@mitre/hdf-converters 2.13.0 → 3.0.0

package/dist/converters/burpsuite-to-hdf/typescript/fingerprint.js

@@ -0,0 +1,33 @@
+/**
+ * Burp Suite format fingerprint.
+ *
+ * Detects Burp Suite XML files by checking for <issues> root element.
+ */
+import { registerFingerprint, getFingerprint } from '../../../shared/typescript/registry.js';
+import { extractXmlRootElement } from '../../../shared/typescript/xml-utils.js';
+export const burpsuiteFingerprint = {
+    id: 'burpsuite-to-hdf',
+    label: 'Burp Suite',
+    direction: 'ingest',
+    inputFamily: 'xml',
+    outputType: 'results',
+    fingerprint: (input) => {
+        if (typeof input !== 'string')
+            return 0;
+        // BurpSuite XML has <!DOCTYPE issues [...]> before <issues> root.
+        // extractXmlRootElement handles DOCTYPE stripping.
+        const root = extractXmlRootElement(input);
+        if (root !== 'issues')
+            return 0;
+        // burpVersion attribute is a strong signal
+        if (input.includes('burpVersion'))
+            return 1.0;
+        return 0.7;
+    },
+};
+export function register() {
+    if (getFingerprint('burpsuite-to-hdf'))
+        return;
+    registerFingerprint(burpsuiteFingerprint);
+}
+//# sourceMappingURL=fingerprint.js.map

package/dist/converters/burpsuite-to-hdf/typescript/fingerprint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fingerprint.js","sourceRoot":"","sources":["../../../../converters/burpsuite-to-hdf/typescript/fingerprint.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAA6B,MAAM,wCAAwC,CAAC;AACxH,OAAO,EAAE,qBAAqB,EAAE,MAAM,yCAAyC,CAAC;AAEhF,MAAM,CAAC,MAAM,oBAAoB,GAAyB;IACxD,EAAE,EAAE,kBAAkB;IACtB,KAAK,EAAE,YAAY;IACnB,SAAS,EAAE,QAAQ;IACnB,WAAW,EAAE,KAAK;IAClB,UAAU,EAAE,SAAS;IACrB,WAAW,EAAE,CAAC,KAAc,EAAU,EAAE;QACtC,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAC;QACxC,kEAAkE;QAClE,mDAAmD;QACnD,MAAM,IAAI,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,IAAI,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAC;QAChC,2CAA2C;QAC3C,IAAI,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC;YAAE,OAAO,GAAG,CAAC;QAC9C,OAAO,GAAG,CAAC;IACb,CAAC;CACF,CAAC;AAEF,MAAM,UAAU,QAAQ;IACtB,IAAI,cAAc,CAAC,kBAAkB,CAAC;QAAE,OAAO;IAC/C,mBAAmB,CAAC,oBAAoB,CAAC,CAAC;AAC5C,CAAC"}

package/dist/converters/burpsuite-to-hdf/typescript/index.d.ts

@@ -0,0 +1,2 @@
+export { convertBurpsuiteToHdf } from './converter.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/converters/burpsuite-to-hdf/typescript/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../converters/burpsuite-to-hdf/typescript/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/converters/burpsuite-to-hdf/typescript/index.js

@@ -0,0 +1,2 @@
+export { convertBurpsuiteToHdf } from './converter.js';
+//# sourceMappingURL=index.js.map

package/dist/converters/burpsuite-to-hdf/typescript/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../converters/burpsuite-to-hdf/typescript/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/converters/conveyor-to-hdf/typescript/converter.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Converts Conveyor scan results to HDF format.
+ * Results are grouped by scanner name, producing one baseline per scanner.
+ *
+ * @param input - Conveyor JSON string
+ * @returns HDF JSON string
+ */
+export declare function convertConveyorToHdf(input: string): Promise<string>;
+//# sourceMappingURL=converter.d.ts.map

package/dist/converters/conveyor-to-hdf/typescript/converter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"converter.d.ts","sourceRoot":"","sources":["../../../../converters/conveyor-to-hdf/typescript/converter.ts"],"names":[],"mappings":"AAgRA;;;;;;GAMG;AACH,wBAAsB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAyDzE"}

