@mitre/hdf-converters 2.13.0 → 3.0.0

package/lib/package.json

@@ -1,76 +0,0 @@
-{
-    "name": "@mitre/hdf-converters",
-    "version": "2.13.0",
-    "license": "Apache-2.0",
-    "description": "Converter util library used to transform various scan results into HDF format",
-    "repository": {
-        "type": "git",
-        "url": "https://github.com/mitre/heimdall2",
-        "directory": "libs/hdf-converters"
-    },
-    "files": [
-        "lib"
-    ],
-    "main": "src/index.ts",
-    "scripts": {
-        "prebuild": "tailwindcss -i data/reverse-html-mapper/tailwind.css -o data/reverse-html-mapper/style.css --minify && node data/reverse-html-mapper/convert-to-embedded-strings.ts",
-        "build": "tsc -p tsconfig.build.json",
-        "lint": "eslint --fix",
-        "lint:ci": "eslint --max-warnings 0",
-        "prepack": "run-script-os",
-        "prepack:darwin:linux": "yarn build && cp package.json package.json.orig && cat package.json.orig | jq '.main = \"lib/index.js\"' > package.json",
-        "prepack:win32": "yarn build && copy package.json package.json.orig && type package.json.orig | jq \".main = \\\"lib/index.js\\\"\" > package.json",
-        "postpack": "run-script-os",
-        "postpack:darwin:linux": "mv package.json.orig package.json",
-        "postpack:win32": "move package.json.orig package.json",
-        "test": "vitest",
-        "test:ci": "vitest run",
-        "csv2json": "node data/converters/csv2json.ts",
-        "xml2json": "node data/converters/xml2json.ts"
-    },
-    "dependencies": {
-        "@aws-sdk/client-config-service": "3.1028.0",
-        "@e965/xlsx": "^0.20.0",
-        "@mdi/js": "^7.0.96",
-        "@microsoft/microsoft-graph-types": "^2.40.0",
-        "@mitre/jsonix": "^3.0.7",
-        "@smithy/node-http-handler": "^4.0.0",
-        "@tailwindcss/cli": "^4.0.6",
-        "@types/csv2json": "^1.4.2",
-        "@types/mustache": "^4.1.2",
-        "@types/papaparse": "^5.3.2",
-        "@types/revalidator": "^0.3.12",
-        "@types/sanitize-html": "^2.3.1",
-        "@types/semver": "^7.7.0",
-        "@types/validator": "^13.12.0",
-        "@types/xml2js": "^0.4.9",
-        "axios": "^1.3.5",
-        "compare-versions": "^6.0.0",
-        "csv2json": "^2.0.2",
-        "fast-xml-parser": "5.5.11",
-        "html-entities": "^2.3.2",
-        "htmlparser2": "^12.0.0",
-        "inspecjs": "^2.13.0",
-        "lodash": "^4.17.21",
-        "moment": "^2.29.1",
-        "mustache": "^4.2.0",
-        "papaparse": "^5.3.1",
-        "retry-axios": "^4.0.2",
-        "revalidator": "^0.3.1",
-        "run-script-os": "^1.1.6",
-        "sanitize-html": "^2.17.2",
-        "semver": "^7.6.0",
-        "tailwindcss": "^4.0.6",
-        "tw-elements": "^2.0.0",
-        "validator": "^13.12.0",
-        "winston": "^3.6.0",
-        "xml-formatter": "^3.6.2",
-        "yaml": "^2.1.1"
-    },
-    "devDependencies": {
-        "@types/lodash": "^4.14.161",
-        "@types/node": "^25.0.0",
-        "vitest": "^4.0.18",
-        "xml2js": "^0.6.0"
-    }
-}

package/lib/src/anchore-grype-mapper.d.ts

@@ -1,12 +0,0 @@
-import { ExecJSON } from 'inspecjs';
-import { BaseConverter, ILookupPath, MappedTransform } from './base-converter';
-export declare class AnchoreGrypeMapper extends BaseConverter {
-    withRaw: boolean;
-    metadata: Record<string, unknown>;
-    controlMatches(matchesPath: string, idTransformer: (value: any) => unknown, impactTransformer: (value: any) => unknown, resultMessageTransformer: (value: any) => unknown): MappedTransform<ExecJSON.Control & ILookupPath, ILookupPath>;
-    mapping(): MappedTransform<ExecJSON.Execution & {
-        passthrough: unknown;
-    }, ILookupPath>;
-    constructor(exportJson: string, withRaw?: boolean);
-}
-//# sourceMappingURL=anchore-grype-mapper.d.ts.map

package/lib/src/anchore-grype-mapper.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"anchore-grype-mapper.d.ts","sourceRoot":"","sources":["../../src/anchore-grype-mapper.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,QAAQ,EAAC,MAAM,UAAU,CAAC;AAGlC,OAAO,EACL,aAAa,EACb,WAAW,EAEX,eAAe,EAChB,MAAM,kBAAkB,CAAC;AAiD1B,qBAAa,kBAAmB,SAAQ,aAAa;IACnD,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAElC,cAAc,CACZ,WAAW,EAAE,MAAM,EACnB,aAAa,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,OAAO,EACtC,iBAAiB,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,OAAO,EAC1C,wBAAwB,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,OAAO,GAChD,eAAe,CAAC,QAAQ,CAAC,OAAO,GAAG,WAAW,EAAE,WAAW,CAAC;IA+F/D,OAAO,IAAI,eAAe,CACxB,QAAQ,CAAC,SAAS,GAAG;QAAC,WAAW,EAAE,OAAO,CAAA;KAAC,EAC3C,WAAW,CACZ;gBA6DW,UAAU,EAAE,MAAM,EAAE,OAAO,UAAQ;CAOhD"}

