@mitre/hdf-converters 2.13.0 → 3.0.0

package/lib/src/asff-mapper/case-previously-hdf.js

@@ -1,239 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.getPreviouslyHDF = getPreviouslyHDF;
-const html_entities_1 = require("html-entities");
-const inspecjs_1 = require("inspecjs");
-const _ = __importStar(require("lodash"));
-const global_1 = require("../utils/global");
-const asff_mapper_1 = require("./asff-mapper");
-function replaceTypesSlashes(type) {
-    if (!_.isString(type)) {
-        return type;
-    }
-    return type.replace(global_1.FROM_ASFF_TYPES_SLASH_REPLACEMENT, '/');
-}
-function objectifyTypesArray(typesArray) {
-    if (!Array.isArray(typesArray)) {
-        typesArray = _.get(typesArray, 'FindingProviderFields.Types');
-    }
-    const groupedTypes = _.groupBy(typesArray, (typeString) => typeString.split('/').slice(0, -1).join('/'));
-    const ret = {};
-    for (const [typeAndAttribute, values] of Object.entries(groupedTypes)) {
-        _.merge(ret, (() => {
-            const [type, attribute] = typeAndAttribute.split('/');
-            let parsed = replaceTypesSlashes(values.map((v) => v.split('/').slice(-1)).join(''));
-            try {
-                parsed = JSON.parse(parsed);
-            }
-            catch { }
-            return { [type]: { [attribute]: parsed } };
-        })());
-    }
-    return ret;
-}
-function findExecutionFindingIndex(asffOrFindings, asffFindingToMatch) {
-    if (asffFindingToMatch) {
-        const targetToMatch = asffFindingToMatch.Id.split('/')[0];
-        return _.findIndex(Array.isArray(asffOrFindings)
-            ? asffOrFindings
-            : _.get(asffOrFindings, 'Findings'), (finding) => _.get(finding, 'Id').split('/').length === 2 &&
-            _.get(finding, 'Id').startsWith(targetToMatch));
-    }
-    return _.findIndex(Array.isArray(asffOrFindings)
-        ? asffOrFindings
-        : _.get(asffOrFindings, 'Findings'), (finding) => _.get(finding, 'Id').split('/').length === 2);
-}
-function preprocessingASFF(asff) {
-    const clone = _.cloneDeep(asff);
-    const index = findExecutionFindingIndex(clone);
-    _.pullAt(_.get(clone, 'Findings'), index);
-    return clone;
-}
-function supportingDocs(input) {
-    const [asff, docs] = input;
-    const index = findExecutionFindingIndex(asff);
-    const docsClone = _.cloneDeep(docs);
-    docsClone.set(asff_mapper_1.SpecialCasing.PreviouslyHDF, {
-        execution: _.get(asff, `Findings[${index}]`)
-    });
-    return docsClone;
-}
-function productName(findings) {
-    const finding = Array.isArray(findings) ? findings[0] : findings;
-    const name = _.get(finding, 'Id');
-    return (0, html_entities_1.encode)(name.split('/').slice(0, 2).join(' - '));
-}
-function titlePrefix() {
-    return '';
-}
-function code(group) {
-    return group[0].code || '';
-}
-function waiverData(group) {
-    return group[0].waiver_data || {};
-}
-function filename(findingInfo) {
-    const index = findExecutionFindingIndex(findingInfo[1], findingInfo[0]);
-    const target = replaceTypesSlashes(_.get(findingInfo[1][index], 'Id').split('/')[0]);
-    const finding = findingInfo[0];
-    return `${_.get(objectifyTypesArray(finding), 'File.Input')}-${target}.json`;
-}
-function getCodeForProfileLayer(finding, profileName) {
-    const profileLayerToCodeMapping = {};
-    _.get(finding, 'Resources')
-        .find((resource) => resource.Type === 'AwsIamRole')
-        ?.Details?.AwsIamRole?.AssumeRolePolicyDocument.split('=========================================================\n# Profile name: ')
-        .filter((codeLayer) => codeLayer)
-        .forEach((codeLayer) => {
-        const [profileLevel, code] = codeLayer.split('\n=========================================================\n\n');
-        profileLayerToCodeMapping[profileLevel] = code
-            .split('Test Description:')[0]
-            .trim();
-    });
-    if (profileName in profileLayerToCodeMapping) {
-        return profileLayerToCodeMapping[profileName];
-    }
-    else {
-        return '';
-    }
-}
-function mapping(context) {
-    const execution = _.get(context.supportingDocs.get(asff_mapper_1.SpecialCasing.PreviouslyHDF), 'execution');
-    const executionTypes = objectifyTypesArray(execution);
-    const profileNames = Object.keys(executionTypes || {}).filter((type) => !['MITRE', 'File', 'Execution', 'HDF2ASFF-converter'].includes(type));
-    return {
-        shortcircuit: true,
-        platform: {
-            ..._.get(executionTypes, 'Execution.platform'),
-            target_id: (context.supportingDocs.get(asff_mapper_1.SpecialCasing.PreviouslyHDF)?.execution
-                .Id).split('/')[0]
-        },
-        version: _.get(executionTypes, 'Execution.version'),
-        statistics: _.get(executionTypes, 'Execution.statistics'),
-        profiles: _.map(profileNames, (profileName, index) => {
-            // order could be incorrect since we're only doing it via index instead of mapping the depends tree properly
-            return {
-                name: _.get(executionTypes, `${profileName}.name`),
-                ...(0, global_1.conditionallyProvideAttribute)('version', _.get(executionTypes, `${profileName}.version`), _.has(executionTypes, `${profileName}.version`)),
-                ...(0, global_1.conditionallyProvideAttribute)('title', _.get(executionTypes, `${profileName}.title`), _.has(executionTypes, `${profileName}.title`)),
-                ...(0, global_1.conditionallyProvideAttribute)('maintainer', _.get(executionTypes, `${profileName}.maintainer`), _.has(executionTypes, `${profileName}.maintainer`)),
-                ...(0, global_1.conditionallyProvideAttribute)('summary', _.get(executionTypes, `${profileName}.summary`), _.has(executionTypes, `${profileName}.summary`)),
-                ...(0, global_1.conditionallyProvideAttribute)('license', _.get(executionTypes, `${profileName}.license`), _.has(executionTypes, `${profileName}.license`)),
-                ...(0, global_1.conditionallyProvideAttribute)('copyright', _.get(executionTypes, `${profileName}.copyright`), _.has(executionTypes, `${profileName}.copyright`)),
-                ...(0, global_1.conditionallyProvideAttribute)('copyright_email', _.get(executionTypes, `${profileName}.copyright_email`), _.has(executionTypes, `${profileName}.copyright_email`)),
-                supports: _.get(executionTypes, `${profileName}.supports`, []),
-                attributes: _.get(executionTypes, `${profileName}.attributes`, []),
-                ...(0, global_1.conditionallyProvideAttribute)('depends', _.get(executionTypes, `${profileName}.depends`), _.has(executionTypes, `${profileName}.depends`)),
-                groups: [],
-                ...(0, global_1.conditionallyProvideAttribute)('status', _.get(executionTypes, `${profileName}.status`), _.has(executionTypes, `${profileName}.status`)),
-                ...(0, global_1.conditionallyProvideAttribute)('description', _.get(executionTypes, `${profileName}.description`), _.has(executionTypes, `${profileName}.description`)),
-                ...(0, global_1.conditionallyProvideAttribute)('inspec_version', _.get(executionTypes, `${profileName}.inspec_version`), _.has(executionTypes, `${profileName}.inspec_version`)),
-                ...(0, global_1.conditionallyProvideAttribute)('parent_profile', _.get(executionTypes, `${profileName}.parent_profile`), _.has(executionTypes, `${profileName}.parent_profile`)),
-                ...(0, global_1.conditionallyProvideAttribute)('skip_message', _.get(executionTypes, `${profileName}.skip_message`), _.has(executionTypes, `${profileName}.skip_message`)),
-                ...(0, global_1.conditionallyProvideAttribute)('status_message', _.get(executionTypes, `${profileName}.status_message`), _.has(executionTypes, `${profileName}.status_message`)),
-                controls: (0, asff_mapper_1.consolidate)(context, (() => {
-                    return _.map(_.get(context.data, 'Findings'), (finding) => {
-                        const findingTypes = objectifyTypesArray(finding);
-                        return {
-                            id: _.get(findingTypes, 'Control.ID'),
-                            ...(0, global_1.conditionallyProvideAttribute)('title', _.get(findingTypes, 'Control.Title'), _.has(findingTypes, 'Control.Title')),
-                            ...(0, global_1.conditionallyProvideAttribute)('desc', _.get(findingTypes, 'Control.Desc'), _.has(findingTypes, 'Control.Desc')),
-                            impact: _.get(findingTypes, 'Control.Impact'),
-                            tags: {
-                                ..._.omit(_.get(findingTypes, 'Tags'), ['nist']),
-                                nist: (() => {
-                                    const nisttags = _.get(findingTypes, 'Tags.nist');
-                                    if (nisttags === undefined || nisttags.length === 0) {
-                                        return global_1.DEFAULT_STATIC_CODE_ANALYSIS_NIST_TAGS;
-                                    }
-                                    return nisttags;
-                                })()
-                            },
-                            descriptions: _.map(Object.entries(_.get(findingTypes, 'Descriptions') || {}), ([key, value]) => ({ label: key, data: value })),
-                            refs: _.get(findingTypes, 'Control.Refs', []),
-                            source_location: _.get(findingTypes, 'Control.Source_Location', {}),
-                            ...(0, global_1.conditionallyProvideAttribute)('waiver_data', _.get(findingTypes, 'Control.Waiver_Data'), _.has(findingTypes, 'Control.Waiver_Data')),
-                            code: getCodeForProfileLayer(finding, profileName), // empty string for now but gonna need to extract out of here per profile
-                            // very brittle since depends on profile indexes instead of finding the baseline profile - need to do research, but could be as simple as finding the profile without any values in its depends array
-                            results: (() => {
-                                if (index !== profileNames.length - 1) {
-                                    return [];
-                                }
-                                const ret = [
-                                    {
-                                        code_desc: _.get(findingTypes, 'Segment.code_desc'),
-                                        start_time: _.get(findingTypes, 'Segment.start_time'),
-                                        ..._.omit(_.get(findingTypes, 'Segment'), ['code_desc', 'start_time'])
-                                    }
-                                ];
-                                return _.has(findingTypes, 'HDF2ASFF-converter.warning')
-                                    ? ret.concat([
-                                        {
-                                            code_desc: '',
-                                            start_time: '',
-                                            status: inspecjs_1.ExecJSON.ControlResultStatus.Skipped,
-                                            skip_message: 'Warning: Entry was truncated when converted to ASFF (AWS Security Hub)'
-                                        }
-                                    ])
-                                    : ret;
-                            })()
-                        };
-                    });
-                })(), context.data),
-                sha256: _.get(executionTypes, `${profileName}.sha256`)
-            };
-        }),
-        ...(0, global_1.conditionallyProvideAttribute)('passthrough', _.has(executionTypes, 'HDF2ASFF-converter.warning')
-            ? [
-                _.get(executionTypes, 'Execution.passthrough'),
-                'Warning: Entry was truncated when converted to ASFF (AWS Security Hub)'
-            ]
-            : _.get(executionTypes, 'Execution.passthrough'), _.has(executionTypes, 'Execution.passthrough'))
-    };
-}
-function getPreviouslyHDF() {
-    return {
-        preprocessingASFF,
-        supportingDocs,
-        productName,
-        titlePrefix,
-        code,
-        waiverData,
-        filename,
-        mapping
-    };
-}
-//# sourceMappingURL=case-previously-hdf.js.map

