@mitre/hdf-converters 2.13.0 → 3.0.0

package/README.md

@@ -1,57 +1,139 @@
-# OHDF Converters
-
-"[OASIS Heimdall Data Format (OHDF)](https://saf.mitre.org/#/normalize)" is our common data exchange format to preserve and transform security data.
-
-OHDF Converters supplies several methods to convert various types of security tool data to and from the OHDF standard. OHDF Converters can be used in a variety of tools, and is currently well integrated with Heimdall itself, and the [SAF CLI](https://github.com/mitre/saf).
-
-## Supported Formats
-
-1.  [**anchore-grype-mapper**] - Anchore Grype container security scanning results file
-2.  [**asff-mapper**] - AWS Security Finding Format JSON file, Prowler-derived AWS Security Finding Format results from concatenated JSON blobs, and Trivy-derived AWS Security Finding Format results from concatenated JSON blobs
-3.  [**aws-config-mapper**] - AWS Config
-4.  [**burpsuite-mapper**] - BurpSuite Pro XML file
-5.  [**caat-mapper**] - Compliance Assessment and Audit Tracking (CAAT) file
-6.  [**checklist-mapper**] - Checlist Mapper format
-7.  [**checkov-mapper**] - Convert checkov json output files
-8.  [**conveyor-mapper**] - Conveyor JSON file
-9.  [**cyclonedx-sbom-mapper**] - CycloneDX SBOM JSON file
-10. [**dbprotect-mapper**] - DBProtect report in "Check Results Details" XML format
-11. [**dependency-track-mapper**] - OWASP Dependency-Track Finding Packaging Format (FPF)
-12. [**fortify-mapper**] - Fortify results FVDL file
-13. [**gosec-mapper**] - gosec results JSON file
-14. [**ionchannel-mapper**] - SBOM data from Ion Channel
-15. [**jfrog-xray-mapper**] - JFrog Xray results JSON file
-16. [**msft-secure-mapper**] - Microsoft Secure Score results file
-17. [**nessus-mapper**] - Nessus XML results file
-18. [**netsparker-mapper**] - Netsparker XML results file
-19. [**neuvector-mapper**] - NeuVector JSON results file
-20. [**nikto-mapper**] - Nikto results JSON file
-21. [**prisma-mapper**] - Prisma Cloud Scan Report CSV file
-22. [**sarif-mapper**] - SARIF JSON file
-23. [**scoutsuite-mapper**] - ScoutSuite results from a Javascript object
-24. [**snyk-mapper**] - Snyk results JSON file
-25. [**sonarqube-mapper**] - SonarQube vulnerabilities for the specified project name and optional branch or pull/merge request ID name from an API
-26. [**splunk-mapper**] - Splunk instance
-27. [**trufflehog-mapper**] - Trufflehog results json file
-28. [**twistlock-mapper**] - Twistlock CLI output file
-29. [**veracode-mapper**] - Veracode Scan Results XML file
-30. [**xccdf-results-mapper**] - SCAP client XCCDF-Results XML report
-31. [**zap-mapper**] - OWASP ZAP results JSON
-
-### NOTICE
-
-© 2022 The MITRE Corporation.
-
-Approved for Public Release; Distribution Unlimited. Case Number 18-3678.
-
-### NOTICE
-
-MITRE hereby grants express written permission to use, reproduce, distribute, modify, and otherwise leverage this software to the extent permitted by the licensed terms provided in the LICENSE.md file included with this project.
-
-### NOTICE
-
-This software was produced for the U. S. Government under Contract Number HHSM-500-2012-00008I, and is subject to Federal Acquisition Regulation Clause 52.227-14, Rights in Data-General.
-
-No other use other than that granted to the U. S. Government, or to those acting on behalf of the U. S. Government under that Clause is authorized without the express written permission of The MITRE Corporation.
-
-For further information, please contact The MITRE Corporation, Contracts Management Office, 7515 Colshire Drive, McLean, VA 22102-7539, (703) 983-6000.
+# @mitre/hdf-converters
+
+Converters for transforming security tool outputs and HDF format versions.
+
+## Overview
+
+This library provides converters for:
+- **HDF v1.0 → v2.0**: Transform legacy HDF format to current version
+- **Security Tools** (future): 30+ security tool output converters (Nessus, SCAP, etc.)
+
+## Installation
+
+```bash
+npm install @mitre/hdf-converters
+```
+
+## Usage
+
+### HDF v1.0 to v2.0 Conversion
+
+```typescript