package/lib/src/anchore-grype-mapper.js

@@ -1,178 +0,0 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.AnchoreGrypeMapper = void 0;
-const inspecjs_1 = require("inspecjs");
-const lodash_1 = __importDefault(require("lodash"));
-const package_json_1 = require("../package.json");
-const base_converter_1 = require("./base-converter");
-const IMPACT_MAPPING = new Map([
-    ['critical', 0.9],
-    ['high', 0.7],
-    ['medium', 0.5],
-    ['low', 0.3],
-    ['negligible', 0.0],
-    ['unknown', 0.5]
-]);
-// If the highest rating severity for a control is `negligible` or `unknown`, set the results to skipped and request a manual review
-function skipSeverityNegligibleOrUnknown(controls) {
-    if (controls) {
-        controls
-            // Filter to controls whose highest rating severity is either `negligible` or `unknown`
-            .filter((control) => {
-            const rating = lodash_1.default.get(control, 'tags.severity', '');
-            //console.log(rating)
-            return rating === 'Negligible' || rating === 'Unknown';
-        })
-            // For every result contained by that control, set the status to skipped and request a manual review
-            .map((control) => control.results.map((result) => {
-            result.status = inspecjs_1.ExecJSON.ControlResultStatus.Skipped;
-            result.skip_message =
-                'Manual review required because a Anchore Grype rating severity is set to `negligible` or `unknown`.';
-        }));
-    }
-    return controls;
-}
-function description(data) {
-    const vulnerability = data.vulnerability;
-    const relatedVulnerabilities = data.relatedVulnerabilities;
-    if (!vulnerability.description && relatedVulnerabilities.length > 0) {
-        return relatedVulnerabilities.filter((relatedVulnerability) => relatedVulnerability.id === vulnerability.id)[0].description;
-    }
-    else if (vulnerability.description) {
-        return vulnerability.description;
-    }
-    return 'no description found';
-}
-class AnchoreGrypeMapper extends base_converter_1.BaseConverter {
-    withRaw;
-    metadata;
-    controlMatches(matchesPath, idTransformer, impactTransformer, resultMessageTransformer) {
-        return {
-            path: matchesPath,
-            key: 'id',
-            tags: {
-                nist: ['SA-11', 'RA-5'],
-                cveid: { path: 'vulnerability.id' },
-                severity: { path: 'vulnerability.severity' }
-            },
-            descriptions: [
-                {
-                    data: {
-                        path: 'vulnerability.fix',
-                        transformer: (data) => data.state == 'fixed'
-                            ? `vulnerability is ${lodash_1.default.get(data, 'state')} for versions ${lodash_1.default.get(data, 'versions').join(', ')}`
-                            : `vulnerability is not known to be fixed in any versions`
-                    },
-                    label: 'fix'
-                },
-                {
-                    data: {
-                        path: 'relatedVulnerabilities',
-                        transformer: (data) => `${JSON.stringify(lodash_1.default.get(data, 'cvss'), null, 2)}`
-                    },
-                    label: 'check'
-                }
-            ],
-            refs: {
-                transformer: (data) => {
-                    const vuln_urls = lodash_1.default.get(data, 'vulnerability.urls');
-                    const relatedVulnerabilities = lodash_1.default.get(data, 'relatedVulnerabilities');
-                    let relatedVulnerabilitiesUrls = [];
-                    if (relatedVulnerabilities) {
-                        relatedVulnerabilitiesUrls = relatedVulnerabilities.map((element) => element.urls);
-                    }
-                    return vuln_urls.concat(...relatedVulnerabilitiesUrls).map((element) => ({ url: element }));
-                }
-            },