package/lib/src/asff-mapper/case-previously-hdf.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"case-previously-hdf.js","sourceRoot":"","sources":["../../../src/asff-mapper/case-previously-hdf.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2XA,4CAWC;AAtYD,iDAAqC;AACrC,uCAAkC;AAClC,0CAA4B;AAE5B,4CAIyB;AACzB,+CAAqE;AAErE,SAAS,mBAAmB,CAAI,IAAO;IACrC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC,OAAO,CAAC,0CAAiC,EAAE,GAAG,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,mBAAmB,CAC1B,UAA8C;IAE9C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,EAAE,6BAA6B,CAAa,CAAC;IAC5E,CAAC;IACD,MAAM,YAAY,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,UAAU,EAAE,EAAE,CACxD,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAC7C,CAAC;IACF,MAAM,GAAG,GAAG,EAAE,CAAC;IACf,KAAK,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QACtE,CAAC,CAAC,KAAK,CACL,GAAG,EACH,CAAC,GAA4B,EAAE;YAC7B,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,GAAG,gBAAgB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACtD,IAAI,MAAM,GAAG,mBAAmB,CAC9B,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CACnD,CAAC;YACF,IAAI,CAAC;gBACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC9B,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;YACV,OAAO,EAAC,CAAC,IAAI,CAAC,EAAE,EAAC,CAAC,SAAS,CAAC,EAAE,MAAM,EAAC,EAAC,CAAC;QACzC,CAAC,CAAC,EAAE,CACL,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,yBAAyB,CAChC,cAAmE,EACnE,kBAAiC;IAEjC,IAAI,kBAAkB,EAAE,CAAC;QACvB,MAAM,aAAa,GAAG,kBAAkB,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1D,OAAO,CAAC,CAAC,SAAS,CAChB,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC;YAC3B,CAAC,CAAC,cAAc;YAChB,CAAC,CAAE,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,UAAU,CAA+B,EACpE,CAAC,OAAO,EAAE,EAAE,CACT,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC;YACvD,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAY,CAAC,UAAU,CAAC,aAAa,CAAC,CAC7D,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,CAAC,SAAS,CAChB,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC;QAC3B,CAAC,CAAC,cAAc;QAChB,CAAC,CAAE,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,UAAU,CAA+B,EACpE,CAAC,OAAO,EAAE,EAAE,CAAE,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,CACtE,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CACxB,IAA6B;IAE7B,MAAM,KAAK,GAAG,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,KAAK,GAAG,yBAAyB,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,CAA8B,EAAE,KAAK,CAAC,CAAC;IACvE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CACrB,KAGC;IAED,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,KAAK,CAAC;IAC3B,MAAM,KAAK,GAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACpC,SAAS,CAAC,GAAG,CAAC,2BAAa,CAAC,aAAa,EAAE;QACzC,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,YAAY,KAAK,GAAG,CAA4B;KACxE,CAAC,CAAC;IACH,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,WAAW,CAClB,QAA6D;IAE7D,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IACjE,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAW,CAAC;IAC5C,OAAO,IAAA,sBAAM,EAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,WAAW;IAClB,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,IAAI,CAAC,KAAyB;IACrC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;AAC7B,CAAC;AAED,SAAS,UAAU,CAAC,KAAyB;IAC3C,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC;AACpC,CAAC;AAED,SAAS,QAAQ,CACf,WAAiE;IAEjE,MAAM,KAAK,GAAG,yBAAyB,CACrC,WAAW,CAAC,CAAC,CAAC,EACd,WAAW,CAAC,CAAC,CAAiB,CAC/B,CAAC;IAEF,MAAM,MAAM,GAAG,mBAAmB,CAC/B,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,IAAI,CAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAC7D,CAAC;IACF,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;IAC/B,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAAC,OAAO,CAAC,EAAE,YAAY,CAAC,IAAI,MAAM,OAAO,CAAC;AAC/E,CAAC;AAED,SAAS,sBAAsB,CAC7B,OAAgC,EAChC,WAAmB;IAEnB,MAAM,yBAAyB,GAA2B,EAAE,CAAC;IAE3D,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,WAAW,CAO3B;SACE,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,KAAK,YAAY,CAAC;QACnD,EAAE,OAAO,EAAE,UAAU,EAAE,wBAAwB,CAAC,KAAK,CACnD,6EAA6E,CAC9E;SACA,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC;SAChC,OAAO,CAAC,CAAC,SAAS,EAAE,EAAE;QACrB,MAAM,CAAC,YAAY,EAAE,IAAI,CAAC,GAAG,SAAS,CAAC,KAAK,CAC1C,iEAAiE,CAClE,CAAC;QACF,yBAAyB,CAAC,YAAY,CAAC,GAAG,IAAI;aAC3C,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;aAC7B,IAAI,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;IACL,IAAI,WAAW,IAAI,yBAAyB,EAAE,CAAC;QAC7C,OAAO,yBAAyB,CAAC,WAAW,CAAC,CAAC;IAChD,CAAC;SAAM,CAAC;QACN,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CACd,OAAmB;IAEnB,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CACrB,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,2BAAa,CAAC,aAAa,CAAC,EACvD,WAAW,CACZ,CAAC;IACF,MAAM,cAAc,GAAG,mBAAmB,CACxC,SAAoC,CACrC,CAAC;IACF,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,MAAM,CAC3D,CAAC,IAAI,EAAE,EAAE,CACP,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,oBAAoB,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CACvE,CAAC;IACF,OAAO;QACL,YAAY,EAAE,IAAI;QAClB,QAAQ,EAAE;YACR,GAAI,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,oBAAoB,CAAuB;YACrE,SAAS,EAAE,CACT,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,2BAAa,CAAC,aAAa,CAAC,EAAE,SAAS;iBAC/D,EACJ,CAAA,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;SAChB;QACD,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,mBAAmB,CAAC;QACnD,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,sBAAsB,CAAC;QACzD,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,WAAmB,EAAE,KAAa,EAAE,EAAE;YACnE,4GAA4G;YAC5G,OAAO;gBACL,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,WAAW,OAAO,CAAC;gBAClD,GAAG,IAAA,sCAA6B,EAC9B,SAAS,EACT,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,WAAW,UAAU,CAAC,EAC/C,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,WAAW,UAAU,CAAC,CAChD;gBACD,GAAG,IAAA,sCAA6B,EAC9B,OAAO,EACP,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,WAAW,QAAQ,CAAC,EAC7C,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,WAAW,QAAQ,CAAC,CAC9C;gBACD,GAAG,IAAA,sCAA6B,EAC9B,YAAY,EACZ,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,WAAW,aAAa,CAAC,EAClD,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,WAAW,aAAa,CAAC,CACnD;gBACD,GAAG,IAAA,sCAA6B,EAC9B,SAAS,EACT,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,WAAW,UAAU,CAAC,EAC/C,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,WAAW,UAAU,CAAC,CAChD;gBACD,GAAG,IAAA,sCAA6B,EAC9B,SAAS,EACT,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