+import { convertV1ToV2, isHDFV1 } from '@mitre/hdf-converters';
+
+// Check if data is v1.0 format
+const data = JSON.parse(fileContent);
+if (isHDFV1(data)) {
+  const v2Data = convertV1ToV2(data);
+  console.log('Converted to v2.0:', v2Data);
+}
+```
+
+### Key Changes in v2.0
+
+- `version` field removed (implicit in schema)
+- `profiles` → `baselines`
+- `platform` (single object) → `targets` (array, supports multiple targets)
+- Extension fields moved to `extensions` object
+
+## Auto-Detection (Fingerprint Registry)
+
+Automatically detect which converter to use for a given input:
+
+```typescript
+import { registerAllFingerprints, detectConverter } from '@mitre/hdf-converters/detect';
+
+registerAllFingerprints();
+const result = detectConverter(rawInput);
+// result.fingerprint.id === 'gosec-to-hdf'
+// result.confidence === 1.0
+```
+
+Each converter self-registers a lightweight structural fingerprint.
+Detection is cheap (~2KB, no converter imports). Conversion is lazy-loaded.
+
+Fingerprints can optionally detect the **format version** (e.g. SARIF 2.1.0,
+CycloneDX 1.5) via the `detectVersion` field on `ConverterFingerprint`. The
+detected version is returned in `DetectionResult.version`.
+
+See **[Fingerprint Registry Guide](../docs/guides/converter-fingerprint-registry.md)**
+for full documentation, usage examples, and how to add fingerprints for new converters.
+
+## Version Specifiers
+
+Converters support `format@version` syntax to specify input or output format versions:
+
+```bash
+# Explicit input version
+hdf convert --from sarif@2.0 scan.sarif
+
+# HDF schema version transforms
+hdf convert --from hdf@1 --to hdf@2 legacy.json     # Upgrade v1 → v2
+hdf convert --from hdf@1 --to hdf legacy.json        # Same (v2 is default)
+
+# Post-process any converter output to v1
+hdf convert --from grype --to hdf@1 scan.json         # Grype → HDF v2 → HDF v1
+```
+
+### Version Defaulting
+
+- No `@version`: converter uses its latest supported version
+- `--to hdf` (no version): produces latest HDF version (currently v2)
+- `--to hdf@1`: downgrades output to HDF v1 (lossy — prints warning)
+- `--from legacyhdf` is an alias for `--from hdf@1 --to hdf@2`
+
+### Multi-Version Converters (VersionedConverter)
+
+Converters that handle multiple input versions implement `VersionedConverter`:
+
+```go
+type VersionedConverter interface {
+    Converter
+    SetInputVersion(version string)
+    SupportedVersions() []string
+}
+```
+
+When `SetInputVersion("")` is called (or not called at all), the converter
+defaults to its latest supported version. `SupportedVersions()` returns
+versions in order, latest first.
+
+### HDF Version Transforms
+
+The `hdfversion` package provides a registry-based router for HDF schema
+version transforms:
+
+```go
+import "github.com/mitre/hdf-converters/shared/go/hdfversion"
+
+output, err := hdfversion.TransformHDF(input, "1", "2")  // upgrade
+output, err := hdfversion.TransformHDF(input, "2", "1")  // downgrade (lossy)
+ver, err := hdfversion.DetectHDFVersion(input)            // "1" or "2"
+```
+
+```typescript
+import { transformHDF, detectHDFVersion } from '@mitre/hdf-converters/shared/typescript/hdf-version.js';
+
+const v2 = transformHDF(v1Input, '1', '2');
+const ver = detectHDFVersion(input); // '1' or '2'
+```
+
+## Adding New Converters
+
+This package maintains **dual implementations** (TypeScript and Go) for all converters:
+- TypeScript for npm package (web apps, Node.js tools)
+- Go for `hdf-cli` (standalone binary, better security)
+
+See **[CONVERTER_GUIDE.md](./CONVERTER_GUIDE.md)** for complete implementation instructions.
+
+**Quick start**:
+1. Implement TypeScript converter in `converters/{tool}/typescript/`
+2. Add test fixtures in `converters/{tool}/fixtures/`
+3. Port to Go in `converters/{tool}/go/`
+4. Differential tests ensure both produce identical output
+
+**Architecture decision**: [ADR-001](../docs/architecture/ADR-001-dual-converter-implementations.md)
+
+## License
+
+Apache-2.0 © MITRE Corporation

