@mitre/hdf-converters 2.13.0 → 3.0.0

package/dist/converters/trufflehog-to-hdf/typescript/converter.js

@@ -0,0 +1,189 @@
+import { parseJSON } from '@mitre/hdf-utilities';
+import { inputChecksum, buildNistCciTags, limitArrayWithWarning, validateInputSize } from '../../../shared/typescript/converterutil.js';
+import { ResultStatus, Copyright, createMinimalBaseline, createRequirement, createResult, } from '@mitre/hdf-schema';
+/** Hardcoded NIST/CCI constants for credential exposure findings. */
+const TRUFFLEHOG_NIST = ['IA-5 (7)'];
+const TRUFFLEHOG_CCI = ['CCI-000202', 'CCI-000203', 'CCI-002367'];
+/**
+ * Parse TruffleHog input as JSON array, single object, or NDJSON.
+ */
+function parseFindings(input) {
+    const trimmed = input.trim();
+    // Try JSON array first
+    try {
+        const parsed = parseJSON(trimmed);
+        if (Array.isArray(parsed)) {
+            return parsed;
+        }
+        // Single JSON object
+        if (typeof parsed === 'object' && parsed !== null && 'DetectorName' in parsed) {
+            return [parsed];
+        }
+    }
+    catch {
+        // Not valid JSON — try NDJSON
+    }
+    // Try NDJSON: split on newlines, parse each line
+    const lines = trimmed.split('\n').filter(line => line.trim().length > 0);
+    const findings = [];
+    for (const line of lines) {
+        try {
+            findings.push(parseJSON(line.trim()));
+        }
+        catch {
+            throw new Error(`trufflehog: failed to parse NDJSON line: ${line.substring(0, 80)}`);
+        }
+    }
+    if (findings.length > 0) {
+        return findings;
+    }
+    throw new Error('trufflehog: unable to parse input as JSON array, single object, or NDJSON');
+}
+/**
+ * Group findings by DetectorName + DecoderName, preserving insertion order.
+ */
+function groupFindings(findings) {
+    const groups = new Map();
+    for (const f of findings) {
+        const key = `${f.DetectorName} ${f.DecoderName}`;
+        const existing = groups.get(key);
+        if (existing) {
+            existing.push(f);
+        }
+        else {
+            groups.set(key, [f]);
+        }
+    }
+    return groups;
+}
+/**
+ * Build the Result.Message JSON from selected finding fields.
+ */
+function buildMessage(f) {
+    const msg = {
+        Verified: f.Verified,
+        Redacted: f.Redacted,
+    };
+    if (f.VerificationError) {
+        msg.VerificationError = f.VerificationError;
+    }
+    if (f.ExtraData && Object.keys(f.ExtraData).length > 0) {
+        msg.ExtraData = f.ExtraData;
+    }
+    return JSON.stringify(msg);
+}
+/**
+ * Build the Result.CodeDesc as JSON of SourceMetadata.
+ */
+function buildCodeDesc(f) {
+    return JSON.stringify(f.SourceMetadata ?? {});
+}
+/**
+ * Extract a timestamp from a finding's Git source metadata.
+ */
+function getTimestamp(f) {
+    if (f.SourceMetadata?.Data?.Git?.timestamp) {
+        const ts = new Date(f.SourceMetadata.Data.Git.timestamp);
+        if (!isNaN(ts.getTime())) {
+            return ts;
+        }
+    }
+    return new Date();
+}
+/**
+ * Get the source file path from any source type.
+ */
+function getSourceFile(f) {
+    return f.SourceMetadata?.Data?.Git?.file
+        ?? f.SourceMetadata?.Data?.Filesystem?.file
