@mitre/hdf-converters 2.12.6 → 2.13.0

package/lib/src/prisma-mapper.js

@@ -15,15 +15,26 @@ var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (
 }) : function(o, v) {
     o["default"] = v;
 });
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
-};
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.PrismaMapper = exports.PrismaControlMapper = exports.nistTag = void 0;
+exports.PrismaMapper = exports.PrismaControlMapper = void 0;
+exports.nistTag = nistTag;
 const inspecjs_1 = require("inspecjs");
 const _ = __importStar(require("lodash"));
 const package_json_1 = require("../package.json");
@@ -44,139 +55,139 @@ function nistTag(cveTag) {
         return global_1.DEFAULT_UPDATE_REMEDIATION_NIST_TAGS;
     }
 }
-exports.nistTag = nistTag;
 class PrismaControlMapper extends base_converter_1.BaseConverter {
-    constructor(prismaControls) {
-        super({ records: prismaControls });
-        this.mappings = {
-            platform: {
-                name: 'Heimdall Tools',
-                release: package_json_1.version,
-                target_id: 'Prisma Cloud Scan Report'
-            },
-            version: package_json_1.version,
-            statistics: {
-                duration: null
-            },
-            profiles: [
-                {
-                    name: 'Palo Alto Prisma Cloud Tool',
-                    version: '',
-                    title: 'Prisma Cloud Scan Report',
-                    maintainer: null,
-                    summary: '',
-                    license: null,
-                    copyright: null,
-                    copyright_email: null,
-                    supports: [],
-                    attributes: [],
-                    depends: [],
-                    groups: [],
-                    status: 'loaded',
-                    controls: [
-                        {
-                            path: 'records',
-                            key: 'id',
-                            desc: { path: 'Description' },
-                            tags: {
-                                cci: {
-                                    path: 'CVE ID',
-                                    transformer: (cve) => (0, global_1.getCCIsForNISTTags)(nistTag(cve))
-                                },
-                                nist: {
-                                    path: 'CVE ID',
-                                    transformer: nistTag
-                                },
-                                cve: { path: 'CVE ID' },
-                                cvss: { path: 'cssv' }
+    mappings = {
+        platform: {
+            name: 'Heimdall Tools',
+            release: package_json_1.version,
+            target_id: 'Prisma Cloud Scan Report'
+        },
+        version: package_json_1.version,
+        statistics: {
+            duration: null
+        },
+        profiles: [
+            {
+                name: 'Palo Alto Prisma Cloud Tool',
+                version: '',
+                title: 'Prisma Cloud Scan Report',
+                maintainer: null,
+                summary: '',
+                license: null,
+                copyright: null,
+                copyright_email: null,
+                supports: [],
+                attributes: [],
+                depends: [],
+                groups: [],
+                status: 'loaded',
+                controls: [
+                    {
+                        path: 'records',
+                        key: 'id',
+                        desc: { path: 'Description' },
+                        tags: {
+                            cci: {
+                                path: 'CVE ID',
+                                transformer: (cve) => (0, global_1.getCCIsForNISTTags)(nistTag(cve))
                             },
-                            descriptions: [],
-                            refs: [{ url: { path: 'Vulnerability Link' } }],
-                            source_location: { path: 'Hostname' },
-                            id: {
-                                transformer: (item) => {
-                                    if (item['CVE ID']) {
-                                        return `${item['Compliance ID']}-${item['CVE ID']}`;
-                                    }
-                                    else {
-                                        return `${item['Compliance ID']}-${item.Distro}-${item.Severity}`;
-                                    }
-                                }
-                            },
-                            title: {
-                                transformer: (item) => `${item.Hostname}-${item.Distro}-${item.Type}`
+                            nist: {
+                                path: 'CVE ID',
+                                transformer: nistTag
                             },
-                            impact: {
-                                path: 'Severity',
-                                transformer: (severity) => {
-                                    if (severity) {
-                                        return SEVERITY_LOOKUP[severity];
-                                    }
-                                    else {
-                                        return 0.5;
-                                    }
+                            cve: { path: 'CVE ID' },
+                            cvss: { path: 'cssv' }
+                        },
+                        descriptions: [],
+                        refs: [{ url: { path: 'Vulnerability Link' } }],
+                        source_location: { path: 'Hostname' },
+                        id: {
+                            transformer: (item) => {
+                                if (item['CVE ID']) {
+                                    return `${item['Compliance ID']}-${item['CVE ID']}`;
                                 }
-                            },
-                            code: {
-                                transformer: (obj) => JSON.stringify(obj, null, 2)
-                            },
-                            results: [
-                                {
-                                    status: inspecjs_1.ExecJSON.ControlResultStatus.Failed,
-                                    code_desc: {
-                                        transformer: (obj) => {
-                                            let result = '';
-                                            if (obj.Type === 'image') {
-                                                if (obj['Packages'] !== '') {
-                                                    result += `Version check of package: ${obj['Packages']}`;