package/dist/converters/aws-config-to-hdf/typescript/converter.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Converts an AWS Config static export (ConfigRulesFile JSON) to HDF format.
+ *
+ * @param input - JSON string produced by combining aws configservice describe-config-rules
+ *                with get-compliance-details-by-config-rule
+ * @returns HDF JSON string
+ */
+export declare function convertAwsConfigToHdf(input: string): Promise<string>;
+//# sourceMappingURL=converter.d.ts.map

package/dist/converters/aws-config-to-hdf/typescript/converter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"converter.d.ts","sourceRoot":"","sources":["../../../../converters/aws-config-to-hdf/typescript/converter.ts"],"names":[],"mappings":"AA4JA;;;;;;GAMG;AACH,wBAAsB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAiD1E"}

package/dist/converters/aws-config-to-hdf/typescript/converter.js

@@ -0,0 +1,132 @@
+import { parseJSON } from '@mitre/hdf-utilities';
+import { getAwsConfigNistControlByIdentifier, getAwsConfigNistControlByName, } from '@mitre/hdf-mappings';
+import { inputChecksum, limitArray, validateInputSize, buildHdfResults } from '../../../shared/typescript/converterutil.js';
+import { Copyright, } from '@mitre/hdf-schema';
+import { ResultStatus, createMinimalBaseline, createRequirement, createResult, } from '@mitre/hdf-schema';
+const ARN_RE = /arn:aws[^:]*:config:([^:]+):(\d{12}):config-rule/;
+function getAccountId(arn) {
+    const m = ARN_RE.exec(arn);
+    return m ? m[2] : 'no-account-id';
+}
+function getRegion(arn) {
+    const m = ARN_RE.exec(arn);
+    return m ? m[1] : 'unknown';
+}
+function mapComplianceStatus(complianceType) {
+    switch (complianceType) {
+        case 'COMPLIANT': return ResultStatus.Passed;
+        case 'NON_COMPLIANT': return ResultStatus.Failed;
+        case 'NOT_APPLICABLE': return ResultStatus.NotApplicable;
+        default: return ResultStatus.NotReviewed; // INSUFFICIENT_DATA etc.
+    }
+}
+function buildNistTags(sourceIdentifier, ruleName) {
+    const byIdentifier = getAwsConfigNistControlByIdentifier(sourceIdentifier);
+    if (byIdentifier)
+        return [byIdentifier];
+    const byName = getAwsConfigNistControlByName(ruleName);
+    if (byName)
+        return [byName];
+    return [];
+}
+function buildCheckText(rule) {
+    const parts = [
+        `ARN: ${rule.ConfigRuleArn || 'N/A'}`,
+        `Source Identifier: ${rule.Source.SourceIdentifier || 'N/A'}`,
+    ];
+    if (rule.InputParameters && rule.InputParameters !== '{}') {
+        const params = rule.InputParameters
+            .replace(/[{}"]/g, '')
+            .split(',')
+            .map(p => p.trim())
+            .filter(Boolean);
+        parts.push(...params);
+    }
+    return parts.join('<br/>');
+}
+function buildCodeDesc(q) {
+    return `config_rule_name: ${q.ConfigRuleName}, resource_type: ${q.ResourceType}, resource_id: ${q.ResourceId}`;
+}
+function buildResultMessage(codeDesc, annotation, status) {
+    if (status !== ResultStatus.Failed)
+        return undefined;
+    const text = annotation || 'Rule does not pass rule compliance';
+    return `(${codeDesc}): ${text}`;
+}
+function buildResult(r) {
+    const q = r.EvaluationResultIdentifier.EvaluationResultQualifier;
+    const status = mapComplianceStatus(r.ComplianceType);
+    const codeDesc = buildCodeDesc(q);
+    const message = buildResultMessage(codeDesc, r.Annotation, status);
+    const startTime = r.ConfigRuleInvokedTime ? new Date(r.ConfigRuleInvokedTime) : undefined;
+    return createResult(status, message ?? codeDesc, {
+        codeDesc,
+        ...(startTime ? { startTime } : {}),
+    });
+}
+function buildRequirement(rule) {
+    const nist = buildNistTags(rule.Source.SourceIdentifier, rule.ConfigRuleName);
+    const tags = nist.length > 0 ? { nist } : {};
+    const descriptions = [
+        { label: 'default', data: rule.Description },
+        { label: 'check', data: buildCheckText(rule) },
+    ];
+    const title = `${getAccountId(rule.ConfigRuleArn)} - ${rule.ConfigRuleName}`;
+    const results = rule.EvaluationResults.map(buildResult);
+    return createRequirement(rule.ConfigRuleId, title, descriptions, 0.5, results, {
+        tags,
+        sourceLocation: { ref: rule.ConfigRuleArn, line: 1 },
+    });
+}
+/**
+ * Converts an AWS Config static export (ConfigRulesFile JSON) to HDF format.
+ *
+ * @param input - JSON string produced by combining aws configservice describe-config-rules
+ *                with get-compliance-details-by-config-rule
+ * @returns HDF JSON string
+ */
+export async function convertAwsConfigToHdf(input) {
+    validateInputSize(input, 'aws-config');
+    const resultsChecksum = await inputChecksum(input);
+    const data = parseJSON(input);
+    if (!data || typeof data !== 'object') {
+        throw new Error('Invalid AWS Config export: not a valid JSON object');
+    }
+    if (!Array.isArray(data.ConfigRules)) {
+        throw new Error('Invalid AWS Config export: ConfigRules field is required');
+    }
+    const { items: limitedRules, truncated: truncatedRules } = limitArray(data.ConfigRules);
+    /* v8 ignore next -- truncation only triggers with >100K items */
+    if (truncatedRules) {
+        // eslint-disable-next-line no-console
+        console.warn(`WARNING: Input truncated at ${limitedRules.length} ConfigRule items (original: ${data.ConfigRules.length})`);
+    }
+    const requirements = limitedRules.map(buildRequirement);
+    const baseline = {
+        ...createMinimalBaseline('AWS Config', requirements, { resultsChecksum }),
+        title: 'AWS Config Compliance Results',
+        version: '1.0.0',
+        maintainer: 'Amazon Web Services',
+    };
+    // Extract account/region from the first rule's ARN for target labels
+    const firstArn = limitedRules[0]?.ConfigRuleArn ?? '';
+    const accountId = getAccountId(firstArn);
+    const region = getRegion(firstArn);
+    return buildHdfResults({
+        generatorName: 'aws-config-to-hdf',
+        converterVersion: '1.0.0',
+        toolName: 'AWS Config',
+        baselines: [baseline],
+        components: [{
+                type: Copyright.CloudAccount,
+                name: `AWS Account ${accountId}`,
+                labels: {
+                    account: accountId,
+                    region,
+                    provider: 'aws',
+                },
+            }],
+        timestamp: new Date(),
+    });
+}
+//# sourceMappingURL=converter.js.map