package/dist/converters/conveyor-to-hdf/typescript/converter.js

@@ -0,0 +1,206 @@
+import { parseJSON } from '@mitre/hdf-utilities';
+import { DEFAULT_STATIC_ANALYSIS_NIST_TAGS, nistToCci, } from '@mitre/hdf-mappings';
+import { inputChecksum, buildNistCciTags, validateInputSize, buildHdfResults } from '../../../shared/typescript/converterutil.js';
+import { ResultStatus, Copyright, createMinimalBaseline, createRequirement, createResult, } from '@mitre/hdf-schema';
+/** Maximum Conveyor score (used for normalization). */
+const CONVEYOR_MAX_SCORE = 1000;
+/**
+ * Recursively walks the file tree, collecting sha256 -> filename mappings.
+ */
+function collateSHAAndFilenames(tree) {
+    const result = new Map();
+    for (const [sha, node] of Object.entries(tree)) {
+        if (node.name && node.name.length > 0) {
+            result.set(sha, node.name[0]);
+        }
+        if (node.children && Object.keys(node.children).length > 0) {
+            for (const [childSha, childName] of collateSHAAndFilenames(node.children)) {
+                result.set(childSha, childName);
+            }
+        }
+    }
+    return result;
+}
+/**
+ * Maps a Conveyor score to an HDF result status.
+ * Score 0 = Passed, non-zero = Failed.
+ */
+function determineStatus(score) {
+    return score === 0 ? ResultStatus.Passed : ResultStatus.Failed;
+}
+/**
+ * Normalizes a Conveyor score (0-1000) to HDF impact (0.0-1.0).
+ */
+function scoreToImpact(score) {
+    if (score <= 0)
+        return 0.0;
+    if (score >= CONVEYOR_MAX_SCORE)
+        return 1.0;
+    return score / CONVEYOR_MAX_SCORE;
+}
+/**
+ * Extracts a string from a body field that may be null or a string.
+ */
+function bodyToString(body) {
+    if (body === null || body === undefined)
+        return '';
+    if (typeof body === 'string')
+        return body;
+    return String(body);
+}
+/**
+ * Creates the code_desc field content from a Conveyor section.
+ */
+function buildCodeDesc(section, scannerName) {
+    const parts = [];
+    if (scannerName === 'Moldy' || scannerName === 'Stigma' || scannerName === 'Clamav') {
+        parts.push(`title_text:${section.title_text ?? ''}`);
+        parts.push(`body:${bodyToString(section.body)}`);
+        parts.push(`body_format:${section.body_format ?? ''}`);
+        parts.push(`classification:${section.classification ?? ''}`);
+        parts.push(`depth:${section.depth ?? 0}`);
+        if (section.heuristic) {
+            parts.push(`heuristic_heur_id:${section.heuristic.heur_id ?? ''}`);
+            parts.push(`heuristic_score:${section.heuristic.score ?? 0}`);
+            parts.push(`heuristic_name:${section.heuristic.name ?? ''}`);
+        }
+    }
+    else if (scannerName === 'CodeQuality') {
+        parts.push(`body:${bodyToString(section.body)}`);
+        parts.push(`body_format:${section.body_format ?? ''}`);
+        parts.push(`classification:${section.classification ?? ''}`);
+        parts.push(`depth:${section.depth ?? 0}`);
+        parts.push(`title_text:${section.title_text ?? ''}`);
+    }
+    else {
+        return JSON.stringify(section);
+    }
+    return parts.join('\n');
+}
+/**
+ * Groups Conveyor results by their service (scanner) name.
+ */
+function groupResultsByScanner(results) {
+    const groups = new Map();
+    for (const result of Object.values(results)) {
+        const name = result.response.service_name;
+        const existing = groups.get(name);
+        if (existing) {
+            existing.push(result);
+        }
+        else {
+            groups.set(name, [result]);
+        }
+    }
+    const scanners = [...groups.keys()].sort();
+    return { scanners, groups };
+}
+/**
+ * Builds an HDF requirement from a single Conveyor result.
+ */
+function buildRequirementFromResult(result, filename) {
+    const nist = DEFAULT_STATIC_ANALYSIS_NIST_TAGS;
+    const cciTags = nistToCci(nist);
+    const tags = buildNistCciTags(nist, cciTags);
+    // Build description from sections
+    let descText = '';
+    if (result.result.sections.length > 0) {
+        descText = result.result.sections
+            .map(s => s.title_text ?? '')
+            .filter(t => t.length > 0)
+            .join('; ');
+    }
+    if (!descText) {
+        descText = `Conveyor scan result for ${result.sha256}`;
+    }
+    const descriptions = [
+        { label: 'default', data: descText },
+    ];
+    const scannerName = result.response.service_name;
+    const startTimeStr = result.response.milestones?.service_started ?? '';
+    const startTime = startTimeStr ? new Date(startTimeStr) : new Date();
+    const score = result.result.score;
+    const status = determineStatus(score);
+    let results;
+    if (result.result.sections.length > 0) {
+        results = result.result.sections.map(section => {
+            const codeDesc = buildCodeDesc(section, scannerName);
+            return createResult(status, undefined, {
+                codeDesc,
+                startTime,
+            });
+        });
+    }
+    else {
+        results = [
+            createResult(status, undefined, {
+                codeDesc: `No sections reported by ${scannerName}`,
+                startTime,
+            }),
+        ];
+    }
+    return createRequirement(result.sha256, filename, descriptions, scoreToImpact(score), results, { tags });
+}
+/**
+ * Builds an HDF baseline for a single scanner's results.
+ */
+function buildScannerBaseline(scannerName, results, shaMap, resultsChecksum) {
+    const requirements = results.map(result => {
+        const filename = shaMap.get(result.sha256) ?? '';
+        return buildRequirementFromResult(result, filename);
+    });
+    const title = `Conveyor Scan (${scannerName})`;
+    return createMinimalBaseline('Conveyor Scan', requirements, {
+        resultsChecksum,
+        title,
+    });
+}
+/**
+ * Converts Conveyor scan results to HDF format.
+ * Results are grouped by scanner name, producing one baseline per scanner.
+ *
+ * @param input - Conveyor JSON string
+ * @returns HDF JSON string
+ */
+export async function convertConveyorToHdf(input) {
+    if (!input || input.trim().length === 0) {
+        throw new Error('conveyor: empty input');
+    }
+    validateInputSize(input, 'conveyor');
+    const data = parseJSON(input);
+    if (!data || typeof data !== 'object') {
+        throw new Error('conveyor: invalid JSON');
+    }
+    if (!data.api_response) {
+        throw new Error('conveyor: missing api_response field');
+    }
+    if (!data.api_response.results) {
+        throw new Error('conveyor: missing api_response.results field');
+    }
+    const resultsChecksum = await inputChecksum(input);
+    // Build SHA -> filename mapping from file tree
+    const shaMap = data.api_response.file_tree
+        ? collateSHAAndFilenames(data.api_response.file_tree)
+        : new Map();
+    // Group results by scanner
+    const { scanners, groups } = groupResultsByScanner(data.api_response.results);
+    const baselines = scanners.map(scannerName => buildScannerBaseline(scannerName, groups.get(scannerName), shaMap, resultsChecksum));
+    // Build target name from params.description
+    let targetName = 'Conveyor Scan';
+    if (data.api_response.params) {
+        const desc = data.api_response.params['description'];
+        if (typeof desc === 'string' && desc.length > 0) {
+            targetName = desc;
+        }
+    }
+    return buildHdfResults({
+        generatorName: 'conveyor-to-hdf',
+        converterVersion: '1.0.0',
+        toolName: 'Conveyor',
+        toolFormat: 'JSON',
+        baselines,
+        components: [{ name: targetName, type: Copyright.Application }],
+        timestamp: new Date(),
+    });
+}
+//# sourceMappingURL=converter.js.map

