,eAAe,EAAE,CAAC;4BACpB,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC;wBACjD,CAAC;6BAAM,CAAC;4BACN,OAAO,CAAC,KAAK,CAAC,8BAA8B,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;wBAC9D,CAAC;oBACH,CAAC,CAAC,CAAC;oBACH,YAAE,CAAC,aAAa,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;gBAC1D,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import fs from 'fs';\nimport _ from 'lodash';\nimport xml2js from 'xml2js';\n\nconst parser = new xml2js.Parser();\nconst pathToInfile = process.argv[2];\nconst pathToOutfile = process.argv[3];\n\n// XML Structure after conversion\nexport interface ICCIList {\n  cci_list: {\n    cci_items: {\n      cci_item: {\n        $: Record<string, string>;\n        references: {\n          reference: {\n            $: Record<string, string>;\n          }[];\n        }[];\n      }[];\n    }[];\n  };\n}\n\nif (!pathToInfile || !pathToOutfile) {\n  console.error(`You must provide the path to both an input and ouput file.`);\n} else {\n  fs.readFile(pathToInfile, function (readFileError, data) {\n    if (readFileError) {\n      console.error(`Failed to read ${pathToInfile}: ${readFileError}`);\n    } else {\n      // Parse XML to JS Object\n      parser.parseString(data, (parseFileError: any, converted: ICCIList) => {\n        if (parseFileError) {\n          console.error(`Failed to parse ${pathToInfile}: ${parseFileError}`);\n        } else {\n          // Stores our CCI->NIST mapping\n          const result: Record<string, string> = {};\n          // For all cci items\n          converted.cci_list.cci_items[0].cci_item.forEach((cciItem) => {\n            // Get the latest reference\n            const newestReference = _.maxBy(\n              cciItem.references[0].reference,\n              (item) => _.get(item, '$.version')\n            );\n            if (newestReference) {\n              result[cciItem.$.id] = newestReference.$.index;\n            } else {\n              console.error(`No NIST Controls found for ${cciItem.$.id}`);\n            }\n          });\n          fs.writeFileSync(pathToOutfile, JSON.stringify(result));\n        }\n      });\n    }\n  });\n}\n"]}

package/lib/data/reverse-html-mapper/convert-to-embedded-strings.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=convert-to-embedded-strings.d.ts.map

package/lib/data/reverse-html-mapper/convert-to-embedded-strings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"convert-to-embedded-strings.d.ts","sourceRoot":"","sources":["../../../data/reverse-html-mapper/convert-to-embedded-strings.ts"],"names":[],"mappings":""}

package/lib/data/reverse-html-mapper/convert-to-embedded-strings.js

@@ -0,0 +1,13 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const fs_1 = require("fs");
+const html = (0, fs_1.readFileSync)('data/reverse-html-mapper/template.html', 'utf8');
+const js = (0, fs_1.readFileSync)('data/reverse-html-mapper/tw-elements.min.js', 'utf8');
+const css = (0, fs_1.readFileSync)('data/reverse-html-mapper/style.css', 'utf8');
+const out = `/* AUTO-GENERATED.  DO NOT EDIT. */
+export const html = ${JSON.stringify(html)} as const;
+export const js = ${JSON.stringify(js)} as const;
+export const css = ${JSON.stringify(css)} as const;`;
+(0, fs_1.writeFileSync)('src/converters-from-hdf/html/embedded-assets.ts', out, 'utf8');
+console.log('Successfully generated the embedded assets file');
+//# sourceMappingURL=convert-to-embedded-strings.js.map

package/lib/data/reverse-html-mapper/convert-to-embedded-strings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"convert-to-embedded-strings.js","sourceRoot":"","sources":["../../../data/reverse-html-mapper/convert-to-embedded-strings.ts"],"names":[],"mappings":";;AAAA,2BAAiD;AAEjD,MAAM,IAAI,GAAG,IAAA,iBAAY,EAAC,wCAAwC,EAAE,MAAM,CAAC,CAAC;AAC5E,MAAM,EAAE,GAAG,IAAA,iBAAY,EAAC,6CAA6C,EAAE,MAAM,CAAC,CAAC;AAC/E,MAAM,GAAG,GAAG,IAAA,iBAAY,EAAC,oCAAoC,EAAE,MAAM,CAAC,CAAC;AAEvE,MAAM,GAAG,GAAG;sBACU,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;oBACtB,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;qBACjB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC;AAErD,IAAA,kBAAa,EAAC,iDAAiD,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;AAE9E,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC","sourcesContent":["import { readFileSync, writeFileSync } from 'fs';\n\nconst html = readFileSync('data/reverse-html-mapper/template.html', 'utf8');\nconst js = readFileSync('data/reverse-html-mapper/tw-elements.min.js', 'utf8');\nconst css = readFileSync('data/reverse-html-mapper/style.css', 'utf8');\n\nconst out = `/* AUTO-GENERATED.  DO NOT EDIT. */\nexport const html = ${JSON.stringify(html)} as const;\nexport const js = ${JSON.stringify(js)} as const;\nexport const css = ${JSON.stringify(css)} as const;`;\n\nwriteFileSync('src/converters-from-hdf/html/embedded-assets.ts', out, 'utf8');\n\nconsole.log('Successfully generated the embedded assets file');\n"]}

package/lib/index.d.ts

@@ -1,6 +1,7 @@
 export { ASFFResults } from './src/asff-mapper/asff-mapper';
 export * as AwsConfigMappingData from './src/mappings/AwsConfigMappingData';
 export * as CciNistMappingData from './src/mappings/CciNistMappingData';
+export * as CheckovToCciAndNistMappingData from './src/mappings/CheckovToCciAndNistMappingData';
 export * as CweNistMappingData from './src/mappings/CweNistMappingData';
 export * as NessusPluginNistMappingData from './src/mappings/NessusPluginNistMappingData';
 export * as NiktoNistMappingData from './src/mappings/NiktoNistMappingData';
@@ -10,6 +11,7 @@ export * as ScoutsuiteNistMappingData from './src/mappings/ScoutsuiteNistMapping
 export * from './src/anchore-grype-mapper';
 export * from './src/aws-config-mapper';
 export * from './src/burpsuite-mapper';
+export * from './src/checkov-mapper';
 export * from './src/ckl-mapper/checklist-jsonix-converter';
 export * from './src/ckl-mapper/checklist-mapper';
 export * from './src/ckl-mapper/checklist-metadata-utils';
@@ -43,6 +45,10 @@ export * from './src/twistlock-mapper';
 export * from './src/utils/attestations';
 export * from './src/utils/compliance';
 export * from './src/utils/fingerprinting';
+export * from './src/utils/result';
+export * from './src/utils/splunk-tools';
 export * from './src/veracode-mapper';
 export * from './src/xccdf-results-mapper';
 export * from './src/zap-mapper';
+export * from './types/splunk-config-types';
+//# sourceMappingURL=index.d.ts.map