package/dist/converters/aws-config-to-hdf/typescript/converter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"converter.js","sourceRoot":"","sources":["../../../../converters/aws-config-to-hdf/typescript/converter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EACL,mCAAmC,EACnC,6BAA6B,GAC9B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,6CAA6C,CAAC;AAC5H,OAAO,EACL,SAAS,GAMV,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,YAAY,EACZ,qBAAqB,EACrB,iBAAiB,EACjB,YAAY,GACb,MAAM,mBAAmB,CAAC;AA4C3B,MAAM,MAAM,GAAG,kDAAkD,CAAC;AAElE,SAAS,YAAY,CAAC,GAAW;IAC/B,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3B,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,eAAe,CAAC;AACrC,CAAC;AAED,SAAS,SAAS,CAAC,GAAW;IAC5B,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3B,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/B,CAAC;AAED,SAAS,mBAAmB,CAAC,cAAsB;IACjD,QAAQ,cAAc,EAAE,CAAC;QACvB,KAAK,WAAW,CAAC,CAAO,OAAO,YAAY,CAAC,MAAM,CAAC;QACnD,KAAK,eAAe,CAAC,CAAG,OAAO,YAAY,CAAC,MAAM,CAAC;QACnD,KAAK,gBAAgB,CAAC,CAAE,OAAO,YAAY,CAAC,aAAa,CAAC;QAC1D,OAAO,CAAC,CAAgB,OAAO,YAAY,CAAC,WAAW,CAAC,CAAC,yBAAyB;IACpF,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,gBAAwB,EAAE,QAAgB;IAC/D,MAAM,YAAY,GAAG,mCAAmC,CAAC,gBAAgB,CAAC,CAAC;IAC3E,IAAI,YAAY;QAAE,OAAO,CAAC,YAAY,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,6BAA6B,CAAC,QAAQ,CAAC,CAAC;IACvD,IAAI,MAAM;QAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5B,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,cAAc,CAAC,IAAgB;IACtC,MAAM,KAAK,GAAa;QACtB,QAAQ,IAAI,CAAC,aAAa,IAAI,KAAK,EAAE;QACrC,sBAAsB,IAAI,CAAC,MAAM,CAAC,gBAAgB,IAAI,KAAK,EAAE;KAC9D,CAAC;IACF,IAAI,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,eAAe,KAAK,IAAI,EAAE,CAAC;QAC1D,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe;aAChC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;aACrB,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aAClB,MAAM,CAAC,OAAO,CAAC,CAAC;QACnB,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,aAAa,CAAC,CAA4B;IACjD,OAAO,qBAAqB,CAAC,CAAC,cAAc,oBAAoB,CAAC,CAAC,YAAY,kBAAkB,CAAC,CAAC,UAAU,EAAE,CAAC;AACjH,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAgB,EAAE,UAA8B,EAAE,MAAoB;IAChG,IAAI,MAAM,KAAK,YAAY,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IACrD,MAAM,IAAI,GAAG,UAAU,IAAI,oCAAoC,CAAC;IAChE,OAAO,IAAI,QAAQ,MAAM,IAAI,EAAE,CAAC;AAClC,CAAC;AAED,SAAS,WAAW,CAAC,CAAmB;IACtC,MAAM,CAAC,GAAG,CAAC,CAAC,0BAA0B,CAAC,yBAAyB,CAAC;IACjE,MAAM,MAAM,GAAG,mBAAmB,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;IAClC,MAAM,OAAO,GAAG,kBAAkB,CAAC,QAAQ,EAAE,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACnE,MAAM,SAAS,GAAG,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAE1F,OAAO,YAAY,CAAC,MAAM,EAAE,OAAO,IAAI,QAAQ,EAAE;QAC/C,QAAQ;QACR,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAgB;IACxC,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;IAC9E,MAAM,IAAI,GAA4B,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAEtE,MAAM,YAAY,GAAkB;QAClC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE;QAC5C,EAAE,KAAK,EAAE,OAAO,EAAI,IAAI,EAAE,cAAc,CAAC,IAAI,CAAC,EAAE;KACjD,CAAC;IAEF,MAAM,KAAK,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;IAC7E,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAExD,OAAO,iBAAiB,CACtB,IAAI,CAAC,YAAY,EACjB,KAAK,EACL,YAAY,EACZ,GAAG,EACH,OAAO,EACP;QACE,IAAI;QACJ,cAAc,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE;KACrD,CACF,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAAa;IACvD,iBAAiB,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IACvC,MAAM,eAAe,GAAa,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC;IAE7D,MAAM,IAAI,GAAG,SAAS,CAAkB,KAAK,CAAC,CAAC;IAE/C,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;IAED,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,cAAc,EAAE,GAAG,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACxF,iEAAiE;IACjE,IAAI,cAAc,EAAE,CAAC;QACnB,sCAAsC;QACtC,OAAO,CAAC,IAAI,CAAC,+BAA+B,YAAY,CAAC,MAAM,gCAAgC,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC;IAC7H,CAAC;IACD,MAAM,YAAY,GAAG,YAAY,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAExD,MAAM,QAAQ,GAAsB;QAClC,GAAG,qBAAqB,CAAC,YAAY,EAAE,YAAY,EAAE,EAAE,eAAe,EAAE,CAAC;QACzE,KAAK,EAAE,+BAA+B;QACtC,OAAO,EAAE,OAAO;QAChB,UAAU,EAAE,qBAAqB;KACb,CAAC;IAEvB,qEAAqE;IACrE,MAAM,QAAQ,GAAG,YAAY,CAAC,CAAC,CAAC,EAAE,aAAa,IAAI,EAAE,CAAC;IACtD,MAAM,SAAS,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAEnC,OAAO,eAAe,CAAC;QACrB,aAAa,EAAE,mBAAmB;QAClC,gBAAgB,EAAE,OAAO;QACzB,QAAQ,EAAE,YAAY;QACtB,SAAS,EAAE,CAAC,QAAQ,CAAC;QACrB,UAAU,EAAE,CAAC;gBACX,IAAI,EAAE,SAAS,CAAC,YAAY;gBAC5B,IAAI,EAAE,eAAe,SAAS,EAAE;gBAChC,MAAM,EAAE;oBACN,OAAO,EAAE,SAAS;oBAClB,MAAM;oBACN,QAAQ,EAAE,KAAK;iBAChB;aACF,CAAC;QACF,SAAS,EAAE,IAAI,IAAI,EAAE;KACtB,CAAC,CAAC;AACL,CAAC"}

