@mitre/hdf-converters 2.12.6 → 3.0.0

package/lib/src/dbprotect-mapper.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"dbprotect-mapper.js","sourceRoot":"","sources":["../../src/dbprotect-mapper.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCAAkC;AAClC,0CAA4B;AAC5B,kDAAgE;AAChE,qDAM0B;AAC1B,2CAGwB;AAExB,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC;IAClD,CAAC,MAAM,EAAE,GAAG,CAAC;IACb,CAAC,QAAQ,EAAE,GAAG,CAAC;IACf,CAAC,KAAK,EAAE,GAAG,CAAC;IACZ,CAAC,eAAe,EAAE,CAAC,CAAC;CACrB,CAAC,CAAC;AAEH,SAAS,eAAe,CACtB,KAA8B;IAE9B,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,uBAAuB,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;IAElD,IAAI,MAAM,GAAc,EAAE,CAAC;IAE3B,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE;QAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,OAAgC,EAAU,EAAE;YACrE,OAAO,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAW,CAAC;QAC1C,CAAC,CAAC,CAAC;QACH,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAgC,EAAE,EAAE;YACzD,OAAO,MAAM,CAAC,WAAW,CACvB,QAAQ,CAAC,GAAG,CAAC,UAAU,IAAY,EAAE,CAAS;gBAC5C,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;YAC/C,CAAC,CAAC,CACH,CAAC;QACJ,CAAC,CAAC,CAAC;KACJ;IACD,OAAO,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;AAChD,CAAC;AACD,SAAS,aAAa,CAAC,KAAc;IACnC,MAAM,IAAI,GAAG,EAAE,CAAC;IAChB,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,cAAc,CAAC,EAAE,CAAC,CAAC;IAC5D,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,aAAa,CAAC,EAAE,CAAC,CAAC;IACpD,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC;IACxD,IAAI,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC;IACxE,IAAI,CAAC,IAAI,CACP,gCAAgC,CAAC,CAAC,GAAG,CACnC,KAAK,EACL,4BAA4B,CAC7B,GAAG,CACL,CAAC;IACF,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC;AACD,SAAS,UAAU,CAAC,KAAc;IAChC,MAAM,IAAI,GAAG,EAAE,CAAC;IAChB,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IAC5C,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,gBAAgB,CAAC,EAAE,CAAC,CAAC;IAChE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC;AACD,SAAS,SAAS,CAAC,KAAc;IAC/B,QAAQ,KAAK,EAAE;QACb,KAAK,MAAM;YACT,OAAO,mBAAQ,CAAC,mBAAmB,CAAC,OAAO,CAAC;QAC9C,KAAK,QAAQ;YACX,OAAO,mBAAQ,CAAC,mBAAmB,CAAC,MAAM,CAAC;QAC7C,KAAK,SAAS;YACZ,OAAO,mBAAQ,CAAC,mBAAmB,CAAC,MAAM,CAAC;QAC7C,KAAK,eAAe;YAClB,OAAO,mBAAQ,CAAC,mBAAmB,CAAC,MAAM,CAAC;KAC9C;IACD,OAAO,mBAAQ,CAAC,mBAAmB,CAAC,OAAO,CAAC;AAC9C,CAAC;AACD,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,KAAK,KAAK,QAAQ,EAAE;QACtB,OAAO,yBAAyB,CAAC;KAClC;SAAM;QACL,OAAO,EAAE,CAAC;KACX;AACH,CAAC;AACD,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;QACxB,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;YAC5B,IAAI,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE;gBACzC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;aACrC;iBAAM;gBACL,OAAO,OAAO,CAAC;aAChB;QACH,CAAC,CAAC,CAAC;KACJ;IACD,OAAO,KAAiC,CAAC;AAC3C,CAAC;AACD,SAAS,UAAU,CAAC,EAAW;IAC7B,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,OAAO,EAAE,KAAK,QAAQ,EAAE;QACpD,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC;KACtB;SAAM;QACL,OAAO,EAAE,CAAC;KACX;AACH,CAAC;AAED,MAAa,eAAgB,SAAQ,8BAAa;IA+DhD,YAAY,YAAoB,EAAE,OAAO,GAAG,KAAK;QAC/C,KAAK,CAAC,eAAe,CAAC,IAAA,yBAAQ,EAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QA7DjD,aAAQ,GAGJ;YACF,QAAQ,EAAE;gBACR,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,sBAAoB;aAC9B;YACD,OAAO,EAAE,sBAAoB;YAC7B,UAAU,EAAE,EAAE;YACd,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,EAAC,IAAI,EAAE,iBAAiB,EAAC;oBAC/B,KAAK,EAAE,EAAC,IAAI,EAAE,mBAAmB,EAAC;oBAClC,OAAO,EAAE,EAAC,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,aAAa,EAAC;oBACvD,QAAQ,EAAE,EAAE;oBACZ,UAAU,EAAE,EAAE;oBACd,MAAM,EAAE,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE;wBACR;4BACE,IAAI,EAAE,MAAM;4BACZ,GAAG,EAAE,IAAI;4BACT,IAAI,EAAE;gCACJ,IAAI,EAAE,+CAAsC;gCAC5C,GAAG,EAAE,IAAA,2BAAkB,EAAC,+CAAsC,CAAC;6BAChE;4BACD,IAAI,EAAE,EAAE;4BACR,eAAe,EAAE,EAAE;4BACnB,KAAK,EAAE,EAAC,IAAI,EAAE,OAAO,EAAC;4BACtB,EAAE,EAAE,EAAC,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAC;4BAC/C,IAAI,EAAE,EAAC,WAAW,EAAE,UAAU,EAAC;4BAC/B,MAAM,EAAE;gCACN,IAAI,EAAE,SAAS;gCACf,WAAW,EAAE,IAAA,8BAAa,EAAC,cAAc,CAAC;6BAC3C;4BACD,IAAI,EAAE;gCACJ,WAAW,EAAE,CAAC,aAAsC,EAAU,EAAE,CAC9D,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;6BACzC;4BACD,OAAO,EAAE;gCACP;oCACE,gBAAgB,EAAE,eAAe;oCACjC,MAAM,EAAE,EAAC,IAAI,EAAE,eAAe,EAAE,WAAW,EAAE,SAAS,EAAC;oCACvD,SAAS,EAAE,EAAC,IAAI,EAAE,SAAS,EAAC;oCAC5B,UAAU,EAAE,EAAC,IAAI,EAAE,MAAM,EAAC;oCAC1B,SAAS,EAAE,CAAC,EAAC,IAAI,EAAE,eAAe,EAAE,WAAW,EAAE,YAAY,EAAC,CAAC;iCAChE;6BACF;yBACF;qBACF;oBACD,MAAM,EAAE,EAAE;iBACX;aACF;YACD,WAAW,EAAE;gBACX,WAAW,EAAE,CAAC,IAA6B,EAA2B,EAAE;oBACtE,OAAO,EAAC,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAC,GAAG,EAAE,IAAI,EAAC,CAAC,EAAC,CAAC;gBAC5C,CAAC;aACF;SACF,CAAC;QAGA,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;CACF;AAnED,0CAmEC"}