+        ?? f.SourceMetadata?.Data?.Docker?.file;
+}
+/**
+ * Get the source line number from any source type.
+ */
+function getSourceLine(f) {
+    return f.SourceMetadata?.Data?.Git?.line
+        ?? f.SourceMetadata?.Data?.Filesystem?.line
+        ?? f.SourceMetadata?.Data?.Docker?.line;
+}
+/**
+ * Find the first Git repository URL from findings.
+ */
+function findGitRepoURL(findings) {
+    for (const f of findings) {
+        if (f.SourceMetadata?.Data?.Git?.repository) {
+            return f.SourceMetadata.Data.Git.repository;
+        }
+    }
+    return undefined;
+}
+/**
+ * Build an EvaluatedRequirement from a group of findings sharing a detector.
+ */
+function buildRequirement(reqID, findings) {
+    const rep = findings[0];
+    const tags = buildNistCciTags(TRUFFLEHOG_NIST, TRUFFLEHOG_CCI);
+    const title = `Found ${rep.DetectorName} secret using ${rep.DecoderName} decoder`;
+    const descData = rep.DetectorDescription
+        ?? `${rep.DetectorName} secret detected by ${rep.DecoderName} decoder`;
+    const descriptions = [
+        { label: 'default', data: descData },
+    ];
+    const results = findings.map(f => createResult(ResultStatus.Failed, buildMessage(f), {
+        codeDesc: buildCodeDesc(f),
+        startTime: getTimestamp(f),
+    }));
+    const sourceFile = getSourceFile(rep);
+    const sourceLine = getSourceLine(rep);
+    return createRequirement(reqID, title, descriptions, 0.5, results, {
+        tags,
+        sourceLocation: sourceFile ? { ref: sourceFile, line: sourceLine } : undefined,
+    });
+}
+/**
+ * Converts TruffleHog output to HDF format.
+ * Accepts JSON array, single JSON object, or NDJSON input.
+ *
+ * @param input - TruffleHog JSON/NDJSON string
+ * @returns HDF JSON string
+ */
+export async function convertTrufflehogToHdf(input) {
+    if (!input || input.trim().length === 0) {
+        throw new Error('trufflehog: empty input');
+    }
+    validateInputSize(input, 'trufflehog');
+    const findings = parseFindings(input);
+    if (findings.length === 0) {
+        throw new Error('trufflehog: no findings in input');
+    }
+    const resultsChecksum = await inputChecksum(input);
+    const limitedFindings = limitArrayWithWarning(findings, 'finding');
+    const groups = groupFindings(limitedFindings);
+    const requirements = [];
+    for (const [reqID, group] of groups) {
+        requirements.push(buildRequirement(reqID, group));
+    }
+    const sourceName = limitedFindings[0]?.SourceName ?? 'trufflehog';
+    const baselineTitle = `TruffleHog Scan (${sourceName})`;
+    const baseline = createMinimalBaseline('TruffleHog Scan', requirements, {
+        resultsChecksum,
+        title: baselineTitle,
+    });
+    const tool = { name: 'TruffleHog', format: 'JSON' };
+    const hdf = {
+        baselines: [baseline],
+        generator: {
+            name: 'hdf-converters',
+            version: '1.0.0',
+        },
+        tool,
+        timestamp: new Date(),
+    };
+    // Add target only if a Git repository URL is available
+    const repoURL = findGitRepoURL(limitedFindings);
+    if (repoURL) {
+        hdf.components = [{ name: repoURL, type: Copyright.Repository }];
+    }
+    return JSON.stringify(hdf, null, 2);
+}
+//# sourceMappingURL=converter.js.map