package/dist/converters/aws-config-to-hdf/typescript/fingerprint.d.ts

@@ -0,0 +1,10 @@
+/**
+ * AWS Config format fingerprint.
+ *
+ * Exports a ConverterFingerprint object (data only, no converter import).
+ * Detects JSON with ConfigRules[] array or individual ConfigRuleName fields.
+ */
+import { type ConverterFingerprint } from '../../../shared/typescript/registry.js';
+export declare const awsConfigFingerprint: ConverterFingerprint;
+export declare function register(): void;
+//# sourceMappingURL=fingerprint.d.ts.map

package/dist/converters/aws-config-to-hdf/typescript/fingerprint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fingerprint.d.ts","sourceRoot":"","sources":["../../../../converters/aws-config-to-hdf/typescript/fingerprint.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAuC,KAAK,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAExH,eAAO,MAAM,oBAAoB,EAAE,oBAelC,CAAC;AAEF,wBAAgB,QAAQ,IAAI,IAAI,CAG/B"}

package/dist/converters/aws-config-to-hdf/typescript/fingerprint.js

@@ -0,0 +1,32 @@
+/**
+ * AWS Config format fingerprint.
+ *
+ * Exports a ConverterFingerprint object (data only, no converter import).
+ * Detects JSON with ConfigRules[] array or individual ConfigRuleName fields.
+ */
+import { registerFingerprint, getFingerprint } from '../../../shared/typescript/registry.js';
+export const awsConfigFingerprint = {
+    id: 'aws-config-to-hdf',
+    label: 'AWS Config',
+    direction: 'ingest',
+    inputFamily: 'json',
+    outputType: 'results',
+    fingerprint: (input) => {
+        if (typeof input !== 'object' || input === null)
+            return 0;
+        const obj = input;
+        // Primary: ConfigRules array (the standard export shape)
+        if (Array.isArray(obj.ConfigRules))
+            return 1.0;
+        // Secondary: individual config rule object with ConfigRuleName
+        if (typeof obj.ConfigRuleName === 'string')
+            return 0.7;
+        return 0;
+    },
+};
+export function register() {
+    if (getFingerprint('aws-config-to-hdf'))
+        return;
+    registerFingerprint(awsConfigFingerprint);
+}
+//# sourceMappingURL=fingerprint.js.map

package/dist/converters/aws-config-to-hdf/typescript/fingerprint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fingerprint.js","sourceRoot":"","sources":["../../../../converters/aws-config-to-hdf/typescript/fingerprint.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAA6B,MAAM,wCAAwC,CAAC;AAExH,MAAM,CAAC,MAAM,oBAAoB,GAAyB;IACxD,EAAE,EAAE,mBAAmB;IACvB,KAAK,EAAE,YAAY;IACnB,SAAS,EAAE,QAAQ;IACnB,WAAW,EAAE,MAAM;IACnB,UAAU,EAAE,SAAS;IACrB,WAAW,EAAE,CAAC,KAAc,EAAU,EAAE;QACtC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,CAAC,CAAC;QAC1D,MAAM,GAAG,GAAG,KAAgC,CAAC;QAC7C,yDAAyD;QACzD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;YAAE,OAAO,GAAG,CAAC;QAC/C,+DAA+D;QAC/D,IAAI,OAAO,GAAG,CAAC,cAAc,KAAK,QAAQ;YAAE,OAAO,GAAG,CAAC;QACvD,OAAO,CAAC,CAAC;IACX,CAAC;CACF,CAAC;AAEF,MAAM,UAAU,QAAQ;IACtB,IAAI,cAAc,CAAC,mBAAmB,CAAC;QAAE,OAAO;IAChD,mBAAmB,CAAC,oBAAoB,CAAC,CAAC;AAC5C,CAAC"}

package/dist/converters/aws-config-to-hdf/typescript/index.d.ts

@@ -0,0 +1,2 @@
+export { convertAwsConfigToHdf } from './converter.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/converters/aws-config-to-hdf/typescript/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../converters/aws-config-to-hdf/typescript/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/converters/aws-config-to-hdf/typescript/index.js