,WAAW,UAAU,CAAC,EAC/C,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,WAAW,UAAU,CAAC,CAChD;gBACD,GAAG,IAAA,sCAA6B,EAC9B,WAAW,EACX,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,WAAW,YAAY,CAAC,EACjD,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,WAAW,YAAY,CAAC,CAClD;gBACD,GAAG,IAAA,sCAA6B,EAC9B,iBAAiB,EACjB,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,WAAW,kBAAkB,CAAC,EACvD,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,WAAW,kBAAkB,CAAC,CACxD;gBACD,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,WAAW,WAAW,EAAE,EAAE,CAAC;gBAC9D,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,WAAW,aAAa,EAAE,EAAE,CAAC;gBAClE,GAAG,IAAA,sCAA6B,EAC9B,SAAS,EACT,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,WAAW,UAAU,CAAC,EAC/C,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,WAAW,UAAU,CAAC,CAChD;gBACD,MAAM,EAAE,EAAE;gBACV,GAAG,IAAA,sCAA6B,EAC9B,QAAQ,EACR,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,WAAW,SAAS,CAAC,EAC9C,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,WAAW,SAAS,CAAC,CAC/C;gBACD,GAAG,IAAA,sCAA6B,EAC9B,aAAa,EACb,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,WAAW,cAAc,CAAC,EACnD,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,WAAW,cAAc,CAAC,CACpD;gBACD,GAAG,IAAA,sCAA6B,EAC9B,gBAAgB,EAChB,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,WAAW,iBAAiB,CAAC,EACtD,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,WAAW,iBAAiB,CAAC,CACvD;gBACD,GAAG,IAAA,sCAA6B,EAC9B,gBAAgB,EAChB,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,WAAW,iBAAiB,CAAC,EACtD,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,WAAW,iBAAiB,CAAC,CACvD;gBACD,GAAG,IAAA,sCAA6B,EAC9B,cAAc,EACd,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,WAAW,eAAe,CAAC,EACpD,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,WAAW,eAAe,CAAC,CACrD;gBACD,GAAG,IAAA,sCAA6B,EAC9B,gBAAgB,EAChB,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,WAAW,iBAAiB,CAAC,EACtD,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,WAAW,iBAAiB,CAAC,CACvD;gBACD,QAAQ,EAAE,IAAA,yBAAW,EACnB,OAAO,EACP,CAAC,GAAuB,EAAE;oBACxB,OAAO,CAAC,CAAC,GAAG,CACV,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,CAA8B,EAC5D,CAAC,OAAgC,EAAE,EAAE;wBACnC,MAAM,YAAY,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;wBAClD,OAAO;4BACL,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,YAAY,EAAE,YAAY,CAAC;4BACrC,GAAG,IAAA,sCAA6B,EAC9B,OAAO,EACP,CAAC,CAAC,GAAG,CAAC,YAAY,EAAE,eAAe,CAAC,EACpC,CAAC,CAAC,GAAG,CAAC,YAAY,EAAE,eAAe,CAAC,CACrC;4BACD,GAAG,IAAA,sCAA6B,EAC9B,MAAM,EACN,CAAC,CAAC,GAAG,CAAC,YAAY,EAAE,cAAc,CAAC,EACnC,CAAC,CAAC,GAAG,CAAC,YAAY,EAAE,cAAc,CAAC,CACpC;4BACD,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,YAAY,EAAE,gBAAgB,CAAC;4BAC7C,IAAI,EAAE;gCACJ,GAAG,CAAC,CAAC,IAAI,CACP,CAAC,CAAC,GAAG,CAAC,YAAY,EAAE,MAAM,CAA8B,EACxD,CAAC,MAAM,CAAC,CACT;gCACD,IAAI,EAAE,CAAC,GAAa,EAAE;oCACpB,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,YAAY,EAAE,WAAW,CAEpC,CAAC;oCACb,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;wCACpD,OAAO,+CAAsC,CAAC;oCAChD,CAAC;oCACD,OAAO,QAAQ,CAAC;gCAClB,CAAC,CAAC,EAAE;6BACL;4BACD,YAAY,EAAE,CAAC,CAAC,GAAG,CACjB,MAAM,CAAC,OAAO,CACX,CAAC,CAAC,GAAG,CAAC,YAAY,EAAE,cAAc,CAGjC,IAAI,EAAE,CACT,EACD,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAC,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAC,CAAC,CAC9C;4BACD,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,YAAY,EAAE,cAAc,EAAE,EAAE,CAAC;4BAC7C,eAAe,EAAE,CAAC,CAAC,GAAG,CACpB,YAAY,EACZ,yBAAyB,EACzB,EAAE,CACH;4BACD,GAAG,IAAA,sCAA6B,EAC9B,aAAa,EACb,CAAC,CAAC,GAAG,CAAC,YAAY,EAAE,qBAAqB,CAAC,EAC1C,CAAC,CAAC,GAAG,CAAC,YAAY,EAAE,qBAAqB,CAAC,CAC3C;4BACD,IAAI,EAAE,sBAAsB,CAAC,OAAO,EAAE,WAAW,CAAC,EAAE,yEAAyE;4BAC7H,qMAAqM;4BACrM,OAAO,EAAE,CAAC,GAAG,EAAE;gCACb,IAAI,KAAK,KAAK,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oCACtC,OAAO,EAAE,CAAC;gCACZ,CAAC;gCACD,MAAM,GAAG,GAAG;oCACV;wCACE,SAAS,EAAE,CAAC,CAAC,GAAG,CACd,YAAY,EACZ,mBAAmB,CACV;wCACX,UAAU,EAAE,CAAC,CAAC,GAAG,CACf,YAAY,EACZ,oBAAoB,CACX;wCACX,GAAG,CAAC,CAAC,IAAI,CACP,CAAC,CAAC,GAAG,CAAC,YAAY,EAAE,SAAS,CAG5B,EACD,CAAC,WAAW,EAAE,YAAY,CAAC,CAC5B;qCACwB;iCAC5B,CAAC;gCAEF,OAAO,CAAC,CAAC,GAAG,CAAC,YAAY,EAAE,4BAA4B,CAAC;oCACtD,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;wCACT;4CACE,SAAS,EAAE,EAAE;4CACb,UAAU,EAAE,EAAE;4CACd,MAAM,EAAE,mBAAQ,CAAC,mBAAmB,CAAC,OAAO;4CAC5C,YAAY,EACV,wEAAwE;yCAC3E;qCACF,CAAC;oCACJ,CAAC,CAAC,GAAG,CAAC;4BACV,CAAC,CAAC,EAAE;yBACe,CAAC;oBACxB,CAAC,CACF,CAAC;gBACJ,CAAC,CAAC,EAAE,EACJ,OAAO,CAAC,IAAI,CACb;gBACD,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,WAAW,SAAS,CAAC;aACnC,CAAC;QACxB,CAAC,CAAC;QACF,GAAG,IAAA,sCAA6B,EAC9B,aAAa,EACb,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,4BAA4B,CAAC;YACjD,CAAC,CAAC;gBACE,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,uBAAuB,CAAC;gBAC9C,wEAAwE;aACzE;YACH,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,uBAAuB,CAAC,EAClD,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,uBAAuB,CAAC,CAC/C;KACkD,CAAC;AACxD,CAAC;AAED,SAAgB,gBAAgB;IAC9B,OAAO;QACL,iBAAiB;QACjB,cAAc;QACd,WAAW;QACX,WAAW;QACX,IAAI;QACJ,UAAU;QACV,QAAQ;QACR,OAAO;KACR,CAAC;AACJ,CAAC","sourcesContent":["import {encode} from 'html-entities';\nimport {ExecJSON} from 'inspecjs';\nimport * as _ from 'lodash';\nimport {ILookupPath, MappedTransform} from '../base-converter';\nimport {\n  conditionallyProvideAttribute,\n  DEFAULT_STATIC_CODE_ANALYSIS_NIST_TAGS,\n  FROM_ASFF_TYPES_SLASH_REPLACEMENT\n} from '../utils/global';\nimport {ASFFMapper, consolidate, SpecialCasing} from './asff-mapper';\n\nfunction replaceTypesSlashes<T>(type: T): T | string {\n  if (!