package/lib/src/dependency-track-mapper.d.ts

@@ -1,9 +0,0 @@
-import { ExecJSON } from 'inspecjs';
-import { BaseConverter, ILookupPath, MappedTransform } from './base-converter';
-export declare class DependencyTrackMapper extends BaseConverter {
-    withRaw: boolean;
-    mappings: MappedTransform<ExecJSON.Execution & {
-        passthrough: unknown;
-    }, ILookupPath>;
-    constructor(dtJson: string, withRaw?: boolean);
-}

package/lib/src/dependency-track-mapper.js

@@ -1,197 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.DependencyTrackMapper = void 0;
-const inspecjs_1 = require("inspecjs");
-const _ = __importStar(require("lodash"));
-const package_json_1 = require("../package.json");
-const base_converter_1 = require("./base-converter");
-const CweNistMapping_1 = require("./mappings/CweNistMapping");
-const global_1 = require("./utils/global");
-const IMPACT_MAPPING = new Map([
-    ['critical', 0.9],
-    ['high', 0.7],
-    ['medium', 0.5],
-    ['low', 0.3],
-    ['info', 0],
-    ['unassigned', 0.5]
-]);
-const CWE_NIST_MAPPING = new CweNistMapping_1.CweNistMapping();
-function nistTags(input) {
-    const cwes = input.map((cweId) => cweId.toString());
-    return CWE_NIST_MAPPING.nistFilter(cwes, global_1.DEFAULT_STATIC_CODE_ANALYSIS_NIST_TAGS);
-}
-function getVersion(file) {
-    return `${_.get(file, 'version')} ${_.get(file, 'meta.version')}`;
-}
-function getTitle(finding) {
-    const title = _.get(finding, 'vulnerability.title');
-    return `${_.get(finding, 'component.purl')}${title ? ' - ' + title : ''}`;
-}
-function getCweIds(cwes) {
-    if (!cwes) {
-        return [];
-    }
-    return cwes.map(({ cweId }) => cweId);
-}
-function getCweNames(cwes) {
-    if (!cwes) {
-        return [];
-    }
-    return cwes.map(({ name }) => name);
-}
-class DependencyTrackMapper extends base_converter_1.BaseConverter {
-    constructor(dtJson, withRaw = false) {
-        super(JSON.parse(dtJson));
-        this.mappings = {
-            platform: {
-                name: { path: 'meta.application' },
-                release: { transformer: getVersion },
-                target_id: { path: 'meta.baseUrl' }
-            },
-            version: package_json_1.version,
-            statistics: {},
-            profiles: [
-                {
-                    name: { path: 'project.uuid' },
-                    version: { path: 'project.version' },
-                    title: { path: 'project.name' },
-                    summary: { path: 'project.description' },
-                    supports: [],
-                    attributes: [],
-                    groups: [],
-                    status: 'loaded',
-                    controls: [
-                        {
-                            path: 'findings',
-                            key: 'id',
-                            tags: {
-                                cweIds: { path: 'vulnerability.cwes', transformer: getCweIds },
-                                cweNames: { path: 'vulnerability.cwes', transformer: getCweNames },
-                                nist: {
-                                    path: 'vulnerability.cwes',
-                                    transformer: (cwes) => nistTags(getCweIds(cwes))
-                                },
-                                cci: {
-                                    path: 'vulnerability.cwes',
-                                    transformer: (cwes) => (0, global_1.getCCIsForNISTTags)(nistTags(getCweIds(cwes)))
-                                },
-                                componentUuid: { path: 'component.uuid' },
-                                componentName: { path: 'component.name' },
-                                componentGroup: { path: 'component.group' },
-                                componentVersion: { path: 'component.version' },
-                                componentLatestVersion: { path: 'component.latestVersion' },
-                                componentPurl: { path: 'component.purl' },
-                                componentCpe: { path: 'component.cpe' },
-                                componentProject: { path: 'component.project' },
-                                vulnerabilityUuid: { path: 'vulnerability.uuid' },
-                                vulnerabilitySource: { path: 'vulnerability.source' },
-                                vulnerabilityVulnId: { path: 'vulnerability.vulnId' },
-                                vulnerabilityTitle: { path: 'vulnerability.title' },
-                                vulnerabilitySubtitle: { path: 'vulnerability.subtitle' },
-                                vulnerabilityAliases: {
-                                    path: 'vulnerability.aliases',
-                                    transformer: (aliases) => JSON.stringify(aliases, null, 2)
-                                },
-                                vulnerabilityCvssV2BaseScore: {
-                                    path: 'vulnerability.cvssV2BaseScore'
-                                },
-                                vulnerabilityCvssV3BaseScore: {
-                                    path: 'vulnerability.cvssV3BaseScore'
-                                },
-                                vulnerabilityOwaspLikelihoodScore: {
-                                    path: 'vulnerability.owaspLikelihoodScore'
-                                },
-                                vulnerabilityOwaspTechnicalImpactScore: {
-                                    path: 'vulnerability.owaspTechnicalImpactScore'
-                                },
-                                vulnerabilityOwaspBusinessImpactScore: {
-                                    path: 'vulnerability.owaspBusinessImpactScore'
-                                },
-                                vulnerabilitySeverityRank: { path: 'vulnerability.severityRank' },
-                                vulnerabilityEpssScore: { path: 'vulnerability.epssScore' },
-                                vulnerabilityEpssPercentile: {
-                                    path: 'vulnerability.epssPercentile'
-                                },
-                                vulnerabilityCweId: { path: 'vulnerability.cweId' },
-                                vulnerabilityCweName: { path: 'vulnerability.cweName' },
-                                attributionAnalyzerIdentity: {
-                                    path: 'attribution.analyzerIdentity'
-                                },
-                                attributionAttributedOn: { path: 'attribution.attributedOn' },
-                                attributionAlternateIdentifier: {
-                                    path: 'attribution.alternateIdentifier'
-                                },
-                                attributionReferenceUrl: { path: 'attribution.referenceUrl' },
-                                analysisState: { path: 'analysis.state' },
-                                analysisIsSuppressed: { path: 'analysis.isSuppressed' }
-                            },
-                            refs: [],
-                            source_location: {},
-                            title: { transformer: getTitle },
-                            id: { path: 'matrix' },
-                            desc: { path: 'vulnerability.description' },
-                            descriptions: [
-                                {
-                                    data: { path: 'vulnerability.description' },
-                                    label: 'check'
-                                },
-                                {
-                                    data: { path: 'vulnerability.recommendation' },
-                                    label: 'fix'
-                                }
-                            ],
-                            impact: {
-                                path: 'vulnerability.severity',
-                                transformer: (0, base_converter_1.impactMapping)(IMPACT_MAPPING)
-                            },
-                            code: {
-                                transformer: (finding) => JSON.stringify(finding, null, 2)
-                            },
-                            results: [
-                                {
-                                    status: inspecjs_1.ExecJSON.ControlResultStatus.Failed,
-                                    code_desc: { path: 'vulnerability.recommendation' },
-                                    start_time: { path: '$.meta.timestamp' }
-                                }
-                            ]
-                        }
-                    ],
-                    sha256: ''
-                }
-            ],
-            passthrough: {
-                transformer: (data) => {
-                    return {
-                        ...(this.withRaw && { raw: data })
-                    };
-                }
-            }
-        };
-        this.withRaw = withRaw;
-    }
-}
-exports.DependencyTrackMapper = DependencyTrackMapper;
-//# sourceMappingURL=dependency-track-mapper.js.map