package/lib/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,WAAW,EAAC,MAAM,+BAA+B,CAAC;AAC1D,OAAO,KAAK,oBAAoB,MAAM,qCAAqC,CAAC;AAC5E,OAAO,KAAK,kBAAkB,MAAM,mCAAmC,CAAC;AACxE,OAAO,KAAK,8BAA8B,MAAM,+CAA+C,CAAC;AAChG,OAAO,KAAK,kBAAkB,MAAM,mCAAmC,CAAC;AACxE,OAAO,KAAK,2BAA2B,MAAM,4CAA4C,CAAC;AAC1F,OAAO,KAAK,oBAAoB,MAAM,qCAAqC,CAAC;AAC5E,OAAO,KAAK,kBAAkB,MAAM,mCAAmC,CAAC;AACxE,OAAO,KAAK,oBAAoB,MAAM,qCAAqC,CAAC;AAC5E,OAAO,KAAK,yBAAyB,MAAM,0CAA0C,CAAC;AACtF,cAAc,4BAA4B,CAAC;AAC3C,cAAc,yBAAyB,CAAC;AACxC,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,6CAA6C,CAAC;AAC5D,cAAc,mCAAmC,CAAC;AAClD,cAAc,2CAA2C,CAAC;AAC1D,cAAc,kCAAkC,CAAC;AACjD,cAAc,oDAAoD,CAAC;AACnE,cAAc,oDAAoD,CAAC;AACnE,cAAc,oDAAoD,CAAC;AACnE,cAAc,wDAAwD,CAAC;AACvE,cAAc,sDAAsD,CAAC;AACrE,cAAc,uBAAuB,CAAC;AACtC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,wBAAwB,CAAC;AACvC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC;AACnC,cAAc,yBAAyB,CAAC;AACxC,cAAc,yBAAyB,CAAC;AACxC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,qBAAqB,CAAC;AACpC,cAAc,yBAAyB,CAAC;AACxC,cAAc,wBAAwB,CAAC;AACvC,cAAc,oBAAoB,CAAC;AACnC,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,yBAAyB,CAAC;AACxC,cAAc,mBAAmB,CAAC;AAClC,cAAc,wBAAwB,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,yBAAyB,CAAC;AACxC,cAAc,wBAAwB,CAAC;AACvC,cAAc,0BAA0B,CAAC;AACzC,cAAc,wBAAwB,CAAC;AACvC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,oBAAoB,CAAC;AACnC,cAAc,0BAA0B,CAAC;AACzC,cAAc,uBAAuB,CAAC;AACtC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,kBAAkB,CAAC;AACjC,cAAc,6BAA6B,CAAC"}

package/lib/index.js

@@ -15,22 +15,33 @@ var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (
 }) : function(o, v) {
     o["default"] = v;
 });
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
-};
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
 var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ScoutsuiteNistMappingData = exports.OwaspNistMappingData = exports.NistCciMappingData = exports.NiktoNistMappingData = exports.NessusPluginNistMappingData = exports.CweNistMappingData = exports.CciNistMappingData = exports.AwsConfigMappingData = exports.ASFFResults = void 0;
+exports.ScoutsuiteNistMappingData = exports.OwaspNistMappingData = exports.NistCciMappingData = exports.NiktoNistMappingData = exports.NessusPluginNistMappingData = exports.CweNistMappingData = exports.CheckovToCciAndNistMappingData = exports.CciNistMappingData = exports.AwsConfigMappingData = exports.ASFFResults = void 0;
 var asff_mapper_1 = require("./src/asff-mapper/asff-mapper");
 Object.defineProperty(exports, "ASFFResults", { enumerable: true, get: function () { return asff_mapper_1.ASFFResults; } });
 exports.AwsConfigMappingData = __importStar(require("./src/mappings/AwsConfigMappingData"));
 exports.CciNistMappingData = __importStar(require("./src/mappings/CciNistMappingData"));
+exports.CheckovToCciAndNistMappingData = __importStar(require("./src/mappings/CheckovToCciAndNistMappingData"));
 exports.CweNistMappingData = __importStar(require("./src/mappings/CweNistMappingData"));
 exports.NessusPluginNistMappingData = __importStar(require("./src/mappings/NessusPluginNistMappingData"));
 exports.NiktoNistMappingData = __importStar(require("./src/mappings/NiktoNistMappingData"));
@@ -40,6 +51,7 @@ exports.ScoutsuiteNistMappingData = __importStar(require("./src/mappings/Scoutsu
 __exportStar(require("./src/anchore-grype-mapper"), exports);
 __exportStar(require("./src/aws-config-mapper"), exports);
 __exportStar(require("./src/burpsuite-mapper"), exports);
+__exportStar(require("./src/checkov-mapper"), exports);
 __exportStar(require("./src/ckl-mapper/checklist-jsonix-converter"), exports);
 __exportStar(require("./src/ckl-mapper/checklist-mapper"), exports);
 __exportStar(require("./src/ckl-mapper/checklist-metadata-utils"), exports);
@@ -73,7 +85,10 @@ __exportStar(require("./src/twistlock-mapper"), exports);
 __exportStar(require("./src/utils/attestations"), exports);
 __exportStar(require("./src/utils/compliance"), exports);
 __exportStar(require("./src/utils/fingerprinting"), exports);
+__exportStar(require("./src/utils/result"), exports);
+__exportStar(require("./src/utils/splunk-tools"), exports);
 __exportStar(require("./src/veracode-mapper"), exports);
 __exportStar(require("./src/xccdf-results-mapper"), exports);
 __exportStar(require("./src/zap-mapper"), exports);
+__exportStar(require("./types/splunk-config-types"), exports);
 //# sourceMappingURL=index.js.map