-                                                }
-                                            }
-                                            else if (obj.Type === 'linux') {
-                                                if (obj.Distro !== '') {
-                                                    result += `Configuration check for ${obj.Distro}`;
-                                                }
-                                                else {
-                                                    result += ``;
-                                                }
-                                            }
-                                            else {
-                                                result += `${obj.Type} check for ${obj.Hostname}`;
+                                else {
+                                    return `${item['Compliance ID']}-${item.Distro}-${item.Severity}`;
+                                }
+                            }
+                        },
+                        title: {
+                            transformer: (item) => `${item.Hostname}-${item.Distro}-${item.Type}`
+                        },
+                        impact: {
+                            path: 'Severity',
+                            transformer: (severity) => {
+                                if (severity) {
+                                    return SEVERITY_LOOKUP[severity];
+                                }
+                                else {
+                                    return 0.5;
+                                }
+                            }
+                        },
+                        code: {
+                            transformer: (obj) => JSON.stringify(obj, null, 2)
+                        },
+                        results: [
+                            {
+                                status: inspecjs_1.ExecJSON.ControlResultStatus.Failed,
+                                code_desc: {
+                                    transformer: (obj) => {
+                                        let result = '';
+                                        if (obj.Type === 'image') {
+                                            if (obj['Packages'] !== '') {
+                                                result += `Version check of package: ${obj['Packages']}`;
                                             }
-                                            result += `\n\n${obj.Description}`;
-                                            return result;
                                         }
-                                    },
-                                    message: {
-                                        transformer: (obj) => {
-                                            let result = '';
-                                            if (obj['Fix Status'] !== '' && obj.Cause !== '') {
-                                                result += `Fix Status: ${obj['Fix Status']}\n\n${obj.Cause}`;
-                                            }
-                                            else if (obj['Fix Status'] !== '') {
-                                                result += `Fix Status: ${obj['Fix Status']}`;
-                                            }
-                                            else if (obj.Cause !== '') {
-                                                result += `Cause: ${obj.Cause}`;
+                                        else if (obj.Type === 'linux') {
+                                            if (obj.Distro !== '') {
+                                                result += `Configuration check for ${obj.Distro}`;
                                             }
                                             else {
-                                                result += 'Unknown';
+                                                result += ``;
                                             }
-                                            return result;
                                         }
-                                    },
-                                    start_time: { path: 'Published' }
-                                }
-                            ]
-                        }
-                    ],
-                    sha256: ''
-                }
-            ]
-        };
+                                        else {
+                                            result += `${obj.Type} check for ${obj.Hostname}`;
+                                        }
+                                        result += `\n\n${obj.Description}`;
+                                        return result;
+                                    }
+                                },
+                                message: {
+                                    transformer: (obj) => {
+                                        let result = '';
+                                        if (obj['Fix Status'] !== '' && obj.Cause !== '') {
+                                            result += `Fix Status: ${obj['Fix Status']}\n\n${obj.Cause}`;
+                                        }
+                                        else if (obj['Fix Status'] !== '') {
+                                            result += `Fix Status: ${obj['Fix Status']}`;
+                                        }
+                                        else if (obj.Cause !== '') {
+                                            result += `Cause: ${obj.Cause}`;
+                                        }
+                                        else {
+                                            result += 'Unknown';
+                                        }
+                                        return result;
+                                    }
+                                },
+                                start_time: { path: 'Published' }
+                            }
+                        ]
+                    }
+                ],
+                sha256: ''
+            }
+        ]
+    };
+    constructor(prismaControls) {
+        super({ records: prismaControls });
     }
 }
 exports.PrismaControlMapper = PrismaControlMapper;
 class PrismaMapper {
+    data = [];
     toHdf() {
         const executions = [];
         const hostnameToControls = {};
@@ -193,7 +204,6 @@ class PrismaMapper {
         return executions;
     }
     constructor(prismaCsv) {
-        this.data = [];
         this.data = (0, base_converter_1.parseCsv)(prismaCsv);
     }
 }

package/lib/src/prisma-mapper.js.map

@@ -1 +1 @@