package/dist/converters/conveyor-to-hdf/typescript/converter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"converter.js","sourceRoot":"","sources":["../../../../converters/conveyor-to-hdf/typescript/converter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EACL,iCAAiC,EACjC,SAAS,GACV,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,6CAA6C,CAAC;AAMlI,OAAO,EACL,YAAY,EACZ,SAAS,EACT,qBAAqB,EACrB,iBAAiB,EACjB,YAAY,GAEb,MAAM,mBAAmB,CAAC;AAE3B,uDAAuD;AACvD,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAsEhC;;GAEG;AACH,SAAS,sBAAsB,CAAC,IAAkC;IAChE,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/C,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;QACjC,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3D,KAAK,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,IAAI,sBAAsB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC1E,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC;AACjE,CAAC;AAED;;GAEG;AACH,SAAS,aAAa,CAAC,KAAa;IAClC,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,GAAG,CAAC;IAC3B,IAAI,KAAK,IAAI,kBAAkB;QAAE,OAAO,GAAG,CAAC;IAC5C,OAAO,KAAK,GAAG,kBAAkB,CAAC;AACpC,CAAC;AAED;;GAEG;AACH,SAAS,YAAY,CAAC,IAAa;IACjC,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACnD,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC1C,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;AACtB,CAAC;AAED;;GAEG;AACH,SAAS,aAAa,CAAC,OAAwB,EAAE,WAAmB;IAClE,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,IAAI,WAAW,KAAK,OAAO,IAAI,WAAW,KAAK,QAAQ,IAAI,WAAW,KAAK,QAAQ,EAAE,CAAC;QACpF,KAAK,CAAC,IAAI,CAAC,cAAc,OAAO,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC,CAAC;QACrD,KAAK,CAAC,IAAI,CAAC,QAAQ,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjD,KAAK,CAAC,IAAI,CAAC,eAAe,OAAO,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC,CAAC;QACvD,KAAK,CAAC,IAAI,CAAC,kBAAkB,OAAO,CAAC,cAAc,IAAI,EAAE,EAAE,CAAC,CAAC;QAC7D,KAAK,CAAC,IAAI,CAAC,SAAS,OAAO,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1C,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YACtB,KAAK,CAAC,IAAI,CAAC,qBAAqB,OAAO,CAAC,SAAS,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC,CAAC;YACnE,KAAK,CAAC,IAAI,CAAC,mBAAmB,OAAO,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC;YAC9D,KAAK,CAAC,IAAI,CAAC,kBAAkB,OAAO,CAAC,SAAS,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;SAAM,IAAI,WAAW,KAAK,aAAa,EAAE,CAAC;QACzC,KAAK,CAAC,IAAI,CAAC,QAAQ,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjD,KAAK,CAAC,IAAI,CAAC,eAAe,OAAO,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC,CAAC;QACvD,KAAK,CAAC,IAAI,CAAC,kBAAkB,OAAO,CAAC,cAAc,IAAI,EAAE,EAAE,CAAC,CAAC;QAC7D,KAAK,CAAC,IAAI,CAAC,SAAS,OAAO,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1C,KAAK,CAAC,IAAI,CAAC,cAAc,OAAO,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC,CAAC;IACvD,CAAC;SAAM,CAAC;QACN,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,SAAS,qBAAqB,CAC5B,OAAuC;IAEvC,MAAM,MAAM,GAAG,IAAI,GAAG,EAA4B,CAAC;IACnD,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC;QAC1C,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACxB,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;AAC9B,CAAC;AAED;;GAEG;AACH,SAAS,0BAA0B,CACjC,MAAsB,EACtB,QAAgB;IAEhB,MAAM,IAAI,GAAG,iCAAiC,CAAC;IAC/C,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAE7C,kCAAkC;IAClC,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtC,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ;aAC9B,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC;aAC5B,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;aACzB,IAAI,CAAC,IAAI,CAAC,CAAC;IAChB,CAAC;IACD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,QAAQ,GAAG,4BAA4B,MAAM,CAAC,MAAM,EAAE,CAAC;IACzD,CAAC;IAED,MAAM,YAAY,GAAkB;QAClC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE;KACrC,CAAC;IAEF,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC;IACjD,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,eAAe,IAAI,EAAE,CAAC;IACvE,MAAM,SAAS,GAAG,YAAY,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;IACrE,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;IAClC,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IAEtC,IAAI,OAAO,CAAC;IACZ,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtC,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE;YAC7C,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;YACrD,OAAO,YAAY,CAAC,MAAM,EAAE,SAAS,EAAE;gBACrC,QAAQ;gBACR,SAAS;aACV,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,OAAO,GAAG;YACR,YAAY,CAAC,MAAM,EAAE,SAAS,EAAE;gBAC9B,QAAQ,EAAE,2BAA2B,WAAW,EAAE;gBAClD,SAAS;aACV,CAAC;SACH,CAAC;IACJ,CAAC;IAED,OAAO,iBAAiB,CACtB,MAAM,CAAC,MAAM,EACb,QAAQ,EACR,YAAY,EACZ,aAAa,CAAC,KAAK,CAAC,EACpB,OAAO,EACP,EAAE,IAAI,EAAE,CACT,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,oBAAoB,CAC3B,WAAmB,EACnB,OAAyB,EACzB,MAA2B,EAC3B,eAAyB;IAEzB,MAAM,YAAY,GAA2B,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE;QAChE,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACjD,OAAO,0BAA0B,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,kBAAkB,WAAW,GAAG,CAAC;IAE/C,OAAO,qBAAqB,CAC1B,eAAe,EACf,YAAY,EACZ;QACE,eAAe;QACf,KAAK;KACN,CACmB,CAAC;AACzB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,KAAa;IACtD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC3C,CAAC;IACD,iBAAiB,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAErC,MAAM,IAAI,GAAG,SAAS,CAAe,KAAK,CAAC,CAAC;IAE5C,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC5C,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IAED,MAAM,eAAe,GAAa,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC;IAE7D,+CAA+C;IAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,SAAS;QACxC,CAAC,CAAC,sBAAsB,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC;QACrD,CAAC,CAAC,IAAI,GAAG,EAAkB,CAAC;IAE9B,2BAA2B;IAC3B,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,qBAAqB,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;IAE9E,MAAM,SAAS,GAAwB,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAChE,oBAAoB,CAClB,WAAW,EACX,MAAM,CAAC,GAAG,CAAC,WAAW,CAAE,EACxB,MAAM,EACN,eAAe,CAChB,CACF,CAAC;IAEF,4CAA4C;IAC5C,IAAI,UAAU,GAAG,eAAe,CAAC;IACjC,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QACrD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChD,UAAU,GAAG,IAAI,CAAC;QACpB,CAAC;IACH,CAAC;IAED,OAAO,eAAe,CAAC;QACrB,aAAa,EAAE,iBAAiB;QAChC,gBAAgB,EAAE,OAAO;QACzB,QAAQ,EAAE,UAAU;QACpB,UAAU,EAAE,MAAM;QAClB,SAAS;QACT,UAAU,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,CAAC;QAC/D,SAAS,EAAE,IAAI,IAAI,EAAE;KACtB,CAAC,CAAC;AACL,CAAC"}