package/lib/src/dependency-track-mapper.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"dependency-track-mapper.js","sourceRoot":"","sources":["../../src/dependency-track-mapper.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCAAkC;AAClC,0CAA4B;AAC5B,kDAAgE;AAChE,qDAK0B;AAC1B,8DAAyD;AACzD,2CAGwB;AAOxB,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC;IAClD,CAAC,UAAU,EAAE,GAAG,CAAC;IACjB,CAAC,MAAM,EAAE,GAAG,CAAC;IACb,CAAC,QAAQ,EAAE,GAAG,CAAC;IACf,CAAC,KAAK,EAAE,GAAG,CAAC;IACZ,CAAC,MAAM,EAAE,CAAC,CAAC;IACX,CAAC,YAAY,EAAE,GAAG,CAAC;CACpB,CAAC,CAAC;AACH,MAAM,gBAAgB,GAAG,IAAI,+BAAc,EAAE,CAAC;AAE9C,SAAS,QAAQ,CAAC,KAAe;IAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC5D,OAAO,gBAAgB,CAAC,UAAU,CAChC,IAAI,EACJ,+CAAsC,CACvC,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,IAAa;IAC/B,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,CAAC;AACpE,CAAC;AAED,SAAS,QAAQ,CAAC,OAAgB;IAChC,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;IACpD,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AAC5E,CAAC;AAED,SAAS,SAAS,CAAC,IAA6B;IAC9C,IAAI,CAAC,IAAI,EAAE;QACT,OAAO,EAAE,CAAC;KACX;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAC,KAAK,EAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,WAAW,CAAC,IAA6B;IAChD,IAAI,CAAC,IAAI,EAAE;QACT,OAAO,EAAE,CAAC;KACX;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAC,IAAI,EAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;AACpC,CAAC;AAED,MAAa,qBAAsB,SAAQ,8BAAa;IAyItD,YAAY,MAAc,EAAE,OAAO,GAAG,KAAK;QACzC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QAvI5B,aAAQ,GAGJ;YACF,QAAQ,EAAE;gBACR,IAAI,EAAE,EAAC,IAAI,EAAE,kBAAkB,EAAC;gBAChC,OAAO,EAAE,EAAC,WAAW,EAAE,UAAU,EAAC;gBAClC,SAAS,EAAE,EAAC,IAAI,EAAE,cAAc,EAAC;aAClC;YACD,OAAO,EAAE,sBAAoB;YAC7B,UAAU,EAAE,EAAE;YACd,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,EAAC,IAAI,EAAE,cAAc,EAAC;oBAC5B,OAAO,EAAE,EAAC,IAAI,EAAE,iBAAiB,EAAC;oBAClC,KAAK,EAAE,EAAC,IAAI,EAAE,cAAc,EAAC;oBAC7B,OAAO,EAAE,EAAC,IAAI,EAAE,qBAAqB,EAAC;oBACtC,QAAQ,EAAE,EAAE;oBACZ,UAAU,EAAE,EAAE;oBACd,MAAM,EAAE,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE;wBACR;4BACE,IAAI,EAAE,UAAU;4BAChB,GAAG,EAAE,IAAI;4BACT,IAAI,EAAE;gCAEJ,MAAM,EAAE,EAAC,IAAI,EAAE,oBAAoB,EAAE,WAAW,EAAE,SAAS,EAAC;gCAC5D,QAAQ,EAAE,EAAC,IAAI,EAAE,oBAAoB,EAAE,WAAW,EAAE,WAAW,EAAC;gCAChE,IAAI,EAAE;oCACJ,IAAI,EAAE,oBAAoB;oCAC1B,WAAW,EAAE,CAAC,IAAiB,EAAE,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;iCAC9D;gCACD,GAAG,EAAE;oCACH,IAAI,EAAE,oBAAoB;oCAC1B,WAAW,EAAE,CAAC,IAAiB,EAAE,EAAE,CACjC,IAAA,2BAAkB,EAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