@mitre/hdf-converters 2.12.6 → 3.0.0

package/lib/src/scoutsuite-mapper.js

@@ -1,291 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ScoutsuiteMapper = void 0;
-const inspecjs_1 = require("inspecjs");
-const _ = __importStar(require("lodash"));
-const package_json_1 = require("../package.json");
-const base_converter_1 = require("./base-converter");
-const ScoutsuiteNistMapping_1 = require("./mappings/ScoutsuiteNistMapping");
-const global_1 = require("./utils/global");
-const INSPEC_INPUTS_MAPPING = {
-    string: 'String',
-    numeric: 'Numeric',
-    regexp: 'Regexp',
-    array: 'Array',
-    hash: 'Hash',
-    boolean: 'Boolean',
-    any: 'Any'
-};
-const IMPACT_MAPPING = new Map([
-    ['danger', 0.7],
-    ['warning', 0.5]
-]);
-const SCOUTSUITE_NIST_MAPPING = new ScoutsuiteNistMapping_1.ScoutsuiteNistMapping();
-function getRulesetName(file) {
-    return _.get(file, 'last_run.ruleset_name');
-}
-function formatTargetId(file) {
-    return `${getRulesetName(file)} ruleset:${_.get(file, 'provider_name')}:${_.get(file, 'account_id')}`;
-}
-function formatTitle(file) {
-    return `Scout Suite Report using ${getRulesetName(file)} ruleset on ${_.get(file, 'provider_name')} with account ${_.get(file, 'account_id')}`;
-}
-function compliance(input) {
-    if (Array.isArray(input)) {
-        return input
-            .map((element) => `Compliant with ${_.get(element, 'name')}, reference ${_.get(element, 'reference')}, version ${_.get(element, 'version')}`)
-            .join('\n');
-    }
-    else {
-        return '';
-    }
-}
-function getStatus(input) {
-    if (_.get(input, 'checked_items') === 0) {
-        return inspecjs_1.ExecJSON.ControlResultStatus.Skipped;
-    }
-    else if (_.get(input, 'flagged_items') === 0) {
-        return inspecjs_1.ExecJSON.ControlResultStatus.Passed;
-    }
-    else {
-        return inspecjs_1.ExecJSON.ControlResultStatus.Failed;
-    }
-}
-function checkSkip(input) {
-    if (_.get(input, 'checked_items') === 0) {
-        return 'Skipped because no items were checked';
-    }
-    else {
-        return '';
-    }
-}
-function getMessage(input) {
-    if (_.get(input, 'checked_items') === 0) {
-        return '';
-    }
-    else if (_.get(input, 'flagged_items') === 0) {
-        return `0 flagged items out of ${_.get(input, 'checked_items')} checked items`;
-    }
-    else {
-        return `${_.get(input, 'flagged_items')} flagged items out of ${_.get(input, 'checked_items')} checked items:\n${_.get(input, 'items').join('\n')}`;
-    }
-}
-function nistTag(rule) {
-    return SCOUTSUITE_NIST_MAPPING.nistTag(rule);
-}
-function checkArray(input) {
-    if (typeof input === 'string') {
-        return input;
-    }
-    return input.join(', ');
-}
-function collapseServices(file) {
-    const services = Object.values(_.get(file, 'services'));
-    const findings = [];
-    services.forEach((element) => {
-        findings.push(_.get(element, 'findings'));
-    });
-    const entries = [];
-    Object.values(findings).forEach((element) => {
-        Object.entries(element).forEach((subElement) => {
-            entries.push(subElement);
-        });
-    });
-    _.set(file, 'services', entries);
-    return file;
-}
-class ScoutsuiteMapper extends base_converter_1.BaseConverter {
-    constructor(scoutsuiteJson, withRaw = false) {
-        super(collapseServices(JSON.parse(scoutsuiteJson.split('\n', 2)[1])));
-        this.mappings = {
-            platform: {
-                name: 'Heimdall Tools',
-                release: package_json_1.version,
-                target_id: { transformer: formatTargetId }
-            },
-            version: package_json_1.version,
-            statistics: {},
-            profiles: [