package/dist/converters/trufflehog-to-hdf/typescript/converter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"converter.js","sourceRoot":"","sources":["../../../../converters/trufflehog-to-hdf/typescript/converter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,6CAA6C,CAAC;AAQxI,OAAO,EACL,YAAY,EACZ,SAAS,EACT,qBAAqB,EACrB,iBAAiB,EACjB,YAAY,GACb,MAAM,mBAAmB,CAAC;AAqD3B,qEAAqE;AACrE,MAAM,eAAe,GAAG,CAAC,UAAU,CAAC,CAAC;AACrC,MAAM,cAAc,GAAG,CAAC,YAAY,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;AAElE;;GAEG;AACH,SAAS,aAAa,CAAC,KAAa;IAClC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAE7B,uBAAuB;IACvB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,CAAU,OAAO,CAAC,CAAC;QAC3C,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,OAAO,MAA6B,CAAC;QACvC,CAAC;QACD,qBAAqB;QACrB,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,cAAc,IAAI,MAAM,EAAE,CAAC;YAC9E,OAAO,CAAC,MAA2B,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,8BAA8B;IAChC,CAAC;IAED,iDAAiD;IACjD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACzE,MAAM,QAAQ,GAAwB,EAAE,CAAC;IACzC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAoB,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC3D,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,4CAA4C,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QACvF,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAC;AAC/F,CAAC;AAED;;GAEG;AACH,SAAS,aAAa,CAAC,QAA6B;IAClD,MAAM,MAAM,GAAG,IAAI,GAAG,EAA+B,CAAC;IACtD,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QACjD,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACnB,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,SAAS,YAAY,CAAC,CAAoB;IACxC,MAAM,GAAG,GAA4B;QACnC,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,QAAQ,EAAE,CAAC,CAAC,QAAQ;KACrB,CAAC;IACF,IAAI,CAAC,CAAC,iBAAiB,EAAE,CAAC;QACxB,GAAG,CAAC,iBAAiB,GAAG,CAAC,CAAC,iBAAiB,CAAC;IAC9C,CAAC;IACD,IAAI,CAAC,CAAC,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC;IAC9B,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED;;GAEG;AACH,SAAS,aAAa,CAAC,CAAoB;IACzC,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC;AAChD,CAAC;AAED;;GAEG;AACH,SAAS,YAAY,CAAC,CAAoB;IACxC,IAAI,CAAC,CAAC,cAAc,EAAE,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;QAC3C,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACzD,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;YACzB,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IACD,OAAO,IAAI,IAAI,EAAE,CAAC;AACpB,CAAC;AAED;;GAEG;AACH,SAAS,aAAa,CAAC,CAAoB;IACzC,OAAO,CAAC,CAAC,cAAc,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI;WACnC,CAAC,CAAC,cAAc,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI;WACxC,CAAC,CAAC,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC;AAC5C,CAAC;AAED;;GAEG;AACH,SAAS,aAAa,CAAC,CAAoB;IACzC,OAAO,CAAC,CAAC,cAAc,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI;WACnC,CAAC,CAAC,cAAc,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI;WACxC,CAAC,CAAC,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC;AAC5C,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CAAC,QAA6B;IACnD,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,cAAc,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC;YAC5C,OAAO,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;QAC9C,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,SAAS,gBAAgB,CAAC,KAAa,EAAE,QAA6B;IACpE,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAC;IACzB,MAAM,IAAI,GAAG,gBAAgB,CAAC,eAAe,EAAE,cAAc,CAAC,CAAC;IAE/D,MAAM,KAAK,GAAG,SAAS,GAAG,CAAC,YAAY,iBAAiB,GAAG,CAAC,WAAW,UAAU,CAAC;IAElF,MAAM,QAAQ,GAAG,GAAG,CAAC,mBAAmB;WACnC,GAAG,GAAG,CAAC,YAAY,uBAAuB,GAAG,CAAC,WAAW,UAAU,CAAC;IACzE,MAAM,YAAY,GAAkB;QAClC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE;KACrC,CAAC;IAEF,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAC/B,YAAY,CAAC,YAAY,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,EAAE;QACjD,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC;QAC1B,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC;KAC3B,CAAC,CACH,CAAC;IAEF,MAAM,UAAU,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,UAAU,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IAEtC,OAAO,iBAAiB,CACtB,KAAK,EACL,KAAK,EACL,YAAY,EACZ,GAAG,EACH,OAAO,EACP;QACE,IAAI;QACJ,cAAc,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,SAAS;KAC/E,CACF,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,KAAa;IACxD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC7C,CAAC;IACD,iBAAiB,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IAEvC,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,eAAe,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC;IACnD,MAAM,eAAe,GAAG,qBAAqB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAEnE,MAAM,MAAM,GAAG,aAAa,CAAC,eAAe,CAAC,CAAC;IAC9C,MAAM,YAAY,GAA2B,EAAE,CAAC;IAChD,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,EAAE,CAAC;QACpC,YAAY,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;IACpD,CAAC;IAED,MAAM,UAAU,GAAG,eAAe,CAAC,CAAC,CAAC,EAAE,UAAU,IAAI,YAAY,CAAC;IAClE,MAAM,aAAa,GAAG,oBAAoB,UAAU,GAAG,CAAC;IAExD,MAAM,QAAQ,GAAsB,qBAAqB,CACvD,iBAAiB,EACjB,YAAY,EACZ;QACE,eAAe;QACf,KAAK,EAAE,aAAa;KACrB,CACmB,CAAC;IAEvB,MAAM,IAAI,GAAS,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAE1D,MAAM,GAAG,GAAe;QACtB,SAAS,EAAE,CAAC,QAAQ,CAAC;QACrB,SAAS,EAAE;YACT,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,OAAO;SACjB;QACD,IAAI;QACJ,SAAS,EAAE,IAAI,IAAI,EAAE;KACtB,CAAC;IAEF,uDAAuD;IACvD,MAAM,OAAO,GAAG,cAAc,CAAC,eAAe,CAAC,CAAC;IAChD,IAAI,OAAO,EAAE,CAAC;QACZ,GAAG,CAAC,UAAU,GAAG,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,UAAU,EAAE,CAAC,CAAC;IACnE,CAAC;IAED,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AACtC,CAAC"}