package/lib/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,6DAA0D;AAAlD,0GAAA,WAAW,OAAA;AACnB,4FAA4E;AAC5E,wFAAwE;AACxE,wFAAwE;AACxE,0GAA0F;AAC1F,4FAA4E;AAC5E,wFAAwE;AACxE,4FAA4E;AAC5E,sGAAsF;AACtF,6DAA2C;AAC3C,0DAAwC;AACxC,yDAAuC;AACvC,8EAA4D;AAC5D,oEAAkD;AAClD,4EAA0D;AAC1D,mEAAiD;AACjD,qFAAmE;AACnE,qFAAmE;AACnE,qFAAmE;AACnE,yFAAuE;AACvE,uFAAqE;AACrE,wDAAsC;AACtC,8DAA4C;AAC5C,yDAAuC;AACvC,gEAA8C;AAC9C,uDAAqC;AACrC,qDAAmC;AACnC,0DAAwC;AACxC,0DAAwC;AACxC,iEAA+C;AAC/C,sDAAoC;AACpC,0DAAwC;AACxC,yDAAuC;AACvC,qDAAmC;AACnC,sDAAoC;AACpC,qDAAmC;AACnC,0DAAwC;AACxC,oDAAkC;AAClC,yDAAuC;AACvC,sDAAoC;AACpC,0DAAwC;AACxC,yDAAuC;AACvC,2DAAyC;AACzC,yDAAuC;AACvC,6DAA2C;AAC3C,wDAAsC;AACtC,6DAA2C;AAC3C,mDAAiC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,6DAA0D;AAAlD,0GAAA,WAAW,OAAA;AACnB,4FAA4E;AAC5E,wFAAwE;AACxE,gHAAgG;AAChG,wFAAwE;AACxE,0GAA0F;AAC1F,4FAA4E;AAC5E,wFAAwE;AACxE,4FAA4E;AAC5E,sGAAsF;AACtF,6DAA2C;AAC3C,0DAAwC;AACxC,yDAAuC;AACvC,uDAAqC;AACrC,8EAA4D;AAC5D,oEAAkD;AAClD,4EAA0D;AAC1D,mEAAiD;AACjD,qFAAmE;AACnE,qFAAmE;AACnE,qFAAmE;AACnE,yFAAuE;AACvE,uFAAqE;AACrE,wDAAsC;AACtC,8DAA4C;AAC5C,yDAAuC;AACvC,gEAA8C;AAC9C,uDAAqC;AACrC,qDAAmC;AACnC,0DAAwC;AACxC,0DAAwC;AACxC,iEAA+C;AAC/C,sDAAoC;AACpC,0DAAwC;AACxC,yDAAuC;AACvC,qDAAmC;AACnC,sDAAoC;AACpC,qDAAmC;AACnC,0DAAwC;AACxC,oDAAkC;AAClC,yDAAuC;AACvC,sDAAoC;AACpC,0DAAwC;AACxC,yDAAuC;AACvC,2DAAyC;AACzC,yDAAuC;AACvC,6DAA2C;AAC3C,qDAAmC;AACnC,2DAAyC;AACzC,wDAAsC;AACtC,6DAA2C;AAC3C,mDAAiC;AACjC,8DAA4C","sourcesContent":["export {ASFFResults} from './src/asff-mapper/asff-mapper';\nexport * as AwsConfigMappingData from './src/mappings/AwsConfigMappingData';\nexport * as CciNistMappingData from './src/mappings/CciNistMappingData';\nexport * as CheckovToCciAndNistMappingData from './src/mappings/CheckovToCciAndNistMappingData';\nexport * as CweNistMappingData from './src/mappings/CweNistMappingData';\nexport * as NessusPluginNistMappingData from './src/mappings/NessusPluginNistMappingData';\nexport * as NiktoNistMappingData from './src/mappings/NiktoNistMappingData';\nexport * as NistCciMappingData from './src/mappings/NistCciMappingData';\nexport * as OwaspNistMappingData from './src/mappings/OwaspNistMappingData';\nexport * as ScoutsuiteNistMappingData from './src/mappings/ScoutsuiteNistMappingData';\nexport * from './src/anchore-grype-mapper';\nexport * from './src/aws-config-mapper';\nexport * from './src/burpsuite-mapper';\nexport * from './src/checkov-mapper';\nexport * from './src/ckl-mapper/checklist-jsonix-converter';\nexport * from './src/ckl-mapper/checklist-mapper';\nexport * from './src/ckl-mapper/checklist-metadata-utils';\nexport * from './src/ckl-mapper/checklistJsonix';\nexport * from './src/converters-from-hdf/asff/reverse-asff-mapper';\nexport * from './src/converters-from-hdf/caat/reverse-caat-mapper';\nexport * from './src/converters-from-hdf/html/reverse-html-mapper';\nexport * from './src/converters-from-hdf/splunk/reverse-splunk-mapper';\nexport * from './src/converters-from-hdf/xccdf/reverse-xccdf-mapper';\nexport * from './src/conveyor-mapper';\nexport * from './src/cyclonedx-sbom-mapper';\nexport * from './src/dbprotect-mapper';\nexport * from './src/dependency-track-mapper';\nexport * from './src/fortify-mapper';\nexport * from './src/gosec-mapper';\nexport * from './src/ionchannel-mapper';\nexport * from './src/jfrog-xray-mapper';\nexport * from './src/msft-secure-score-mapper';\nexport * from './src/nessus-mapper';\nexport * from './src/netsparker-mapper';\nexport * from './src/neuvector-mapper';\nexport * from './src/nikto-mapper';\nexport * from './src/prisma-mapper';\nexport * from './src/sarif-mapper';\nexport * from './src/scoutsuite-mapper';\nexport * from './src/snyk-mapper';\nexport * from './src/sonarqube-mapper';\nexport * from './src/splunk-mapper';\nexport * from './src/trufflehog-mapper';\nexport * from './src/twistlock-mapper';\nexport * from './src/utils/attestations';\nexport * from './src/utils/compliance';\nexport * from './src/utils/fingerprinting';\nexport * from './src/utils/result';\nexport * from './src/utils/splunk-tools';\nexport * from './src/veracode-mapper';\nexport * from './src/xccdf-results-mapper';\nexport * from './src/zap-mapper';\nexport * from './types/splunk-config-types';\n"]}

package/lib/package.json

@@ -1,93 +1,76 @@
 {
     "name": "@mitre/hdf-converters",
-    "version": "2.12.2",
+    "version": "2.13.0",
     "license": "Apache-2.0",
     "description": "Converter util library used to transform various scan results into HDF format",
+    "repository": {
+        "type": "git",
+        "url": "https://github.com/mitre/heimdall2",
+        "directory": "libs/hdf-converters"
+    },
     "files": [
         "lib"
     ],
     "main": "src/index.ts",
-    "publishConfig": {
-        "main": "lib/index.js"
-    },
     "scripts": {
-        "build": "run-script-os",
-        "build:darwin:linux": "../../node_modules/.bin/tsc -p ./tsconfig.build.json && cp -R ./data ./lib",
-        "build:win32": "../../node_modules/.bin/tsc -p ./tsconfig.build.json && xcopy data lib",
-        "lint": "eslint \"**/*.ts\" --fix",
-        "lint:ci": "eslint \"**/*.ts\" --max-warnings 0",
-        "prepack": "yarn build && node prepack.js",
+        "prebuild": "tailwindcss -i data/reverse-html-mapper/tailwind.css -o data/reverse-html-mapper/style.css --minify && node data/reverse-html-mapper/convert-to-embedded-strings.ts",
+        "build": "tsc -p tsconfig.build.json",
+        "lint": "eslint --fix",
+        "lint:ci": "eslint --max-warnings 0",
+        "prepack": "run-script-os",
+        "prepack:darwin:linux": "yarn build && cp package.json package.json.orig && cat package.json.orig | jq '.main = \"lib/index.js\"' > package.json",
+        "prepack:win32": "yarn build && copy package.json package.json.orig && type package.json.orig | jq \".main = \\\"lib/index.js\\\"\" > package.json",
         "postpack": "run-script-os",
         "postpack:darwin:linux": "mv package.json.orig package.json",
         "postpack:win32": "move package.json.orig package.json",
-        "test": "jest",
-        "csv2json": "tsx data/converters/csv2json.ts",
-        "xml2json": "tsx data/converters/xml2json.ts"
+        "test": "vitest",
+        "test:ci": "vitest run",
+        "csv2json": "node data/converters/csv2json.ts",
+        "xml2json": "node data/converters/xml2json.ts"
     },
     "dependencies": {
-        "@aws-sdk/client-config-service": "3.899.0",
+        "@aws-sdk/client-config-service": "3.1028.0",
         "@e965/xlsx": "^0.20.0",
         "@mdi/js": "^7.0.96",
         "@microsoft/microsoft-graph-types": "^2.40.0",
         "@mitre/jsonix": "^3.0.7",
         "@smithy/node-http-handler": "^4.0.0",
+        "@tailwindcss/cli": "^4.0.6",
         "@types/csv2json": "^1.4.2",
-        "@types/ms": "^0.7.31",
         "@types/mustache": "^4.1.2",
         "@types/papaparse": "^5.3.2",
         "@types/revalidator": "^0.3.12",
+        "@types/sanitize-html": "^2.3.1",
         "@types/semver": "^7.7.0",
-        "@types/triple-beam": "^1.3.2",
         "@types/validator": "^13.12.0",
         "@types/xml2js": "^0.4.9",
         "axios": "^1.3.5",
         "compare-versions": "^6.0.0",
         "csv2json": "^2.0.2",
-        "fast-xml-parser": "5.2.5",
+        "fast-xml-parser": "5.5.11",
         "html-entities": "^2.3.2",
-        "htmlparser2": "^10.0.0",
-        "inspecjs": "^2.12.2",
+        "htmlparser2": "^12.0.0",
+        "inspecjs": "^2.13.0",
         "lodash": "^4.17.21",
         "moment": "^2.29.1",
-        "ms": "^2.1.3",
         "mustache": "^4.2.0",
         "papaparse": "^5.3.1",
+        "retry-axios": "^4.0.2",
         "revalidator": "^0.3.1",
         "run-script-os": "^1.1.6",
+        "sanitize-html": "^2.17.2",
         "semver": "^7.6.0",
         "tailwindcss": "^4.0.6",
-        "tw-elements": "^1.0.0-beta2",
+        "tw-elements": "^2.0.0",
         "validator": "^13.12.0",
         "winston": "^3.6.0",
         "xml-formatter": "^3.6.2",
         "yaml": "^2.1.1"
     },
     "devDependencies": {
-        "@types/jest": "^27.0.0",
         "@types/lodash": "^4.14.161",
-        "@types/node": "^24.3.1",
-        "jest": "^27.0.6",
-        "quicktype": "^15.0.260",
-        "ts-jest": "^29.1.0",
-        "tsx": "^4.7.1",
-        "typedoc": "^0.28.12",
+        "@types/node": "^25.0.0",
+        "vitest": "^4.0.18",
         "xml2js": "^0.6.0"
-    },
-    "jest": {
-        "moduleFileExtensions": [
-            "js",
-            "json",
-            "ts",
-            "d.ts",
-            "node"
-        ],
-        "moduleNameMapper": {
-            "axios": "axios/dist/node/axios.cjs"
-        },
-        "rootDir": ".",
-        "testTimeout": 10000000,
-        "transform": {
-            "^.+\\.ts$": "ts-jest"
-        }
     }
 }