-                {
-                    name: 'Scout Suite Multi-Cloud Security Auditing Tool',
-                    version: { path: 'last_run.version' },
-                    title: { transformer: formatTitle },
-                    summary: { path: 'last_run.ruleset_about' },
-                    supports: [],
-                    attributes: [
-                        {
-                            name: 'account_id',
-                            options: {
-                                value: { path: 'account_id' },
-                                required: true,
-                                sensitive: false,
-                                type: INSPEC_INPUTS_MAPPING.string
-                            }
-                        },
-                        {
-                            name: 'environment',
-                            options: {
-                                value: { path: 'environment' }
-                            }
-                        },
-                        {
-                            name: 'ruleset',
-                            options: {
-                                value: { path: 'last_run.ruleset_name' }
-                            }
-                        },
-                        {
-                            name: 'run_parameters_excluded_regions',
-                            options: {
-                                value: {
-                                    path: 'last_run.run_parameters.excluded_region',
-                                    transformer: checkArray
-                                }
-                            }
-                        },
-                        {
-                            name: 'run_parameters_regions',
-                            options: {
-                                value: {
-                                    path: 'last_run.run_parameters.regions',
-                                    transformer: checkArray
-                                }
-                            }
-                        },
-                        {
-                            name: 'run_parameters_services',
-                            options: {
-                                value: {
-                                    path: 'last_run.run_parameters.services',
-                                    transformer: checkArray
-                                }
-                            }
-                        },
-                        {
-                            name: 'run_parameters_skipped_services',
-                            options: {
-                                value: {
-                                    path: 'last_run.run_parameters.skipped_services',
-                                    transformer: checkArray
-                                }
-                            }
-                        },
-                        {
-                            name: 'time',
-                            options: {
-                                value: { path: 'last_run.time' }
-                            }
-                        },
-                        {
-                            name: 'partition',
-                            options: {
-                                value: { path: 'partition' }
-                            }
-                        },
-                        {
-                            name: 'provider_code',
-                            options: {
-                                value: { path: 'provider_code' }
-                            }
-                        },
-                        {
-                            name: 'provider_name',
-                            options: {