package/dist/converters/trufflehog-to-hdf/typescript/fingerprint.d.ts

@@ -0,0 +1,18 @@
+/**
+ * TruffleHog format fingerprint.
+ *
+ * Exports a ConverterFingerprint object (data only, no converter import).
+ *
+ * TruffleHog output can be:
+ * - JSON array of findings
+ * - Single JSON object finding
+ * - NDJSON (newline-delimited JSON)
+ *
+ * Key structural markers:
+ * - SourceMetadata + DetectorName → confidence 1.0
+ * - Raw + Verified (boolean) → confidence 0.7
+ */
+import { type ConverterFingerprint } from '../../../shared/typescript/registry.js';
+export declare const trufflehogFingerprint: ConverterFingerprint;
+export declare function register(): void;
+//# sourceMappingURL=fingerprint.d.ts.map

package/dist/converters/trufflehog-to-hdf/typescript/fingerprint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fingerprint.d.ts","sourceRoot":"","sources":["../../../../converters/trufflehog-to-hdf/typescript/fingerprint.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAuC,KAAK,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAQxH,eAAO,MAAM,qBAAqB,EAAE,oBAoBnC,CAAC;AAEF,wBAAgB,QAAQ,IAAI,IAAI,CAG/B"}

package/dist/converters/trufflehog-to-hdf/typescript/fingerprint.js

@@ -0,0 +1,50 @@
+/**
+ * TruffleHog format fingerprint.
+ *
+ * Exports a ConverterFingerprint object (data only, no converter import).
+ *
+ * TruffleHog output can be:
+ * - JSON array of findings
+ * - Single JSON object finding
+ * - NDJSON (newline-delimited JSON)
+ *
+ * Key structural markers:
+ * - SourceMetadata + DetectorName → confidence 1.0
+ * - Raw + Verified (boolean) → confidence 0.7
+ */
+import { registerFingerprint, getFingerprint } from '../../../shared/typescript/registry.js';
+function isTrufflehogFinding(obj) {
+    if (typeof obj.DetectorName === 'string' && obj.SourceMetadata != null)
+        return 1.0;
+    if (typeof obj.Raw === 'string' && typeof obj.Verified === 'boolean')
+        return 0.7;
+    return 0;
+}
+export const trufflehogFingerprint = {
+    id: 'trufflehog-to-hdf',
+    label: 'TruffleHog',
+    direction: 'ingest',
+    inputFamily: 'json',
+    outputType: 'results',
+    fingerprint: (input) => {
+        if (typeof input !== 'object' || input === null)
+            return 0;
+        // Array of findings
+        if (Array.isArray(input)) {
+            if (input.length === 0)
+                return 0;
+            const first = input[0];
+            if (typeof first !== 'object' || first === null)
+                return 0;
+            return isTrufflehogFinding(first);
+        }
+        // Single finding object
+        return isTrufflehogFinding(input);
+    },
+};
+export function register() {
+    if (getFingerprint('trufflehog-to-hdf'))
+        return;
+    registerFingerprint(trufflehogFingerprint);
+}
+//# sourceMappingURL=fingerprint.js.map

package/dist/converters/trufflehog-to-hdf/typescript/fingerprint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fingerprint.js","sourceRoot":"","sources":["../../../../converters/trufflehog-to-hdf/typescript/fingerprint.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAA6B,MAAM,wCAAwC,CAAC;AAExH,SAAS,mBAAmB,CAAC,GAA4B;IACvD,IAAI,OAAO,GAAG,CAAC,YAAY,KAAK,QAAQ,IAAI,GAAG,CAAC,cAAc,IAAI,IAAI;QAAE,OAAO,GAAG,CAAC;IACnF,IAAI,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,QAAQ,KAAK,SAAS;QAAE,OAAO,GAAG,CAAC;IACjF,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,CAAC,MAAM,qBAAqB,GAAyB;IACzD,EAAE,EAAE,mBAAmB;IACvB,KAAK,EAAE,YAAY;IACnB,SAAS,EAAE,QAAQ;IACnB,WAAW,EAAE,MAAM;IACnB,UAAU,EAAE,SAAS;IACrB,WAAW,EAAE,CAAC,KAAc,EAAU,EAAE;QACtC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,CAAC,CAAC;QAE1D,oBAAoB;QACpB,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,CAAC,CAAC;YACjC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAA4B,CAAC;YAClD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;gBAAE,OAAO,CAAC,CAAC;YAC1D,OAAO,mBAAmB,CAAC,KAAK,CAAC,CAAC;QACpC,CAAC;QAED,wBAAwB;QACxB,OAAO,mBAAmB,CAAC,KAAgC,CAAC,CAAC;IAC/D,CAAC;CACF,CAAC;AAEF,MAAM,UAAU,QAAQ;IACtB,IAAI,cAAc,CAAC,mBAAmB,CAAC;QAAE,OAAO;IAChD,mBAAmB,CAAC,qBAAqB,CAAC,CAAC;AAC7C,CAAC"}

package/dist/converters/trufflehog-to-hdf/typescript/index.d.ts

@@ -0,0 +1,2 @@
+export { convertTrufflehogToHdf } from './converter.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/converters/trufflehog-to-hdf/typescript/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../converters/trufflehog-to-hdf/typescript/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/converters/trufflehog-to-hdf/typescript/index.js