;iCAChD;gCACD,aAAa,EAAE,EAAC,IAAI,EAAE,gBAAgB,EAAC;gCACvC,aAAa,EAAE,EAAC,IAAI,EAAE,gBAAgB,EAAC;gCACvC,cAAc,EAAE,EAAC,IAAI,EAAE,iBAAiB,EAAC;gCACzC,gBAAgB,EAAE,EAAC,IAAI,EAAE,mBAAmB,EAAC;gCAC7C,sBAAsB,EAAE,EAAC,IAAI,EAAE,yBAAyB,EAAC;gCACzD,aAAa,EAAE,EAAC,IAAI,EAAE,gBAAgB,EAAC;gCACvC,YAAY,EAAE,EAAC,IAAI,EAAE,eAAe,EAAC;gCACrC,gBAAgB,EAAE,EAAC,IAAI,EAAE,mBAAmB,EAAC;gCAC7C,iBAAiB,EAAE,EAAC,IAAI,EAAE,oBAAoB,EAAC;gCAC/C,mBAAmB,EAAE,EAAC,IAAI,EAAE,sBAAsB,EAAC;gCACnD,mBAAmB,EAAE,EAAC,IAAI,EAAE,sBAAsB,EAAC;gCACnD,kBAAkB,EAAE,EAAC,IAAI,EAAE,qBAAqB,EAAC;gCACjD,qBAAqB,EAAE,EAAC,IAAI,EAAE,wBAAwB,EAAC;gCACvD,oBAAoB,EAAE;oCACpB,IAAI,EAAE,uBAAuB;oCAC7B,WAAW,EAAE,CAAC,OAAsC,EAAU,EAAE,CAC9D,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;iCACnC;gCACD,4BAA4B,EAAE;oCAC5B,IAAI,EAAE,+BAA+B;iCACtC;gCACD,4BAA4B,EAAE;oCAC5B,IAAI,EAAE,+BAA+B;iCACtC;gCACD,iCAAiC,EAAE;oCACjC,IAAI,EAAE,oCAAoC;iCAC3C;gCACD,sCAAsC,EAAE;oCACtC,IAAI,EAAE,yCAAyC;iCAChD;gCACD,qCAAqC,EAAE;oCACrC,IAAI,EAAE,wCAAwC;iCAC/C;gCACD,yBAAyB,EAAE,EAAC,IAAI,EAAE,4BAA4B,EAAC;gCAC/D,sBAAsB,EAAE,EAAC,IAAI,EAAE,yBAAyB,EAAC;gCACzD,2BAA2B,EAAE;oCAC3B,IAAI,EAAE,8BAA8B;iCACrC;gCAED,kBAAkB,EAAE,EAAC,IAAI,EAAE,qBAAqB,EAAC;gCACjD,oBAAoB,EAAE,EAAC,IAAI,EAAE,uBAAuB,EAAC;gCACrD,2BAA2B,EAAE;oCAC3B,IAAI,EAAE,8BAA8B;iCACrC;gCACD,uBAAuB,EAAE,EAAC,IAAI,EAAE,0BAA0B,EAAC;gCAC3D,8BAA8B,EAAE;oCAC9B,IAAI,EAAE,iCAAiC;iCACxC;gCACD,uBAAuB,EAAE,EAAC,IAAI,EAAE,0BAA0B,EAAC;gCAC3D,aAAa,EAAE,EAAC,IAAI,EAAE,gBAAgB,EAAC;gCACvC,oBAAoB,EAAE,EAAC,IAAI,EAAE,uBAAuB,EAAC;6BACtD;4BACD,IAAI,EAAE,EAAE;4BACR,eAAe,EAAE,EAAE;4BACnB,KAAK,EAAE,EAAC,WAAW,EAAE,QAAQ,EAAC;4BAC9B,EAAE,EAAE,EAAC,IAAI,EAAE,QAAQ,EAAC;4BACpB,IAAI,EAAE,EAAC,IAAI,EAAE,2BAA2B,EAAC;4BACzC,YAAY,EAAE;gCACZ;oCACE,IAAI,EAAE,EAAC,IAAI,EAAE,2BAA2B,EAAC;oCACzC,KAAK,EAAE,OAAO;iCACf;gCACD;oCACE,IAAI,EAAE,EAAC,IAAI,EAAE,8BAA8B,EAAC;oCAC5C,KAAK,EAAE,KAAK;iCACb;6BACF;4BACD,MAAM,EAAE;gCACN,IAAI,EAAE,wBAAwB;gCAC9B,WAAW,EAAE,IAAA,8BAAa,EAAC,cAAc,CAAC;6BAC3C;4BACD,IAAI,EAAE;gCACJ,WAAW,EAAE,CAAC,OAAgC,EAAU,EAAE,CACxD,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;6BACnC;4BACD,OAAO,EAAE;gCACP;oCACE,MAAM,EAAE,mBAAQ,CAAC,mBAAmB,CAAC,MAAM;oCAE3C,SAAS,EAAE,EAAC,IAAI,EAAE,8BAA8B,EAAC;oCACjD,UAAU,EAAE,EAAC,IAAI,EAAE,kBAAkB,EAAC;iCACvC;6BACF;yBACF;qBACF;oBACD,MAAM,EAAE,EAAE;iBACX;aACF;YACD,WAAW,EAAE;gBACX,WAAW,EAAE,CAAC,IAA6B,EAA2B,EAAE;oBACtE,OAAO;wBACL,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAC,GAAG,EAAE,IAAI,EAAC,CAAC;qBACjC,CAAC;gBACJ,CAAC;aACF;SACF,CAAC;QAGA,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;CACF;AA7ID,sDA6IC"}