_.isString(type)) {\n    return type;\n  }\n  return type.replace(FROM_ASFF_TYPES_SLASH_REPLACEMENT, '/');\n}\n\nfunction objectifyTypesArray(\n  typesArray: string[] | Record<string, unknown>\n): Record<string, unknown> {\n  if (!Array.isArray(typesArray)) {\n    typesArray = _.get(typesArray, 'FindingProviderFields.Types') as string[];\n  }\n  const groupedTypes = _.groupBy(typesArray, (typeString) =>\n    typeString.split('/').slice(0, -1).join('/')\n  );\n  const ret = {};\n  for (const [typeAndAttribute, values] of Object.entries(groupedTypes)) {\n    _.merge(\n      ret,\n      ((): Record<string, unknown> => {\n        const [type, attribute] = typeAndAttribute.split('/');\n        let parsed = replaceTypesSlashes(\n          values.map((v) => v.split('/').slice(-1)).join('')\n        );\n        try {\n          parsed = JSON.parse(parsed);\n        } catch {}\n        return {[type]: {[attribute]: parsed}};\n      })()\n    );\n  }\n  return ret;\n}\n\nfunction findExecutionFindingIndex(\n  asffOrFindings: Record<string, unknown> | Record<string, unknown>[],\n  asffFindingToMatch?: {Id: string}\n): number {\n  if (asffFindingToMatch) {\n    const targetToMatch = asffFindingToMatch.Id.split('/')[0];\n    return _.findIndex(\n      Array.isArray(asffOrFindings)\n        ? asffOrFindings\n        : (_.get(asffOrFindings, 'Findings') as Record<string, unknown>[]),\n      (finding) =>\n        (_.get(finding, 'Id') as string).split('/').length === 2 &&\n        (_.get(finding, 'Id') as string).startsWith(targetToMatch)\n    );\n  }\n  return _.findIndex(\n    Array.isArray(asffOrFindings)\n      ? asffOrFindings\n      : (_.get(asffOrFindings, 'Findings') as Record<string, unknown>[]),\n    (finding) => (_.get(finding, 'Id') as string).split('/').length === 2\n  );\n}\n\nfunction preprocessingASFF(\n  asff: Record<string, unknown>\n): Record<string, unknown> {\n  const clone = _.cloneDeep(asff);\n  const index = findExecutionFindingIndex(clone);\n  _.pullAt(_.get(clone, 'Findings') as Record<string, unknown>[], index);\n  return clone;\n}\n\nfunction supportingDocs(\n  input: [\n    Record<string, unknown>,\n    Map<SpecialCasing, Record<string, Record<string, unknown>>>\n  ]\n): Map<SpecialCasing, Record<string, Record<string, unknown>>> {\n  const [asff, docs] = input;\n  const index = findExecutionFindingIndex(asff);\n  const docsClone = _.cloneDeep(docs);\n  docsClone.set(SpecialCasing.PreviouslyHDF, {\n    execution: _.get(asff, `Findings[${index}]`) as Record<string, unknown>\n  });\n  return docsClone;\n}\n\nfunction productName(\n  findings: Record<string, unknown> | Record<string, unknown>[]\n): string {\n  const finding = Array.isArray(findings) ? findings[0] : findings;\n  const name = _.get(finding, 'Id') as string;\n  return encode(name.split('/').slice(0, 2).join(' - '));\n}\n\nfunction titlePrefix(): string {\n  return '';\n}\n\nfunction code(group: ExecJSON.Control[]): string {\n  return group[0].code || '';\n}\n\nfunction waiverData(group: ExecJSON.Control[]): ExecJSON.ControlWaiverData {\n  return group[0].waiver_data || {};\n}\n\nfunction filename(\n  findingInfo: [Record<string, unknown>, Record<string, unknown>[]]\n): string {\n  const index = findExecutionFindingIndex(\n    findingInfo[1],\n    findingInfo[0] as {Id: string}\n  );\n\n  const target = replaceTypesSlashes(\n    (_.get(findingInfo[1][index], 'Id') as string).split('/')[0]\n  );\n  const finding = findingInfo[0];\n  return `${_.get(objectifyTypesArray(finding), 'File.Input')}-${target}.json`;\n}\n\nfunction getCodeForProfileLayer(\n  finding: Record<string, unknown>,\n  profileName: string\n) {\n  const profileLayerToCodeMapping: Record<string, string> = {};\n  (\n    _.get(finding, 'Resources') as {\n      Type: string;\n      Id: string;\n      Details?: {\n        AwsIamRole?: {AssumeRolePolicyDocument: string};\n      };\n    }[]\n  )\n    .find((resource) => resource.Type === 'AwsIamRole')\n    ?.Details?.AwsIamRole?.AssumeRolePolicyDocument.split(\n      '=========================================================\\n# Profile name: '\n    )\n    .filter((codeLayer) => codeLayer)\n    .forEach((codeLayer) => {\n      const [profileLevel, code] = codeLayer.split(\n        '\\n=========================================================\\n\\n'\n      );\n      profileLayerToCodeMapping[profileLevel] = code\n        .split('Test Description:')[0]\n        .trim();\n    });\n  if (profileName in profileLayerToCodeMapping) {\n    return profileLayerToCodeMapping[profileName];\n  } else {\n    return '';\n  }\n}\n\nfunction mapping(\n  context: ASFFMapper\n): MappedTransform<ExecJSON.Execution, ILookupPath> {\n  const execution = _.get(\n    context.supportingDocs.get(SpecialCasing.PreviouslyHDF),\n    'execution'\n  );\n  const executionTypes = objectifyTypesArray(\n    execution as Record<string, unknown>\n  );\n  const profileNames = Object.keys(executionTypes || {}).filter(\n    (type) =>\n      !['MITRE', 'File', 'Execution', 'HDF2ASFF-converter'].includes(type)\n  );\n  return {\n    shortcircuit: true,\n    platform: {\n      ...(_.get(executionTypes, 'Execution.platform') as ExecJSON.Platform),\n      target_id: (\n        context.supportingDocs.get(SpecialCasing.PreviouslyHDF)?.execution\n          .Id as string\n      ).split('/')[0]\n    },\n    version: _.get(executionTypes, 'Execution.version'),\n    statistics: _.get(executionTypes, 'Execution.statistics'),\n    profiles: _.map(profileNames, (profileName: string, index: number) => {\n      // order could be incorrect since we're only doing it via index instead of mapping the depends tree properly\n      return {\n        name: _.get(executionTypes, `${profileName}.name`),\n        ...conditionallyProvideAttribute(\n          'version',\n          _.get(executionTypes, `${profileName}.version`),\n          _.has(executionTypes, `${profileName}.version`)\n        ),\n        ...conditionallyProvideAttribute(\n          'title',\n          _.get(executionTypes, `${profileName}.title`),\n          _.has(executionTypes, `${profileName}.title`)\n        ),\n        ...conditionallyProvideAttribute(\n          'maintainer',\n          _.get(executionTypes, `${profileName}.maintainer`),\n          _.has(executionTypes, `${profileName}.maintainer`)\n        ),\n        ...conditionallyProvideAttribute(\n          'summary',\n          _.get(executionTypes, `${profileName}.summary`),\n          _.has(executionTypes, `${profileName}.summary`)\n        ),\n        ...conditionallyProvideAttribute(\n          'license',\n          _.get(executionTypes, `${profileName}.license`),\n          _.has(executionTypes, `${profileName}.license`)\n        ),\n        ...conditionallyProvideAttribute(\n          'copyright',\n          _.get(executionTypes, `${profileName}.copyright`),\n          _.has(executionTypes, `${profileName}.copyright`)\n        ),\n        ...conditionallyProvideAttribute(\n          'copyright_email',\n          _.get(executionTypes, `${profileName}.copyright_email`),\n          _.has(executionTypes, `${profileName}.copyright_email`)\n        ),\n        supports: _.get(executionTypes, `${profileName}.supports`, []),\n        attributes: _.get(executionTypes, `${profileName}.attributes`, []),\n        ...conditionallyProvideAttribute(\n          'depends',\n          _.get(executionTypes, `${profileName}.depends`),\n          _.has(executionTypes, `${profileName}.depends`)\n        ),\n        groups: [],\n        ...conditionallyProvideAttribute(\n          'status',\n          _.get(executionTypes, `${profileName}.status`),\n          _.has(executionTypes, `${profileName}.status`)\n        ),\n        ...conditionallyProvideAttribute(\n          'description',\n          _.get(executionTypes, `${profileName}.description`),\n          _.has(executionTypes, `${profileName}.description`)\n        ),\n        ...conditionallyProvideAttribute(\n          'inspec_version',\n          _.get(executionTypes, `${profileName}.inspec_version`),\n          _.has(executionTypes, `${profileName}.inspec_version`)\n        ),\n        ...conditionallyProvideAttribute(\n          'parent_profile',\n          _.get(executionTypes, `${profileName}.parent_profile`),\n          _.has(executionTypes, `${profileName}.parent_profile`)\n        ),\n        ...conditionallyProvideAttribute(\n          'skip_message',\n          _.get(executionTypes, `${profileName}.skip_message`),\n          _.has(executionTypes, `${profileName}.skip_message`)\n        ),\n        ...conditionallyProvideAttribute(\n          'status_message',\n          _.get(executionTypes, `${profileName}.status_message`),\n          _.has(executionTypes, `${profileName}.status_message`)\n        ),\n        controls: consolidate(\n          context,\n          ((): ExecJSON.Control[] => {\n            return _.map(\n              _.get(context.data, 'Findings') as Record<string, unknown>[],\n              (finding: Record<string, unknown>) => {\n                const findingTypes = objectifyTypesArray(finding);\n                return {\n                  id: _.get(findingTypes, 'Control.ID'),\n                  ...conditionallyProvideAttribute(\n                    'title',\n                    _.get(findingTypes, 'Control.Title'),\n                    _.has(findingTypes, 'Control.Title')\n                  ),\n                  ...conditionallyProvideAttribute(\n                    'desc',\n                    _.get(findingTypes, 'Control.Desc'),\n                    _.has(findingTypes, 'Control.Desc')\n                  ),\n                  impact: _.get(findingTypes, 'Control.Impact'),\n                  tags: {\n                    ..._.omit(\n                      _.get(findingTypes, 'Tags') as object | null | undefined,\n                      ['nist']\n                    ),\n                    nist: ((): string[] => {\n                      const nisttags = _.get(findingTypes, 'Tags.nist') as\n                        | undefined\n                        | string[];\n                      if (nisttags === undefined || nisttags.length === 0) {\n                        return DEFAULT_STATIC_CODE_ANALYSIS_NIST_TAGS;\n                      }\n                      return nisttags;\n                    })()\n                  },\n                  descriptions: _.map(\n                    Object.entries(\n                      (_.get(findingTypes, 'Descriptions') as Record<\n                        string,\n                        string\n                      >) || {}\n                    ),\n                    ([key, value]) => ({label: key, data: value})\n                  ),\n                  refs: _.get(findingTypes, 'Control.Refs', []),\n                  source_location: _.get(\n                    findingTypes,\n                    'Control.Source_Location',\n                    {}\n                  ),\n                  ...conditionallyProvideAttribute(\n                    'waiver_data',\n                    _.get(findingTypes, 'Control.Waiver_Data'),\n                    _.has(findingTypes, 'Control.Waiver_Data')\n                  ),\n                  code: getCodeForProfileLayer(finding, profileName), // empty string for now but gonna need to extract out of here per profile\n                  // very brittle since depends on profile indexes instead of finding the baseline profile - need to do research, but could be as simple as finding the profile without any values in its depends array\n                  results: (() => {\n                    if (index !== profileNames.length - 1) {\n                      return [];\n                    }\n                    const ret = [\n                      {\n                        code_desc: _.get(\n                          findingTypes,\n                          'Segment.code_desc'\n                        ) as string,\n                        start_time: _.get(\n                          findingTypes,\n                          'Segment.start_time'\n                        ) as string,\n                        ..._.omit(\n                          _.get(findingTypes, 'Segment') as Record<\n                            string,\n                            unknown\n                          >,\n                          ['code_desc', 'start_time']\n                        )\n                      } as ExecJSON.ControlResult\n                    ];\n\n                    return _.has(findingTypes, 'HDF2ASFF-converter.warning')\n                      ? ret.concat([\n                          {\n                            code_desc: '',\n                            start_time: '',\n                            status: ExecJSON.ControlResultStatus.Skipped,\n                            skip_message:\n                              'Warning: Entry was truncated when converted to ASFF (AWS Security Hub)'\n                          }\n                        ])\n                      : ret;\n                  })()\n                } as ExecJSON.Control;\n              }\n            );\n          })(),\n          context.data\n        ),\n        sha256: _.get(executionTypes, `${profileName}.sha256`)\n      } as ExecJSON.Profile;\n    }),\n    ...conditionallyProvideAttribute(\n      'passthrough',\n      _.has(executionTypes, 'HDF2ASFF-converter.warning')\n        ? [\n            _.get(executionTypes, 'Execution.passthrough'),\n            'Warning: Entry was truncated when converted to ASFF (AWS Security Hub)'\n          ]\n        : _.get(executionTypes, 'Execution.passthrough'),\n      _.has(executionTypes, 'Execution.passthrough')\n    )\n  } as MappedTransform<ExecJSON.Execution, ILookupPath>;\n}\n\nexport function getPreviouslyHDF(): Record<string, (...inputs: any) => any> {\n  return {\n    preprocessingASFF,\n    supportingDocs,\n    productName,\n    titlePrefix,\n    code,\n    waiverData,\n    filename,\n    mapping\n  };\n}\n"]}