-            source_location: {},
-            title: {
-                transformer: (data) => `Grype found a vulnerability to ${lodash_1.default.get(data, 'vulnerability.id')} in ${lodash_1.default.get(this.metadata, 'source.target.userInput')}`
-            },
-            id: {
-                transformer: idTransformer
-            },
-            desc: {
-                transformer: description
-            },
-            impact: {
-                path: 'vulnerability.severity',
-                transformer: impactTransformer
-            },
-            code: {
-                transformer: (data) => `${JSON.stringify(lodash_1.default.omitBy(lodash_1.default.pick(data, ['vulnerability', 'relatedVulnerabilities']), (value) => value === null || value === ''), null, 2)}`
-            },
-            arrayTransformer: skipSeverityNegligibleOrUnknown,
-            results: [
-                {
-                    status: inspecjs_1.ExecJSON.ControlResultStatus.Failed,
-                    code_desc: {
-                        transformer: (data) => `${JSON.stringify(lodash_1.default.get(data, 'matchDetails'), null, 2)}`
-                    },
-                    message: {
-                        transformer: resultMessageTransformer
-                    },
-                    start_time: lodash_1.default.get(this.metadata, 'descriptor.timestamp')
-                }
-            ]
-        };
-    }
-    mapping() {
-        return {
-            platform: {
-                name: 'Heimdall Tools',
-                release: package_json_1.version,
-                target_id: null
-            },
-            version: package_json_1.version,
-            statistics: {
-                duration: null
-            },
-            profiles: [
-                {
-                    name: 'Anchore - Grype',
-                    title: 'Anchore Grype Matches',
-                    version: lodash_1.default.get(this.metadata, 'descriptor.version'),
-                    maintainer: null,
-                    summary: null,
-                    license: null,
-                    copyright: null,
-                    copyright_email: null,
-                    supports: [],
-                    attributes: [],
-                    depends: [],
-                    groups: [],
-                    status: 'loaded',
-                    controls: [
-                        {
-                            ...this.controlMatches('wrapper.matches', (data) => `Grype/${lodash_1.default.get(data, 'vulnerability.id')}`, (0, base_converter_1.impactMapping)(IMPACT_MAPPING), (data) => `${JSON.stringify(lodash_1.default.get(data, 'artifact'), null, 2)}`)
-                        },
-                        {
-                            ...this.controlMatches('wrapper.ignoredMatches', (data) => `Grype-Ignored-Match/${lodash_1.default.get(data, 'vulnerability.id')}`, () => 0, (data) => `This finding is ignored due to the following applied ignored rules:\n${JSON.stringify(lodash_1.default.get(data, 'appliedIgnoreRules'), null, 2)}\nArtifact Information:\n${JSON.stringify(lodash_1.default.get(data, 'artifact'), null, 2)}`)
-                        }
-                    ],
-                    sha256: ''
-                }
-            ],
-            passthrough: {
-                transformer: (data) => {
-                    return {
-                        auxiliary_data: [{ name: '', data: lodash_1.default.omit([]) }], //Insert service name and mapped fields to be removed
-                        ...(this.withRaw && { raw: data })
-                    };
-                }
-            }
-        };
-    }
-    constructor(exportJson, withRaw = false) {
-        const temp = JSON.parse(exportJson);
-        super({ wrapper: lodash_1.default.pick(temp, ['matches', 'ignoredMatches']) });
-        this.metadata = lodash_1.default.omit(temp, ['matches', 'ignoredMatches']);
-        this.withRaw = withRaw;
-        this.setMappings(this.mapping());
-    }
-}
-exports.AnchoreGrypeMapper = AnchoreGrypeMapper;
-//# sourceMappingURL=anchore-grype-mapper.js.map