@@ -0,0 +1,2 @@
+export { convertAwsConfigToHdf } from './converter.js';
+//# sourceMappingURL=index.js.map

package/dist/converters/aws-config-to-hdf/typescript/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../converters/aws-config-to-hdf/typescript/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/converters/burpsuite-to-hdf/typescript/converter.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Converts BurpSuite Pro XML export to HDF format.
+ *
+ * Issues are grouped by `<type>` — each unique type becomes one requirement,
+ * with one result per individual issue instance.
+ *
+ * @param input - BurpSuite XML string
+ * @returns HDF JSON string
+ */
+export declare function convertBurpsuiteToHdf(input: string): Promise<string>;
+//# sourceMappingURL=converter.d.ts.map

package/dist/converters/burpsuite-to-hdf/typescript/converter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"converter.d.ts","sourceRoot":"","sources":["../../../../converters/burpsuite-to-hdf/typescript/converter.ts"],"names":[],"mappings":"AAyGA;;;;;;;;GAQG;AACH,wBAAsB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAwF1E"}

package/dist/converters/burpsuite-to-hdf/typescript/converter.js

@@ -0,0 +1,169 @@
+import { parseXmlWithArrays } from '@mitre/hdf-utilities';
+import { nistToCci, DEFAULT_STATIC_ANALYSIS_NIST_TAGS, } from '@mitre/hdf-mappings';
+import { inputChecksum, buildNistCciTags, limitArray, stripHTML, mapCWEToNIST, extractCWEIDs, validateInputSize, } from '../../../shared/typescript/converterutil.js';
+import { ResultStatus, Copyright, createMinimalBaseline, } from '@mitre/hdf-schema';
+// --- Impact mapping ---
+const IMPACT_MAPPING = {
+    'high': 0.7,
+    'medium': 0.5,
+    'low': 0.3,
+    'information': 0.3,
+};
+function getImpact(severity) {
+    return IMPACT_MAPPING[severity.toLowerCase()] ?? 0.3;
+}
+// --- CWE parsing ---
+/**
+ * Extract CWE identifiers from HTML text.
+ * Returns CWE-prefixed IDs (e.g., ["CWE-79"]) for use in tags and mapCWEToNIST.
+ */
+function parseCWEIDs(html) {
+    if (!html)
+        return [];
+    return extractCWEIDs(html).map(id => `CWE-${id}`);
+}
+// --- Format code desc ---
+function formatCodeDesc(hostIP, hostURL, location, issueDetail, confidence) {
+    const parts = [];
+    parts.push(`Host: ip: ${hostIP}, url: ${hostURL}`);
+    parts.push(`Location: ${stripHTML(location)}`);
+    if (issueDetail) {
+        parts.push(`issueDetail: ${stripHTML(issueDetail)}`);
+    }
+    parts.push(`confidence: ${confidence}`);
+    return parts.join('\n') + '\n';
+}
+// --- Main converter ---
+/**
+ * Converts BurpSuite Pro XML export to HDF format.
+ *
+ * Issues are grouped by `<type>` — each unique type becomes one requirement,
+ * with one result per individual issue instance.
+ *
+ * @param input - BurpSuite XML string
+ * @returns HDF JSON string
+ */
+export async function convertBurpsuiteToHdf(input) {
+    if (!input || input.trim().length === 0) {
+        throw new Error('burpsuite: empty input');
+    }
+    validateInputSize(input, 'burpsuite');
+    const resultsChecksum = await inputChecksum(input);
+    // Parse XML — ensure issue is always treated as array
+    const parsed = parseXmlWithArrays(input, ['issue']);
+    if (!parsed.issues) {
+        throw new Error('burpsuite: invalid XML — missing <issues> root element');
+    }
+    const issues = parsed.issues.issue ?? [];
+    const burpVersion = parsed.issues.burpVersion ?? '';
+    const exportTime = parsed.issues.exportTime ?? '';
+    const { items: limitedIssues, truncated } = limitArray(issues);
+    /* v8 ignore next -- truncation only triggers with >100K items */
+    if (truncated) {
+        // eslint-disable-next-line no-console