package/dist/converters/conveyor-to-hdf/typescript/fingerprint.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Conveyor format fingerprint.
+ *
+ * Exports a ConverterFingerprint object (data only, no converter import).
+ * Detects JSON with api_response.results structure.
+ */
+import { type ConverterFingerprint } from '../../../shared/typescript/registry.js';
+export declare const conveyorFingerprint: ConverterFingerprint;
+export declare function register(): void;
+//# sourceMappingURL=fingerprint.d.ts.map

package/dist/converters/conveyor-to-hdf/typescript/fingerprint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fingerprint.d.ts","sourceRoot":"","sources":["../../../../converters/conveyor-to-hdf/typescript/fingerprint.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAuC,KAAK,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAExH,eAAO,MAAM,mBAAmB,EAAE,oBAoBjC,CAAC;AAEF,wBAAgB,QAAQ,IAAI,IAAI,CAG/B"}

package/dist/converters/conveyor-to-hdf/typescript/fingerprint.js

@@ -0,0 +1,37 @@
+/**
+ * Conveyor format fingerprint.
+ *
+ * Exports a ConverterFingerprint object (data only, no converter import).
+ * Detects JSON with api_response.results structure.
+ */
+import { registerFingerprint, getFingerprint } from '../../../shared/typescript/registry.js';
+export const conveyorFingerprint = {
+    id: 'conveyor-to-hdf',
+    label: 'Conveyor',
+    direction: 'ingest',
+    inputFamily: 'json',
+    outputType: 'results',
+    fingerprint: (input) => {
+        if (typeof input !== 'object' || input === null)
+            return 0;
+        const obj = input;
+        // Primary: api_response with results
+        if (typeof obj.api_response === 'object' && obj.api_response !== null) {
+            const resp = obj.api_response;
+            if (typeof resp.results === 'object' && resp.results !== null)
+                return 1.0;
+            // Has api_response but no results — still likely Conveyor
+            return 0.6;
+        }
+        // Secondary: has api_server_version (Conveyor-specific field)
+        if (typeof obj.api_server_version === 'string')
+            return 0.5;
+        return 0;
+    },
+};
+export function register() {
+    if (getFingerprint('conveyor-to-hdf'))
+        return;
+    registerFingerprint(conveyorFingerprint);
+}
+//# sourceMappingURL=fingerprint.js.map