-{"version":3,"file":"prisma-mapper.js","sourceRoot":"","sources":["../../src/prisma-mapper.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCAAkC;AAClC,0CAA4B;AAC5B,kDAAgE;AAChE,qDAK0B;AAC1B,2CAIwB;AAexB,MAAM,eAAe,GAA2B;IAC9C,GAAG,EAAE,GAAG;IACR,QAAQ,EAAE,GAAG;IACb,IAAI,EAAE,GAAG;IACT,SAAS,EAAE,GAAG;IACd,QAAQ,EAAE,CAAC;CACZ,CAAC;AAEF,SAAgB,OAAO,CAAC,MAA0B;IAChD,IAAI,CAAC,MAAM,EAAE;QACX,OAAO,+CAAsC,CAAC;KAC/C;SAAM;QACL,OAAO,6CAAoC,CAAC;KAC7C;AACH,CAAC;AAND,0BAMC;AAED,MAAa,mBAAoB,SAAQ,8BAAa;IAwHpD,YAAY,cAA+B;QACzC,KAAK,CAAC,EAAC,OAAO,EAAE,cAAc,EAAC,CAAC,CAAC;QAxHnC,aAAQ,GAAqD;YAC3D,QAAQ,EAAE;gBACR,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,sBAAoB;gBAC7B,SAAS,EAAE,0BAA0B;aACtC;YACD,OAAO,EAAE,sBAAoB;YAC7B,UAAU,EAAE;gBACV,QAAQ,EAAE,IAAI;aACf;YACD,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,6BAA6B;oBACnC,OAAO,EAAE,EAAE;oBACX,KAAK,EAAE,0BAA0B;oBACjC,UAAU,EAAE,IAAI;oBAChB,OAAO,EAAE,EAAE;oBACX,OAAO,EAAE,IAAI;oBACb,SAAS,EAAE,IAAI;oBACf,eAAe,EAAE,IAAI;oBACrB,QAAQ,EAAE,EAAE;oBACZ,UAAU,EAAE,EAAE;oBACd,OAAO,EAAE,EAAE;oBACX,MAAM,EAAE,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE;wBACR;4BACE,IAAI,EAAE,SAAS;4BACf,GAAG,EAAE,IAAI;4BACT,IAAI,EAAE,EAAC,IAAI,EAAE,aAAa,EAAC;4BAC3B,IAAI,EAAE;gCACJ,GAAG,EAAE;oCACH,IAAI,EAAE,QAAQ;oCACd,WAAW,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,IAAA,2BAAkB,EAAC,OAAO,CAAC,GAAG,CAAC,CAAC;iCAC/D;gCACD,IAAI,EAAE;oCACJ,IAAI,EAAE,QAAQ;oCACd,WAAW,EAAE,OAAO;iCACrB;gCACD,GAAG,EAAE,EAAC,IAAI,EAAE,QAAQ,EAAC;gCACrB,IAAI,EAAE,EAAC,IAAI,EAAE,MAAM,EAAC;6BACrB;4BACD,YAAY,EAAE,EAAE;4BAChB,IAAI,EAAE,CAAC,EAAC,GAAG,EAAE,EAAC,IAAI,EAAE,oBAAoB,EAAC,EAAC,CAAC;4BAC3C,eAAe,EAAE,EAAC,IAAI,EAAE,UAAU,EAAC;4BACnC,EAAE,EAAE;gCACF,WAAW,EAAE,CAAC,IAAmB,EAAE,EAAE;oCACnC,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE;wCAClB,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;qCACrD;yCAAM;wCACL,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;qCACnE;gCACH,CAAC;6BACF;4BACD,KAAK,EAAE;gCACL,WAAW,EAAE,CAAC,IAAmB,EAAE,EAAE,CACnC,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,EAAE;6BACjD;4BACD,MAAM,EAAE;gCACN,IAAI,EAAE,UAAU;gCAChB,WAAW,EAAE,CAAC,QAAgB,EAAE,EAAE;oCAChC,IAAI,QAAQ,EAAE;wCACZ,OAAO,eAAe,CAAC,QAAQ,CAAC,CAAC;qCAClC;yCAAM;wCACL,OAAO,GAAG,CAAC;qCACZ;gCACH,CAAC;6BACF;4BACD,IAAI,EAAE;gCACJ,WAAW,EAAE,CAAC,GAAkB,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;6BAClE;4BACD,OAAO,EAAE;gCACP;oCACE,MAAM,EAAE,mBAAQ,CAAC,mBAAmB,CAAC,MAAM;oCAC3C,SAAS,EAAE;wCACT,WAAW,EAAE,CAAC,GAAkB,EAAE,EAAE;4CAClC,IAAI,MAAM,GAAG,EAAE,CAAC;4CAChB,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,EAAE;gDACxB,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE;oDAC1B,MAAM,IAAI,6BAA6B,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;iDAC1D;6CACF;iDAAM,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,EAAE;gDAC/B,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,EAAE;oDACrB,MAAM,IAAI,2BAA2B,GAAG,CAAC,MAAM,EAAE,CAAC;iDACnD;qDAAM;oDACL,MAAM,IAAI,EAAE,CAAC;iDACd;6CACF;iDAAM;gDACL,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,cAAc,GAAG,CAAC,QAAQ,EAAE,CAAC;6CACnD;4CACD,MAAM,IAAI,OAAO,GAAG,CAAC,WAAW,EAAE,CAAC;4CACnC,OAAO,MAAM,CAAC;wCAChB,CAAC;qCACF;oCACD,OAAO,EAAE;wCACP,WAAW,EAAE,CAAC,GAAkB,EAAE,EAAE;4CAClC,IAAI,MAAM,GAAG,EAAE,CAAC;4CAChB,IAAI,GAAG,CAAC,YAAY,CAAC,KAAK,EAAE,IAAI,GAAG,CAAC,KAAK,KAAK,EAAE,EAAE;gDAChD,MAAM,IAAI,eAAe,GAAG,CAAC,YAAY,CAAC,OAAO,GAAG,CAAC,KAAK,EAAE,CAAC;6CAC9D;iDAAM,IAAI,GAAG,CAAC,YAAY,CAAC,KAAK,EAAE,EAAE;gDACnC,MAAM,IAAI,eAAe,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;6CAC9C;iDAAM,IAAI,GAAG,CAAC,KAAK,KAAK,EAAE,EAAE;gDAC3B,MAAM,IAAI,UAAU,GAAG,CAAC,KAAK,EAAE,CAAC;6CACjC;iDAAM;gDACL,MAAM,IAAI,SAAS,CAAC;6CACrB;4CACD,OAAO,MAAM,CAAC;wCAChB,CAAC;qCACF;oCACD,UAAU,EAAE,EAAC,IAAI,EAAE,WAAW,EAAC;iCAChC;6BACF;yBACF;qBACF;oBACD,MAAM,EAAE,EAAE;iBACX;aACF;SACF,CAAC;IAIF,CAAC;CACF;AA3HD,kDA2HC;AAED,MAAa,YAAY;IAGvB,KAAK;QACH,MAAM,UAAU,GAAyB,EAAE,CAAC;QAC5C,MAAM,kBAAkB,GAAoC,EAAE,CAAC;QAC/D,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAqB,EAAE,EAAE;YAC1C,kBAAkB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;gBACpC,kBAAkB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC;YAC/C,kBAAkB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE;YAClE,MAAM,SAAS,GAAG,IAAI,mBAAmB,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,CAAC;YAC5D,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,oBAAoB,EAAE,QAAQ,CAAC,CAAC;YACjD,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC;QACH,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,YAAY,SAAiB;QAlB7B,SAAI,GAAoB,EAAE,CAAC;QAmBzB,IAAI,CAAC,IAAI,GAAG,IAAA,yBAAQ,EAAC,SAAS,CAAoB,CAAC;IACrD,CAAC;CACF;AAtBD,oCAsBC"}
+{"version":3,"file":"prisma-mapper.js","sourceRoot":"","sources":["../../src/prisma-mapper.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoCA,0BAMC;AA1CD,uCAAkC;AAClC,0CAA4B;AAC5B,kDAAgE;AAChE,qDAK0B;AAC1B,2CAIwB;AAexB,MAAM,eAAe,GAA2B;IAC9C,GAAG,EAAE,GAAG;IACR,QAAQ,EAAE,GAAG;IACb,IAAI,EAAE,GAAG;IACT,SAAS,EAAE,GAAG;IACd,QAAQ,EAAE,CAAC;CACZ,CAAC;AAEF,SAAgB,OAAO,CAAC,MAA0B;IAChD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,+CAAsC,CAAC;IAChD,CAAC;SAAM,CAAC;QACN,OAAO,6CAAoC,CAAC;IAC9C,CAAC;AACH,CAAC;AAED,MAAa,mBAAoB,SAAQ,8BAAa;IACpD,QAAQ,GAAqD;QAC3D,QAAQ,EAAE;YACR,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,sBAAoB;YAC7B,SAAS,EAAE,0BAA0B;SACtC;QACD,OAAO,EAAE,sBAAoB;QAC7B,UAAU,EAAE;YACV,QAAQ,EAAE,IAAI;SACf;QACD,QAAQ,EAAE;YACR;gBACE,IAAI,EAAE,6BAA6B;gBACnC,OAAO,EAAE,EAAE;gBACX,KAAK,EAAE,0BAA0B;gBACjC,UAAU,EAAE,IAAI;gBAChB,OAAO,EAAE,EAAE;gBACX,OAAO,EAAE,IAAI;gBACb,SAAS,EAAE,IAAI;gBACf,eAAe,EAAE,IAAI;gBACrB,QAAQ,EAAE,EAAE;gBACZ,UAAU,EAAE,EAAE;gBACd,OAAO,EAAE,EAAE;gBACX,MAAM,EAAE,EAAE;gBACV,MAAM,EAAE,QAAQ;gBAChB,QAAQ,EAAE;oBACR;wBACE,IAAI,EAAE,SAAS;wBACf,GAAG,EAAE,IAAI;wBACT,IAAI,EAAE,EAAC,IAAI,EAAE,aAAa,EAAC;wBAC3B,IAAI,EAAE;4BACJ,GAAG,EAAE;gCACH,IAAI,EAAE,QAAQ;gCACd,WAAW,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,IAAA,2BAAkB,EAAC,OAAO,CAAC,GAAG,CAAC,CAAC;6BAC/D;4BACD,IAAI,EAAE;gCACJ,IAAI,EAAE,QAAQ;gCACd,WAAW,EAAE,OAAO;6BACrB;4BACD,GAAG,EAAE,EAAC,IAAI,EAAE,QAAQ,EAAC;4BACrB,IAAI,EAAE,EAAC,IAAI,EAAE,MAAM,EAAC;yBACrB;wBACD,YAAY,EAAE,EAAE;wBAChB,IAAI,EAAE,CAAC,EAAC,GAAG,EAAE,EAAC,IAAI,EAAE,oBAAoB,EAAC,EAAC,CAAC;wBAC3C,eAAe,EAAE,EAAC,IAAI,EAAE,UAAU,EAAC;wBACnC,EAAE,EAAE;4BACF,WAAW,EAAE,CAAC,IAAmB,EAAE,EAAE;gCACnC,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;oCACnB,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gCACtD,CAAC;qCAAM,CAAC;oCACN,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gCACpE,CAAC;4BACH,CAAC;yBACF;wBACD,KAAK,EAAE;4BACL,WAAW,EAAE,CAAC,IAAmB,EAAE,EAAE,CACnC,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,EAAE;yBACjD;wBACD,MAAM,EAAE;4BACN,IAAI,EAAE,UAAU;4BAChB,WAAW,EAAE,CAAC,QAAgB,EAAE,EAAE;gCAChC,IAAI,QAAQ,EAAE,CAAC;oCACb,OAAO,eAAe,CAAC,QAAQ,CAAC,CAAC;gCACnC,CAAC;qCAAM,CAAC;oCACN,OAAO,GAAG,CAAC;gCACb,CAAC;4BACH,CAAC;yBACF;wBACD,IAAI,EAAE;4BACJ,WAAW,EAAE,CAAC,GAAkB,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;yBAClE;wBACD,OAAO,EAAE;4BACP;gCACE,MAAM,EAAE,mBAAQ,CAAC,mBAAmB,CAAC,MAAM;gCAC3C,SAAS,EAAE;oCACT,WAAW,EAAE,CAAC,GAAkB,EAAE,EAAE;wCAClC,IAAI,MAAM,GAAG,EAAE,CAAC;wCAChB,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;4CACzB,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,CAAC;gDAC3B,MAAM,IAAI,6BAA6B,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;4CAC3D,CAAC;wCACH,CAAC;6CAAM,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;4CAChC,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;gDACtB,MAAM,IAAI,2BAA2B,GAAG,CAAC,MAAM,EAAE,CAAC;4CACpD,CAAC;iDAAM,CAAC;gDACN,MAAM,IAAI,EAAE,CAAC;4CACf,CAAC;wCACH,CAAC;6CAAM,CAAC;4CACN,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,cAAc,GAAG,CAAC,QAAQ,EAAE,CAAC;wCACpD,CAAC;wCACD,MAAM,IAAI,OAAO,GAAG,CAAC,WAAW,EAAE,CAAC;wCACnC,OAAO,MAAM,CAAC;oCAChB,CAAC;iCACF;gCACD,OAAO,EAAE;oCACP,WAAW,EAAE,CAAC,GAAkB,EAAE,EAAE;wCAClC,IAAI,MAAM,GAAG,EAAE,CAAC;wCAChB,IAAI,GAAG,CAAC,YAAY,CAAC,KAAK,EAAE,IAAI,GAAG,CAAC,KAAK,KAAK,EAAE,EAAE,CAAC;4CACjD,MAAM,IAAI,eAAe,GAAG,CAAC,YAAY,CAAC,OAAO,GAAG,CAAC,KAAK,EAAE,CAAC;wCAC/D,CAAC;6CAAM,IAAI,GAAG,CAAC,YAAY,CAAC,KAAK,EAAE,EAAE,CAAC;4CACpC,MAAM,IAAI,eAAe,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;wCAC/C,CAAC;6CAAM,IAAI,GAAG,CAAC,KAAK,KAAK,EAAE,EAAE,CAAC;4CAC5B,MAAM,IAAI,UAAU,GAAG,CAAC,KAAK,EAAE,CAAC;wCAClC,CAAC;6CAAM,CAAC;4CACN,MAAM,IAAI,SAAS,CAAC;wCACtB,CAAC;wCACD,OAAO,MAAM,CAAC;oCAChB,CAAC;iCACF;gCACD,UAAU,EAAE,EAAC,IAAI,EAAE,WAAW,EAAC;6BAChC;yBACF;qBACF;iBACF;gBACD,MAAM,EAAE,EAAE;aACX;SACF;KACF,CAAC;IAEF,YAAY,cAA+B;QACzC,KAAK,CAAC,EAAC,OAAO,EAAE,cAAc,EAAC,CAAC,CAAC;IACnC,CAAC;CACF;AA3HD,kDA2HC;AAED,MAAa,YAAY;IACvB,IAAI,GAAoB,EAAE,CAAC;IAE3B,KAAK;QACH,MAAM,UAAU,GAAyB,EAAE,CAAC;QAC5C,MAAM,kBAAkB,GAAoC,EAAE,CAAC;QAC/D,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAqB,EAAE,EAAE;YAC1C,kBAAkB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;gBACpC,kBAAkB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC;YAC/C,kBAAkB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE;YAClE,MAAM,SAAS,GAAG,IAAI,mBAAmB,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,CAAC;YAC5D,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,oBAAoB,EAAE,QAAQ,CAAC,CAAC;YACjD,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC;QACH,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,YAAY,SAAiB;QAC3B,IAAI,CAAC,IAAI,GAAG,IAAA,yBAAQ,EAAC,SAAS,CAAoB,CAAC;IACrD,CAAC;CACF;AAtBD,oCAsBC","sourcesContent":["import {ExecJSON} from 'inspecjs';\nimport * as _ from 'lodash';\nimport {version as HeimdallToolsVersion} from '../package.json';\nimport {\n  BaseConverter,\n  ILookupPath,\n  MappedTransform,\n  parseCsv\n} from './base-converter';\nimport {\n  DEFAULT_STATIC_CODE_ANALYSIS_NIST_TAGS,\n  DEFAULT_UPDATE_REMEDIATION_NIST_TAGS,\n  getCCIsForNISTTags\n} from './utils/global';\n\nexport type PrismaControl = {\n  Packages: string;\n  Description: string;\n  Distro: string;\n  Type: string;\n  Hostname: string;\n  'Compliance ID': string;\n  'Fix Status'?: string;\n  'CVE ID': string;\n  Severity: string;\n  Cause?: string;\n};\n\nconst SEVERITY_LOOKUP: Record<string, number> = {\n  low: 0.3,\n  moderate: 0.5,\n  high: 0.7,\n  important: 0.9,\n  critical: 1\n};\n\nexport function nistTag(cveTag: string | undefined) {\n  if (!cveTag) {\n    return DEFAULT_STATIC_CODE_ANALYSIS_NIST_TAGS;\n  } else {\n    return DEFAULT_UPDATE_REMEDIATION_NIST_TAGS;\n  }\n}\n\nexport class PrismaControlMapper extends BaseConverter {\n  mappings: MappedTransform<ExecJSON.Execution, ILookupPath> = {\n    platform: {\n      name: 'Heimdall Tools',\n      release: HeimdallToolsVersion,\n      target_id: 'Prisma Cloud Scan Report'\n    },\n    version: HeimdallToolsVersion,\n    statistics: {\n      duration: null\n    },\n    profiles: [\n      {\n        name: 'Palo Alto Prisma Cloud Tool',\n        version: '',\n        title: 'Prisma Cloud Scan Report',\n        maintainer: null,\n        summary: '',\n        license: null,\n        copyright: null,\n        copyright_email: null,\n        supports: [],\n        attributes: [],\n        depends: [],\n        groups: [],\n        status: 'loaded',\n        controls: [\n          {\n            path: 'records',\n            key: 'id',\n            desc: {path: 'Description'},\n            tags: {\n              cci: {\n                path: 'CVE ID',\n                transformer: (cve: string) => getCCIsForNISTTags(nistTag(cve))\n              },\n              nist: {\n                path: 'CVE ID',\n                transformer: nistTag\n              },\n              cve: {path: 'CVE ID'},\n              cvss: {path: 'cssv'}\n            },\n            descriptions: [],\n            refs: [{url: {path: 'Vulnerability Link'}}],\n            source_location: {path: 'Hostname'},\n            id: {\n              transformer: (item: PrismaControl) => {\n                if (item['CVE ID']) {\n                  return `${item['Compliance ID']}-${item['CVE ID']}`;\n                } else {\n                  return `${item['Compliance ID']}-${item.Distro}-${item.Severity}`;\n                }\n              }\n            },\n            title: {\n              transformer: (item: PrismaControl) =>\n                `${item.Hostname}-${item.Distro}-${item.Type}`\n            },\n            impact: {\n              path: 'Severity',\n              transformer: (severity: string) => {\n                if (severity) {\n                  return SEVERITY_LOOKUP[severity];\n                } else {\n                  return 0.5;\n                }\n              }\n            },\n            code: {\n              transformer: (obj: PrismaControl) => JSON.stringify(obj, null, 2)\n            },\n            results: [\n              {\n                status: ExecJSON.ControlResultStatus.Failed,\n                code_desc: {\n                  transformer: (obj: PrismaControl) => {\n                    let result = '';\n                    if (obj.Type === 'image') {\n                      if (obj['Packages'] !== '') {\n                        result += `Version check of package: ${obj['Packages']}`;\n                      }\n                    } else if (obj.Type === 'linux') {\n                      if (obj.Distro !