package/lib/src/anchore-grype-mapper.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"anchore-grype-mapper.js","sourceRoot":"","sources":["../../src/anchore-grype-mapper.ts"],"names":[],"mappings":";;;;;;AAAA,uCAAkC;AAClC,oDAAuB;AACvB,kDAAgE;AAChE,qDAK0B;AAE1B,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC;IAClD,CAAC,UAAU,EAAE,GAAG,CAAC;IACjB,CAAC,MAAM,EAAE,GAAG,CAAC;IACb,CAAC,QAAQ,EAAE,GAAG,CAAC;IACf,CAAC,KAAK,EAAE,GAAG,CAAC;IACZ,CAAC,YAAY,EAAE,GAAG,CAAC;IACnB,CAAC,SAAS,EAAE,GAAG,CAAC;CACjB,CAAC,CAAC;AAEH,oIAAoI;AACpI,SAAS,+BAA+B,CAAC,QAAmB;IAC1D,IAAI,QAAQ,EAAE,CAAC;QACZ,QAA+B;YAC9B,uFAAuF;aACtF,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE;YAClB,MAAM,MAAM,GAAG,gBAAC,CAAC,GAAG,CAAC,OAAO,EAAE,eAAe,EAAE,EAAE,CAAW,CAAC;YAC7D,qBAAqB;YACrB,OAAO,MAAM,KAAK,YAAY,IAAI,MAAM,KAAK,SAAS,CAAC;QACzD,CAAC,CAAC;YACF,oGAAoG;aACnG,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CACf,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;YAC7B,MAAM,CAAC,MAAM,GAAG,mBAAQ,CAAC,mBAAmB,CAAC,OAAO,CAAC;YACrD,MAAM,CAAC,YAAY;gBACjB,qGAAqG,CAAC;QAC1G,CAAC,CAAC,CACH,CAAC;IACN,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,WAAW,CAAC,IAA6B;IAChD,MAAM,aAAa,GAAG,IAAI,CAAC,aAAwC,CAAC;IACpE,MAAM,sBAAsB,GAAG,IAAI,CAAC,sBAGjC,CAAC;IACJ,IAAI,CAAC,aAAa,CAAC,WAAW,IAAI,sBAAsB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpE,OAAO,sBAAsB,CAAC,MAAM,CAClC,CAAC,oBAAoB,EAAE,EAAE,CAAC,oBAAoB,CAAC,EAAE,KAAK,aAAa,CAAC,EAAE,CACvE,CAAC,CAAC,CAAC,CAAC,WAAqB,CAAC;IAC7B,CAAC;SAAM,IAAI,aAAa,CAAC,WAAW,EAAE,CAAC;QACrC,OAAO,aAAa,CAAC,WAAqB,CAAC;IAC7C,CAAC;IACD,OAAO,sBAAsB,CAAC;AAChC,CAAC;AAED,MAAa,kBAAmB,SAAQ,8BAAa;IACnD,OAAO,CAAU;IACjB,QAAQ,CAA0B;IAElC,cAAc,CACZ,WAAmB,EACnB,aAAsC,EACtC,iBAA0C,EAC1C,wBAAiD;QAEjD,OAAO;YACL,IAAI,EAAE,WAAW;YACjB,GAAG,EAAE,IAAI;YACT,IAAI,EAAE;gBACJ,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC;gBACvB,KAAK,EAAE,EAAC,IAAI,EAAE,kBAAkB,EAAC;gBACjC,QAAQ,EAAE,EAAC,IAAI,EAAE,wBAAwB,EAAC;aAC3C;YACD,YAAY,EAAE;gBACZ;oBACE,IAAI,EAAE;wBACJ,IAAI,EAAE,mBAAmB;wBACzB,WAAW,EAAE,CAAC,IAA6B,EAAU,EAAE,CACrD,IAAI,CAAC,KAAK,IAAI,OAAO;4BACnB,CAAC,CAAC,oBAAoB,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,iBAAkB,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,CAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;4BAC7G,CAAC,CAAC,wDAAwD;qBAC/D;oBACD,KAAK,EAAE,KAAK;iBACb;gBACD;oBACE,IAAI,EAAE;wBACJ,IAAI,EAAE,wBAAwB;wBAC9B,WAAW,EAAE,CAAC,IAA6B,EAAU,EAAE,CACrD,GAAG,IAAI,CAAC,SAAS,CAAC,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;qBACpD;oBACD,KAAK,EAAE,OAAO;iBACf;aACF;YACD,IAAI,EAAE;gBACJ,WAAW,EAAE,CAAC,IAA6B,EAAE,EAAE;oBAC7C,MAAM,SAAS,GAAG,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,oBAAoB,CAG/C,CAAC;oBACJ,MAAM,sBAAsB,GAAG,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,wBAAwB,CAAC,CAAC;oBACrE,IAAI,0BAA0B,GAAG,EAG9B,CAAC;oBACJ,IAAI,sBAAsB,EAAE,CAAC;wBAC3B,0BAA0B,GACxB,sBACD,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAA8B,CAAC;oBAChE,CAAC;oBACD,OACE,SAAS,CAAC,MAAM,CACd,GAAG,0BAA0B,CAEhC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAC,GAAG,EAAE,OAAO,EAAC,CAAC,CAAC,CAAC;gBACvC,CAAC;aACiC;YACpC,eAAe,EAAE,EAAE;YACnB,KAAK,EAAE;gBACL,WAAW,EAAE,CAAC,IAA6B,EAAU,EAAE,CACrD,kCAAkC,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,kBAAkB,CAAC,OAAO,gBAAC,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,yBAAyB,CAAW,EAAE;aACtI;YACD,EAAE,EAAE;gBACF,WAAW,EAAE,aAAa;aAC3B;YACD,IAAI,EAAE;gBACJ,WAAW,EAAE,WAAW;aACzB;YACD,MAAM,EAAE;gBACN,IAAI,EAAE,wBAAwB;gBAC9B,WAAW,EAAE,iBAAiB;aAC/B;YACD,IAAI,EAAE;gBACJ,WAAW,EAAE,CAAC,IAA6B,EAAU,EAAE,CACrD,GAAG,IAAI,CAAC,SAAS,CACf,gBAAC,CAAC,MAAM,CACN,gBAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,eAAe,EAAE,wBAAwB,CAAC,CAAC,EACzD,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE,CAC1C,EACD,IAAI,EACJ,CAAC,CACF,EAAE;aACN;YACD,gBAAgB,EAAE,+BAA+B;YACjD,OAAO,EAAE;gBACP;oBACE,MAAM,EAAE,mBAAQ,CAAC,mBAAmB,CAAC,MAAM;oBAC3C,SAAS,EAAE;wBACT,WAAW,EAAE,CAAC,IAA6B,EAAU,EAAE,CACrD,GAAG,IAAI,CAAC,SAAS,CAAC,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;qBAC5D;oBACD,OAAO,EAAE;wBACP,WAAW,EAAE,wBAAwB;qBACtC;oBACD,UAAU,EAAE,gBAAC,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,sBAAsB,CAAW;iBACnE;aACF;SACF,CAAC;IACJ,CAAC;IAED,OAAO;QAIL,OAAO;YACL,QAAQ,EAAE;gBACR,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,sBAAoB;gBAC7B,SAAS,EAAE,IAAI;aAChB;YACD,OAAO,EAAE,sBAAoB;YAC7B,UAAU,EAAE;gBACV,QAAQ,EAAE,IAAI;aACf;YACD,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,iBAAiB;oBACvB,KAAK,EAAE,uBAAuB;oBAC9B,OAAO,EAAE,gBAAC,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,oBAAoB,