package/dist/converters/conveyor-to-hdf/typescript/fingerprint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fingerprint.js","sourceRoot":"","sources":["../../../../converters/conveyor-to-hdf/typescript/fingerprint.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAA6B,MAAM,wCAAwC,CAAC;AAExH,MAAM,CAAC,MAAM,mBAAmB,GAAyB;IACvD,EAAE,EAAE,iBAAiB;IACrB,KAAK,EAAE,UAAU;IACjB,SAAS,EAAE,QAAQ;IACnB,WAAW,EAAE,MAAM;IACnB,UAAU,EAAE,SAAS;IACrB,WAAW,EAAE,CAAC,KAAc,EAAU,EAAE;QACtC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,CAAC,CAAC;QAC1D,MAAM,GAAG,GAAG,KAAgC,CAAC;QAC7C,qCAAqC;QACrC,IAAI,OAAO,GAAG,CAAC,YAAY,KAAK,QAAQ,IAAI,GAAG,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;YACtE,MAAM,IAAI,GAAG,GAAG,CAAC,YAAuC,CAAC;YACzD,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI;gBAAE,OAAO,GAAG,CAAC;YAC1E,0DAA0D;YAC1D,OAAO,GAAG,CAAC;QACb,CAAC;QACD,8DAA8D;QAC9D,IAAI,OAAO,GAAG,CAAC,kBAAkB,KAAK,QAAQ;YAAE,OAAO,GAAG,CAAC;QAC3D,OAAO,CAAC,CAAC;IACX,CAAC;CACF,CAAC;AAEF,MAAM,UAAU,QAAQ;IACtB,IAAI,cAAc,CAAC,iBAAiB,CAAC;QAAE,OAAO;IAC9C,mBAAmB,CAAC,mBAAmB,CAAC,CAAC;AAC3C,CAAC"}

package/dist/converters/conveyor-to-hdf/typescript/index.d.ts

@@ -0,0 +1,2 @@
+export { convertConveyorToHdf } from './converter.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/converters/conveyor-to-hdf/typescript/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../converters/conveyor-to-hdf/typescript/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/converters/conveyor-to-hdf/typescript/index.js

@@ -0,0 +1,2 @@
+export { convertConveyorToHdf } from './converter.js';
+//# sourceMappingURL=index.js.map

package/dist/converters/conveyor-to-hdf/typescript/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../converters/conveyor-to-hdf/typescript/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/converters/cyclonedx-to-hdf/typescript/converter.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Converts CycloneDX SBOM/VEX JSON to HDF format.
+ *
+ * @param input - CycloneDX JSON string
+ * @returns HDF JSON string
+ */
+export declare function convertCyclonedxToHdf(input: string): Promise<string>;
+//# sourceMappingURL=converter.d.ts.map

package/dist/converters/cyclonedx-to-hdf/typescript/converter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"converter.d.ts","sourceRoot":"","sources":["../../../../converters/cyclonedx-to-hdf/typescript/converter.ts"],"names":[],"mappings":"AAkLA;;;;;GAKG;AACH,wBAAsB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAgJ1E"}