package/lib/src/fortify-mapper.d.ts

@@ -1,10 +0,0 @@
-import { ExecJSON } from 'inspecjs';
-import { BaseConverter, ILookupPath, MappedTransform } from './base-converter';
-export declare class FortifyMapper extends BaseConverter {
-    startTime: string;
-    withRaw: boolean;
-    mappings: MappedTransform<ExecJSON.Execution & {
-        passthrough: unknown;
-    }, ILookupPath>;
-    constructor(fvdl: string, withRaw?: boolean);
-}

package/lib/src/fortify-mapper.js

@@ -1,209 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.FortifyMapper = void 0;
-const inspecjs_1 = require("inspecjs");
-const _ = __importStar(require("lodash"));
-const package_json_1 = require("../package.json");
-const base_converter_1 = require("./base-converter");
-const global_1 = require("./utils/global");
-const NIST_REFERENCE_NAME = 'Standards Mapping - NIST Special Publication 800-53 Revision 4';
-const DEFAULT_NIST_TAG = [];
-function impactMapping(input, id) {
-    if (Array.isArray(input)) {
-        const matches = input.find((element) => {
-            return _.get(element, 'ClassInfo.ClassID') === id;
-        });
-        return parseFloat(_.get(matches, 'ClassInfo.DefaultSeverity')) / 5;
-    }
-    else {
-        return parseFloat(_.get(input, 'ClassInfo.DefaultSeverity')) / 5;
-    }
-}
-function nistTag(rule) {
-    let references = _.get(rule, 'References.Reference');
-    if (!Array.isArray(references)) {
-        references = [references];
-    }
-    if (Array.isArray(references)) {
-        const tag = references.find((element) => {
-            return _.get(element, 'Author') === NIST_REFERENCE_NAME;
-        });
-        if (tag === null || tag === undefined) {
-            return DEFAULT_NIST_TAG;
-        }
-        else {
-            return _.get(tag, 'Title').match(/[a-zA-Z][a-zA-Z]-\d{1,2}/);
-        }
-    }
-    return [];
-}
-function processEntry(input) {
-    const output = [];
-    output.push(`${_.get(input, 'id')}<=SNIPPET`);
-    output.push(`\nPath: ${_.get(input, 'File')}\n`);
-    output.push(`StartLine: ${_.get(input, 'StartLine')}, `);
-    output.push(`EndLine: ${_.get(input, 'EndLine')}\n`);
-    output.push(`Code:\n${_.get(input, 'Text').trim()}`);
-    return output.join('');
-}
-function makeArray(input) {
-    if (Array.isArray(input)) {
-        return input;
-    }
-    else {
-        return [input];
-    }
-}
-function filterVuln(input, file) {
-    input.forEach((element) => {
-        if (element instanceof Object) {
-            _.set(element, 'results', _.get(element, 'results').filter((result) => {
-                const codedesc = _.get(result, 'code_desc').split('<=SNIPPET');
-                const snippetid = codedesc[0];
-                const classid = _.get(element, 'id');
-                _.set(result, 'code_desc', codedesc[1]);
-                let isMatch = false;
-                const matches = _.get(file, 'FVDL.Vulnerabilities.Vulnerability').filter((subElement) => {
-                    return _.get(subElement, 'ClassInfo.ClassID') === classid;
-                });
-                matches.forEach((match) => {
-                    const traces = makeArray(_.get(match, 'AnalysisInfo.Unified.Trace'));
-                    traces.forEach((trace) => {
-                        const entries = makeArray(_.get(trace, 'Primary.Entry'));
-                        const filteredEntries = entries.filter((entry) => {
-                            return _.has(entry, 'Node.SourceLocation.snippet');
-                        });
-                        filteredEntries.forEach((entry) => {
-                            if (_.get(entry, 'Node.SourceLocation.snippet') === snippetid) {
-                                isMatch = true;
-                            }
-                        });
-                    });
-                });
-                return isMatch;
-            }));
-            _.set(element, 'impact', impactMapping(_.get(element, 'impact'), _.get(element, 'id')));
-        }
-        return element;
-    });
-    return input;
-}
-class FortifyMapper extends base_converter_1.BaseConverter {
-    constructor(fvdl, withRaw = false) {
-        super((0, base_converter_1.parseXml)(fvdl, {
-            stopNodes: ['FVDL.Description.Abstract', 'FVDL.Description.Explanation']
-        }));
-        this.mappings = {
-            platform: {
-                name: 'Heimdall Tools',
-                release: package_json_1.version
-            },
-            version: package_json_1.version,
-            statistics: {},
-            profiles: [
-                {
-                    name: 'Fortify Static Analyzer Scan',
-                    version: { path: 'FVDL.EngineData.EngineVersion' },
-                    title: 'Fortify Static Analyzer Scan',
-                    summary: {
-                        path: 'FVDL.UUID',
-                        transformer: (uuid) => {
-                            return `Fortify Static Analyzer Scan of UUID: ${uuid}`;
-                        }
-                    },
-                    supports: [],
-                    attributes: [],
-                    groups: [],
-                    status: 'loaded',
-                    controls: [
-                        {
-                            arrayTransformer: filterVuln,
-                            path: 'FVDL.Description',
-                            key: 'id',
-                            tags: {
-                                nist: { transformer: nistTag },
-                                cci: {
-                                    transformer: (data) => (0, global_1.getCCIsForNISTTags)(nistTag(data))
-                                }
-                            },
-                            refs: [],
-                            source_location: {},
-                            title: { path: 'Abstract', transformer: base_converter_1.parseHtml },
-                            id: { path: 'classID' },
-                            desc: { path: 'Explanation', transformer: base_converter_1.parseHtml },
-                            impact: { path: '$.FVDL.Vulnerabilities.Vulnerability' },
-                            code: {
-                                transformer: (vulnerability) => {
-                                    return JSON.stringify(vulnerability, null, 2);
-                                }
-                            },
-                            results: [
-                                {
-                                    path: '$.FVDL.Snippets.Snippet',
-                                    status: inspecjs_1.ExecJSON.ControlResultStatus.Failed,
-                                    code_desc: { transformer: processEntry },
-                                    start_time: {
-                                        path: '$.FVDL.CreatedTS',
-                                        transformer: (input) => {
-                                            return `${_.get(input, 'date')} ${_.get(input, 'time')}`;
-                                        }
-                                    }
-                                }
-                            ]
-                        }
-                    ],
-                    sha256: ''
-                }
-            ],
-            passthrough: {
-                transformer: (data) => {
-                    let auxData = _.get(data, 'FVDL');
-                    if (_.isObject(auxData)) {
-                        auxData = _.omit(auxData, [
-                            'CreatedTS',
-                            'UUID',
-                            'Description',
-                            'Snippets'
-                        ]);
-                    }
-                    return {
-                        auxiliary_data: [
-                            {
-                                name: 'Fortify',
-                                data: { FVDL: auxData }
-                            }
-                        ],
-                        ...(this.withRaw && { raw: data })
-                    };
-                }
-            }
-        };
-        this.startTime = `${_.get(this.data, 'FVDL.CreatedTS.date')} ${_.get(this.data, 'FVDL.CreatedTS.time')}`;
-        this.withRaw = withRaw;
-    }
-}
-exports.FortifyMapper = FortifyMapper;
-//# sourceMappingURL=fortify-mapper.js.map