-                                value: { path: 'provider_name' }
-                            }
-                        }
-                    ],
-                    groups: [],
-                    status: 'loaded',
-                    controls: [
-                        {
-                            path: 'services',
-                            key: 'id',
-                            tags: {
-                                nist: { path: '[0]', transformer: nistTag },
-                                cci: {
-                                    path: '[0]',
-                                    transformer: (data) => (0, global_1.getCCIsForNISTTags)(nistTag(data))
-                                }
-                            },
-                            refs: [
-                                { url: { path: '[1].references[0]' } },
-                                { ref: { path: '[1].compliance', transformer: compliance } }
-                            ],
-                            source_location: {},
-                            title: { path: '[1].description' },
-                            id: { path: '[0]' },
-                            desc: { path: '[1].rationale' },
-                            descriptions: [
-                                { data: { path: '[1].remediation' }, label: 'fix' },
-                                { data: { path: '[1].service' }, label: 'service' },
-                                { data: { path: '[1].path' }, label: 'path' },
-                                { data: { path: '[1].id_suffix' }, label: 'id_suffix' }
-                            ],
-                            impact: {
-                                path: '[1].level',
-                                transformer: (0, base_converter_1.impactMapping)(IMPACT_MAPPING)
-                            },
-                            code: {
-                                transformer: (vulnerability) => JSON.stringify(vulnerability, null, 2)
-                            },
-                            results: [
-                                {
-                                    status: { path: '[1]', transformer: getStatus },
-                                    skip_message: { path: '[1]', transformer: checkSkip },
-                                    code_desc: { path: '[1].description' },
-                                    message: { path: '[1]', transformer: getMessage },
-                                    start_time: { path: '$.last_run.time' }
-                                }
-                            ]
-                        }
-                    ],
-                    sha256: ''
-                }
-            ],
-            passthrough: {
-                transformer: (data) => {
-                    const auxData = _.omit(data, [
-                        'account_id',
-                        'environment',
-                        'partition',
-                        'provider_code',
-                        'provider_name',
-                        'services'
-                    ]);
-                    auxData.last_run = _.pick(auxData.last_run, ['summary']);
-                    return {
-                        auxiliary_data: auxData,
-                        ...(this.withRaw && { raw: data })
-                    };
-                }
-            }
-        };
-        this.withRaw = withRaw;
-    }
-}
-exports.ScoutsuiteMapper = ScoutsuiteMapper;
-//# sourceMappingURL=scoutsuite-mapper.js.map