package/dist/converters/cyclonedx-to-hdf/typescript/converter.js

@@ -0,0 +1,199 @@
+import { parseJSON } from '@mitre/hdf-utilities';
+import { nistToCci, DEFAULT_STATIC_ANALYSIS_NIST_TAGS, } from '@mitre/hdf-mappings';
+import { inputChecksum, limitArray, mapCWEToNIST, validateInputSize, buildHdfResults } from '../../../shared/typescript/converterutil.js';
+import { ResultStatus, Copyright, createMinimalBaseline, createRequirement, createResult, severityToImpact, } from '@mitre/hdf-schema';
+const CVSS_METHODS = new Set([
+    'CVSSv2',
+    'CVSSv3',
+    'CVSSv31',
+    'CVSSv4',
+]);
+// NOTE: heimdall2 mapped info/unknown severity to NotReviewed status.
+// We intentionally do NOT replicate that — a vulnerability is a finding
+// regardless of severity confidence. Info/unknown severity vulns are Failed
+// with impact from the severity mapping (info→0.1, unknown→0.5).
+/**
+ * Computes the maximum impact across all ratings for a vulnerability.
+ * Prefers CVSS score/10 when available, falls back to severityToImpact().
+ */
+function maxImpact(ratings) {
+    if (ratings.length === 0) {
+        return 0.5;
+    }
+    let max = 0;
+    for (const rating of ratings) {
+        let impact;
+        if (rating.method &&
+            CVSS_METHODS.has(rating.method) &&
+            rating.score !== undefined &&
+            rating.score !== null) {
+            impact = rating.score / 10;
+        }
+        else {
+            impact = severityToImpact(rating.severity ?? 'medium');
+        }
+        if (impact > max) {
+            max = impact;
+        }
+    }
+    return max;
+}
+/**
+ * Formats the ratings as a human-readable tag string.
+ */
+function formatRatingsTag(ratings) {
+    return ratings
+        .map((r) => `${r.source?.name ?? 'Unknown'} - ${r.severity ?? 'unrated'}`)
+        .join(', ');
+}
+/**
+ * Formats a component reference as a code_desc string.
+ */
+function formatCodeDesc(componentLookup, ref) {
+    const comp = componentLookup.get(ref);
+    if (!comp) {
+        // VEX case: no matching component, use the ref directly
+        return `Component ${ref} is vulnerable`;
+    }
+    let name = '';
+    if (comp.group) {
+        name += comp.group + '/';
+    }
+    name += comp.name;
+    if (comp.version) {
+        name += '@' + comp.version;
+    }
+    return `Component ${name} is vulnerable`;
+}
+/**
+ * Flattens nested CycloneDX components into a single array.
+ */
+function flattenComponents(components) {
+    const result = [];
+    for (const comp of components) {
+        result.push(comp);
+        if (comp.components) {
+            result.push(...flattenComponents(comp.components));
+        }
+    }
+    return result;
+}
+/**
+ * Converts CycloneDX SBOM/VEX JSON to HDF format.
+ *
+ * @param input - CycloneDX JSON string
+ * @returns HDF JSON string
+ */
+export async function convertCyclonedxToHdf(input) {
+    if (!input || input.trim().length === 0) {
+        throw new Error('cyclonedx: empty input');
+    }
+    validateInputSize(input, 'cyclonedx');
+    const bom = parseJSON(input);
+    if (!bom || typeof bom !== 'object') {
+        throw new Error('cyclonedx: invalid JSON');
+    }
+    if (bom.bomFormat !== 'CycloneDX') {
+        throw new Error(`cyclonedx: missing or invalid bomFormat (expected "CycloneDX", got "${bom.bomFormat ?? 'undefined'}")`);
+    }
+    if ((!bom.components || bom.components.length === 0) &&
+        (!bom.vulnerabilities || bom.vulnerabilities.length === 0)) {
+        throw new Error('cyclonedx: input has neither components nor vulnerabilities');
+    }
+    if (!bom.vulnerabilities || bom.vulnerabilities.length === 0) {
+        throw new Error('cyclonedx: this file is an SBOM inventory with no vulnerabilities; ' +
+            'to import SBOM data into a system document, use:\n' +
+            '  hdf system create --from <sbom-file> --component-name <name>');
+    }
+    const resultsChecksum = await inputChecksum(input);
+    // Flatten nested components and build lookup by bom-ref
+    const allComponents = flattenComponents(bom.components ?? []);
+    const componentLookup = new Map();
+    for (const comp of allComponents) {
+        if (comp['bom-ref']) {
+            componentLookup.set(comp['bom-ref'], comp);
+        }
+    }
+    const requirements = [];
+    const { items: limitedVulns, truncated: truncatedVulns } = limitArray(bom.vulnerabilities ?? []);
+    /* v8 ignore next -- truncation only triggers with >100K items */
+    if (truncatedVulns) {
+        // eslint-disable-next-line no-console
+        console.warn(`WARNING: Input truncated at ${limitedVulns.length} vulnerability items (original: ${(bom.vulnerabilities ?? []).length})`);
+    }
+    for (const vuln of limitedVulns) {
+        const ratings = vuln.ratings ?? [];
+        const impact = maxImpact(ratings);
+        const cwes = vuln.cwes ?? [];
+        const nist = mapCWEToNIST(cwes.map(c => `${c}`), DEFAULT_STATIC_ANALYSIS_NIST_TAGS);
+        const cciTags = nistToCci(nist);
+        const tags = {
+            nist,
+            cci: cciTags,
+        };
+        if (cwes.length > 0) {
+            tags['cweid'] = cwes.map((c) => `CWE-${c}`);
+        }
+        if (ratings.length > 0) {
+            tags['ratings'] = formatRatingsTag(ratings);
+        }
+        // Build descriptions (must always include a 'default' label per HDF schema)
+        const descriptions = [];
+        // Default description: description + detail
+        const defaultParts = [];
+        if (vuln.description) {
+            defaultParts.push(`Description: ${vuln.description}`);
+        }
+        if (vuln.detail) {
+            defaultParts.push(`Detail: ${vuln.detail}`);
+        }
+        if (defaultParts.length > 0) {
+            descriptions.push({ label: 'default', data: defaultParts.join('\n\n') });
+        }
+        else {
+            descriptions.push({ label: 'default', data: vuln.id });
+        }
+        // Fix description: recommendation + workaround from analysis
+        const fixParts = [];
+        if (vuln.recommendation) {
+            fixParts.push(vuln.recommendation);
+        }
+        if (vuln.analysis?.detail) {
+            fixParts.push(`Workaround: ${vuln.analysis.detail}`);
+        }
+        if (fixParts.length > 0) {
+            descriptions.push({ label: 'fix', data: fixParts.join('\n\n') });
+        }
+        // Build results: one per affected component.
+        // All vulnerabilities are Failed — info/unknown severity affects impact
+        // score but not status.
+        const affects = vuln.affects ?? [];
+        const results = affects.length > 0
+            ? affects.map((affect) => createResult(ResultStatus.Failed, undefined, {
+                codeDesc: formatCodeDesc(componentLookup, affect.ref),
+            }))
+            : [
+                createResult(ResultStatus.Failed, undefined, {
+                    codeDesc: `Vulnerability ${vuln.id}`,
+                }),
+            ];
+        const title = vuln.source?.name
+            ? `${vuln.id} (${vuln.source.name})`
+            : vuln.id;
+        requirements.push(createRequirement(vuln.id, title, descriptions, impact, results, { tags }));
+    }
+    const baseline = createMinimalBaseline('CycloneDX Scan', requirements, {
+        resultsChecksum,
+    });
+    const targetName = bom.metadata?.component?.name ?? '';
+    return buildHdfResults({
+        generatorName: 'cyclonedx-to-hdf',
+        converterVersion: '1.0.0',
+        toolName: 'CycloneDX',
+        toolFormat: 'JSON',
+        baselines: [baseline],
+        components: [{ name: targetName, type: Copyright.Application }],
+        timestamp: new Date(),
+    });
+}
+//# sourceMappingURL=converter.js.map