== '') {\n                        result += `Configuration check for ${obj.Distro}`;\n                      } else {\n                        result += ``;\n                      }\n                    } else {\n                      result += `${obj.Type} check for ${obj.Hostname}`;\n                    }\n                    result += `\\n\\n${obj.Description}`;\n                    return result;\n                  }\n                },\n                message: {\n                  transformer: (obj: PrismaControl) => {\n                    let result = '';\n                    if (obj['Fix Status'] !== '' && obj.Cause !== '') {\n                      result += `Fix Status: ${obj['Fix Status']}\\n\\n${obj.Cause}`;\n                    } else if (obj['Fix Status'] !== '') {\n                      result += `Fix Status: ${obj['Fix Status']}`;\n                    } else if (obj.Cause !== '') {\n                      result += `Cause: ${obj.Cause}`;\n                    } else {\n                      result += 'Unknown';\n                    }\n                    return result;\n                  }\n                },\n                start_time: {path: 'Published'}\n              }\n            ]\n          }\n        ],\n        sha256: ''\n      }\n    ]\n  };\n\n  constructor(prismaControls: PrismaControl[]) {\n    super({records: prismaControls});\n  }\n}\n\nexport class PrismaMapper {\n  data: PrismaControl[] = [];\n\n  toHdf(): ExecJSON.Execution[] {\n    const executions: ExecJSON.Execution[] = [];\n    const hostnameToControls: Record<string, PrismaControl[]> = {};\n    this.data.forEach((record: PrismaControl) => {\n      hostnameToControls[record['Hostname']] =\n        hostnameToControls[record['Hostname']] || [];\n      hostnameToControls[record['Hostname']].push(record);\n    });\n    Object.entries(hostnameToControls).forEach(([hostname, controls]) => {\n      const converted = new PrismaControlMapper(controls).toHdf();\n      _.set(converted, 'platform.target_id', hostname);\n      executions.push(converted);\n    });\n    return executions;\n  }\n\n  constructor(prismaCsv: string) {\n    this.data = parseCsv(prismaCsv) as PrismaControl[];\n  }\n}\n"]}

package/lib/src/sarif-mapper.d.ts

@@ -7,3 +7,4 @@ export declare class SarifMapper extends BaseConverter {
     }, ILookupPath>;
     constructor(sarifJson: string, withRaw?: boolean);
 }
+//# sourceMappingURL=sarif-mapper.d.ts.map

package/lib/src/sarif-mapper.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sarif-mapper.d.ts","sourceRoot":"","sources":["../../src/sarif-mapper.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,QAAQ,EAAC,MAAM,UAAU,CAAC;AAGlC,OAAO,EAAC,aAAa,EAAE,WAAW,EAAE,eAAe,EAAC,MAAM,kBAAkB,CAAC;AA6C7E,qBAAa,WAAY,SAAQ,aAAa;IAC5C,OAAO,EAAE,OAAO,CAAC;IAEjB,QAAQ,EAAE,eAAe,CACvB,QAAQ,CAAC,SAAS,GAAG;QAAC,WAAW,EAAE,OAAO,CAAA;KAAC,EAC3C,WAAW,CACZ,CAmHC;gBACU,SAAS,EAAE,MAAM,EAAE,OAAO,UAAQ;CAI/C"}

package/lib/src/sarif-mapper.js

@@ -15,13 +15,23 @@ var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (
 }) : function(o, v) {
     o["default"] = v;
 });
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
-};
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.SarifMapper = void 0;
 const inspecjs_1 = require("inspecjs");
@@ -65,113 +75,114 @@ function nistTag(text) {
     return CWE_NIST_MAPPING.nistFilter(identifiers, global_1.DEFAULT_STATIC_CODE_ANALYSIS_NIST_TAGS);
 }
 class SarifMapper extends base_converter_1.BaseConverter {
-    constructor(sarifJson, withRaw = false) {
-        super(JSON.parse(sarifJson));
-        this.mappings = {
-            platform: {
-                name: 'Heimdall Tools',
-                release: package_json_1.version,
-                target_id: 'Static Analysis Results Interchange Format'
-            },
-            version: package_json_1.version,
-            statistics: {},
-            profiles: [
-                {
-                    path: 'runs',
-                    name: 'SARIF',
-                    version: { path: '$.version' },
-                    title: 'Static Analysis Results Interchange Format',
-                    supports: [],
-                    attributes: [],
-                    groups: [],
-                    status: 'loaded',
-                    controls: [
-                        {
-                            path: 'results',
-                            key: 'id',
-                            tags: {
-                                cci: {
-                                    path: 'vulnerabilityClassifications',
-                                    transformer: (data) => (0, global_1.getCCIsForNISTTags)(nistTag(data))
-                                },
-                                nist: { path: MESSAGE_TEXT, transformer: nistTag },
-                                cwe: {
-                                    path: MESSAGE_TEXT,
-                                    transformer: extractCwe
-                                }
-                            },
-                            refs: [],
-                            source_location: {
-                                transformer: (control) => {
-                                    return _.omitBy({
-                                        ref: _.get(control, 'locations[0].physicalLocation.artifactLocation.uri'),
-                                        line: _.get(control, 'locations[0].physicalLocation.region.startLine')
-                                    }, (value) => value === '');
-                                }
+    withRaw;
+    mappings = {
+        platform: {
+            name: 'Heimdall Tools',
+            release: package_json_1.version,
+            target_id: 'Static Analysis Results Interchange Format'
+        },
+        version: package_json_1.version,
+        statistics: {},
+        profiles: [
+            {
+                path: 'runs',
+                name: 'SARIF',
+                version: { path: '$.version' },
+                title: 'Static Analysis Results Interchange Format',
+                supports: [],
+                attributes: [],
+                groups: [],
+                status: 'loaded',
+                controls: [
+                    {
+                        path: 'results',
+                        key: 'id',
+                        tags: {
+                            cci: {
+                                path: 'vulnerabilityClassifications',
+                                transformer: (data) => (0, global_1.getCCIsForNISTTags)(nistTag(data))
                             },
-                            title: {
+                            nist: { path: MESSAGE_TEXT, transformer: nistTag },
+                            cwe: {
                                 path: MESSAGE_TEXT,
-                                transformer: (text) => {