package/lib/src/anchore-grype-mapper.d.ts

@@ -9,3 +9,4 @@ export declare class AnchoreGrypeMapper extends BaseConverter {
     }, ILookupPath>;
     constructor(exportJson: string, withRaw?: boolean);
 }
+//# sourceMappingURL=anchore-grype-mapper.d.ts.map

package/lib/src/anchore-grype-mapper.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"anchore-grype-mapper.d.ts","sourceRoot":"","sources":["../../src/anchore-grype-mapper.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,QAAQ,EAAC,MAAM,UAAU,CAAC;AAGlC,OAAO,EACL,aAAa,EACb,WAAW,EAEX,eAAe,EAChB,MAAM,kBAAkB,CAAC;AAiD1B,qBAAa,kBAAmB,SAAQ,aAAa;IACnD,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAElC,cAAc,CACZ,WAAW,EAAE,MAAM,EACnB,aAAa,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,OAAO,EACtC,iBAAiB,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,OAAO,EAC1C,wBAAwB,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,OAAO,GAChD,eAAe,CAAC,QAAQ,CAAC,OAAO,GAAG,WAAW,EAAE,WAAW,CAAC;IA+F/D,OAAO,IAAI,eAAe,CACxB,QAAQ,CAAC,SAAS,GAAG;QAAC,WAAW,EAAE,OAAO,CAAA;KAAC,EAC3C,WAAW,CACZ;gBA6DW,UAAU,EAAE,MAAM,EAAE,OAAO,UAAQ;CAOhD"}

package/lib/src/anchore-grype-mapper.js

@@ -16,13 +16,17 @@ const IMPACT_MAPPING = new Map([
     ['negligible', 0.0],
     ['unknown', 0.5]
 ]);
+// If the highest rating severity for a control is `negligible` or `unknown`, set the results to skipped and request a manual review
 function skipSeverityNegligibleOrUnknown(controls) {
     if (controls) {
         controls
+            // Filter to controls whose highest rating severity is either `negligible` or `unknown`
             .filter((control) => {
             const rating = lodash_1.default.get(control, 'tags.severity', '');
+            //console.log(rating)
             return rating === 'Negligible' || rating === 'Unknown';
         })
+            // For every result contained by that control, set the status to skipped and request a manual review
             .map((control) => control.results.map((result) => {
             result.status = inspecjs_1.ExecJSON.ControlResultStatus.Skipped;
             result.skip_message =
@@ -43,6 +47,8 @@ function description(data) {
     return 'no description found';
 }
 class AnchoreGrypeMapper extends base_converter_1.BaseConverter {
+    withRaw;
+    metadata;
     controlMatches(matchesPath, idTransformer, impactTransformer, resultMessageTransformer) {
         return {
             path: matchesPath,
@@ -153,7 +159,7 @@ class AnchoreGrypeMapper extends base_converter_1.BaseConverter {
             passthrough: {
                 transformer: (data) => {
                     return {
-                        auxiliary_data: [{ name: '', data: lodash_1.default.omit([]) }],
+                        auxiliary_data: [{ name: '', data: lodash_1.default.omit([]) }], //Insert service name and mapped fields to be removed
                         ...(this.withRaw && { raw: data })
                     };
                 }