package/lib/src/scoutsuite-mapper.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"scoutsuite-mapper.js","sourceRoot":"","sources":["../../src/scoutsuite-mapper.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCAAkC;AAClC,0CAA4B;AAC5B,kDAAgE;AAChE,qDAK0B;AAC1B,4EAAuE;AACvE,2CAAkD;AAElD,MAAM,qBAAqB,GAAG;IAC5B,MAAM,EAAE,QAAQ;IAChB,OAAO,EAAE,SAAS;IAClB,MAAM,EAAE,QAAQ;IAChB,KAAK,EAAE,OAAO;IACd,IAAI,EAAE,MAAM;IACZ,OAAO,EAAE,SAAS;IAClB,GAAG,EAAE,KAAK;CACX,CAAC;AACF,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC;IAClD,CAAC,QAAQ,EAAE,GAAG,CAAC;IACf,CAAC,SAAS,EAAE,GAAG,CAAC;CACjB,CAAC,CAAC;AAEH,MAAM,uBAAuB,GAAG,IAAI,6CAAqB,EAAE,CAAC;AAE5D,SAAS,cAAc,CAAC,IAAa;IACnC,OAAO,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,uBAAuB,CAAC,CAAC;AAC9C,CAAC;AACD,SAAS,cAAc,CAAC,IAAa;IACnC,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,CAC7C,IAAI,EACJ,eAAe,CAChB,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,CAAC;AACnC,CAAC;AACD,SAAS,WAAW,CAAC,IAAa;IAChC,OAAO,4BAA4B,cAAc,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,GAAG,CACzE,IAAI,EACJ,eAAe,CAChB,iBAAiB,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,CAAC;AAChD,CAAC;AACD,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;QACxB,OAAO,KAAK;aACT,GAAG,CACF,CAAC,OAAO,EAAE,EAAE,CACV,kBAAkB,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC,GAAG,CAC1D,OAAO,EACP,WAAW,CACZ,aAAa,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,CAC5C;aACA,IAAI,CAAC,IAAI,CAAC,CAAC;KACf;SAAM;QACL,OAAO,EAAE,CAAC;KACX;AACH,CAAC;AACD,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,eAAe,CAAC,KAAK,CAAC,EAAE;QACvC,OAAO,mBAAQ,CAAC,mBAAmB,CAAC,OAAO,CAAC;KAC7C;SAAM,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,eAAe,CAAC,KAAK,CAAC,EAAE;QAC9C,OAAO,mBAAQ,CAAC,mBAAmB,CAAC,MAAM,CAAC;KAC5C;SAAM;QACL,OAAO,mBAAQ,CAAC,mBAAmB,CAAC,MAAM,CAAC;KAC5C;AACH,CAAC;AACD,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,eAAe,CAAC,KAAK,CAAC,EAAE;QACvC,OAAO,uCAAuC,CAAC;KAChD;SAAM;QACL,OAAO,EAAE,CAAC;KACX;AACH,CAAC;AACD,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,eAAe,CAAC,KAAK,CAAC,EAAE;QACvC,OAAO,EAAE,CAAC;KACX;SAAM,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,eAAe,CAAC,KAAK,CAAC,EAAE;QAC9C,OAAO,0BAA0B,CAAC,CAAC,GAAG,CACpC,KAAK,EACL,eAAe,CAChB,gBAAgB,CAAC;KACnB;SAAM;QACL,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,eAAe,CAAC,yBAAyB,CAAC,CAAC,GAAG,CACnE,KAAK,EACL,eAAe,CAChB,oBAAqB,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAyB,CAAC,IAAI,CACtE,IAAI,CACL,EAAE,CAAC;KACL;AACH,CAAC;AACD,SAAS,OAAO,CAAC,IAAY;IAC3B,OAAO,uBAAuB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AAC/C,CAAC;AACD,SAAS,UAAU,CAAC,KAAyB;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE;QAC7B,OAAO,KAAK,CAAC;KACd;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,gBAAgB,CACvB,IAA6B;IAE7B,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAC5B,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,CAA4B,CACnD,CAAC;IACF,MAAM,QAAQ,GAA8B,EAAE,CAAC;IAC/C,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC3B,QAAQ,CAAC,IAAI,CACX,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,UAAU,CAAuC,CACjE,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAwB,EAAE,CAAC;IACxC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC1C,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE;YAC7C,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC3B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;IACjC,OAAO,IAAI,CAAC;AACd,CAAC;AACD,MAAa,gBAAiB,SAAQ,8BAAa;IA2KjD,YAAY,cAAsB,EAAE,OAAO,GAAG,KAAK;QACjD,KAAK,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAzKxE,aAAQ,GAGJ;YACF,QAAQ,EAAE;gBACR,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,sBAAoB;gBAC7B,SAAS,EAAE,EAAC,WAAW,EAAE,cAAc,EAAC;aACzC;YACD,OAAO,EAAE,sBAAoB;YAC7B,UAAU,EAAE,EAAE;YACd,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,gDAAgD;oBACtD,OAAO,EAAE,EAAC,IAAI,EAAE,kBAAkB,EAAC;oBACnC,KAAK,EAAE,EAAC,WAAW,EAAE,WAAW,EAAC;oBACjC,OAAO,EAAE,EAAC,IAAI,EAAE,wBAAwB,EAAC;oBACzC,QAAQ,EAAE