package/lib/src/fortify-mapper.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"fortify-mapper.js","sourceRoot":"","sources":["../../src/fortify-mapper.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCAAkC;AAClC,0CAA4B;AAC5B,kDAAgE;AAChE,qDAM0B;AAC1B,2CAAkD;AAElD,MAAM,mBAAmB,GACvB,gEAAgE,CAAC;AACnE,MAAM,gBAAgB,GAAa,EAAE,CAAC;AAEtC,SAAS,aAAa,CAAC,KAA8B,EAAE,EAAU;IAC/D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;QACxB,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;YACrC,OAAO,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,mBAAmB,CAAC,KAAK,EAAE,CAAC;QACpD,CAAC,CAAC,CAAC;QACH,OAAO,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,2BAA2B,CAAC,CAAC,GAAG,CAAC,CAAC;KACpE;SAAM;QACL,OAAO,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,2BAA2B,CAAW,CAAC,GAAG,CAAC,CAAC;KAC5E;AACH,CAAC;AAED,SAAS,OAAO,CAAC,IAA6B;IAC5C,IAAI,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAC;IACrD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE;QAC9B,UAAU,GAAG,CAAC,UAAU,CAAC,CAAC;KAC3B;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE;QAC7B,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,OAAgC,EAAE,EAAE;YAC/D,OAAO,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,mBAAmB,CAAC;QAC1D,CAAC,CAAC,CAAC;QACH,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS,EAAE;YACrC,OAAO,gBAAgB,CAAC;SACzB;aAAM;YACL,OAAO,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;SAC9D;KACF;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,MAAM,MAAM,GAAG,EAAE,CAAC;IAClB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IAC9C,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IACjD,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC;IACzD,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;IACrD,MAAM,CAAC,IAAI,CAAC,UAAW,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAuB,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAE5E,OAAO,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACzB,CAAC;AACD,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;QACxB,OAAO,KAAkB,CAAC;KAC3B;SAAM;QACL,OAAO,CAAC,KAAK,CAAC,CAAC;KAChB;AACH,CAAC;AACD,SAAS,UAAU,CAAC,KAAgB,EAAE,IAAa;IACjD,KAAK,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QACxB,IAAI,OAAO,YAAY,MAAM,EAAE;YAC7B,CAAC,CAAC,GAAG,CACH,OAAO,EACP,SAAS,EACR,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,CAAS,CAAC,MAAM,CACvC,CAAC,MAA8B,EAAE,EAAE;gBACjC,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;gBAC/D,MAAM,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;gBAC9B,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;gBACrC,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;gBAExC,IAAI,OAAO,GAAG,KAAK,CAAC;gBACpB,MAAM,OAAO,GACX,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,oCAAoC,CACjD,CAAC,MAAM,CAAC,CAAC,UAAmC,EAAE,EAAE;oBAC/C,OAAO,CAAC,CAAC,GAAG,CAAC,UAAU,EAAE,mBAAmB,CAAC,KAAK,OAAO,CAAC;gBAC5D,CAAC,CAAC,CAAC;gBACH,OAAO,CAAC,OAAO,CAAC,CAAC,KAA8B,EAAE,EAAE;oBACjD,MAAM,MAAM,GAAc,SAAS,CACjC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,4BAA4B,CAAC,CAC3C,CAAC;oBACF,MAAM,CAAC,OAAO,CAAC,CAAC,KAAc,EAAE,EAAE;wBAChC,MAAM,OAAO,GAAc,SAAS,CAClC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,eAAe,CAAC,CAC9B,CAAC;wBACF,MAAM,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,KAAc,EAAE,EAAE;4BACxD,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,6BAA6B,CAAC,CAAC;wBACrD,CAAC,CAAC,CAAC;wBACH,eAAe,CAAC,OAAO,CAAC,CAAC,KAAc,EAAE,EAAE;4BACzC,IACE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,6BAA6B,CAAC,KAAK,SAAS,EACzD;gCACA,OAAO,GAAG,IAAI,CAAC;6BAChB;wBACH,CAAC,CAAC,CAAC;oBACL,CAAC,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;gBACH,OAAO,OAAO,CAAC;YACjB,CAAC,CACF,CACF,CAAC;YACF,CAAC,CAAC,GAAG,CACH,OAAO,EACP,QAAQ,EACR,aAAa,CACX,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAuC,EAC9D,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAsB,CAC1C,CACF,CAAC;SACH;QACD,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC,CAAC;IACH,OAAO,KAA2B,CAAC;AACrC,CAAC;AAED,MAAa,aAAc,SAAQ,8BAAa;IA6F9C,YAAY,IAAY,EAAE,OAAO,GAAG,KAAK;QACvC,KAAK,CACH,IAAA,yBAAQ,EAAC,IAAI,EAAE;YACb,SAAS,EAAE,CAAC,2BAA2B,EAAE,8BAA8B,CAAC;SACzE,CAAC,CACH,CAAC;QA9FJ,aAAQ,GAGJ;YACF,QAAQ,EAAE;gBACR,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,sBAAoB;aAC9B;YACD,OAAO,EAAE,sBAAoB;YAC7B,UAAU,EAAE,EAAE;YACd,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,8BAA8B;oBACpC,OAAO,EAAE,EAAC,IAAI,EAAE,+BAA+B,EAAC;oBAChD,KAAK,EAAE,8BAA8B;oBACrC,OAAO,EAAE;wBACP,IAAI,EAAE,WAAW;wBACjB,WAAW,EAAE,CAAC,IAAa,EAAU,EAAE;4BACrC,OAAO,yCAAyC,IAAI,EAAE,CAAC;wBACzD,CAAC;qBACF;oBACD,QAAQ,EAAE,EAAE;oBACZ,UAAU,EAAE,EAAE;oBACd,MAAM,EAAE,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE;wBACR;4BACE,gBAAgB,EAAE,UAAU;4BAC5B,IAAI,EAAE,kBAAkB;4BACxB,GAAG,EAAE,IAAI;4BACT,IAAI,EAAE;gCACJ,IAAI,EAAE,EAAC,WAAW,EAAE,OAAO,EAAC;gCAC5B,GAAG,EAAE;oCACH,WAAW,EAAE,CAAC,IAA6B,EAAE,EAAE,CAC7C,IAAA,2BAAkB,EAAC,OAAO,CAAC,IAAI,CAAC,CAAC;iCACpC;6BACF;4BACD,IAAI,EAAE,EAAE;4BACR,eAAe,EAAE,EAAE;4BACnB,KAAK,EAAE,EAAC,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,0BAAS,EAAC;4BACjD,EAAE,EAAE,EAAC,IAAI,EAAE,SAAS,EAAC;4BACrB,IAAI,EAAE,EAAC,IAAI,EAAE,aAAa,EAAE,WAAW,EAAE,0BAAS,EAAC;4BACnD,MAAM,EAAE,EAAC,IAAI,EAAE,sCAAsC,EAAC;4BACtD,IAAI,EAAE;gCACJ,WAAW,EAAE,CAAC,aAAsC,EAAU,EAAE;oCAC9D,OAAO,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;gCAChD,CAAC;6BACF;4BACD,OAAO,EAAE;gCACP;oCACE,IAAI,EAAE,yBAAyB;oCAC/B,MAAM,EAAE,mBAAQ,CAAC,mBAAmB,CAAC,MAAM;oCAC3C,SAAS,EAAE,EAAC,WAAW,EAAE,YAAY,EAAC;oCACtC,UAAU,EAAE;wCACV,IAAI,EAAE,kBAAkB;wCACxB,WAAW,EAAE,CAAC,KAAc,EAAU,EAAE;4CACtC,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC;wCAC3D,CAAC;qCACF;iCACF;6BACF;yBACF;qBACF;oBACD,MAAM,EAAE,EAAE;iBACX;aACF;YACD,WAAW,EAAE;gBACX,WAAW,EAAE,CAAC,IAA6B,EAA2B,EAAE;oBACtE,IAAI,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;oBAClC,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE;wBACvB,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE;4BACxB,WAAW;4BACX,MAAM;4BACN,aAAa;4BACb,UAAU;yBACX,CAAC,CAAC;qBACJ;oBACD,OAAO;wBACL,cAAc,EAAE;4BACd;gCACE,IAAI,EAAE,SAAS;gCACf,IAAI,EAAE,EAAC,IAAI,EAAE,OAAO,EAAC;6BACtB;yBACF;wBACD,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAC,GAAG,EAAE,IAAI,EAAC,CAAC;qBACjC,CAAC;gBACJ,CAAC;aACF;SACF,CAAC;QAOA,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,qBAAqB,CAAC,IAAI,CAAC,CAAC,GAAG,CAClE,IAAI,CAAC,IAAI,EACT,qBAAqB,CACtB,EAAE,CAAC;QACJ,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;CACF;AAzGD,sCAyGC"}