package/lib/src/asff-mapper/case-prowler.d.ts

@@ -1,2 +0,0 @@
-export declare function getProwler(): Record<string, (...inputs: any) => any>;
-//# sourceMappingURL=case-prowler.d.ts.map

package/lib/src/asff-mapper/case-prowler.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"case-prowler.d.ts","sourceRoot":"","sources":["../../../src/asff-mapper/case-prowler.ts"],"names":[],"mappings":"AAiCA,wBAAgB,UAAU,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,MAAM,EAAE,GAAG,KAAK,GAAG,CAAC,CASpE"}

package/lib/src/asff-mapper/case-prowler.js

@@ -1,69 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.getProwler = getProwler;
-const html_entities_1 = require("html-entities");
-const _ = __importStar(require("lodash"));
-const desc = () => ' ';
-function subfindingsCodeDesc(finding) {
-    return (0, html_entities_1.encode)(_.get(finding, 'Description'));
-}
-function findingId(finding) {
-    const generatorId = _.get(finding, 'GeneratorId');
-    const hyphenIndex = generatorId.indexOf('-');
-    return (0, html_entities_1.encode)(generatorId.slice(hyphenIndex + 1));
-}
-function productName(findings) {
-    const finding = Array.isArray(findings) ? findings[0] : findings;
-    return (0, html_entities_1.encode)(_.get(finding, 'ProductFields.ProviderName'));
-}
-function filename(findingInfo) {
-    return `${productName(findingInfo[1])}.json`;
-}
-function meta() {
-    return { name: 'Prowler', title: 'Prowler Findings' };
-}
-// eslint-disable-next-line @typescript-eslint/ban-types
-function getProwler() {
-    return {
-        subfindingsCodeDesc,
-        findingId,
-        productName,
-        desc,
-        filename,
-        meta
-    };
-}
-//# sourceMappingURL=case-prowler.js.map

package/lib/src/asff-mapper/case-prowler.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"case-prowler.js","sourceRoot":"","sources":["../../../src/asff-mapper/case-prowler.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiCA,gCASC;AA1CD,iDAAqC;AACrC,0CAA4B;AAE5B,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,GAAG,CAAC;AAEvB,SAAS,mBAAmB,CAAC,OAAgB;IAC3C,OAAO,IAAA,sBAAM,EAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,SAAS,CAAC,OAAgB;IACjC,MAAM,WAAW,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,aAAa,CAAsB,CAAC;IACvE,MAAM,WAAW,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7C,OAAO,IAAA,sBAAM,EAAC,WAAW,CAAC,KAAK,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,WAAW,CAClB,QAA6D;IAE7D,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IACjE,OAAO,IAAA,sBAAM,EAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,4BAA4B,CAAW,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,QAAQ,CACf,WAAiE;IAEjE,OAAO,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;AAC/C,CAAC;AAED,SAAS,IAAI;IACX,OAAO,EAAC,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,kBAAkB,EAAC,CAAC;AACtD,CAAC;AAED,wDAAwD;AACxD,SAAgB,UAAU;IACxB,OAAO;QACL,mBAAmB;QACnB,SAAS;QACT,WAAW;QACX,IAAI;QACJ,QAAQ;QACR,IAAI;KACL,CAAC;AACJ,CAAC","sourcesContent":["import {encode} from 'html-entities';\nimport * as _ from 'lodash';\n\nconst desc = () => ' ';\n\nfunction subfindingsCodeDesc(finding: unknown) {\n  return encode(_.get(finding, 'Description'));\n}\n\nfunction findingId(finding: unknown) {\n  const generatorId = _.get(finding, 'GeneratorId') as unknown as string;\n  const hyphenIndex = generatorId.indexOf('-');\n  return encode(generatorId.slice(hyphenIndex + 1));\n}\n\nfunction productName(\n  findings: Record<string, unknown> | Record<string, unknown>[]\n) {\n  const finding = Array.isArray(findings) ? findings[0] : findings;\n  return encode(_.get(finding, 'ProductFields.ProviderName') as string);\n}\n\nfunction filename(\n  findingInfo: [Record<string, unknown>, Record<string, unknown>[]]\n) {\n  return `${productName(findingInfo[1])}.json`;\n}\n\nfunction meta(): Record<string, string> {\n  return {name: 'Prowler', title: 'Prowler Findings'};\n}\n\n// eslint-disable-next-line @typescript-eslint/ban-types\nexport function getProwler(): Record<string, (...inputs: any) => any> {\n  return {\n    subfindingsCodeDesc,\n    findingId,\n    productName,\n    desc,\n    filename,\n    meta\n  };\n}\n"]}