,EAAE;oBACZ,UAAU,EAAE;wBACV;4BACE,IAAI,EAAE,YAAY;4BAClB,OAAO,EAAE;gCACP,KAAK,EAAE,EAAC,IAAI,EAAE,YAAY,EAAC;gCAC3B,QAAQ,EAAE,IAAI;gCACd,SAAS,EAAE,KAAK;gCAChB,IAAI,EAAE,qBAAqB,CAAC,MAAM;6BACnC;yBACF;wBACD;4BACE,IAAI,EAAE,aAAa;4BACnB,OAAO,EAAE;gCACP,KAAK,EAAE,EAAC,IAAI,EAAE,aAAa,EAAC;6BAC7B;yBACF;wBACD;4BACE,IAAI,EAAE,SAAS;4BACf,OAAO,EAAE;gCACP,KAAK,EAAE,EAAC,IAAI,EAAE,uBAAuB,EAAC;6BACvC;yBACF;wBACD;4BACE,IAAI,EAAE,iCAAiC;4BACvC,OAAO,EAAE;gCACP,KAAK,EAAE;oCACL,IAAI,EAAE,yCAAyC;oCAC/C,WAAW,EAAE,UAAU;iCACxB;6BACF;yBACF;wBACD;4BACE,IAAI,EAAE,wBAAwB;4BAC9B,OAAO,EAAE;gCACP,KAAK,EAAE;oCACL,IAAI,EAAE,iCAAiC;oCACvC,WAAW,EAAE,UAAU;iCACxB;6BACF;yBACF;wBACD;4BACE,IAAI,EAAE,yBAAyB;4BAC/B,OAAO,EAAE;gCACP,KAAK,EAAE;oCACL,IAAI,EAAE,kCAAkC;oCACxC,WAAW,EAAE,UAAU;iCACxB;6BACF;yBACF;wBACD;4BACE,IAAI,EAAE,iCAAiC;4BACvC,OAAO,EAAE;gCACP,KAAK,EAAE;oCACL,IAAI,EAAE,0CAA0C;oCAChD,WAAW,EAAE,UAAU;iCACxB;6BACF;yBACF;wBACD;4BACE,IAAI,EAAE,MAAM;4BACZ,OAAO,EAAE;gCACP,KAAK,EAAE,EAAC,IAAI,EAAE,eAAe,EAAC;6BAC/B;yBACF;wBACD;4BACE,IAAI,EAAE,WAAW;4BACjB,OAAO,EAAE;gCACP,KAAK,EAAE,EAAC,IAAI,EAAE,WAAW,EAAC;6BAC3B;yBACF;wBACD;4BACE,IAAI,EAAE,eAAe;4BACrB,OAAO,EAAE;gCACP,KAAK,EAAE,EAAC,IAAI,EAAE,eAAe,EAAC;6BAC/B;yBACF;wBACD;4BACE,IAAI,EAAE,eAAe;4BACrB,OAAO,EAAE;gCACP,KAAK,EAAE,EAAC,IAAI,EAAE,eAAe,EAAC;6BAC/B;yBACF;qBACF;oBACD,MAAM,EAAE,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE;wBACR;4BACE,IAAI,EAAE,UAAU;4BAChB,GAAG,EAAE,IAAI;4BACT,IAAI,EAAE;gCACJ,IAAI,EAAE,EAAC,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAC;gCACzC,GAAG,EAAE;oCACH,IAAI,EAAE,KAAK;oCACX,WAAW,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,IAAA,2BAAkB,EAAC,OAAO,CAAC,IAAI,CAAC,CAAC;iCACjE;6BACF;4BACD,IAAI,EAAE;gCACJ,EAAC,GAAG,EAAE,EAAC,IAAI,EAAE,mBAAmB,EAAC,EAAC;gCAClC,EAAC,GAAG,EAAE,EAAC,IAAI,EAAE,gBAAgB,EAAE,WAAW,EAAE,UAAU,EAAC,EAAC;6BACzD;4BACD,eAAe,EAAE,EAAE;4BACnB,KAAK,EAAE,EAAC,IAAI,EAAE,iBAAiB,EAAC;4BAChC,EAAE,EAAE,EAAC,IAAI,EAAE,KAAK,EAAC;4BACjB,IAAI,EAAE,EAAC,IAAI,EAAE,eAAe,EAAC;4BAC7B,YAAY,EAAE;gCACZ,EAAC,IAAI,EAAE,EAAC,IAAI,EAAE,iBAAiB,EAAC,EAAE,KAAK,EAAE,KAAK,EAAC;gCAC/C,EAAC,IAAI,EAAE,EAAC,IAAI,EAAE,aAAa,EAAC,EAAE,KAAK,EAAE,SAAS,EAAC;gCAC/C,EAAC,IAAI,EAAE,EAAC,IAAI,EAAE,UAAU,EAAC,EAAE,KAAK,EAAE,MAAM,EAAC;gCACzC,EAAC,IAAI,EAAE,EAAC,IAAI,EAAE,eAAe,EAAC,EAAE,KAAK,EAAE,WAAW,EAAC;6BACpD;4BACD,MAAM,EAAE;gCACN,IAAI,EAAE,WAAW;gCACjB,WAAW,EAAE,IAAA,8BAAa,EAAC,cAAc,CAAC;6BAC3C;4BACD,IAAI,EAAE;gCACJ,WAAW,EAAE,CAAC,aAAsC,EAAU,EAAE,CAC9D,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;6BACzC;4BACD,OAAO,EAAE;gCACP;oCACE,MAAM,EAAE,EAAC,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAC;oCAC7C,YAAY,EAAE,EAAC,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAC;oCACnD,SAAS,EAAE,EAAC,IAAI,EAAE,iBAAiB,EAAC;oCACpC,OAAO,EAAE,EAAC,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,UAAU,EAAC;oCAC/C,UAAU,EAAE,EAAC,IAAI,EAAE,iBAAiB,EAAC;iCACtC;6BACF;yBACF;qBACF;oBACD,MAAM,EAAE,EAAE;iBACX;aACF;YACD,WAAW,EAAE;gBACX,WAAW,EAAE,CAAC,IAA6B,EAA2B,EAAE;oBACtE,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE;wBAC3B,YAAY;wBACZ,aAAa;wBACb,WAAW;wBACX,eAAe;wBACf,eAAe;wBACf,UAAU;qBACX,CAAC,CAAC;oBACH,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;oBACzD,OAAO;wBACL,cAAc,EAAE,OAAO;wBACvB,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAC,GAAG,EAAE,IAAI,EAAC,CAAC;qBACjC,CAAC;gBACJ,CAAC;aACF;SACF,CAAC;QAGA,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;CACF;AA/KD,4CA+KC"}

package/lib/src/snyk-mapper.d.ts

@@ -1,14 +0,0 @@
-import { ExecJSON } from 'inspecjs';
-import { BaseConverter, ILookupPath, MappedTransform } from './base-converter';
-export declare class SnykResults {
-    data: Record<string, unknown>;
-    customMapping?: MappedTransform<ExecJSON.Execution, ILookupPath>;
-    constructor(snykJson: string);