-                                    if (typeof text === 'string') {
-                                        return text.split(': ')[0];
-                                    }
-                                    else {
-                                        return '';
-                                    }
+                                transformer: extractCwe
+                            }
+                        },
+                        refs: [],
+                        source_location: {
+                            transformer: (control) => {
+                                return _.omitBy({
+                                    ref: _.get(control, 'locations[0].physicalLocation.artifactLocation.uri'),
+                                    line: _.get(control, 'locations[0].physicalLocation.region.startLine')
+                                }, (value) => value === '');
+                            }
+                        },
+                        title: {
+                            path: MESSAGE_TEXT,
+                            transformer: (text) => {
+                                if (typeof text === 'string') {
+                                    return text.split(': ')[0];
                                 }
-                            },
-                            id: { path: 'ruleId' },
-                            desc: {
-                                path: MESSAGE_TEXT,
-                                transformer: (text) => {
-                                    if (typeof text === 'string') {
-                                        return text.split(': ')[1];
-                                    }
-                                    else {
-                                        return '';
-                                    }
+                                else {
+                                    return '';
                                 }
-                            },
-                            impact: { path: 'level', transformer: impactMapping },
-                            code: {
-                                transformer: (vulnerability) => JSON.stringify(vulnerability, null, 2)
-                            },
-                            results: [
-                                {
-                                    status: inspecjs_1.ExecJSON.ControlResultStatus.Failed,
-                                    code_desc: {
-                                        path: 'locations[0].physicalLocation',
-                                        transformer: formatCodeDesc
-                                    },
-                                    start_time: ''
+                            }
+                        },
+                        id: { path: 'ruleId' },
+                        desc: {
+                            path: MESSAGE_TEXT,
+                            transformer: (text) => {
+                                if (typeof text === 'string') {
+                                    return text.split(': ')[1];
                                 }
-                            ]
-                        }
-                    ],
-                    sha256: ''
-                }
-            ],
-            passthrough: {
-                transformer: (data) => {
-                    let runsData = _.get(data, 'runs');
-                    if (Array.isArray(runsData)) {
-                        runsData = runsData.map((run) => _.omit(run, ['results']));
-                    }
-                    return {
-                        auxiliary_data: [
-                            {
-                                name: 'SARIF',
-                                data: {
-                                    $schema: _.get(data, '$schema'),
-                                    runs: runsData
+                                else {
+                                    return '';
                                 }
                             }
-                        ],
-                        ...(this.withRaw && { raw: data })
-                    };
+                        },
+                        impact: { path: 'level', transformer: impactMapping },
+                        code: {
+                            transformer: (vulnerability) => JSON.stringify(vulnerability, null, 2)
+                        },
+                        results: [
+                            {
+                                status: inspecjs_1.ExecJSON.ControlResultStatus.Failed,
+                                code_desc: {
+                                    path: 'locations[0].physicalLocation',
+                                    transformer: formatCodeDesc
+                                },
+                                start_time: ''
+                            }
+                        ]
+                    }
+                ],
+                sha256: ''
+            }
+        ],
+        passthrough: {
+            transformer: (data) => {
+                let runsData = _.get(data, 'runs');
+                if (Array.isArray(runsData)) {
+                    runsData = runsData.map((run) => _.omit(run, ['results']));
                 }
+                return {
+                    auxiliary_data: [
+                        {
+                            name: 'SARIF',
+                            data: {
+                                $schema: _.get(data, '$schema'),
+                                runs: runsData
+                            }
+                        }
+                    ],
+                    ...(this.withRaw && { raw: data })
+                };
             }
-        };
+        }
+    };
+    constructor(sarifJson, withRaw = false) {
+        super(JSON.parse(sarifJson));
         this.withRaw = withRaw;
     }
 }

package/lib/src/sarif-mapper.js.map

@@ -1 +1 @@