+        console.warn(`WARNING: Input truncated at ${limitedIssues.length} issue items (original: ${issues.length})`);
+    }
+    // Group issues by type (preserving insertion order)
+    const groups = new Map();
+    for (const issue of limitedIssues) {
+        const issueType = issue.type ?? 'unknown';
+        const existing = groups.get(issueType);
+        if (existing) {
+            existing.push(issue);
+        }
+        else {
+            groups.set(issueType, [issue]);
+        }
+    }
+    // Build requirements from grouped issues
+    const requirements = [];
+    for (const [issueType, groupIssues] of groups) {
+        requirements.push(buildRequirement(issueType, groupIssues));
+    }
+    // Determine target from the first issue's host
+    const targetName = limitedIssues.length > 0
+        ? (limitedIssues[0].host?.['#text'] ?? 'Unknown').trim()
+        : 'Unknown';
+    const title = `BurpSuite Scan: ${targetName}`;
+    const baseline = createMinimalBaseline('BurpSuite Scan', requirements, {
+        resultsChecksum,
+        title,
+    });
+    const tool = {
+        name: 'BurpSuite',
+        format: 'XML',
+    };
+    if (burpVersion) {
+        tool.version = burpVersion;
+    }
+    const hdf = {
+        baselines: [baseline],
+        components: [
+            {
+                name: targetName,
+                type: Copyright.Application,
+            },
+        ],
+        generator: {
+            name: 'burpsuite-to-hdf',
+            version: '1.0.0',
+        },
+        tool,
+    };
+    if (exportTime) {
+        hdf.timestamp = new Date(exportTime);
+    }
+    return JSON.stringify(hdf, null, 2);
+}
+// --- Build requirement ---
+function buildRequirement(issueType, issues) {
+    const rep = issues[0];
+    // Parse CWE IDs from vulnerabilityClassifications HTML
+    const cweIDs = parseCWEIDs(rep.vulnerabilityClassifications ?? '');
+    // Map CWE to NIST
+    const nist = mapCWEToNIST(cweIDs, [...DEFAULT_STATIC_ANALYSIS_NIST_TAGS]);
+    const cciTags = nistToCci(nist);
+    // Build extra tags
+    const extras = {};
+    if (cweIDs.length > 0) {
+        extras.cweid = cweIDs.join(', ');
+    }
+    if (rep.confidence) {
+        extras.confidence = rep.confidence;
+    }
+    const tags = buildNistCciTags(nist, cciTags, Object.keys(extras).length > 0 ? extras : undefined);
+    // Build descriptions
+    const descriptions = [];
+    // Default description (required minimum 1 with "default" label)
+    const defaultData = rep.issueBackground
+        ? stripHTML(rep.issueBackground)
+        : (rep.name ?? issueType);
+    descriptions.push({ label: 'default', data: defaultData });
+    // Check description from issueBackground
+    if (rep.issueBackground) {
+        descriptions.push({ label: 'check', data: stripHTML(rep.issueBackground) });
+    }
+    // Fix description from remediationBackground
+    if (rep.remediationBackground) {
+        descriptions.push({ label: 'fix', data: stripHTML(rep.remediationBackground) });
+    }
+    // Build results — one per issue in the group
+    const results = issues.map(issue => {
+        const codeDesc = formatCodeDesc(issue.host?.ip ?? '', (issue.host?.['#text'] ?? '').trim(), issue.location ?? '', issue.issueDetail ?? '', issue.confidence ?? '');
+        return {
+            status: ResultStatus.Failed,
+            codeDesc,
+            startTime: new Date('0001-01-01T00:00:00Z'),
+        };
+    });
+    const impact = getImpact(rep.severity ?? 'information');
+    return {
+        id: issueType,
+        title: rep.name ?? undefined,
+        impact,
+        tags,
+        descriptions,
+        results,
+    };
+}
+//# sourceMappingURL=converter.js.map