package/lib/src/anchore-grype-mapper.js.map

@@ -1 +1 @@
-{"version":3,"file":"anchore-grype-mapper.js","sourceRoot":"","sources":["../../src/anchore-grype-mapper.ts"],"names":[],"mappings":";;;;;;AAAA,uCAAkC;AAClC,oDAAuB;AACvB,kDAAgE;AAChE,qDAK0B;AAE1B,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC;IAClD,CAAC,UAAU,EAAE,GAAG,CAAC;IACjB,CAAC,MAAM,EAAE,GAAG,CAAC;IACb,CAAC,QAAQ,EAAE,GAAG,CAAC;IACf,CAAC,KAAK,EAAE,GAAG,CAAC;IACZ,CAAC,YAAY,EAAE,GAAG,CAAC;IACnB,CAAC,SAAS,EAAE,GAAG,CAAC;CACjB,CAAC,CAAC;AAGH,SAAS,+BAA+B,CAAC,QAAmB;IAC1D,IAAI,QAAQ,EAAE;QACX,QAA+B;aAE7B,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE;YAClB,MAAM,MAAM,GAAG,gBAAC,CAAC,GAAG,CAAC,OAAO,EAAE,eAAe,EAAE,EAAE,CAAW,CAAC;YAE7D,OAAO,MAAM,KAAK,YAAY,IAAI,MAAM,KAAK,SAAS,CAAC;QACzD,CAAC,CAAC;aAED,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CACf,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;YAC7B,MAAM,CAAC,MAAM,GAAG,mBAAQ,CAAC,mBAAmB,CAAC,OAAO,CAAC;YACrD,MAAM,CAAC,YAAY;gBACjB,qGAAqG,CAAC;QAC1G,CAAC,CAAC,CACH,CAAC;KACL;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,WAAW,CAAC,IAA6B;IAChD,MAAM,aAAa,GAAG,IAAI,CAAC,aAAwC,CAAC;IACpE,MAAM,sBAAsB,GAAG,IAAI,CAAC,sBAGjC,CAAC;IACJ,IAAI,CAAC,aAAa,CAAC,WAAW,IAAI,sBAAsB,CAAC,MAAM,GAAG,CAAC,EAAE;QACnE,OAAO,sBAAsB,CAAC,MAAM,CAClC,CAAC,oBAAoB,EAAE,EAAE,CAAC,oBAAoB,CAAC,EAAE,KAAK,aAAa,CAAC,EAAE,CACvE,CAAC,CAAC,CAAC,CAAC,WAAqB,CAAC;KAC5B;SAAM,IAAI,aAAa,CAAC,WAAW,EAAE;QACpC,OAAO,aAAa,CAAC,WAAqB,CAAC;KAC5C;IACD,OAAO,sBAAsB,CAAC;AAChC,CAAC;AAED,MAAa,kBAAmB,SAAQ,8BAAa;IAInD,cAAc,CACZ,WAAmB,EACnB,aAAsC,EACtC,iBAA0C,EAC1C,wBAAiD;QAEjD,OAAO;YACL,IAAI,EAAE,WAAW;YACjB,GAAG,EAAE,IAAI;YACT,IAAI,EAAE;gBACJ,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC;gBACvB,KAAK,EAAE,EAAC,IAAI,EAAE,kBAAkB,EAAC;gBACjC,QAAQ,EAAE,EAAC,IAAI,EAAE,wBAAwB,EAAC;aAC3C;YACD,YAAY,EAAE;gBACZ;oBACE,IAAI,EAAE;wBACJ,IAAI,EAAE,mBAAmB;wBACzB,WAAW,EAAE,CAAC,IAA6B,EAAU,EAAE,CACrD,IAAI,CAAC,KAAK,IAAI,OAAO;4BACnB,CAAC,CAAC,oBAAoB,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,iBAAkB,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,CAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;4BAC7G,CAAC,CAAC,wDAAwD;qBAC/D;oBACD,KAAK,EAAE,KAAK;iBACb;gBACD;oBACE,IAAI,EAAE;wBACJ,IAAI,EAAE,wBAAwB;wBAC9B,WAAW,EAAE,CAAC,IAA6B,EAAU,EAAE,CACrD,GAAG,IAAI,CAAC,SAAS,CAAC,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;qBACpD;oBACD,KAAK,EAAE,OAAO;iBACf;aACF;YACD,IAAI,EAAE;gBACJ,WAAW,EAAE,CAAC,IAA6B,EAAE,EAAE;oBAC7C,MAAM,SAAS,GAAG,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,oBAAoB,CAG/C,CAAC;oBACJ,MAAM,sBAAsB,GAAG,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,wBAAwB,CAAC,CAAC;oBACrE,IAAI,0BAA0B,GAAG,EAG9B,CAAC;oBACJ,IAAI,sBAAsB,EAAE;wBAC1B,0BAA0B,GACxB,sBACD,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAA8B,CAAC;qBAC/D;oBACD,OACE,SAAS,CAAC,MAAM,CACd,GAAG,0BAA0B,CAEhC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAC,GAAG,EAAE,OAAO,EAAC,CAAC,CAAC,CAAC;gBACvC,CAAC;aACiC;YACpC,eAAe,EAAE,EAAE;YACnB,KAAK,EAAE;gBACL,WAAW,EAAE,CAAC,IAA6B,EAAU,EAAE,CACrD,kCAAkC,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,kBAAkB,CAAC,OAAO,gBAAC,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,yBAAyB,CAAW,EAAE;aACtI;YACD,EAAE,EAAE;gBACF,WAAW,EAAE,aAAa;aAC3B;YACD,IAAI,EAAE;gBACJ,WAAW,EAAE,WAAW;aACzB;YACD,MAAM,EAAE;gBACN,IAAI,EAAE,wBAAwB;gBAC9B,WAAW,EAAE,iBAAiB;aAC/B;YACD,IAAI,EAAE;gBACJ,WAAW,EAAE,CAAC,IAA6B,EAAU,EAAE,CACrD,GAAG,IAAI,CAAC,SAAS,CACf,gBAAC,CAAC,MAAM,CACN,gBAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,eAAe,EAAE,wBAAwB,CAAC,CAAC,EACzD,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE,CAC1C,EACD,IAAI,EACJ,CAAC,CACF,EAAE;aACN;YACD,gBAAgB,EAAE,+BAA+B;YACjD,OAAO,EAAE;gBACP;oBACE,MAAM,EAAE,mBAAQ,CAAC,mBAAmB,CAAC,MAAM;oBAC3C,SAAS,EAAE;wBACT,WAAW,EAAE,CAAC,IAA6B,EAAU,EAAE,CACrD,GAAG,IAAI,CAAC,SAAS,CAAC,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;qBAC5D;oBACD,OAAO,EAAE;wBACP,WAAW,EAAE,wBAAwB;qBACtC;oBACD,UAAU,EAAE,gBAAC,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,sBAAsB,CAAW;iBACnE;aACF;SACF,CAAC;IACJ,CAAC;IAED,OAAO;QAIL,OAAO;YACL,QAAQ,EAAE;gBACR,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,sBAAoB;gBAC7B,SAAS,EAAE,IAAI;aAChB;YACD,OAAO,EAAE,sBAAoB;YAC7B,UAAU,EAAE;gBACV,QAAQ,EAAE,IAAI;aACf;YACD,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,iBAAiB;oBACvB,KAAK,EAAE,uBAAuB;oBAC9B,OAAO,EAAE,gBAAC,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,oBAAoB,CAAW;oBAC7D,UAAU,EAAE,IAAI;oBAChB,OAAO,EAAE,IAAI;oBACb,OAAO,EAAE,IAAI;oBACb,SAAS,EAAE,IAAI;oBACf,eAAe,EAAE,IAAI;oBACrB,QAAQ,EAAE,EAAE;oBACZ,UAAU,EAAE,EAAE;oBACd,OAAO,EAAE,EAAE;oBACX,MAAM,EAAE,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE;wBACR;4BACE,GAAG,IAAI,CAAC,cAAc,CACpB,iBAAiB,EACjB,CAAC,IAA6B,EAAU,EAAE,CACxC,SAAS,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,kBAAkB,CAAC,EAAE,EAC5C,IAAA,8BAAa,EAAC,cAAc,CAAC,EAC7B,CAAC,IAA6B,EAAU,EAAE,CACxC,GAAG,IAAI,CAAC,SAAS,CAAC,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CACxD;yBACF;wBACD;4BACE,GAAG,IAAI,CAAC,cAAc,CACpB,wBAAwB,EACxB,CAAC,IAA6B,EAAU,EAAE,CACxC,uBAAuB,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,kBAAkB,CAAC,EAAE,EAC1D,GAAG,EAAE,CAAC,CAAC,EACP,CAAC,IAA6B,EAAU,EAAE,CACxC,wEAAwE,IAAI,CAAC,SAAS,CAAC,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,oBAAoB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,4BAA4B,IAAI,CAAC,SAAS,CAAC,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CACnN;yBACF;qBACF;oBACD,MAAM,EAAE,EAAE;iBACX;aACF;YACD,WAAW,EAAE;gBACX,WAAW,EAAE,CAAC,IAAyB,EAA2B,EAAE;oBAClE,OAAO;wBACL,cAAc,EAAE,CAAC,EAAC,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,gBAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAC,CAAC;wBAC9C,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAC,GAAG,EAAE,IAAI,EAAC,CAAC;qBACjC,CAAC;gBACJ,CAAC;aACF;SACF,CAAC;IACJ,CAAC;IACD,YAAY,UAAkB,EAAE,OAAO,GAAG,KAAK;QAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACpC,KAAK,CAAC,EAAC,OAAO,EAAE,gBAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC,EAAC,CAAC,CAAC;QAC9D,IAAI,CAAC,QAAQ,GAAG,gBAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC,CAAC;QAC5D,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IACnC,CAAC;CACF;AA/KD,gDA+KC"}