@@ -0,0 +1,2 @@
+export { convertTrufflehogToHdf } from './converter.js';
+//# sourceMappingURL=index.js.map

package/dist/converters/trufflehog-to-hdf/typescript/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../converters/trufflehog-to-hdf/typescript/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/converters/twistlock-to-hdf/typescript/converter.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Converts Twistlock/Prisma Cloud scan output to HDF format.
+ *
+ * Handles both container image scans (with "results" wrapper) and code
+ * repository scans (single result object without wrapper).
+ *
+ * @param input - Twistlock JSON string
+ * @returns HDF JSON string
+ */
+export declare function convertTwistlockToHdf(input: string): Promise<string>;
+//# sourceMappingURL=converter.d.ts.map

package/dist/converters/twistlock-to-hdf/typescript/converter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"converter.d.ts","sourceRoot":"","sources":["../../../../converters/twistlock-to-hdf/typescript/converter.ts"],"names":[],"mappings":"AAoMA;;;;;;;;GAQG;AACH,wBAAsB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAgD1E"}

package/dist/converters/twistlock-to-hdf/typescript/converter.js

@@ -0,0 +1,153 @@
+import { parseJSON } from '@mitre/hdf-utilities';
+import { nistToCci, DEFAULT_REMEDIATION_NIST_TAGS, } from '@mitre/hdf-mappings';
+import { inputChecksum, limitArray, buildNistCciTags, validateInputSize, buildHdfResults } from '../../../shared/typescript/converterutil.js';
+import { ResultStatus, Copyright, createMinimalBaseline, createRequirement, createResult, } from '@mitre/hdf-schema';
+/**
+ * Maps Twistlock severity strings to HDF impact values.
+ * Includes "important" (alias for critical) and "moderate" (alias for medium)
+ * which appear in some Twistlock outputs.
+ */
+function twistlockSeverityToImpact(severity) {
+    switch (severity.toLowerCase()) {
+        case 'critical':
+        case 'important':
+            return 0.9;
+        case 'high':
+            return 0.7;
+        case 'medium':
+        case 'moderate':
+            return 0.5;
+        case 'low':
+            return 0.3;
+        default:
+            return 0.5;
+    }
+}
+/**
+ * Builds the baseline title from scan result data.
+ */
+function buildTitle(result) {
+    let projectName;
+    if (result.repository) {
+        projectName = result.repository;
+    }
+    else if (result.collections && result.collections.length > 0) {
+        projectName = result.collections.join(' / ');
+    }
+    else {
+        projectName = 'N/A';
+    }
+    return `Twistlock Project: ${projectName}`;
+}
+/**
+ * Builds the baseline summary from distribution data.
+ */
+function buildSummary(result) {
+    const vulnTotal = result.vulnerabilityDistribution
+        ? String(result.vulnerabilityDistribution.total)
+        : 'N/A';
+    const complianceTotal = result.complianceDistribution
+        ? String(result.complianceDistribution.total)
+        : 'N/A';
+    return `Package Vulnerability Summary: ${vulnTotal} Application Compliance Issue Total: ${complianceTotal}`;
+}
+/**
+ * Builds the code_desc string for a vulnerability result.
+ */
+function formatCodeDesc(vuln) {
+    const packageName = vuln.packageName ?? 'N/A';
+    const impactedVersions = vuln.impactedVersions && vuln.impactedVersions.length > 0
+        ? JSON.stringify(vuln.impactedVersions)
+        : 'N/A';
+    return `Package ${JSON.stringify(packageName)} should be updated to latest version above impacted versions ${impactedVersions}`;
+}
+/**
+ * Converts a single vulnerability into an EvaluatedRequirement.
+ */
+function buildRequirement(vuln) {
+    const nist = DEFAULT_REMEDIATION_NIST_TAGS;
+    const cciTags = nistToCci(nist);
+    const tags = buildNistCciTags(nist, cciTags, {
+        cveid: [vuln.id],
+    });
+    const descriptions = [
+        { label: 'default', data: vuln.description },
+    ];
+    const startTime = vuln.discoveredDate ? new Date(vuln.discoveredDate) : undefined;
+    const results = [
+        createResult(ResultStatus.Failed, undefined, {
+            codeDesc: formatCodeDesc(vuln),
+            startTime,
+        }),
+    ];
+    return createRequirement(vuln.id, vuln.id, descriptions, twistlockSeverityToImpact(vuln.severity), results, { tags });
+}
+/**
+ * Converts a single TwistlockResult to an EvaluatedBaseline.
+ */
+function convertSingleResult(result, resultsChecksum) {
+    const vulns = result.vulnerabilities ?? [];
+    const { items: limitedVulns, truncated } = limitArray(vulns);
+    /* v8 ignore next -- truncation only triggers with >100K items */
+    if (truncated) {
+        // eslint-disable-next-line no-console
+        console.warn(`WARNING: Input truncated at ${limitedVulns.length} vulnerability items (original: ${vulns.length})`);
+    }
+    const requirements = limitedVulns.map(vuln => buildRequirement(vuln));
+    const title = buildTitle(result);
+    const summary = buildSummary(result);
+    return createMinimalBaseline('Twistlock Scan', requirements, {
+        resultsChecksum,
+        title,
+        summary,
+    });
+}
+/**
+ * Converts Twistlock/Prisma Cloud scan output to HDF format.
+ *
+ * Handles both container image scans (with "results" wrapper) and code
+ * repository scans (single result object without wrapper).
+ *
+ * @param input - Twistlock JSON string
+ * @returns HDF JSON string
+ */
+export async function convertTwistlockToHdf(input) {
+    if (!input || input.trim().length === 0) {
+        throw new Error('twistlock: empty input');
+    }
+    validateInputSize(input, 'twistlock');
+    const resultsChecksum = await inputChecksum(input);
+    const parsed = parseJSON(input);
+    if (!parsed || typeof parsed !== 'object') {
+        throw new Error('twistlock: invalid JSON');
+    }
+    let results;
+    if (Array.isArray(parsed.results)) {
+        // Container scan with "results" wrapper
+        results = parsed.results;
+    }
+    else {
+        // Code repo scan — single result object, wrap it
+        results = [parsed];
+    }
+    if (results.length === 0) {
+        throw new Error('twistlock: no scan results found');
+    }
+    const baselines = results.map(result => convertSingleResult(result, resultsChecksum));
+    // Use the first result's name or repository as target name
+    const targetName = results[0].name ?? results[0].repository ?? '';
+    return buildHdfResults({
+        generatorName: 'twistlock-to-hdf',
+        converterVersion: '1.0.0',
+        toolName: 'Twistlock',
+        toolFormat: 'JSON',
+        baselines,
+        components: [{
+                name: targetName,
+                type: Copyright.ContainerImage,
+                labels: { image: results[0]?.id ?? targetName },
+            }],
+        timestamp: new Date(),
+    });
+}
+//# sourceMappingURL=converter.js.map