-{"version":3,"file":"sarif-mapper.js","sourceRoot":"","sources":["../../src/sarif-mapper.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCAAkC;AAClC,0CAA4B;AAC5B,kDAAgE;AAChE,qDAA6E;AAC7E,8DAAyD;AACzD,2CAGwB;AAExB,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC;IAClD,CAAC,OAAO,EAAE,GAAG,CAAC;IACd,CAAC,SAAS,EAAE,GAAG,CAAC;IAChB,CAAC,MAAM,EAAE,GAAG,CAAC;CACd,CAAC,CAAC;AACH,MAAM,YAAY,GAAG,cAAc,CAAC;AACpC,MAAM,gBAAgB,GAAG,IAAI,+BAAc,EAAE,CAAC;AAE9C,SAAS,UAAU,CAAC,IAAY;IAC9B,IAAI,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE;QACvB,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;KAChE;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,SAAS,aAAa,CAAC,QAAiB;IACtC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE;QAChE,OAAO,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,CAAC,IAAI,GAAG,CAAC;KACrE;SAAM;QACL,OAAO,GAAG,CAAC;KACZ;AACH,CAAC;AACD,SAAS,cAAc,CAAC,KAAc;IACpC,MAAM,MAAM,GAAG,EAAE,CAAC;IAClB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,sBAAsB,CAAC,EAAE,CAAC,CAAC;IAC7D,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,kBAAkB,CAAC,EAAE,CAAC,CAAC;IAC1D,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,oBAAoB,CAAC,EAAE,CAAC,CAAC;IAC9D,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC1B,CAAC;AACD,SAAS,OAAO,CAAC,IAAY;IAC3B,IAAI,WAAW,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IACnC,WAAW,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClE,OAAO,gBAAgB,CAAC,UAAU,CAChC,WAAW,EACX,+CAAsC,CACvC,CAAC;AACJ,CAAC;AAED,MAAa,WAAY,SAAQ,8BAAa;IA0H5C,YAAY,SAAiB,EAAE,OAAO,GAAG,KAAK;QAC5C,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QAxH/B,aAAQ,GAGJ;YACF,QAAQ,EAAE;gBACR,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,sBAAoB;gBAC7B,SAAS,EAAE,4CAA4C;aACxD;YACD,OAAO,EAAE,sBAAoB;YAC7B,UAAU,EAAE,EAAE;YACd,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,OAAO;oBACb,OAAO,EAAE,EAAC,IAAI,EAAE,WAAW,EAAC;oBAC5B,KAAK,EAAE,4CAA4C;oBACnD,QAAQ,EAAE,EAAE;oBACZ,UAAU,EAAE,EAAE;oBACd,MAAM,EAAE,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE;wBACR;4BACE,IAAI,EAAE,SAAS;4BACf,GAAG,EAAE,IAAI;4BACT,IAAI,EAAE;gCACJ,GAAG,EAAE;oCACH,IAAI,EAAE,8BAA8B;oCACpC,WAAW,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,IAAA,2BAAkB,EAAC,OAAO,CAAC,IAAI,CAAC,CAAC;iCACjE;gCACD,IAAI,EAAE,EAAC,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,OAAO,EAAC;gCAChD,GAAG,EAAE;oCACH,IAAI,EAAE,YAAY;oCAClB,WAAW,EAAE,UAAU;iCACxB;6BACF;4BACD,IAAI,EAAE,EAAE;4BACR,eAAe,EAAE;gCACf,WAAW,EAAE,CAAC,OAAgB,EAAE,EAAE;oCAChC,OAAO,CAAC,CAAC,MAAM,CACb;wCACE,GAAG,EAAE,CAAC,CAAC,GAAG,CACR,OAAO,EACP,oDAAoD,CACrD;wCACD,IAAI,EAAE,CAAC,CAAC,GAAG,CACT,OAAO,EACP,gDAAgD,CACjD;qCACF,EACD,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,EAAE,CACxB,CAAC;gCACJ,CAAC;6BACF;4BACD,KAAK,EAAE;gCACL,IAAI,EAAE,YAAY;gCAClB,WAAW,EAAE,CAAC,IAAa,EAAU,EAAE;oCACrC,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE;wCAC5B,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;qCAC5B;yCAAM;wCACL,OAAO,EAAE,CAAC;qCACX;gCACH,CAAC;6BACF;4BACD,EAAE,EAAE,EAAC,IAAI,EAAE,QAAQ,EAAC;4BACpB,IAAI,EAAE;gCACJ,IAAI,EAAE,YAAY;gCAClB,WAAW,EAAE,CAAC,IAAa,EAAU,EAAE;oCACrC,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE;wCAC5B,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;qCAC5B;yCAAM;wCACL,OAAO,EAAE,CAAC;qCACX;gCACH,CAAC;6BACF;4BACD,MAAM,EAAE,EAAC,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAC;4BACnD,IAAI,EAAE;gCACJ,WAAW,EAAE,CAAC,aAAsC,EAAU,EAAE,CAC9D,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;6BACzC;4BACD,OAAO,EAAE;gCACP;oCACE,MAAM,EAAE,mBAAQ,CAAC,mBAAmB,CAAC,MAAM;oCAC3C,SAAS,EAAE;wCACT,IAAI,EAAE,+BAA+B;wCACrC,WAAW,EAAE,cAAc;qCAC5B;oCAED,UAAU,EAAE,EAAE;iCACf;6BACF;yBACF;qBACF;oBACD,MAAM,EAAE,EAAE;iBACX;aACF;YACD,WAAW,EAAE;gBACX,WAAW,EAAE,CAAC,IAA6B,EAA2B,EAAE;oBACtE,IAAI,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;oBACnC,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE;wBAC3B,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,GAA4B,EAAE,EAAE,CACvD,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CACzB,CAAC;qBACH;oBACD,OAAO;wBACL,cAAc,EAAE;4BACd;gCACE,IAAI,EAAE,OAAO;gCACb,IAAI,EAAE;oCACJ,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC;oCAC/B,IAAI,EAAE,QAAQ;iCACf;6BACF;yBACF;wBACD,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAC,GAAG,EAAE,IAAI,EAAC,CAAC;qBACjC,CAAC;gBACJ,CAAC;aACF;SACF,CAAC;QAGA,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;CACF;AA9HD,kCA8HC"}
+{"version":3,"file":"sarif-mapper.js","sourceRoot":"","sources":["../../src/sarif-mapper.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCAAkC;AAClC,0CAA4B;AAC5B,kDAAgE;AAChE,qDAA6E;AAC7E,8DAAyD;AACzD,2CAGwB;AAExB,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC;IAClD,CAAC,OAAO,EAAE,GAAG,CAAC;IACd,CAAC,SAAS,EAAE,GAAG,CAAC;IAChB,CAAC,MAAM,EAAE,GAAG,CAAC;CACd,CAAC,CAAC;AACH,MAAM,YAAY,GAAG,cAAc,CAAC;AACpC,MAAM,gBAAgB,GAAG,IAAI,+BAAc,EAAE,CAAC;AAE9C,SAAS,UAAU,CAAC,IAAY;IAC9B,IAAI,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,SAAS,aAAa,CAAC,QAAiB;IACtC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjE,OAAO,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,CAAC,IAAI,GAAG,CAAC;IACtE,CAAC;SAAM,CAAC;QACN,OAAO,GAAG,CAAC;IACb,CAAC;AACH,CAAC;AACD,SAAS,cAAc,CAAC,KAAc;IACpC,MAAM,MAAM,GAAG,EAAE,CAAC;IAClB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,sBAAsB,CAAC,EAAE,CAAC,CAAC;IAC7D,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,kBAAkB,CAAC,EAAE,CAAC,CAAC;IAC1D,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,oBAAoB,CAAC,EAAE,CAAC,CAAC;IAC9D,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC1B,CAAC;AACD,SAAS,OAAO,CAAC,IAAY;IAC3B,IAAI,WAAW,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IACnC,WAAW,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClE,OAAO,gBAAgB,CAAC,UAAU,CAChC,WAAW,EACX,+CAAsC,CACvC,CAAC;AACJ,CAAC;AAED,MAAa,WAAY,SAAQ,8BAAa;IAC5C,OAAO,CAAU;IAEjB,QAAQ,GAGJ;QACF,QAAQ,EAAE;YACR,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,sBAAoB;YAC7B,SAAS,EAAE,4CAA4C;SACxD;QACD,OAAO,EAAE,sBAAoB;QAC7B,UAAU,EAAE,EAAE;QACd,QAAQ,EAAE;YACR;gBACE,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,EAAC,IAAI,EAAE,WAAW,EAAC;gBAC5B,KAAK,EAAE,4CAA4C;gBACnD,QAAQ,EAAE,EAAE;gBACZ,UAAU,EAAE,EAAE;gBACd,MAAM,EAAE,EAAE;gBACV,MAAM,EAAE,QAAQ;gBAChB,QAAQ,EAAE;oBACR;wBACE,IAAI,EAAE,SAAS;wBACf,GAAG,EAAE,IAAI;wBACT,IAAI,EAAE;4BACJ,GAAG,EAAE;gCACH,IAAI,EAAE,8BAA8B;gCACpC,WAAW,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,IAAA,2BAAkB,EAAC,OAAO,CAAC,IAAI,CAAC,CAAC;6BACjE;4BACD,IAAI,EAAE,EAAC,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,OAAO,EAAC;4BAChD,GAAG,EAAE;gCACH,IAAI,EAAE,YAAY;gCAClB,WAAW,EAAE,UAAU;6BACxB;yBACF;wBACD,IAAI,EAAE,EAAE;wBACR,eAAe,EAAE;4BACf,WAAW,EAAE,CAAC,OAAgB,EAAE,EAAE;gCAChC,OAAO,CAAC,CAAC,MAAM,CACb;oCACE,GAAG,EAAE,CAAC,CAAC,GAAG,CACR,OAAO,EACP,oDAAoD,CACrD;oCACD,IAAI,EAAE,CAAC,CAAC,GAAG,CACT,OAAO,EACP,gDAAgD,CACjD;iCACF,EACD,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,EAAE,CACxB,CAAC;4BACJ,CAAC;yBACF;wBACD,KAAK,EAAE;4BACL,IAAI,EAAE,YAAY;4BAClB,WAAW,EAAE,CAAC,IAAa,EAAU,EAAE;gCACrC,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;oCAC7B,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;gCAC7B,CAAC;qCAAM,CAAC;oCACN,OAAO,EAAE,CAAC;gCACZ,CAAC;4BACH,CAAC;yBACF;wBACD,EAAE,EAAE,EAAC,IAAI,EAAE,QAAQ,EAAC;wBACpB,IAAI,EAAE;4BACJ,IAAI,EAAE,YAAY;4BAClB,WAAW,EAAE,CAAC,IAAa,EAAU,EAAE;gCACrC,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;oCAC7B,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;gCAC7B,CAAC;qCAAM,CAAC;oCACN,OAAO,EAAE,CAAC;gCACZ,CAAC;4BACH,