package/lib/src/asff-mapper/case-security-hub.d.ts

@@ -1,2 +0,0 @@
-export declare function getSecurityHub(): Record<string, (...inputs: any) => any>;
-//# sourceMappingURL=case-security-hub.d.ts.map

package/lib/src/asff-mapper/case-security-hub.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"case-security-hub.d.ts","sourceRoot":"","sources":["../../../src/asff-mapper/case-security-hub.ts"],"names":[],"mappings":"AAsKA,wBAAgB,cAAc,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,MAAM,EAAE,GAAG,KAAK,GAAG,CAAC,CAUxE"}

package/lib/src/asff-mapper/case-security-hub.js

@@ -1,173 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.getSecurityHub = getSecurityHub;
-const html_entities_1 = require("html-entities");
-const _ = __importStar(require("lodash"));
-const AwsConfigMapping_1 = require("../mappings/AwsConfigMapping");
-const FINDING_STANDARDS_CONTROL_ARN = 'ProductFields.StandardsControlArn';
-function correspondingControl(controls, finding) {
-    return controls.find((control) => _.get(control, 'StandardsControlArn') ===
-        _.get(finding, FINDING_STANDARDS_CONTROL_ARN));
-}
-function securityhubSupportingDocs(standards) {
-    let controls;
-    try {
-        if (Array.isArray(standards)) {
-            controls = standards
-                .map((standard) => _.get(JSON.parse(standard), 'Controls'))
-                .flat();
-        }
-        else {
-            controls = null;
-        }
-    }
-    catch (error) {
-        throw new Error(`Invalid supporting docs for Security Hub:\nException: ${error}`);
-    }
-    const AWS_CONFIG_MAPPING = new AwsConfigMapping_1.AwsConfigMapping();
-    return {
-        controls,
-        awsConfigMapping: AWS_CONFIG_MAPPING
-    };
-}
-function findingId(finding, { controls = null }) {
-    let control;
-    if (controls !== null &&
-        (control = correspondingControl(controls, finding)) !== null) {
-        return (0, html_entities_1.encode)(_.get(control, 'ControlId'));
-    }
-    else if (_.has(finding, 'ProductFields.ControlId')) {
-        // AWS Standards
-        return _.get(finding, 'ProductFields.ControlId');
-    }
-    else if (_.has(finding, 'ProductFields.RuleId')) {
-        // CIS
-        return (0, html_entities_1.encode)(_.get(finding, 'ProductFields.RuleId'));
-    }
-    else {
-        return (0, html_entities_1.encode)(_.get(finding, 'GeneratorId')
-            .split('/')
-            .slice(-1)[0]);
-    }
-}
-function findingImpact(finding, { controls = null }) {
-    let impact;
-    let control;
-    if (controls !== null &&
-        (control = correspondingControl(controls, finding)) !== null) {
-        impact = _.get(control, 'SeverityRating');
-    }
-    else {
-        // severity is required, but must include either 'label' or 'normalized' internally with 'label' being preferred.  other values can be in here too such as the original severity rating.
-        impact =
-            _.get(finding, 'Severity.Label') ||
-                _.get(finding, 'Severity.Normalized') / 100.0;
-        // securityhub asff file does not contain accurate severity information by setting things that shouldn't be informational to informational: when additional context, i.e. standards, is not provided, set informational to medium.
-        if (typeof impact === 'string' && impact === 'INFORMATIONAL') {
-            impact = 'MEDIUM';
-        }
-    }
-    return impact;
-}
-function findingNistTag(finding, { awsConfigMapping }) {
-    if (_.get(finding, 'ProductFields.RelatedAWSResources:0/type') !==
-        'AWS::Config::ConfigRule') {
-        return [];
-    }
-    return awsConfigMapping.searchNIST([
-        _.get(finding, 'ProductFields.RelatedAWSResources:0/name')
-    ]);
-}
-function findingTitle(finding, { controls = null }) {
-    let control;
-    if (controls !== null &&
-        (control = correspondingControl(controls, finding)) !== null) {
-        return (0, html_entities_1.encode)(_.get(control, 'Title'));
-    }
-    else {
-        return (0, html_entities_1.encode)(_.get(finding, 'Title'));
-    }
-}
-function productName(findings) {
-    const finding = Array.isArray(findings) ? findings[0] : findings;
-    // `${_.get(findings[0], 'ProductFields.aws/securityhub/CompanyName')} ${_.get(findings[0], 'ProductFields.aws/securityhub/ProductName')}`
-    // not using above due to wanting to provide the standard's name instead
-    let standardName;
-    if (_.get(finding, 'Types[0]')
-        .split('/')
-        .slice(-1)[0]
-        .replace(/-/gi, ' ')
-        .toLowerCase() ===
-        _.get(finding, FINDING_STANDARDS_CONTROL_ARN)
-            .split('/')
-            .slice(-4)[0]
-            .replace(/-/gi, ' ')
-            .toLowerCase()) {
-        standardName = _.get(finding, 'Types[0]')
-            .split('/')
-            .slice(-1)[0]
-            .replace(/-/gi, ' ');
-    }
-    else {
-        standardName = _.get(finding, FINDING_STANDARDS_CONTROL_ARN)
-            .split('/')
-            .slice(-4)[0]
-            .replace(/-/gi, ' ')
-            .split(/\s+/)
-            .map((element) => {
-            return element.charAt(0).toUpperCase() + element.slice(1);
-        })
-            .join(' ');
-    }
-    return (0, html_entities_1.encode)(`${standardName} v${_.get(finding, FINDING_STANDARDS_CONTROL_ARN)
-        .split('/')
-        .slice(-2)[0]}`);
-}
-function filename(findingInfo) {
-    return `${productName(findingInfo[0])}.json`;
-}
-function getSecurityHub() {
-    return {
-        securityhubSupportingDocs,
-        findingId,
-        findingImpact,
-        findingNistTag,
-        findingTitle,
-        productName,
-        filename
-    };
-}
-//# sourceMappingURL=case-security-hub.js.map