package/dist/converters/twistlock-to-hdf/typescript/converter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"converter.js","sourceRoot":"","sources":["../../../../converters/twistlock-to-hdf/typescript/converter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EACL,SAAS,EACT,6BAA6B,GAC9B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,6CAA6C,CAAC;AAM9I,OAAO,EACL,YAAY,EACZ,SAAS,EACT,qBAAqB,EACrB,iBAAiB,EACjB,YAAY,GAEb,MAAM,mBAAmB,CAAC;AAkD3B;;;;GAIG;AACH,SAAS,yBAAyB,CAAC,QAAgB;IACjD,QAAQ,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;QAC/B,KAAK,UAAU,CAAC;QAChB,KAAK,WAAW;YACd,OAAO,GAAG,CAAC;QACb,KAAK,MAAM;YACT,OAAO,GAAG,CAAC;QACb,KAAK,QAAQ,CAAC;QACd,KAAK,UAAU;YACb,OAAO,GAAG,CAAC;QACb,KAAK,KAAK;YACR,OAAO,GAAG,CAAC;QACb;YACE,OAAO,GAAG,CAAC;IACf,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,UAAU,CAAC,MAAuB;IACzC,IAAI,WAAmB,CAAC;IACxB,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACtB,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC;IAClC,CAAC;SAAM,IAAI,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/D,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC;SAAM,CAAC;QACN,WAAW,GAAG,KAAK,CAAC;IACtB,CAAC;IACD,OAAO,sBAAsB,WAAW,EAAE,CAAC;AAC7C,CAAC;AAED;;GAEG;AACH,SAAS,YAAY,CAAC,MAAuB;IAC3C,MAAM,SAAS,GAAG,MAAM,CAAC,yBAAyB;QAChD,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,yBAAyB,CAAC,KAAK,CAAC;QAChD,CAAC,CAAC,KAAK,CAAC;IACV,MAAM,eAAe,GAAG,MAAM,CAAC,sBAAsB;QACnD,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,sBAAsB,CAAC,KAAK,CAAC;QAC7C,CAAC,CAAC,KAAK,CAAC;IACV,OAAO,kCAAkC,SAAS,wCAAwC,eAAe,EAAE,CAAC;AAC9G,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CAAC,IAAmB;IACzC,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,KAAK,CAAC;IAC9C,MAAM,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,IAAI,IAAI,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC;QAChF,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,gBAAgB,CAAC;QACvC,CAAC,CAAC,KAAK,CAAC;IACV,OAAO,WAAW,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,gEAAgE,gBAAgB,EAAE,CAAC;AAClI,CAAC;AAED;;GAEG;AACH,SAAS,gBAAgB,CAAC,IAAmB;IAC3C,MAAM,IAAI,GAAG,6BAA6B,CAAC;IAC3C,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAEhC,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE;QAC3C,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;KACjB,CAAC,CAAC;IAEH,MAAM,YAAY,GAAkB;QAClC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE;KAC7C,CAAC;IAEF,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAElF,MAAM,OAAO,GAAG;QACd,YAAY,CAAC,YAAY,CAAC,MAAM,EAAE,SAAS,EAAE;YAC3C,QAAQ,EAAE,cAAc,CAAC,IAAI,CAAC;YAC9B,SAAS;SACV,CAAC;KACH,CAAC;IAEF,OAAO,iBAAiB,CACtB,IAAI,CAAC,EAAE,EACP,IAAI,CAAC,EAAE,EACP,YAAY,EACZ,yBAAyB,CAAC,IAAI,CAAC,QAAQ,CAAC,EACxC,OAAO,EACP,EAAE,IAAI,EAAE,CACT,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB,CAC1B,MAAuB,EACvB,eAAyB;IAEzB,MAAM,KAAK,GAAG,MAAM,CAAC,eAAe,IAAI,EAAE,CAAC;IAC3C,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAC7D,iEAAiE;IACjE,IAAI,SAAS,EAAE,CAAC;QACd,sCAAsC;QACtC,OAAO,CAAC,IAAI,CAAC,+BAA+B,YAAY,CAAC,MAAM,mCAAmC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;IACrH,CAAC;IAED,MAAM,YAAY,GAA2B,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CACnE,gBAAgB,CAAC,IAAI,CAAC,CACvB,CAAC;IAEF,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IACjC,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IAErC,OAAO,qBAAqB,CAC1B,gBAAgB,EAChB,YAAY,EACZ;QACE,eAAe;QACf,KAAK;QACL,OAAO;KACR,CACmB,CAAC;AACzB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAAa;IACvD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC5C,CAAC;IACD,iBAAiB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IAEtC,MAAM,eAAe,GAAa,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC;IAE7D,MAAM,MAAM,GAAG,SAAS,CAAoC,KAAK,CAAC,CAAC;IAEnE,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC7C,CAAC;IAED,IAAI,OAA0B,CAAC;IAE/B,IAAI,KAAK,CAAC,OAAO,CAAE,MAA0B,CAAC,OAAO,CAAC,EAAE,CAAC;QACvD,wCAAwC;QACxC,OAAO,GAAI,MAA0B,CAAC,OAAQ,CAAC;IACjD,CAAC;SAAM,CAAC;QACN,iDAAiD;QACjD,OAAO,GAAG,CAAC,MAAyB,CAAC,CAAC;IACxC,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CACrC,mBAAmB,CAAC,MAAM,EAAE,eAAe,CAAC,CAC7C,CAAC;IAEF,2DAA2D;IAC3D,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC,IAAI,IAAI,OAAO,CAAC,CAAC,CAAE,CAAC,UAAU,IAAI,EAAE,CAAC;IAEpE,OAAO,eAAe,CAAC;QACrB,aAAa,EAAE,kBAAkB;QACjC,gBAAgB,EAAE,OAAO;QACzB,QAAQ,EAAE,WAAW;QACrB,UAAU,EAAE,MAAM;QAClB,SAAS;QACT,UAAU,EAAE,CAAC;gBACX,IAAI,EAAE,UAAU;gBAChB,IAAI,EAAE,SAAS,CAAC,cAAc;gBAC9B,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,UAAU,EAAE;aAChD,CAAC;QACF,SAAS,EAAE,IAAI,IAAI,EAAE;KACtB,CAAC,CAAC;AACL,CAAC"}