CAAC;yBACF;wBACD,MAAM,EAAE,EAAC,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAC;wBACnD,IAAI,EAAE;4BACJ,WAAW,EAAE,CAAC,aAAsC,EAAU,EAAE,CAC9D,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;yBACzC;wBACD,OAAO,EAAE;4BACP;gCACE,MAAM,EAAE,mBAAQ,CAAC,mBAAmB,CAAC,MAAM;gCAC3C,SAAS,EAAE;oCACT,IAAI,EAAE,+BAA+B;oCACrC,WAAW,EAAE,cAAc;iCAC5B;gCAED,UAAU,EAAE,EAAE;6BACf;yBACF;qBACF;iBACF;gBACD,MAAM,EAAE,EAAE;aACX;SACF;QACD,WAAW,EAAE;YACX,WAAW,EAAE,CAAC,IAA6B,EAA2B,EAAE;gBACtE,IAAI,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBACnC,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC5B,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,GAA4B,EAAE,EAAE,CACvD,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CACzB,CAAC;gBACJ,CAAC;gBACD,OAAO;oBACL,cAAc,EAAE;wBACd;4BACE,IAAI,EAAE,OAAO;4BACb,IAAI,EAAE;gCACJ,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC;gCAC/B,IAAI,EAAE,QAAQ;6BACf;yBACF;qBACF;oBACD,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAC,GAAG,EAAE,IAAI,EAAC,CAAC;iBACjC,CAAC;YACJ,CAAC;SACF;KACF,CAAC;IACF,YAAY,SAAiB,EAAE,OAAO,GAAG,KAAK;QAC5C,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QAC7B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;CACF;AA9HD,kCA8HC","sourcesContent":["import {ExecJSON} from 'inspecjs';\nimport * as _ from 'lodash';\nimport {version as HeimdallToolsVersion} from '../package.json';\nimport {BaseConverter, ILookupPath, MappedTransform} from './base-converter';\nimport {CweNistMapping} from './mappings/CweNistMapping';\nimport {\n  DEFAULT_STATIC_CODE_ANALYSIS_NIST_TAGS,\n  getCCIsForNISTTags\n} from './utils/global';\n\nconst IMPACT_MAPPING: Map<string, number> = new Map([\n  ['error', 0.7],\n  ['warning', 0.5],\n  ['note', 0.3]\n]);\nconst MESSAGE_TEXT = 'message.text';\nconst CWE_NIST_MAPPING = new CweNistMapping();\n\nfunction extractCwe(text: string): string[] {\n  let output = text.split('(').slice(-1)[0].slice(0, -2).split(', ');\n  if (output.length === 1) {\n    output = text.split('(').slice(-1)[0].slice(0, -2).split('!/');\n  }\n  return output;\n}\nfunction impactMapping(severity: unknown): number {\n  if (typeof severity === 'string' || typeof severity === 'number') {\n    return IMPACT_MAPPING.get(severity.toString().toLowerCase()) || 0.1;\n  } else {\n    return 0.1;\n  }\n}\nfunction formatCodeDesc(input: unknown): string {\n  const output = [];\n  output.push(`URL : ${_.get(input, 'artifactLocation.uri')}`);\n  output.push(`LINE : ${_.get(input, 'region.startLine')}`);\n  output.push(`COLUMN : ${_.get(input, 'region.startColumn')}`);\n  return output.join(' ');\n}\nfunction nistTag(text: string): string[] {\n  let identifiers = extractCwe(text);\n  identifiers = identifiers.map((element) => element.split('-')[1]);\n  return CWE_NIST_MAPPING.nistFilter(\n    identifiers,\n    DEFAULT_STATIC_CODE_ANALYSIS_NIST_TAGS\n  );\n}\n\nexport class SarifMapper extends BaseConverter {\n  withRaw: boolean;\n\n  mappings: MappedTransform<\n    ExecJSON.Execution & {passthrough: unknown},\n    ILookupPath\n  > = {\n    platform: {\n      name: 'Heimdall Tools',\n      release: HeimdallToolsVersion,\n      target_id: 'Static Analysis Results Interchange Format'\n    },\n    version: HeimdallToolsVersion,\n    statistics: {},\n    profiles: [\n      {\n        path: 'runs',\n        name: 'SARIF',\n        version: {path: '$.version'},\n        title: 'Static Analysis Results Interchange Format',\n        supports: [],\n        attributes: [],\n        groups: [],\n        status: 'loaded',\n        controls: [\n          {\n            path: 'results',\n            key: 'id',\n            tags: {\n              cci: {\n                path: 'vulnerabilityClassifications',\n                transformer: (data: string) => getCCIsForNISTTags(nistTag(data))\n              },\n              nist: {path: MESSAGE_TEXT, transformer: nistTag},\n              cwe: {\n                path: MESSAGE_TEXT,\n                transformer: extractCwe\n              }\n            },\n            refs: [],\n            source_location: {\n              transformer: (control: unknown) => {\n                return _.omitBy(\n                  {\n                    ref: _.get(\n                      control,\n                      'locations[0].physicalLocation.artifactLocation.uri'\n                    ),\n                    line: _.get(\n                      control,\n                      'locations[0].physicalLocation.region.startLine'\n                    )\n                  },\n                  (value) => value === ''\n                );\n              }\n            },\n            title: {\n              path: MESSAGE_TEXT,\n              transformer: (text: unknown): string => {\n                if (typeof text === 'string') {\n                  return text.split(': ')[0];\n                } else {\n                  return '';\n                }\n              }\n            },\n            id: {path: 'ruleId'},\n            desc: {\n              path: MESSAGE_TEXT,\n              transformer: (text: unknown): string => {\n                if (typeof text === 'string') {\n                  return text.split(': ')[1];\n                } else {\n                  return '';\n                }\n              }\n            },\n            impact: {path: 'level', transformer: impactMapping},\n            code: {\n              transformer: (vulnerability: Record<string, unknown>): string =>\n                JSON.stringify(vulnerability, null, 2)\n            },\n            results: [\n              {\n                status: ExecJSON.ControlResultStatus.Failed,\n                code_desc: {\n                  path: 'locations[0].physicalLocation',\n                  transformer: formatCodeDesc\n                },\n\n                start_time: ''\n              }\n            ]\n          }\n        ],\n        sha256: ''\n      }\n    ],\n    passthrough: {\n      transformer: (data: Record<string, unknown>): Record<string, unknown> => {\n        let runsData = _.get(data, 'runs');\n        if (Array.isArray(runsData)) {\n          runsData = runsData.map((run: Record<string, unknown>) =>\n            _.omit(run, ['results'])\n          );\n        }\n        return {\n          auxiliary_data: [\n            {\n              name: 'SARIF',\n              data: {\n                $schema: _.get(data, '$schema'),\n                runs: runsData\n              }\n            }\n          ],\n          ...(this.withRaw && {raw: data})\n        };\n      }\n    }\n  };\n  constructor(sarifJson: string, withRaw = false) {\n    super(JSON.parse(sarifJson));\n    this.withRaw = withRaw;\n  }\n}\n"]}