+{"version":3,"file":"anchore-grype-mapper.js","sourceRoot":"","sources":["../../src/anchore-grype-mapper.ts"],"names":[],"mappings":";;;;;;AAAA,uCAAkC;AAClC,oDAAuB;AACvB,kDAAgE;AAChE,qDAK0B;AAE1B,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC;IAClD,CAAC,UAAU,EAAE,GAAG,CAAC;IACjB,CAAC,MAAM,EAAE,GAAG,CAAC;IACb,CAAC,QAAQ,EAAE,GAAG,CAAC;IACf,CAAC,KAAK,EAAE,GAAG,CAAC;IACZ,CAAC,YAAY,EAAE,GAAG,CAAC;IACnB,CAAC,SAAS,EAAE,GAAG,CAAC;CACjB,CAAC,CAAC;AAEH,oIAAoI;AACpI,SAAS,+BAA+B,CAAC,QAAmB;IAC1D,IAAI,QAAQ,EAAE,CAAC;QACZ,QAA+B;YAC9B,uFAAuF;aACtF,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE;YAClB,MAAM,MAAM,GAAG,gBAAC,CAAC,GAAG,CAAC,OAAO,EAAE,eAAe,EAAE,EAAE,CAAW,CAAC;YAC7D,qBAAqB;YACrB,OAAO,MAAM,KAAK,YAAY,IAAI,MAAM,KAAK,SAAS,CAAC;QACzD,CAAC,CAAC;YACF,oGAAoG;aACnG,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CACf,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;YAC7B,MAAM,CAAC,MAAM,GAAG,mBAAQ,CAAC,mBAAmB,CAAC,OAAO,CAAC;YACrD,MAAM,CAAC,YAAY;gBACjB,qGAAqG,CAAC;QAC1G,CAAC,CAAC,CACH,CAAC;IACN,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,WAAW,CAAC,IAA6B;IAChD,MAAM,aAAa,GAAG,IAAI,CAAC,aAAwC,CAAC;IACpE,MAAM,sBAAsB,GAAG,IAAI,CAAC,sBAGjC,CAAC;IACJ,IAAI,CAAC,aAAa,CAAC,WAAW,IAAI,sBAAsB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpE,OAAO,sBAAsB,CAAC,MAAM,CAClC,CAAC,oBAAoB,EAAE,EAAE,CAAC,oBAAoB,CAAC,EAAE,KAAK,aAAa,CAAC,EAAE,CACvE,CAAC,CAAC,CAAC,CAAC,WAAqB,CAAC;IAC7B,CAAC;SAAM,IAAI,aAAa,CAAC,WAAW,EAAE,CAAC;QACrC,OAAO,aAAa,CAAC,WAAqB,CAAC;IAC7C,CAAC;IACD,OAAO,sBAAsB,CAAC;AAChC,CAAC;AAED,MAAa,kBAAmB,SAAQ,8BAAa;IACnD,OAAO,CAAU;IACjB,QAAQ,CAA0B;IAElC,cAAc,CACZ,WAAmB,EACnB,aAAsC,EACtC,iBAA0C,EAC1C,wBAAiD;QAEjD,OAAO;YACL,IAAI,EAAE,WAAW;YACjB,GAAG,EAAE,IAAI;YACT,IAAI,EAAE;gBACJ,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC;gBACvB,KAAK,EAAE,EAAC,IAAI,EAAE,kBAAkB,EAAC;gBACjC,QAAQ,EAAE,EAAC,IAAI,EAAE,wBAAwB,EAAC;aAC3C;YACD,YAAY,EAAE;gBACZ;oBACE,IAAI,EAAE;wBACJ,IAAI,EAAE,mBAAmB;wBACzB,WAAW,EAAE,CAAC,IAA6B,EAAU,EAAE,CACrD,IAAI,CAAC,KAAK,IAAI,OAAO;4BACnB,CAAC,CAAC,oBAAoB,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,iBAAkB,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,CAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;4BAC7G,CAAC,CAAC,wDAAwD;qBAC/D;oBACD,KAAK,EAAE,KAAK;iBACb;gBACD;oBACE,IAAI,EAAE;wBACJ,IAAI,EAAE,wBAAwB;wBAC9B,WAAW,EAAE,CAAC,IAA6B,EAAU,EAAE,CACrD,GAAG,IAAI,CAAC,SAAS,CAAC,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;qBACpD;oBACD,KAAK,EAAE,OAAO;iBACf;aACF;YACD,IAAI,EAAE;gBACJ,WAAW,EAAE,CAAC,IAA6B,EAAE,EAAE;oBAC7C,MAAM,SAAS,GAAG,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,oBAAoB,CAG/C,CAAC;oBACJ,MAAM,sBAAsB,GAAG,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,wBAAwB,CAAC,CAAC;oBACrE,IAAI,0BAA0B,GAAG,EAG9B,CAAC;oBACJ,IAAI,sBAAsB,EAAE,CAAC;wBAC3B,0BAA0B,GACxB,sBACD,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAA8B,CAAC;oBAChE,CAAC;oBACD,OACE,SAAS,CAAC,MAAM,CACd,GAAG,0BAA0B,CAEhC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAC,GAAG,EAAE,OAAO,EAAC,CAAC,CAAC,CAAC;gBACvC,CAAC;aACiC;YACpC,eAAe,EAAE,EAAE;YACnB,KAAK,EAAE;gBACL,WAAW,EAAE,CAAC,IAA6B,EAAU,EAAE,CACrD,kCAAkC,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,kBAAkB,CAAC,OAAO,gBAAC,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,yBAAyB,CAAW,EAAE;aACtI;YACD,EAAE,EAAE;gBACF,WAAW,EAAE,aAAa;aAC3B;YACD,IAAI,EAAE;gBACJ,WAAW,EAAE,WAAW;aACzB;YACD,MAAM,EAAE;gBACN,IAAI,EAAE,wBAAwB;gBAC9B,WAAW,EAAE,iBAAiB;aAC/B;YACD,IAAI,EAAE;gBACJ,WAAW,EAAE,CAAC,IAA6B,EAAU,EAAE,CACrD,GAAG,IAAI,CAAC,SAAS,CACf,gBAAC,CAAC,MAAM,CACN,gBAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,eAAe,EAAE,wBAAwB,CAAC,CAAC,EACzD,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE,CAC1C,EACD,IAAI,EACJ,CAAC,CACF,EAAE;aACN;YACD,gBAAgB,EAAE,+BAA+B;YACjD,OAAO,EAAE;gBACP;oBACE,MAAM,EAAE,mBAAQ,CAAC,mBAAmB,CAAC,MAAM;oBAC3C,SAAS,EAAE;wBACT,WAAW,EAAE,CAAC,IAA6B,EAAU,EAAE,CACrD,GAAG,IAAI,CAAC,SAAS,CAAC,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;qBAC5D;oBACD,OAAO,EAAE;wBACP,WAAW,EAAE,wBAAwB;qBACtC;oBACD,UAAU,EAAE,gBAAC,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,sBAAsB,CAAW;iBACnE;aACF;SACF,CAAC;IACJ,CAAC;IAED,OAAO;QAIL,OAAO;YACL,QAAQ,EAAE;gBACR,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,sBAAoB;gBAC7B,SAAS,EAAE,IAAI;aAChB;YACD,OAAO,EAAE,sBAAoB;YAC7B,UAAU,EAAE;gBACV,QAAQ,EAAE,IAAI;aACf;YACD,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,iBAAiB;oBACvB,KAAK,EAAE,uBAAuB;oBAC9B,OAAO,EAAE,gBAAC,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,oBAAoB,CAAW;oBAC7D,UAAU,EAAE,IAAI;oBAChB,OAAO,EAAE,IAAI;oBACb,OAAO,EAAE,IAAI;oBACb,SAAS,EAAE,IAAI;oBACf,eAAe,EAAE,IAAI;oBACrB,QAAQ,EAAE,EAAE;oBACZ,UAAU,EAAE,EAAE;oBACd,OAAO,EAAE,EAAE;oBACX,MAAM,EAAE,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE;wBACR;4BACE,GAAG,IAAI,CAAC,cAAc,CACpB,iBAAiB,EACjB,CAAC,IAA6B,EAAU,EAAE,CACxC,SAAS,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,kBAAkB,CAAC,EAAE,EAC5C,IAAA,8BAAa,EAAC,cAAc,CAAC,EAC7B,CAAC,IAA6B,EAAU,EAAE,CACxC,GAAG,IAAI,CAAC,SAAS,CAAC,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CACxD;yBACF;wBACD;4BACE,GAAG,IAAI,CAAC,cAAc,CACpB,wBAAwB,EACxB,CAAC,IAA6B,EAAU,EAAE,CACxC,uBAAuB,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,kBAAkB,CAAC,EAAE,EAC1D,GAAG,EAAE,CAAC,CAAC,EACP,CAAC,IAA6B,EAAU,EAAE,CACxC,wEAAwE,IAAI,CAAC,SAAS,CAAC,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,oBAAoB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,4BAA4B,IAAI,CAAC,SAAS,CAAC,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CACnN;yBACF;qBACF;oBACD,MAAM,EAAE,EAAE;iBACX;aACF;YACD,WAAW,EAAE;gBACX,WAAW,EAAE,CAAC,IAAyB,EAA2B,EAAE;oBAClE,OAAO;wBACL,cAAc,EAAE,CAAC,EAAC,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,gBAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAC,CAAC,EAAE,qDAAqD;wBACrG,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAC,GAAG,EAAE,IAAI,EAAC,CAAC;qBACjC,CAAC;gBACJ,CAAC;aACF;SACF,CAAC;IACJ,CAAC;IACD,YAAY,UAAkB,EAAE,OAAO,GAAG,KAAK;QAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACpC,KAAK,CAAC,EAAC,OAAO,EAAE,gBAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC,EAAC,CAAC,CAAC;QAC9D,IAAI,CAAC,QAAQ,GAAG,gBAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC,CAAC;QAC5D,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IACnC,CAAC;CACF;AA/KD,gDA+KC","sourcesContent":["import {ExecJSON} from 'inspecjs';\nimport _ from 'lodash';\nimport {version as HeimdallToolsVersion} from '../package.json';\nimport {\n  BaseConverter,\n  ILookupPath,\n  impactMapping,\n  MappedTransform\n} from './base-converter';\n\nconst IMPACT_MAPPING: Map<string, number> = new Map([\n  ['critical', 0.9],\n  ['high', 0.7],\n  ['medium', 0.5],\n  ['low', 0.3],\n  ['negligible', 0.0],\n  ['unknown', 0.5]\n]);\n\n// If the highest rating severity for a control is `negligible` or `unknown`, set the results to skipped and request a manual review\nfunction skipSeverityNegligibleOrUnknown(controls: unknown[]): unknown[] {\n  if (controls) {\n    (controls as ExecJSON.Control[])\n      // Filter to controls whose highest rating severity is either `negligible` or `unknown`\n      .filter((control) => {\n        const rating = _.get(control, 'tags.severity', '') as string;\n        //console.log(rating)\n        return rating === 'Negligible' || rating === 'Unknown';\n      })\n      // For every result contained by that control, set the status to skipped and request a manual review\n      .map((control) =>\n        control.results.map((result) => {\n          result.status = ExecJSON.ControlResultStatus.Skipped;\n          result.skip_message =\n            'Manual review