CAAW;oBAC7D,UAAU,EAAE,IAAI;oBAChB,OAAO,EAAE,IAAI;oBACb,OAAO,EAAE,IAAI;oBACb,SAAS,EAAE,IAAI;oBACf,eAAe,EAAE,IAAI;oBACrB,QAAQ,EAAE,EAAE;oBACZ,UAAU,EAAE,EAAE;oBACd,OAAO,EAAE,EAAE;oBACX,MAAM,EAAE,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE;wBACR;4BACE,GAAG,IAAI,CAAC,cAAc,CACpB,iBAAiB,EACjB,CAAC,IAA6B,EAAU,EAAE,CACxC,SAAS,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,kBAAkB,CAAC,EAAE,EAC5C,IAAA,8BAAa,EAAC,cAAc,CAAC,EAC7B,CAAC,IAA6B,EAAU,EAAE,CACxC,GAAG,IAAI,CAAC,SAAS,CAAC,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CACxD;yBACF;wBACD;4BACE,GAAG,IAAI,CAAC,cAAc,CACpB,wBAAwB,EACxB,CAAC,IAA6B,EAAU,EAAE,CACxC,uBAAuB,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,kBAAkB,CAAC,EAAE,EAC1D,GAAG,EAAE,CAAC,CAAC,EACP,CAAC,IAA6B,EAAU,EAAE,CACxC,wEAAwE,IAAI,CAAC,SAAS,CAAC,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,oBAAoB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,4BAA4B,IAAI,CAAC,SAAS,CAAC,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CACnN;yBACF;qBACF;oBACD,MAAM,EAAE,EAAE;iBACX;aACF;YACD,WAAW,EAAE;gBACX,WAAW,EAAE,CAAC,IAAyB,EAA2B,EAAE;oBAClE,OAAO;wBACL,cAAc,EAAE,CAAC,EAAC,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,gBAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAC,CAAC,EAAE,qDAAqD;wBACrG,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAC,GAAG,EAAE,IAAI,EAAC,CAAC;qBACjC,CAAC;gBACJ,CAAC;aACF;SACF,CAAC;IACJ,CAAC;IACD,YAAY,UAAkB,EAAE,OAAO,GAAG,KAAK;QAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACpC,KAAK,CAAC,EAAC,OAAO,EAAE,gBAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC,EAAC,CAAC,CAAC;QAC9D,IAAI,CAAC,QAAQ,GAAG,gBAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC,CAAC;QAC5D,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IACnC,CAAC;CACF;AA/KD,gDA+KC","sourcesContent":["import {ExecJSON} from 'inspecjs';\nimport _ from 'lodash';\nimport {version as HeimdallToolsVersion} from '../package.json';\nimport {\n  BaseConverter,\n  ILookupPath,\n  impactMapping,\n  MappedTransform\n} from './base-converter';\n\nconst IMPACT_MAPPING: Map<string, number> = new Map([\n  ['critical', 0.9],\n  ['high', 0.7],\n  ['medium', 0.5],\n  ['low', 0.3],\n  ['negligible', 0.0],\n  ['unknown', 0.5]\n]);\n\n// If the highest rating severity for a control is `negligible` or `unknown`, set the results to skipped and request a manual review\nfunction skipSeverityNegligibleOrUnknown(controls: unknown[]): unknown[] {\n  if (controls) {\n    (controls as ExecJSON.Control[])\n      // Filter to controls whose highest rating severity is either `negligible` or `unknown`\n      .filter((control) => {\n        const rating = _.get(control, 'tags.severity', '') as string;\n        //console.log(rating)\n        return rating === 'Negligible' || rating === 'Unknown';\n      })\n      // For every result contained by that control, set the status to skipped and request a manual review\n      .map((control) =>\n        control.results.map((result) => {\n          result.status = ExecJSON.ControlResultStatus.Skipped;\n          result.skip_message =\n            'Manual review required because a Anchore Grype rating severity is set to `negligible` or `unknown`.';\n        })\n      );\n  }\n  return controls;\n}\n\nfunction description(data: Record<string, unknown>): string {\n  const vulnerability = data.vulnerability as Record<string, unknown>;\n  const relatedVulnerabilities = data.relatedVulnerabilities as Record<\n    string,\n    unknown\n  >[];\n  if (!vulnerability.description && relatedVulnerabilities.length > 0) {\n    return relatedVulnerabilities.filter(\n      (relatedVulnerability) => relatedVulnerability.id === vulnerability.id\n    )[0].description as string;\n  } else if (vulnerability.description) {\n    return vulnerability.description as string;\n  }\n  return 'no description found';\n}\n\nexport class AnchoreGrypeMapper extends BaseConverter {\n  withRaw: boolean;\n  metadata: Record<string, unknown>;\n\n  controlMatches(\n    matchesPath: string,\n    idTransformer: (value: any) => unknown,\n    impactTransformer: (value: any) => unknown,\n    resultMessageTransformer: (value: any) => unknown\n  ): MappedTransform<ExecJSON.Control & ILookupPath, ILookupPath> {\n    return {\n      path: matchesPath,\n      key: 'id',\n      tags: {\n        nist: ['SA-11', 'RA-5'],\n        cveid: {path: 'vulnerability.id'},\n        severity: {path: 'vulnerability.severity'}\n      },\n      descriptions: [\n        {\n          data: {\n            path: 'vulnerability.fix',\n            transformer: (data: Record<string, unknown>): string =>\n              data.state == 'fixed'\n                ? `vulnerability is ${_.get(data, 'state')} for versions ${(_.get(data, 'versions') as string[]).join(', ')}`\n                : `vulnerability is not known to be fixed in any versions`\n          },\n          label: 'fix'\n        },\n        {\n          data: {\n            path: 'relatedVulnerabilities',\n            transformer: (data: Record<string, unknown>): string =>\n              `${JSON.stringify(_.get(data, 'cvss'), null, 2)}`\n          },\n          label: 'check'\n        }\n      ],\n      refs: {\n        transformer: (data: Record<string, unknown>) => {\n          const vuln_urls = _.get(data, 'vulnerability.urls') as Record<\n            string,\n            unknown\n          >[];\n          const relatedVulnerabilities = _.get(data, 'relatedVulnerabilities');\n          let relatedVulnerabilitiesUrls = [] as unknown as Record<\n            string,\n            unknown\n          >[];\n          if (relatedVulnerabilities) {\n            relatedVulnerabilitiesUrls = (\n              relatedVulnerabilities as Record<string, unknown>[]\n            ).map((element) => element.urls) as Record<string, unknown>[];\n          }\n          return (\n            vuln_urls.concat(\n              ...relatedVulnerabilitiesUrls\n            ) as unknown as Record<string, unknown>[]\n          ).map((element) => ({url: element}));\n        }\n      } as unknown as ExecJSON.Reference[],\n      source_location: {},\n      title: {\n        transformer: (data: Record<string, unknown>): string =>\n          `Grype found a vulnerability to ${_.get(data, 'vulnerability.id')} in ${_.get(this.metadata, 'source.target.userInput') as string}`\n      },\n      id: {\n        transformer: idTransformer\n      },\n      desc: {\n        transformer: description\n      },\n      impact: {\n        path: 'vulnerability.severity',\n        transformer: impactTransformer\n      },\n      code: {\n        transformer: (data: Record<string, unknown>): string =>\n          `${JSON.stringify(\n            _.omitBy(\n              _.pick(data, ['vulnerability', 'relatedVulnerabilities']),\n              (value) => value === null || value === ''\n            ),\n            null,\n            2\n          )}`\n      },\n      arrayTransformer: skipSeverityNegligibleOrUnknown,\n      results: [\n        {\n          status: ExecJSON.ControlResultStatus.Failed,\n          code_desc: {\n            transformer: (data: Record<string, unknown>): string =>\n              `${JSON.stringify(_.get(data, 'matchDetails'), null, 2)}`\n          },\n          message: {\n            transformer: resultMessageTransformer\n          },\n          start_time: _.get(this.metadata, 'descriptor.timestamp') as string\n        }\n      ]\n    };\n  }\n\n  mapping(): MappedTransform<\n    ExecJSON.Execution & {passthrough: unknown},\n    ILookupPath\n  > {\n    return {\n      platform: {\n        name: 'Heimdall Tools',\n        release: HeimdallToolsVersion,\n        target_id: null\n      },\n      version: HeimdallToolsVersion,\n      statistics: {\n        duration: null\n      },\n      profiles: [\n        {\n          name: 'Anchore - Grype',\n          title: 'Anchore Grype Matches',\n          version: _.get(this.metadata, 'descriptor.version') as string,\n          maintainer: null,\n          summary: null,\n          license: null,\n          copyright: null,\n          copyright_email: null,\n          supports: [],\n          attributes: [],\n          depends: [],\n          groups: [],\n          status: 'loaded',\n          controls: [\n            {\n              ...this.controlMatches(\n                'wrapper.matches',\n                (data: Record<string, unknown>): string =>\n                  `Grype/${_.get(data, 'vulnerability.id')}`,\n                impactMapping(IMPACT_MAPPING),\n                (data: Record<string, unknown>): string =>\n                  `${JSON.stringify(_.get(data, 'artifact'), null, 2)}`\n              )\n            },\n            {\n              ...this.controlMatches(\n                'wrapper.ignoredMatches',\n                (data: Record<string, unknown>): string =>\n                  `Grype-Ignored-Match/${_.get(data, 'vulnerability.id')}`,\n                () => 0,\n                (data: Record<string, unknown>): string =>\n                  `This finding is ignored due to the following applied ignored rules:\\n${JSON.stringify(_.get(data, 'appliedIgnoreRules'), null, 2)}\\nArtifact Information:\\n${JSON.stringify(_.get(data, 'artifact'), null, 2)}`\n              )\n            }\n          ],\n          sha256: ''\n        }\n      ],\n      passthrough: {\n        transformer: (data: Record<string, any>): Record<string, unknown> => {\n          return {\n            auxiliary_data: [{name: '', data: _.omit([])}], //Insert service name and mapped fields to be removed\n            ...(this.withRaw && {raw: data})\n          };\n        }\n      }\n    };\n  }\n  constructor(exportJson: string, withRaw = false) {\n    const temp = JSON.parse(exportJson);\n    super({wrapper: _.pick(temp, ['matches', 'ignoredMatches'])});\n    this.metadata = _.omit(temp, ['matches', 'ignoredMatches']);\n    this.withRaw = withRaw;\n    this.setMappings(this.mapping());\n  }\n}\n"]}

package/lib/src/asff-mapper/asff-mapper.d.ts

@@ -1,112 +0,0 @@
-import { ExecJSON } from 'inspecjs';
-import { BaseConverter } from '../base-converter';
-export declare enum SpecialCasing {
-    CMSInSpec = "CMS Chef InSpec",
-    FirewallManager = "AWS Firewall Manager",
-    GuardDuty = "AWS GuardDuty",
-    Inspector = "AWS Inspector",
-    Prowler = "Prowler",
-    SecurityHub = "AWS Security Hub",
-    Trivy = "Aqua Trivy",
-    PreviouslyHDF = "MITRE SAF HDF2ASFF",
-    Default = "Default"
-}
-export declare function consolidate(context: ASFFMapper, input: unknown[], file: Record<string, unknown>): ExecJSON.Control[];
-export declare class ASFFMapper extends BaseConverter {
-    meta: Record<string, string | undefined> | undefined;
-    supportingDocs: Map<SpecialCasing, Record<string, Record<string, unknown>>>;
-    defaultMappings: {
-        platform: {
-            name: string;
-            release: string;
-            target_id: {
-                transformer: (record: Record<string, unknown>) => string;
-            };
-        };
-        version: string;
-        statistics: {
-            duration: null;
-        };
-        profiles: {
-            name: {
-                transformer: () => string;
-            };
-            version: string;
-            title: {
-                transformer: () => string;
-            };
-            maintainer: null;
-            summary: string;
-            license: null;
-            copyright: null;
-            copyright_email: null;
-            supports: never[];
-            attributes: never[];
-            depends: never[];
-            groups: never[];
-            status: string;
-            controls: {
-                path: string;
-                key: string;
-                arrayTransformer: (input: unknown[], file: Record<string, unknown>) => ExecJSON.Control[];
-                id: {
-                    transformer: (finding: Record<string, unknown>) => string;
-                };
-                title: {
-                    transformer: (finding: Record<string, unknown>) => string;
-                };
-                desc: {
-                    transformer: (finding: Record<string, unknown>) => string;
-                };
-                impact: {
-                    transformer: (finding: Record<string, unknown>) => number;
-                };
-                tags: {
-                    transformer: (finding: Record<string, unknown>) => Record<string, unknown> | undefined;
-                    cci: {
-                        transformer: (finding: Record<string, unknown>) => string[];
-                    };
-                    nist: {
-                        transformer: (finding: Record<string, unknown>) => string[];
-                    };
-                };
-                descriptions: {
-                    data: {
-                        path: string;
-                        transformer: (input: Record<string, string>) => string;
-                    };
-                    label: string;
-                }[];