package/lib/src/gosec-mapper.d.ts

@@ -1,9 +0,0 @@
-import { ExecJSON } from 'inspecjs';
-import { BaseConverter, ILookupPath, MappedTransform } from './base-converter';
-export declare class GosecMapper extends BaseConverter {
-    withRaw: boolean;
-    mappings: MappedTransform<ExecJSON.Execution & {
-        passthrough: unknown;
-    }, ILookupPath>;
-    constructor(gosecJson: string, withRaw?: boolean);
-}

package/lib/src/gosec-mapper.js

@@ -1,141 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.GosecMapper = void 0;
-const inspecjs_1 = require("inspecjs");
-const _ = __importStar(require("lodash"));
-const package_json_1 = require("../package.json");
-const base_converter_1 = require("./base-converter");
-const CweNistMapping_1 = require("./mappings/CweNistMapping");
-const CWE_NIST_MAPPING = new CweNistMapping_1.CweNistMapping();
-const DEFAULT_NIST_TAG = ['SI-2', 'RA-5'];
-const IMPACT_MAPPING = new Map([
-    ['high', 0.7],
-    ['medium', 0.5],
-    ['low', 0.3]
-]);
-function nistTag(input) {
-    const cwe = [`${_.get(input, 'id')}`];
-    return CWE_NIST_MAPPING.nistFilter(cwe, DEFAULT_NIST_TAG);
-}
-function formatStatus(input) {
-    return `${_.get(input, 'nosec')}` === 'false' &&
-        `${_.get(input, 'suppressions')}` === 'null'
-        ? inspecjs_1.ExecJSON.ControlResultStatus.Failed
-        : inspecjs_1.ExecJSON.ControlResultStatus.Skipped;
-}
-function formatSkipMessage(input) {
-    const suppressions = _.get(input, 'suppressions');
-    if (`${suppressions}` === 'null') {
-        return undefined;
-    }
-    if (!Array.isArray(suppressions)) {
-        return 'No justification provided';
-    }
-    return suppressions
-        .map((suppression) => `${suppression.justification ? suppression.justification : 'No justification provided'} (${suppression.kind})`)
-        .join('\n');
-}
-function formatCodeDesc(input) {
-    return `Rule ${_.get(input, 'rule_id')} violation detected at:\nFile: ${_.get(input, 'file')}\nLine: ${_.get(input, 'line')}\nColumn: ${_.get(input, 'column')}`;
-}
-function formatMessage(input) {
-    return `${_.get(input, 'confidence')} confidence of rule violation at:\n${_.get(input, 'code')}`;
-}
-class GosecMapper extends base_converter_1.BaseConverter {
-    constructor(gosecJson, withRaw = false) {
-        super(JSON.parse(gosecJson));
-        this.mappings = {
-            platform: {
-                name: 'Heimdall Tools',
-                release: package_json_1.version
-            },
-            version: package_json_1.version,
-            statistics: {},
-            profiles: [
-                {
-                    name: 'gosec Scan',
-                    title: 'gosec Scan',
-                    version: { path: 'GosecVersion' },
-                    supports: [],
-                    attributes: [],
-                    groups: [],
-                    status: 'loaded',
-                    controls: [
-                        {
-                            path: 'Issues',
-                            key: 'id',
-                            tags: {
-                                nist: {
-                                    path: 'cwe',
-                                    transformer: nistTag
-                                },
-                                cwe: { path: 'cwe' }
-                            },
-                            refs: [],
-                            source_location: {},
-                            title: { path: 'details' },
-                            id: { path: 'rule_id' },
-                            desc: '',
-                            impact: {
-                                path: 'severity',
-                                transformer: (0, base_converter_1.impactMapping)(IMPACT_MAPPING)
-                            },
-                            results: [
-                                {
-                                    status: { transformer: formatStatus },
-                                    skip_message: { transformer: formatSkipMessage },
-                                    code_desc: { transformer: formatCodeDesc },
-                                    message: { transformer: formatMessage },
-                                    start_time: ''
-                                }
-                            ]
-                        }
-                    ],
-                    sha256: ''
-                }
-            ],
-            passthrough: {
-                transformer: (data) => {
-                    return {
-                        auxiliary_data: [
-                            {
-                                name: 'gosec',
-                                data: {
-                                    'Golang errors': _.get(data, 'Golang errors'),
-                                    Stats: _.get(data, 'Stats')
-                                }
-                            }
-                        ],
-                        ...(this.withRaw && { raw: data })
-                    };
-                }
-            }
-        };
-        this.withRaw = withRaw;
-    }
-}
-exports.GosecMapper = GosecMapper;
-//# sourceMappingURL=gosec-mapper.js.map