required because a Anchore Grype rating severity is set to `negligible` or `unknown`.';\n        })\n      );\n  }\n  return controls;\n}\n\nfunction description(data: Record<string, unknown>): string {\n  const vulnerability = data.vulnerability as Record<string, unknown>;\n  const relatedVulnerabilities = data.relatedVulnerabilities as Record<\n    string,\n    unknown\n  >[];\n  if (!vulnerability.description && relatedVulnerabilities.length > 0) {\n    return relatedVulnerabilities.filter(\n      (relatedVulnerability) => relatedVulnerability.id === vulnerability.id\n    )[0].description as string;\n  } else if (vulnerability.description) {\n    return vulnerability.description as string;\n  }\n  return 'no description found';\n}\n\nexport class AnchoreGrypeMapper extends BaseConverter {\n  withRaw: boolean;\n  metadata: Record<string, unknown>;\n\n  controlMatches(\n    matchesPath: string,\n    idTransformer: (value: any) => unknown,\n    impactTransformer: (value: any) => unknown,\n    resultMessageTransformer: (value: any) => unknown\n  ): MappedTransform<ExecJSON.Control & ILookupPath, ILookupPath> {\n    return {\n      path: matchesPath,\n      key: 'id',\n      tags: {\n        nist: ['SA-11', 'RA-5'],\n        cveid: {path: 'vulnerability.id'},\n        severity: {path: 'vulnerability.severity'}\n      },\n      descriptions: [\n        {\n          data: {\n            path: 'vulnerability.fix',\n            transformer: (data: Record<string, unknown>): string =>\n              data.state == 'fixed'\n                ? `vulnerability is ${_.get(data, 'state')} for versions ${(_.get(data, 'versions') as string[]).join(', ')}`\n                : `vulnerability is not known to be fixed in any versions`\n          },\n          label: 'fix'\n        },\n        {\n          data: {\n            path: 'relatedVulnerabilities',\n            transformer: (data: Record<string, unknown>): string =>\n              `${JSON.stringify(_.get(data, 'cvss'), null, 2)}`\n          },\n          label: 'check'\n        }\n      ],\n      refs: {\n        transformer: (data: Record<string, unknown>) => {\n          const vuln_urls = _.get(data, 'vulnerability.urls') as Record<\n            string,\n            unknown\n          >[];\n          const relatedVulnerabilities = _.get(data, 'relatedVulnerabilities');\n          let relatedVulnerabilitiesUrls = [] as unknown as Record<\n            string,\n            unknown\n          >[];\n          if (relatedVulnerabilities) {\n            relatedVulnerabilitiesUrls = (\n              relatedVulnerabilities as Record<string, unknown>[]\n            ).map((element) => element.urls) as Record<string, unknown>[];\n          }\n          return (\n            vuln_urls.concat(\n              ...relatedVulnerabilitiesUrls\n            ) as unknown as Record<string, unknown>[]\n          ).map((element) => ({url: element}));\n        }\n      } as unknown as ExecJSON.Reference[],\n      source_location: {},\n      title: {\n        transformer: (data: Record<string, unknown>): string =>\n          `Grype found a vulnerability to ${_.get(data, 'vulnerability.id')} in ${_.get(this.metadata, 'source.target.userInput') as string}`\n      },\n      id: {\n        transformer: idTransformer\n      },\n      desc: {\n        transformer: description\n      },\n      impact: {\n        path: 'vulnerability.severity',\n        transformer: impactTransformer\n      },\n      code: {\n        transformer: (data: Record<string, unknown>): string =>\n          `${JSON.stringify(\n            _.omitBy(\n              _.pick(data, ['vulnerability', 'relatedVulnerabilities']),\n              (value) => value === null || value === ''\n            ),\n            null,\n            2\n          )}`\n      },\n      arrayTransformer: skipSeverityNegligibleOrUnknown,\n      results: [\n        {\n          status: ExecJSON.ControlResultStatus.Failed,\n          code_desc: {\n            transformer: (data: Record<string, unknown>): string =>\n              `${JSON.stringify(_.get(data, 'matchDetails'), null, 2)}`\n          },\n          message: {\n            transformer: resultMessageTransformer\n          },\n          start_time: _.get(this.metadata, 'descriptor.timestamp') as string\n        }\n      ]\n    };\n  }\n\n  mapping(): MappedTransform<\n    ExecJSON.Execution & {passthrough: unknown},\n    ILookupPath\n  > {\n    return {\n      platform: {\n        name: 'Heimdall Tools',\n        release: HeimdallToolsVersion,\n        target_id: null\n      },\n      version: HeimdallToolsVersion,\n      statistics: {\n        duration: null\n      },\n      profiles: [\n        {\n          name: 'Anchore - Grype',\n          title: 'Anchore Grype Matches',\n          version: _.get(this.metadata, 'descriptor.version') as string,\n          maintainer: null,\n          summary: null,\n          license: null,\n          copyright: null,\n          copyright_email: null,\n          supports: [],\n          attributes: [],\n          depends: [],\n          groups: [],\n          status: 'loaded',\n          controls: [\n            {\n              ...this.controlMatches(\n                'wrapper.matches',\n                (data: Record<string, unknown>): string =>\n                  `Grype/${_.get(data, 'vulnerability.id')}`,\n                impactMapping(IMPACT_MAPPING),\n                (data: Record<string, unknown>): string =>\n                  `${JSON.stringify(_.get(data, 'artifact'), null, 2)}`\n              )\n            },\n            {\n              ...this.controlMatches(\n                'wrapper.ignoredMatches',\n                (data: Record<string, unknown>): string =>\n                  `Grype-Ignored-Match/${_.get(data, 'vulnerability.id')}`,\n                () => 0,\n                (data: Record<string, unknown>): string =>\n                  `This finding is ignored due to the following applied ignored rules:\\n${JSON.stringify(_.get(data, 'appliedIgnoreRules'), null, 2)}\\nArtifact Information:\\n${JSON.stringify(_.get(data, 'artifact'), null, 2)}`\n              )\n            }\n          ],\n          sha256: ''\n        }\n      ],\n      passthrough: {\n        transformer: (data: Record<string, any>): Record<string, unknown> => {\n          return {\n            auxiliary_data: [{name: '', data: _.omit([])}], //Insert service name and mapped fields to be removed\n            ...(this.withRaw && {raw: data})\n          };\n        }\n      }\n    };\n  }\n  constructor(exportJson: string, withRaw = false) {\n    const temp = JSON.parse(exportJson);\n    super({wrapper: _.pick(temp, ['matches', 'ignoredMatches'])});\n    this.metadata = _.omit(temp, ['matches', 'ignoredMatches']);\n    this.withRaw = withRaw;\n    this.setMappings(this.mapping());\n  }\n}\n"]}