-    toHdf(): ExecJSON.Execution[] | ExecJSON.Execution;
-}
-export declare class SnykMapper extends BaseConverter {
-    mappings: MappedTransform<ExecJSON.Execution & {
-        passthrough: unknown;
-    }, ILookupPath>;
-    constructor(snykJson: Record<string, unknown>);
-}

package/lib/src/snyk-mapper.js

@@ -1,185 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.SnykMapper = exports.SnykResults = void 0;
-const inspecjs_1 = require("inspecjs");
-const _ = __importStar(require("lodash"));
-const package_json_1 = require("../package.json");
-const base_converter_1 = require("./base-converter");
-const CweNistMapping_1 = require("./mappings/CweNistMapping");
-const global_1 = require("./utils/global");
-const IMPACT_MAPPING = new Map([
-    ['high', 0.7],
-    ['medium', 0.5],
-    ['low', 0.3]
-]);
-const CWE_NIST_MAPPING = new CweNistMapping_1.CweNistMapping();
-const CWE_PATH = 'identifiers.CWE';
-function parseIdentifier(identifiers) {
-    const output = [];
-    if (identifiers !== undefined && Array.isArray(identifiers)) {
-        identifiers.forEach((element) => {
-            const numbers = element.split('-');
-            numbers.shift();
-            output.push(numbers.join('-'));
-        });
-        return output;
-    }
-    else {
-        return [];
-    }
-}
-function nistTag(identifiers) {
-    return CWE_NIST_MAPPING.nistFilter(parseIdentifier(identifiers), global_1.DEFAULT_STATIC_CODE_ANALYSIS_NIST_TAGS);
-}
-class SnykResults {
-    constructor(snykJson) {
-        this.data = JSON.parse(snykJson);
-    }
-    toHdf() {
-        const results = [];
-        if (Array.isArray(this.data)) {
-            this.data.forEach((element) => {
-                const entry = new SnykMapper(element);
-                if (this.customMapping !== undefined) {
-                    entry.setMappings(this.customMapping);
-                }
-                results.push(entry.toHdf());
-            });
-            return results;
-        }
-        else {
-            const result = new SnykMapper(this.data);
-            if (this.customMapping !== undefined) {
-                result.setMappings(this.customMapping);
-            }
-            return result.toHdf();
-        }
-    }
-}
-exports.SnykResults = SnykResults;
-class SnykMapper extends base_converter_1.BaseConverter {
-    constructor(snykJson) {
-        super(snykJson);
-        this.mappings = {
-            platform: {
-                name: 'Heimdall Tools',
-                release: package_json_1.version,
-                target_id: { path: 'projectName' }
-            },
-            version: package_json_1.version,
-            statistics: {
-                duration: null
-            },
-            profiles: [
-                {
-                    name: 'Snyk Scan',
-                    title: {
-                        transformer: (data) => {
-                            const projectName = _.has(data, 'projectName')
-                                ? `Snyk Project: ${_.get(data, 'projectName')} `
-                                : '';
-                            return `${projectName}Snyk Path: ${_.get(data, 'path')}`;
-                        }
-                    },
-                    maintainer: null,
-                    summary: {
-                        path: 'summary',
-                        transformer: (summary) => {
-                            return `Snyk Summary: ${summary}`;
-                        }
-                    },
-                    license: null,
-                    copyright: null,
-                    copyright_email: null,
-                    supports: [],
-                    attributes: [],
-                    depends: [],