package/dist/converters/cyclonedx-to-hdf/typescript/converter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"converter.js","sourceRoot":"","sources":["../../../../converters/cyclonedx-to-hdf/typescript/converter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EACL,SAAS,EACT,iCAAiC,GAClC,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,6CAA6C,CAAC;AAM1I,OAAO,EACL,YAAY,EACZ,SAAS,EACT,qBAAqB,EACrB,iBAAiB,EACjB,YAAY,EACZ,gBAAgB,GAEjB,MAAM,mBAAmB,CAAC;AAsE3B,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;IAC3B,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,QAAQ;CACT,CAAC,CAAC;AAEH,sEAAsE;AACtE,wEAAwE;AACxE,4EAA4E;AAC5E,iEAAiE;AAEjE;;;GAGG;AACH,SAAS,SAAS,CAAC,OAA0B;IAC3C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,GAAG,CAAC;IACb,CAAC;IAED,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,MAAc,CAAC;QACnB,IACE,MAAM,CAAC,MAAM;YACb,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC;YAC/B,MAAM,CAAC,KAAK,KAAK,SAAS;YAC1B,MAAM,CAAC,KAAK,KAAK,IAAI,EACrB,CAAC;YACD,MAAM,GAAG,MAAM,CAAC,KAAK,GAAG,EAAE,CAAC;QAC7B,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,QAAQ,IAAI,QAAQ,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,MAAM,GAAG,GAAG,EAAE,CAAC;YACjB,GAAG,GAAG,MAAM,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAGD;;GAEG;AACH,SAAS,gBAAgB,CAAC,OAA0B;IAClD,OAAO,OAAO;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,IAAI,IAAI,SAAS,MAAM,CAAC,CAAC,QAAQ,IAAI,SAAS,EAAE,CAAC;SACzE,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CACrB,eAAgD,EAChD,GAAW;IAEX,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,wDAAwD;QACxD,OAAO,aAAa,GAAG,gBAAgB,CAAC;IAC1C,CAAC;IAED,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,IAAI,IAAI,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC;IAC3B,CAAC;IACD,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC;IAClB,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,IAAI,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC;IAC7B,CAAC;IACD,OAAO,aAAa,IAAI,gBAAgB,CAAC;AAC3C,CAAC;AAED;;GAEG;AACH,SAAS,iBAAiB,CAAC,UAAgC;IACzD,MAAM,MAAM,GAAyB,EAAE,CAAC;IACxC,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClB,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,MAAM,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAAa;IACvD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC5C,CAAC;IACD,iBAAiB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IAEtC,MAAM,GAAG,GAAG,SAAS,CAAe,KAAK,CAAC,CAAC;IAE3C,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC7C,CAAC;IAED,IAAI,GAAG,CAAC,SAAS,KAAK,WAAW,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CACb,uEAAuE,GAAG,CAAC,SAAS,IAAI,WAAW,IAAI,CACxG,CAAC;IACJ,CAAC;IAED,IACE,CAAC,CAAC,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC;QAChD,CAAC,CAAC,GAAG,CAAC,eAAe,IAAI,GAAG,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC,CAAC,EAC1D,CAAC;QACD,MAAM,IAAI,KAAK,CACb,6DAA6D,CAC9D,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,eAAe,IAAI,GAAG,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CACb,qEAAqE;YACrE,oDAAoD;YACpD,gEAAgE,CACjE,CAAC;IACJ,CAAC;IAED,MAAM,eAAe,GAAa,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC;IAE7D,wDAAwD;IACxD,MAAM,aAAa,GAAG,iBAAiB,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;IAC9D,MAAM,eAAe,GAAG,IAAI,GAAG,EAA8B,CAAC;IAC9D,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;QACjC,IAAI,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACpB,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAA2B,EAAE,CAAC;IAEhD,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,cAAc,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC;IACjG,iEAAiE;IACjE,IAAI,cAAc,EAAE,CAAC;QACnB,sCAAsC;QACtC,OAAO,CAAC,IAAI,CAAC,+BAA+B,YAAY,CAAC,MAAM,mCAAmC,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IAC3I,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;QAClC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,iCAAiC,CAAC,CAAC;QACpF,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAEhC,MAAM,IAAI,GAA4B;YACpC,IAAI;YACJ,GAAG,EAAE,OAAO;SACb,CAAC;QAEF,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpB,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC9C,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,IAAI,CAAC,SAAS,CAAC,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAC9C,CAAC;QAED,4EAA4E;QAC5E,MAAM,YAAY,GAAkB,EAAE,CAAC;QAEvC,4CAA4C;QAC5C,MAAM,YAAY,GAAa,EAAE,CAAC;QAClC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,YAAY,CAAC,IAAI,CAAC,gBAAgB,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,YAAY,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,YAAY,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC3E,CAAC;aAAM,CAAC;YACN,YAAY,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QACzD,CAAC;QAED,6DAA6D;QAC7D,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACrC,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;YAC1B,QAAQ,CAAC,IAAI,CAAC,eAAe,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,YAAY,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACnE,CAAC;QAED,6CAA6C;QAC7C,wEAAwE;QACxE,wBAAwB;QACxB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;QACnC,MAAM,OAAO,GACX,OAAO,CAAC,MAAM,GAAG,CAAC;YAChB,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CACrB,YAAY,CAAC,YAAY,CAAC,MAAM,EAAE,SAAS,EAAE;gBAC3C,QAAQ,EAAE,cAAc,CAAC,eAAe,EAAE,MAAM,CAAC,GAAG,CAAC;aACtD,CAAC,CACH;YACH,CAAC,CAAC;gBACE,YAAY,CAAC,YAAY,CAAC,MAAM,EAAE,SAAS,EAAE;oBAC3C,QAAQ,EAAE,iBAAiB,IAAI,CAAC,EAAE,EAAE;iBACrC,CAAC;aACH,CAAC;QAER,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,IAAI;YAC7B,CAAC,CAAC,GAAG,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG;YACpC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;QAEZ,YAAY,CAAC,IAAI,CACf,iBAAiB,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAC3E,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,qBAAqB,CAAC,gBAAgB,EAAE,YAAY,EAAE;QACrE,eAAe;KAChB,CAAsB,CAAC;IAExB,MAAM,UAAU,GAAG,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC;IAEvD,OAAO,eAAe,CAAC;QACrB,aAAa,EAAE,kBAAkB;QACjC,gBAAgB,EAAE,OAAO;QACzB,QAAQ,EAAE,WAAW;QACrB,UAAU,EAAE,MAAM;QAClB,SAAS,EAAE,CAAC,QAAQ,CAAC;QACrB,UAAU,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,CAAC;QAC/D,SAAS,EAAE,IAAI,IAAI,EAAE;KACtB,CAAC,CAAC;AACL,CAAC"}