package/dist/converters/burpsuite-to-hdf/typescript/converter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"converter.js","sourceRoot":"","sources":["../../../../converters/burpsuite-to-hdf/typescript/converter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EACL,SAAS,EACT,iCAAiC,GAClC,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,aAAa,EACb,gBAAgB,EAChB,UAAU,EACV,SAAS,EACT,YAAY,EACZ,aAAa,EACb,iBAAiB,GAClB,MAAM,6CAA6C,CAAC;AAUrD,OAAO,EACL,YAAY,EACZ,SAAS,EACT,qBAAqB,GACtB,MAAM,mBAAmB,CAAC;AAiC3B,yBAAyB;AAEzB,MAAM,cAAc,GAA2B;IAC7C,MAAM,EAAE,GAAG;IACX,QAAQ,EAAE,GAAG;IACb,KAAK,EAAE,GAAG;IACV,aAAa,EAAE,GAAG;CACnB,CAAC;AAEF,SAAS,SAAS,CAAC,QAAgB;IACjC,OAAO,cAAc,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,IAAI,GAAG,CAAC;AACvD,CAAC;AAED,sBAAsB;AAEtB;;;GAGG;AACH,SAAS,WAAW,CAAC,IAAY;IAC/B,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AACpD,CAAC;AAED,2BAA2B;AAE3B,SAAS,cAAc,CACrB,MAAc,EACd,OAAe,EACf,QAAgB,EAChB,WAAmB,EACnB,UAAkB;IAElB,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,aAAa,MAAM,UAAU,OAAO,EAAE,CAAC,CAAC;IACnD,KAAK,CAAC,IAAI,CAAC,aAAa,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC/C,IAAI,WAAW,EAAE,CAAC;QAChB,KAAK,CAAC,IAAI,CAAC,gBAAgB,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IACvD,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,eAAe,UAAU,EAAE,CAAC,CAAC;IACxC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AACjC,CAAC;AAED,yBAAyB;AAEzB;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAAa;IACvD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC5C,CAAC;IACD,iBAAiB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IAEtC,MAAM,eAAe,GAAa,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC;IAE7D,sDAAsD;IACtD,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,CAA6B,CAAC;IAEhF,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;IACzC,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC;IACpD,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC;IAElD,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IAC/D,iEAAiE;IACjE,IAAI,SAAS,EAAE,CAAC;QACd,sCAAsC;QACtC,OAAO,CAAC,IAAI,CAAC,+BAA+B,aAAa,CAAC,MAAM,2BAA2B,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IAC/G,CAAC;IAED,oDAAoD;IACpD,MAAM,MAAM,GAAG,IAAI,GAAG,EAA0B,CAAC;IACjD,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,IAAI,SAAS,CAAC;QAC1C,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACvC,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IAED,yCAAyC;IACzC,MAAM,YAAY,GAA2B,EAAE,CAAC;IAChD,KAAK,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,IAAI,MAAM,EAAE,CAAC;QAC9C,YAAY,CAAC,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC;IAC9D,CAAC;IAED,+CAA+C;IAC/C,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,GAAG,CAAC;QACzC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC,CAAC,IAAI,EAAE;QACzD,CAAC,CAAC,SAAS,CAAC;IAEd,MAAM,KAAK,GAAG,mBAAmB,UAAU,EAAE,CAAC;IAE9C,MAAM,QAAQ,GAAsB,qBAAqB,CACvD,gBAAgB,EAChB,YAAY,EACZ;QACE,eAAe;QACf,KAAK;KACN,CACmB,CAAC;IAEvB,MAAM,IAAI,GAAS;QACjB,IAAI,EAAE,WAAW;QACjB,MAAM,EAAE,KAAK;KACd,CAAC;IACF,IAAI,WAAW,EAAE,CAAC;QAChB,IAAI,CAAC,OAAO,GAAG,WAAW,CAAC;IAC7B,CAAC;IAED,MAAM,GAAG,GAAe;QACtB,SAAS,EAAE,CAAC,QAAQ,CAAC;QACrB,UAAU,EAAE;YACV;gBACE,IAAI,EAAE,UAAU;gBAChB,IAAI,EAAE,SAAS,CAAC,WAAW;aAC5B;SACF;QACD,SAAS,EAAE;YACT,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,OAAO;SACjB;QACD,IAAI;KACL,CAAC;IAEF,IAAI,UAAU,EAAE,CAAC;QACf,GAAG,CAAC,SAAS,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC;IACvC,CAAC;IAED,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AACtC,CAAC;AAED,4BAA4B;AAE5B,SAAS,gBAAgB,CACvB,SAAiB,EACjB,MAAsB;IAEtB,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC;IAEvB,uDAAuD;IACvD,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,4BAA4B,IAAI,EAAE,CAAC,CAAC;IAEnE,kBAAkB;IAClB,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,GAAG,iCAAiC,CAAC,CAAC,CAAC;IAC1E,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAEhC,mBAAmB;IACnB,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,CAAC,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IACD,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;QACnB,MAAM,CAAC,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC;IACrC,CAAC;IACD,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAElG,qBAAqB;IACrB,MAAM,YAAY,GAAkB,EAAE,CAAC;IAEvC,gEAAgE;IAChE,MAAM,WAAW,GAAG,GAAG,CAAC,eAAe;QACrC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,eAAe,CAAC;QAChC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI,SAAS,CAAC,CAAC;IAC5B,YAAY,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;IAE3D,yCAAyC;IACzC,IAAI,GAAG,CAAC,eAAe,EAAE,CAAC;QACxB,YAAY,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,6CAA6C;IAC7C,IAAI,GAAG,CAAC,qBAAqB,EAAE,CAAC;QAC9B,YAAY,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,CAAC,GAAG,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC;IAClF,CAAC;IAED,6CAA6C;IAC7C,MAAM,OAAO,GAAwB,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE;QACtD,MAAM,QAAQ,GAAG,cAAc,CAC7B,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,EACpB,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EACpC,KAAK,CAAC,QAAQ,IAAI,EAAE,EACpB,KAAK,CAAC,WAAW,IAAI,EAAE,EACvB,KAAK,CAAC,UAAU,IAAI,EAAE,CACvB,CAAC;QACF,OAAO;YACL,MAAM,EAAE,YAAY,CAAC,MAAM;YAC3B,QAAQ;YACR,SAAS,EAAE,IAAI,IAAI,CAAC,sBAAsB,CAAC;SAC5C,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,QAAQ,IAAI,aAAa,CAAC,CAAC;IAExD,OAAO;QACL,EAAE,EAAE,SAAS;QACb,KAAK,EAAE,GAAG,CAAC,IAAI,IAAI,SAAS;QAC5B,MAAM;QACN,IAAI;QACJ,YAAY;QACZ,OAAO;KACR,CAAC;AACJ,CAAC"}

package/dist/converters/burpsuite-to-hdf/typescript/fingerprint.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Burp Suite format fingerprint.
+ *
+ * Detects Burp Suite XML files by checking for <issues> root element.
+ */
+import { type ConverterFingerprint } from '../../../shared/typescript/registry.js';
+export declare const burpsuiteFingerprint: ConverterFingerprint;
+export declare function register(): void;
+//# sourceMappingURL=fingerprint.d.ts.map

package/dist/converters/burpsuite-to-hdf/typescript/fingerprint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fingerprint.d.ts","sourceRoot":"","sources":["../../../../converters/burpsuite-to-hdf/typescript/fingerprint.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAuC,KAAK,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAGxH,eAAO,MAAM,oBAAoB,EAAE,oBAgBlC,CAAC;AAEF,wBAAgB,QAAQ,IAAI,IAAI,CAG/B"}