-                    groups: [],
-                    status: 'loaded',
-                    controls: [
-                        {
-                            path: 'vulnerabilities',
-                            key: 'id',
-                            tags: {
-                                cci: {
-                                    path: CWE_PATH,
-                                    transformer: (cwe) => (0, global_1.getCCIsForNISTTags)(nistTag(cwe))
-                                },
-                                nist: { path: CWE_PATH, transformer: nistTag },
-                                cweid: { path: CWE_PATH, transformer: parseIdentifier },
-                                cveid: { path: 'identifiers.CVE', transformer: parseIdentifier },
-                                ghsaid: { path: 'identifiers.GHSA', transformer: parseIdentifier }
-                            },
-                            descriptions: [],
-                            refs: [],
-                            source_location: {},
-                            title: { path: 'title' },
-                            id: { path: 'id' },
-                            desc: { path: 'description' },
-                            impact: {
-                                path: 'severity',
-                                transformer: (0, base_converter_1.impactMapping)(IMPACT_MAPPING)
-                            },
-                            code: {
-                                transformer: (vulnerability) => {
-                                    return JSON.stringify(vulnerability, null, 2);
-                                }
-                            },
-                            results: [
-                                {
-                                    status: inspecjs_1.ExecJSON.ControlResultStatus.Failed,
-                                    code_desc: {
-                                        path: 'from',
-                                        transformer: (input) => {
-                                            if (Array.isArray(input)) {
-                                                return `From : [ ${input.join(' , ')} ]`;
-                                            }
-                                            else {
-                                                return '';
-                                            }
-                                        }
-                                    },
-                                    run_time: 0,
-                                    start_time: ''
-                                }
-                            ]
-                        }
-                    ],
-                    sha256: ''
-                }
-            ],
-            passthrough: {
-                snyk_metadata: {
-                    transformer: (data) => {
-                        return _.omit(data, ['vulnerabilities']);
-                    }
-                }
-            }
-        };
-    }
-}
-exports.SnykMapper = SnykMapper;
-//# sourceMappingURL=snyk-mapper.js.map

package/lib/src/snyk-mapper.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"snyk-mapper.js","sourceRoot":"","sources":["../../src/snyk-mapper.