package/lib/src/asff-mapper/asff-mapper.d.ts

@@ -109,3 +109,4 @@ export declare class ASFFResults {
     constructor(asffJson: string, securityhubStandardsJsonArray?: undefined | string[], meta?: Record<string, string | undefined> | undefined);
     toHdf(): Record<string, ExecJSON.Execution>;
 }
+//# sourceMappingURL=asff-mapper.d.ts.map

package/lib/src/asff-mapper/asff-mapper.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"asff-mapper.d.ts","sourceRoot":"","sources":["../../../src/asff-mapper/asff-mapper.ts"],"names":[],"mappings":"AAKA,OAAO,EAAC,QAAQ,EAAC,MAAM,UAAU,CAAC;AAGlC,OAAO,EAAC,aAAa,EAA+B,MAAM,mBAAmB,CAAC;AA0B9E,oBAAY,aAAa;IACvB,SAAS,oBAAoB;IAC7B,eAAe,yBAAyB;IACxC,SAAS,kBAAkB;IAC3B,SAAS,kBAAkB;IAC3B,OAAO,YAAY;IACnB,WAAW,qBAAqB;IAChC,KAAK,eAAe;IACpB,aAAa,uBAAuB;IACpC,OAAO,YAAY;CACpB;AAoND,wBAAgB,WAAW,CACzB,OAAO,EAAE,UAAU,EACnB,KAAK,EAAE,OAAO,EAAE,EAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,QAAQ,CAAC,OAAO,EAAE,CAyBpB;AAoCD,qBAAa,UAAW,SAAQ,aAAa;IAC3C,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG,SAAS,CAAC;IACrD,cAAc,EAAE,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IAE5E,eAAe;;;;;sCAKa,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;;;;;;;;;mCA2B1B,MAAM;;;;mCAMN,MAAM;;;;;;;;;;;;;;;;;2CAoBI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAG,MAAM;;;2CAUhC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAG,MAAM;;;2CAUhC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAG,MAAM;;;2CAUhC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAG,MAAM;;;2CA2B5C,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC/B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS;;+CASb,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAG,MAAM,EAAE;;;+CAkBlC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAG,MAAM,EAAE;;;;;;6CAoBlC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAG,MAAM;;;;;2CAiB3C,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC/B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;;;;;;+CAeb,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC/B,QAAQ,CAAC,mBAAmB;;;+CAgCR,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAG,MAAM;;2CAoC9C,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC/B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;;+CAqDD,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAG,MAAM;;;;;;MAWrE;IAEF,YAAY,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS;IAsBlD,WAAW,IAAI,IAAI;gBAajB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,cAAc,EAAE,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,EAC3E,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG,SAAqB;CAOnE;AAID,qBAAa,WAAW;IACtB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IAChD,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG,SAAS,CAAC;IACrD,cAAc,EAAE,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;gBAE1E,QAAQ,EAAE,MAAM,EAChB,6BAA6B,GAAE,SAAS,GAAG,MAAM,EAAc,EAC/D,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG,SAAqB;IAsClE,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,SAAS,CAAC;CAkC5C"}