package/dist/converters/twistlock-to-hdf/typescript/fingerprint.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Twistlock/Prisma Cloud format fingerprint.
+ *
+ * Exports a ConverterFingerprint object (data only, no converter import).
+ *
+ * Twistlock container image scans produce a top-level "results" array where
+ * each item has complianceDistribution or vulnerabilityDistribution.
+ * Code repository scans omit the results wrapper but still have those fields.
+ *
+ * Key structural markers:
+ * - results[] with complianceDistribution → confidence 1.0
+ * - results[] with vulnerabilityDistribution → confidence 0.9
+ * - Single object with complianceDistribution → confidence 0.9
+ */
+import { type ConverterFingerprint } from '../../../shared/typescript/registry.js';
+export declare const twistlockFingerprint: ConverterFingerprint;
+export declare function register(): void;
+//# sourceMappingURL=fingerprint.d.ts.map

package/dist/converters/twistlock-to-hdf/typescript/fingerprint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fingerprint.d.ts","sourceRoot":"","sources":["../../../../converters/twistlock-to-hdf/typescript/fingerprint.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAuC,KAAK,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAQxH,eAAO,MAAM,oBAAoB,EAAE,oBAqBlC,CAAC;AAEF,wBAAgB,QAAQ,IAAI,IAAI,CAG/B"}