package/dist/converters/cyclonedx-to-hdf/typescript/fingerprint.d.ts

@@ -0,0 +1,10 @@
+/**
+ * CycloneDX format fingerprint.
+ *
+ * Exports a ConverterFingerprint object (data only, no converter import).
+ * Detects JSON with bomFormat === 'CycloneDX'.
+ */
+import { type ConverterFingerprint } from '../../../shared/typescript/registry.js';
+export declare const cyclonedxFingerprint: ConverterFingerprint;
+export declare function register(): void;
+//# sourceMappingURL=fingerprint.d.ts.map

package/dist/converters/cyclonedx-to-hdf/typescript/fingerprint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fingerprint.d.ts","sourceRoot":"","sources":["../../../../converters/cyclonedx-to-hdf/typescript/fingerprint.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAuC,KAAK,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAExH,eAAO,MAAM,oBAAoB,EAAE,oBAiBlC,CAAC;AAEF,wBAAgB,QAAQ,IAAI,IAAI,CAG/B"}

package/dist/converters/cyclonedx-to-hdf/typescript/fingerprint.js

@@ -0,0 +1,34 @@
+/**
+ * CycloneDX format fingerprint.
+ *
+ * Exports a ConverterFingerprint object (data only, no converter import).
+ * Detects JSON with bomFormat === 'CycloneDX'.
+ */
+import { registerFingerprint, getFingerprint } from '../../../shared/typescript/registry.js';
+export const cyclonedxFingerprint = {
+    id: 'cyclonedx-to-hdf',
+    label: 'CycloneDX',
+    direction: 'ingest',
+    inputFamily: 'json',
+    outputType: 'results',
+    fingerprint: (input) => {
+        if (typeof input !== 'object' || input === null)
+            return 0;
+        const obj = input;
+        if (obj.bomFormat === 'CycloneDX')
+            return 1.0;
+        return 0;
+    },
+    detectVersion: (input) => {
+        if (typeof input !== 'object' || input === null)
+            return '';
+        const obj = input;
+        return typeof obj.specVersion === 'string' ? obj.specVersion : '';
+    },
+};
+export function register() {
+    if (getFingerprint('cyclonedx-to-hdf'))
+        return;
+    registerFingerprint(cyclonedxFingerprint);
+}
+//# sourceMappingURL=fingerprint.js.map

package/dist/converters/cyclonedx-to-hdf/typescript/fingerprint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fingerprint.js","sourceRoot":"","sources":["../../../../converters/cyclonedx-to-hdf/typescript/fingerprint.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAA6B,MAAM,wCAAwC,CAAC;AAExH,MAAM,CAAC,MAAM,oBAAoB,GAAyB;IACxD,EAAE,EAAE,kBAAkB;IACtB,KAAK,EAAE,WAAW;IAClB,SAAS,EAAE,QAAQ;IACnB,WAAW,EAAE,MAAM;IACnB,UAAU,EAAE,SAAS;IACrB,WAAW,EAAE,CAAC,KAAc,EAAU,EAAE;QACtC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,CAAC,CAAC;QAC1D,MAAM,GAAG,GAAG,KAAgC,CAAC;QAC7C,IAAI,GAAG,CAAC,SAAS,KAAK,WAAW;YAAE,OAAO,GAAG,CAAC;QAC9C,OAAO,CAAC,CAAC;IACX,CAAC;IACD,aAAa,EAAE,CAAC,KAAc,EAAU,EAAE;QACxC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,EAAE,CAAC;QAC3D,MAAM,GAAG,GAAG,KAAgC,CAAC;QAC7C,OAAO,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;IACpE,CAAC;CACF,CAAC;AAEF,MAAM,UAAU,QAAQ;IACtB,IAAI,cAAc,CAAC,kBAAkB,CAAC;QAAE,OAAO;IAC/C,mBAAmB,CAAC,oBAAoB,CAAC,CAAC;AAC5C,CAAC"}

package/dist/converters/cyclonedx-to-hdf/typescript/index.d.ts

@@ -0,0 +1,2 @@
+export { convertCyclonedxToHdf } from './converter.js';
+//# sourceMappingURL=index.d.ts.map