package/lib/src/gosec-mapper.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"gosec-mapper.js","sourceRoot":"","sources":["../../src/gosec-mapper.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCAAkC;AAClC,0CAA4B;AAC5B,kDAAgE;AAChE,qDAK0B;AAC1B,8DAAyD;AAEzD,MAAM,gBAAgB,GAAG,IAAI,+BAAc,EAAE,CAAC;AAC9C,MAAM,gBAAgB,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAC1C,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC;IAClD,CAAC,MAAM,EAAE,GAAG,CAAC;IACb,CAAC,QAAQ,EAAE,GAAG,CAAC;IACf,CAAC,KAAK,EAAE,GAAG,CAAC;CACb,CAAC,CAAC;AAEH,SAAS,OAAO,CAAC,KAA8B;IAC7C,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IACtC,OAAO,gBAAgB,CAAC,UAAU,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;AAC5D,CAAC;AAGD,SAAS,YAAY,CAAC,KAA8B;IAClD,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,KAAK,OAAO;QAC3C,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,cAAc,CAAC,EAAE,KAAK,MAAM;QAC5C,CAAC,CAAC,mBAAQ,CAAC,mBAAmB,CAAC,MAAM;QACrC,CAAC,CAAC,mBAAQ,CAAC,mBAAmB,CAAC,OAAO,CAAC;AAC3C,CAAC;AAGD,SAAS,iBAAiB,CAAC,KAA8B;IACvD,MAAM,YAAY,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IAGlD,IAAI,GAAG,YAAY,EAAE,KAAK,MAAM,EAAE;QAChC,OAAO,SAAS,CAAC;KAClB;IAGD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE;QAChC,OAAO,2BAA2B,CAAC;KACpC;IAED,OAAO,YAAY;SAChB,GAAG,CACF,CAAC,WAAW,EAAE,EAAE,CACd,GAAG,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,2BAA2B,KAAK,WAAW,CAAC,IAAI,GAAG,CACjH;SACA,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAGD,SAAS,cAAc,CAAC,KAA8B;IACpD,OAAO,QAAQ,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,kCAAkC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;AACnK,CAAC;AAGD,SAAS,aAAa,CAAC,KAA8B;IACnD,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,YAAY,CAAC,sCAAsC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC;AACnG,CAAC;AAED,MAAa,WAAY,SAAQ,8BAAa;IAyE5C,YAAY,SAAiB,EAAE,OAAO,GAAG,KAAK;QAC5C,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QAvE/B,aAAQ,GAGJ;YACF,QAAQ,EAAE;gBACR,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,sBAAoB;aAC9B;YACD,OAAO,EAAE,sBAAoB;YAC7B,UAAU,EAAE,EAAE;YACd,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,YAAY;oBAClB,KAAK,EAAE,YAAY;oBACnB,OAAO,EAAE,EAAC,IAAI,EAAE,cAAc,EAAC;oBAC/B,QAAQ,EAAE,EAAE;oBACZ,UAAU,EAAE,EAAE;oBACd,MAAM,EAAE,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE;wBACR;4BACE,IAAI,EAAE,QAAQ;4BACd,GAAG,EAAE,IAAI;4BACT,IAAI,EAAE;gCACJ,IAAI,EAAE;oCACJ,IAAI,EAAE,KAAK;oCACX,WAAW,EAAE,OAAO;iCACrB;gCACD,GAAG,EAAE,EAAC,IAAI,EAAE,KAAK,EAAC;6BACnB;4BACD,IAAI,EAAE,EAAE;4BACR,eAAe,EAAE,EAAE;4BACnB,KAAK,EAAE,EAAC,IAAI,EAAE,SAAS,EAAC;4BACxB,EAAE,EAAE,EAAC,IAAI,EAAE,SAAS,EAAC;4BACrB,IAAI,EAAE,EAAE;4BACR,MAAM,EAAE;gCACN,IAAI,EAAE,UAAU;gCAChB,WAAW,EAAE,IAAA,8BAAa,EAAC,cAAc,CAAC;6BAC3C;4BACD,OAAO,EAAE;gCACP;oCACE,MAAM,EAAE,EAAC,WAAW,EAAE,YAAY,EAAC;oCACnC,YAAY,EAAE,EAAC,WAAW,EAAE,iBAAiB,EAAC;oCAC9C,SAAS,EAAE,EAAC,WAAW,EAAE,cAAc,EAAC;oCACxC,OAAO,EAAE,EAAC,WAAW,EAAE,aAAa,EAAC;oCACrC,UAAU,EAAE,EAAE;iCACf;6BACF;yBACF;qBACF;oBACD,MAAM,EAAE,EAAE;iBACX;aACF;YACD,WAAW,EAAE;gBACX,WAAW,EAAE,CAAC,IAA6B,EAA2B,EAAE;oBACtE,OAAO;wBACL,cAAc,EAAE;4BACd;gCACE,IAAI,EAAE,OAAO;gCACb,IAAI,EAAE;oCACJ,eAAe,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,eAAe,CAAC;oCAC7C,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC;iCAC5B;6BACF;yBACF;wBACD,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAC,GAAG,EAAE,IAAI,EAAC,CAAC;qBACjC,CAAC;gBACJ,CAAC;aACF;SACF,CAAC;QAGA,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;CACF;AA7ED,kCA6EC"}

package/lib/src/ionchannel-mapper.d.ts

@@ -1,26 +0,0 @@
-import { AxiosInstance } from 'axios';
-import { ExecJSON } from 'inspecjs';
-import { IonChannelAnalysisResponse } from '../types/ionchannelAnalysis';
-import { Project } from '../types/ionchannelProjects';
-import { Team } from '../types/ionchannelTeams';
-import { BaseConverter, ILookupPath, MappedTransform } from './base-converter';
-export declare class IonChannelAPIMapper {
-    apiKey: string;
-    projectId?: string;
-    teamId?: string;
-    analysisId?: string;
-    apiClient: AxiosInstance;
-    constructor(apiKey: string, projectId?: string, teamId?: string, analysisId?: string);
-    toHdf(): Promise<ExecJSON.Execution>;
-    setTeam(teamName: string): Promise<void>;
-    getTeams(): Promise<Team[]>;
-    setProject(projectName: string): Promise<void>;
-    getProjects(): Promise<Project[]>;
-    getAnalysis(): Promise<IonChannelAnalysisResponse>;
-}
-export declare class IonChannelMapper extends BaseConverter {
-    mappings: MappedTransform<ExecJSON.Execution & {
-        passthrough: unknown;
-    }, ILookupPath>;
-    constructor(ionchannelJson: string);
-}