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCAAkC;AAClC,0CAA4B;AAC5B,kDAAgE;AAChE,qDAK0B;AAC1B,8DAAyD;AACzD,2CAGwB;AAExB,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC;IAClD,CAAC,MAAM,EAAE,GAAG,CAAC;IACb,CAAC,QAAQ,EAAE,GAAG,CAAC;IACf,CAAC,KAAK,EAAE,GAAG,CAAC;CACb,CAAC,CAAC;AACH,MAAM,gBAAgB,GAAG,IAAI,+BAAc,EAAE,CAAC;AAE9C,MAAM,QAAQ,GAAG,iBAAiB,CAAC;AAEnC,SAAS,eAAe,CAAC,WAAgC;IACvD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,WAAW,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE;QAC3D,WAAW,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC9B,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACnC,OAAO,CAAC,KAAK,EAAE,CAAC;YAChB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;KACf;SAAM;QACL,OAAO,EAAE,CAAC;KACX;AACH,CAAC;AACD,SAAS,OAAO,CAAC,WAAsB;IACrC,OAAO,gBAAgB,CAAC,UAAU,CAChC,eAAe,CAAC,WAAW,CAAC,EAC5B,+CAAsC,CACvC,CAAC;AACJ,CAAC;AAED,MAAa,WAAW;IAGtB,YAAY,QAAgB;QAC1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC;IAED,KAAK;QACH,MAAM,OAAO,GAAyB,EAAE,CAAC;QACzC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YAC5B,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;gBAC5B,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC;gBACtC,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,EAAE;oBACpC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;iBACvC;gBACD,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;YAC9B,CAAC,CAAC,CAAC;YACH,OAAO,OAAO,CAAC;SAChB;aAAM;YACL,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzC,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,EAAE;gBACpC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;aACxC;YACD,OAAO,MAAM,CAAC,KAAK,EAAE,CAAC;SACvB;IACH,CAAC;CACF;AA1BD,kCA0BC;AAED,MAAa,UAAW,SAAQ,8BAAa;IAsG3C,YAAY,QAAiC;QAC3C,KAAK,CAAC,QAAQ,CAAC,CAAC;QAtGlB,aAAQ,GAGJ;YACF,QAAQ,EAAE;gBACR,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,sBAAoB;gBAC7B,SAAS,EAAE,EAAC,IAAI,EAAE,aAAa,EAAC;aACjC;YACD,OAAO,EAAE,sBAAoB;YAC7B,UAAU,EAAE;gBACV,QAAQ,EAAE,IAAI;aACf;YACD,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,WAAW;oBACjB,KAAK,EAAE;wBACL,WAAW,EAAE,CAAC,IAA6B,EAAU,EAAE;4BACrD,MAAM,WAAW,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,aAAa,CAAC;gCAC5C,CAAC,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,aAAa,CAAC,GAAG;gCAChD,CAAC,CAAC,EAAE,CAAC;4BACP,OAAO,GAAG,WAAW,cAAc,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;wBAC3D,CAAC;qBACF;oBACD,UAAU,EAAE,IAAI;oBAChB,OAAO,EAAE;wBACP,IAAI,EAAE,SAAS;wBACf,WAAW,EAAE,CAAC,OAAe,EAAU,EAAE;4BACvC,OAAO,iBAAiB,OAAO,EAAE,CAAC;wBACpC,CAAC;qBACF;oBACD,OAAO,EAAE,IAAI;oBACb,SAAS,EAAE,IAAI;oBACf,eAAe,EAAE,IAAI;oBACrB,QAAQ,EAAE,EAAE;oBACZ,UAAU,EAAE,EAAE;oBACd,OAAO,EAAE,EAAE;oBACX,MAAM,EAAE,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE;wBACR;4BACE,IAAI,EAAE,iBAAiB;4BACvB,GAAG,EAAE,IAAI;4BACT,IAAI,EAAE;gCACJ,GAAG,EAAE;oCACH,IAAI,EAAE,QAAQ;oCACd,WAAW,EAAE,CAAC,GAAc,EAAE,EAAE,CAC9B,IAAA,2BAAkB,EAAC,OAAO,CAAC,GAAG,CAAC,CAAC;iCACnC;gCACD,IAAI,EAAE,EAAC,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAC;gCAC5C,KAAK,EAAE,EAAC,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,eAAe,EAAC;gCACrD,KAAK,EAAE,EAAC,IAAI,EAAE,iBAAiB,EAAE,WAAW,EAAE,eAAe,EAAC;gCAC9D,MAAM,EAAE,EAAC,IAAI,EAAE,kBAAkB,EAAE,WAAW,EAAE,eAAe,EAAC;6BACjE;4BACD,YAAY,EAAE,EAAE;4BAChB,IAAI,EAAE,EAAE;4BACR,eAAe,EAAE,EAAE;4BACnB,KAAK,EAAE,EAAC,IAAI,EAAE,OAAO,EAAC;4BACtB,EAAE,EAAE,EAAC,IAAI,EAAE,IAAI,EAAC;4BAChB,IAAI,EAAE,EAAC,IAAI,EAAE,aAAa,EAAC;4BAC3B,MAAM,EAAE;gCACN,IAAI,EAAE,UAAU;gCAChB,WAAW,EAAE,IAAA,8BAAa,EAAC,cAAc,CAAC;6BAC3C;4BACD,IAAI,EAAE;gCACJ,WAAW,EAAE,CAAC,aAAsC,EAAU,EAAE;oCAC9D,OAAO,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;gCAChD,CAAC;6BACF;4BACD,OAAO,EAAE;gCACP;oCACE,MAAM,EAAE,mBAAQ,CAAC,mBAAmB,CAAC,MAAM;oCAC3C,SAAS,EAAE;wCACT,IAAI,EAAE,MAAM;wCACZ,WAAW,EAAE,CAAC,KAAc,EAAU,EAAE;4CACtC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;gDACxB,OAAO,YAAY,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;6CAC1C;iDAAM;gDACL,OAAO,EAAE,CAAC;6CACX;wCACH,CAAC;qCACF;oCACD,QAAQ,EAAE,CAAC;oCACX,UAAU,EAAE,EAAE;iCACf;6BACF;yBACF;qBACF;oBACD,MAAM,EAAE,EAAE;iBACX;aACF;YACD,WAAW,EAAE;gBACX,aAAa,EAAE;oBACb,WAAW,EAAE,CACX,IAA6B,EACJ,EAAE;wBAC3B,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC;oBAC3C,CAAC;iBACF;aACF;SACF,CAAC;IAGF,CAAC;CACF;AAzGD,gCAyGC"}