package/dist/converters/twistlock-to-hdf/typescript/fingerprint.js

@@ -0,0 +1,49 @@
+/**
+ * Twistlock/Prisma Cloud format fingerprint.
+ *
+ * Exports a ConverterFingerprint object (data only, no converter import).
+ *
+ * Twistlock container image scans produce a top-level "results" array where
+ * each item has complianceDistribution or vulnerabilityDistribution.
+ * Code repository scans omit the results wrapper but still have those fields.
+ *
+ * Key structural markers:
+ * - results[] with complianceDistribution → confidence 1.0
+ * - results[] with vulnerabilityDistribution → confidence 0.9
+ * - Single object with complianceDistribution → confidence 0.9
+ */
+import { registerFingerprint, getFingerprint } from '../../../shared/typescript/registry.js';
+function hasTwistlockMarkers(obj) {
+    if ('complianceDistribution' in obj)
+        return 1.0;
+    if ('vulnerabilityDistribution' in obj)
+        return 0.9;
+    return 0;
+}
+export const twistlockFingerprint = {
+    id: 'twistlock-to-hdf',
+    label: 'Twistlock',
+    direction: 'ingest',
+    inputFamily: 'json',
+    outputType: 'results',
+    fingerprint: (input) => {
+        if (typeof input !== 'object' || input === null || Array.isArray(input))
+            return 0;
+        const obj = input;
+        // Container scan with "results" wrapper
+        if (Array.isArray(obj.results) && obj.results.length > 0) {
+            const first = obj.results[0];
+            if (typeof first === 'object' && first !== null) {
+                return hasTwistlockMarkers(first);
+            }
+        }
+        // Code repo scan — single result object without wrapper
+        return hasTwistlockMarkers(obj);
+    },
+};
+export function register() {
+    if (getFingerprint('twistlock-to-hdf'))
+        return;
+    registerFingerprint(twistlockFingerprint);
+}
+//# sourceMappingURL=fingerprint.js.map

package/dist/converters/twistlock-to-hdf/typescript/fingerprint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fingerprint.js","sourceRoot":"","sources":["../../../../converters/twistlock-to-hdf/typescript/fingerprint.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAA6B,MAAM,wCAAwC,CAAC;AAExH,SAAS,mBAAmB,CAAC,GAA4B;IACvD,IAAI,wBAAwB,IAAI,GAAG;QAAE,OAAO,GAAG,CAAC;IAChD,IAAI,2BAA2B,IAAI,GAAG;QAAE,OAAO,GAAG,CAAC;IACnD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAyB;IACxD,EAAE,EAAE,kBAAkB;IACtB,KAAK,EAAE,WAAW;IAClB,SAAS,EAAE,QAAQ;IACnB,WAAW,EAAE,MAAM;IACnB,UAAU,EAAE,SAAS;IACrB,WAAW,EAAE,CAAC,KAAc,EAAU,EAAE;QACtC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;QAClF,MAAM,GAAG,GAAG,KAAgC,CAAC;QAE7C,wCAAwC;QACxC,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzD,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,CAA4B,CAAC;YACxD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBAChD,OAAO,mBAAmB,CAAC,KAAK,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;QAED,wDAAwD;QACxD,OAAO,mBAAmB,CAAC,GAAG,CAAC,CAAC;IAClC,CAAC;CACF,CAAC;AAEF,MAAM,UAAU,QAAQ;IACtB,IAAI,cAAc,CAAC,kBAAkB,CAAC;QAAE,OAAO;IAC/C,mBAAmB,CAAC,oBAAoB,CAAC,CAAC;AAC5C,CAAC"}

package/dist/converters/twistlock-to-hdf/typescript/index.d.ts

@@ -0,0 +1,2 @@
+export { convertTwistlockToHdf } from './converter.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/converters/twistlock-to-hdf/typescript/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../converters/twistlock-to-hdf/typescript/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/converters/twistlock-to-hdf/typescript/index.js

@@ -0,0 +1,2 @@
+export { convertTwistlockToHdf } from './converter.js';
+//# sourceMappingURL=index.js.map

package/dist/converters/twistlock-to-hdf/typescript/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../converters/twistlock-to-hdf/typescript/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/converters/veracode-to-hdf/typescript/converter.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Veracode DetailedReport XML to HDF converter.
+ *
+ * Converts Veracode static analysis and SCA findings into HDF format.
+ * Produces two types of controls:
+ *   - CWE-based: From severity categories (static analysis findings)
+ *   - CVE-based: From SCA vulnerable components
+ *
+ * Uses attributeNamePrefix '@_' to disambiguate XML attributes from child
+ * elements (critical for the `vulnerabilities` attr/element collision on
+ * `<component>`).
+ */
+/**
+ * Convert Veracode DetailedReport XML to HDF JSON string.
+ *
+ * @param input - Veracode DetailedReport XML string
+ * @returns HDF JSON string
+ */
+export declare function convertVeracodeToHdf(input: string): Promise<string>;
+//# sourceMappingURL=converter.d.ts.map

package/dist/converters/veracode-to-hdf/typescript/converter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"converter.d.ts","sourceRoot":"","sources":["../../../../converters/veracode-to-hdf/typescript/converter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAwVH;;;;;GAKG;AACH,wBAAsB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAwEzE"}