-                refs: {
-                    transformer: (finding: Record<string, unknown>) => Record<string, unknown>;
-                }[];
-                source_location: {};
-                code: string;
-                results: {
-                    status: {
-                        transformer: (finding: Record<string, unknown>) => ExecJSON.ControlResultStatus;
-                    };
-                    code_desc: {
-                        transformer: (finding: Record<string, unknown>) => string;
-                    };
-                    transformer: (finding: Record<string, unknown>) => Record<string, unknown>;
-                    start_time: {
-                        transformer: (finding: Record<string, unknown>) => string;
-                    };
-                }[];
-            }[];
-            sha256: string;
-        }[];
-    };
-    statusReason(finding: unknown): string | undefined;
-    setMappings(): void;
-    constructor(asff: Record<string, unknown>, supportingDocs: Map<SpecialCasing, Record<string, Record<string, unknown>>>, meta?: Record<string, string | undefined> | undefined);
-}
-export declare class ASFFResults {
-    data: Record<string, Record<string, unknown>[]>;
-    meta: Record<string, string | undefined> | undefined;
-    supportingDocs: Map<SpecialCasing, Record<string, Record<string, unknown>>>;
-    constructor(asffJson: string, securityhubStandardsJsonArray?: undefined | string[], meta?: Record<string, string | undefined> | undefined);
-    toHdf(): Record<string, ExecJSON.Execution>;
-}
-//# sourceMappingURL=asff-mapper.d.ts.map

package/lib/src/asff-mapper/asff-mapper.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"asff-mapper.d.ts","sourceRoot":"","sources":["../../../src/asff-mapper/asff-mapper.ts"],"names":[],"mappings":"AAKA,OAAO,EAAC,QAAQ,EAAC,MAAM,UAAU,CAAC;AAGlC,OAAO,EAAC,aAAa,EAA+B,MAAM,mBAAmB,CAAC;AA0B9E,oBAAY,aAAa;IACvB,SAAS,oBAAoB;IAC7B,eAAe,yBAAyB;IACxC,SAAS,kBAAkB;IAC3B,SAAS,kBAAkB;IAC3B,OAAO,YAAY;IACnB,WAAW,qBAAqB;IAChC,KAAK,eAAe;IACpB,aAAa,uBAAuB;IACpC,OAAO,YAAY;CACpB;AAoND,wBAAgB,WAAW,CACzB,OAAO,EAAE,UAAU,EACnB,KAAK,EAAE,OAAO,EAAE,EAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,QAAQ,CAAC,OAAO,EAAE,CAyBpB;AAoCD,qBAAa,UAAW,SAAQ,aAAa;IAC3C,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG,SAAS,CAAC;IACrD,cAAc,EAAE,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IAE5E,eAAe;;;;;sCAKa,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;;;;;;;;;mCA2B1B,MAAM;;;;mCAMN,MAAM;;;;;;;;;;;;;;;;;2CAoBI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAG,MAAM;;;2CAUhC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAG,MAAM;;;2CAUhC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAG,MAAM;;;2CAUhC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAG,MAAM;;;2CA2B5C,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC/B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS;;+CASb,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAG,MAAM,EAAE;;;+CAkBlC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAG,MAAM,EAAE;;;;;;6CAoBlC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAG,MAAM;;;;;2CAiB3C,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC/B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;;;;;;+CAeb,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC/B,QAAQ,CAAC,mBAAmB;;;+CAgCR,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAG,MAAM;;2CAoC9C,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC/B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;;+CAqDD,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAG,MAAM;;;;;;MAWrE;IAEF,YAAY,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS;IAsBlD,WAAW,IAAI,IAAI;gBAajB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,cAAc,EAAE,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,EAC3E,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG,SAAqB;CAOnE;AAID,qBAAa,WAAW;IACtB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IAChD,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG,SAAS,CAAC;IACrD,cAAc,EAAE,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;gBAE1E,QAAQ,EAAE,MAAM,EAChB,6BAA6B,GAAE,SAAS,GAAG,MAAM,EAAc,EAC/D,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG,SAAqB;IAsClE,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,SAAS,CAAC;CAkC5C"}