package/lib/src/asff-mapper/case-security-hub.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"case-security-hub.js","sourceRoot":"","sources":["../../../src/asff-mapper/case-security-hub.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsKA,wCAUC;AAhLD,iDAAqC;AACrC,0CAA4B;AAC5B,mEAA8D;AAC9D,MAAM,6BAA6B,GAAG,mCAAmC,CAAC;AAE1E,SAAS,oBAAoB,CAAC,QAAmB,EAAE,OAAgB;IACjE,OAAO,QAAQ,CAAC,IAAI,CAClB,CAAC,OAAO,EAAE,EAAE,CACV,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,qBAAqB,CAAC;QACrC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,6BAA6B,CAAC,CAChD,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CAAC,SAA+B;IAChE,IAAI,QAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7B,QAAQ,GAAG,SAAS;iBACjB,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,UAAU,CAAC,CAAC;iBAC1D,IAAI,EAAE,CAAC;QACZ,CAAC;aAAM,CAAC;YACN,QAAQ,GAAG,IAAI,CAAC;QAClB,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,yDAAyD,KAAK,EAAE,CACjE,CAAC;IACJ,CAAC;IACD,MAAM,kBAAkB,GAAG,IAAI,mCAAgB,EAAE,CAAC;IAClD,OAAO;QACL,QAAQ;QACR,gBAAgB,EAAE,kBAAkB;KACrC,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAChB,OAAgB,EAChB,EAAC,QAAQ,GAAG,IAAI,EAA+B;IAE/C,IAAI,OAAO,CAAC;IACZ,IACE,QAAQ,KAAK,IAAI;QACjB,CAAC,OAAO,GAAG,oBAAoB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,KAAK,IAAI,EAC5D,CAAC;QACD,OAAO,IAAA,sBAAM,EAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC;IAC7C,CAAC;SAAM,IAAI,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,yBAAyB,CAAC,EAAE,CAAC;QACrD,gBAAgB;QAChB,OAAO,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,yBAAyB,CAAC,CAAC;IACnD,CAAC;SAAM,IAAI,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,sBAAsB,CAAC,EAAE,CAAC;QAClD,MAAM;QACN,OAAO,IAAA,sBAAM,EAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC,CAAC;IACxD,CAAC;SAAM,CAAC;QACN,OAAO,IAAA,sBAAM,EACV,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,aAAa,CAAuB;aACjD,KAAK,CAAC,GAAG,CAAC;aACV,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAChB,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CACpB,OAAgB,EAChB,EAAC,QAAQ,GAAG,IAAI,EAA+B;IAE/C,IAAI,MAAuB,CAAC;IAC5B,IAAI,OAAO,CAAC;IACZ,IACE,QAAQ,KAAK,IAAI;QACjB,CAAC,OAAO,GAAG,oBAAoB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,KAAK,IAAI,EAC5D,CAAC;QACD,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,gBAAgB,CAAsB,CAAC;IACjE,CAAC;SAAM,CAAC;QACN,wLAAwL;QACxL,MAAM;YACJ,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,gBAAgB,CAAC;gBAC/B,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,qBAAqB,CAAuB,GAAG,KAAK,CAAC;QACvE,kOAAkO;QAClO,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,eAAe,EAAE,CAAC;YAC7D,MAAM,GAAG,QAAQ,CAAC;QACpB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,cAAc,CACrB,OAAgB,EAChB,EAAC,gBAAgB,EAAuC;IAExD,IACE,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,0CAA0C,CAAC;QAC1D,yBAAyB,EACzB,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,gBAAgB,CAAC,UAAU,CAAC;QACjC,CAAC,CAAC,GAAG,CACH,OAAO,EACP,0CAA0C,CACtB;KACvB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CACnB,OAAgB,EAChB,EAAC,QAAQ,GAAG,IAAI,EAA+B;IAE/C,IAAI,OAAO,CAAC;IACZ,IACE,QAAQ,KAAK,IAAI;QACjB,CAAC,OAAO,GAAG,oBAAoB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,KAAK,IAAI,EAC5D,CAAC;QACD,OAAO,IAAA,sBAAM,EAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IACzC,CAAC;SAAM,CAAC;QACN,OAAO,IAAA,sBAAM,EAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IACzC,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAClB,QAA6D;IAE7D,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IACjE,0IAA0I;IAC1I,wEAAwE;IACxE,IAAI,YAAoB,CAAC;IACzB,IACG,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,UAAU,CAAY;SACnC,KAAK,CAAC,GAAG,CAAC;SACV,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;SACZ,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,WAAW,EAAE;QACf,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,6BAA6B,CAAY;aACtD,KAAK,CAAC,GAAG,CAAC;aACV,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;aACZ,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;aACnB,WAAW,EAAE,EAChB,CAAC;QACD,YAAY,GAAI,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,UAAU,CAAY;aAClD,KAAK,CAAC,GAAG,CAAC;aACV,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;aACZ,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACzB,CAAC;SAAM,CAAC;QACN,YAAY,GAAI,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,6BAA6B,CAAY;aACrE,KAAK,CAAC,GAAG,CAAC;aACV,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;aACZ,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;aACnB,KAAK,CAAC,KAAK,CAAC;aACZ,GAAG,CAAC,CAAC,OAAe,EAAE,EAAE;YACvB,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC5D,CAAC,CAAC;aACD,IAAI,CAAC,GAAG,CAAC,CAAC;IACf,CAAC;IACD,OAAO,IAAA,sBAAM,EACX,GAAG,YAAY,KACZ,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,6BAA6B,CAAY;SACtD,KAAK,CAAC,GAAG,CAAC;SACV,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAChB,EAAE,CACH,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CACf,WAAiE;IAEjE,OAAO,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;AAC/C,CAAC;AAED,SAAgB,cAAc;IAC5B,OAAO;QACL,yBAAyB;QACzB,SAAS;QACT,aAAa;QACb,cAAc;QACd,YAAY;QACZ,WAAW;QACX,QAAQ;KACT,CAAC;AACJ,CAAC","sourcesContent":["import {encode} from 'html-entities';\nimport * as _ from 'lodash';\nimport {AwsConfigMapping} from '../mappings/AwsConfigMapping';\nconst FINDING_STANDARDS_CONTROL_ARN = 'ProductFields.StandardsControlArn';\n\nfunction correspondingControl(controls: unknown[], finding: unknown) {\n  return controls.find(\n    (control) =>\n      _.get(control, 'StandardsControlArn') ===\n      _.get(finding, FINDING_STANDARDS_CONTROL_ARN)\n  );\n}\n\nfunction securityhubSupportingDocs(standards: string[] | undefined) {\n  let controls: null | unknown[];\n  try {\n    if (Array.isArray(standards)) {\n      controls = standards\n        .map((standard) => _.get(JSON.parse(standard), 'Controls'))\n        .flat();\n    } else {\n      controls = null;\n    }\n  } catch (error) {\n    throw new Error(\n      `Invalid supporting docs for Security Hub:\\nException: ${error}`\n    );\n  }\n  const AWS_CONFIG_MAPPING = new AwsConfigMapping();\n  return {\n    controls,\n    awsConfigMapping: AWS_CONFIG_MAPPING\n  };\n}\n\nfunction findingId(\n  finding: unknown,\n  {controls = null}: {controls: unknown[] | null}\n) {\n  let control;\n  if (\n    controls !== null &&\n    (control = correspondingControl(controls, finding)) !== null\n  ) {\n    return encode(_.get(control, 'ControlId'));\n  } else if (_.has(finding, 'ProductFields.ControlId')) {\n    // AWS Standards\n    return _.get(finding, 'ProductFields.ControlId');\n  } else if (_.has(finding, 'ProductFields.RuleId')) {\n    // CIS\n    return encode(_.get(finding, 'ProductFields.RuleId'));\n  } else {\n    return encode(\n      (_.get(finding, 'GeneratorId') as unknown as string)\n        .split('/')\n        .slice(-1)[0]\n    );\n  }\n}\n\nfunction findingImpact(\n  finding: unknown,\n  {controls = null}: {controls: unknown[] | null}\n) {\n  let impact: string | number;\n  let control;\n  if (\n    controls !== null &&\n    (control = correspondingControl(controls, finding)) !== null\n  ) {\n    impact = _.get(control, 'SeverityRating') as unknown as string;\n  } else {\n    // severity is required, but must include either 'label' or 'normalized' internally with 'label' being preferred.  other values can be in here too such as the original severity rating.\n    impact =\n      _.get(finding, 'Severity.Label') ||\n      (_.get(finding, 'Severity.Normalized') as unknown as number) / 100.0;\n    // securityhub asff file does not contain accurate severity information by setting things that shouldn't be informational to informational: when additional context, i.e. standards, is not provided, set informational to medium.\n    if (typeof impact === 'string' && impact === 'INFORMATIONAL') {\n      impact = 'MEDIUM';\n    }\n  }\n  return impact;\n}\n\nfunction findingNistTag(\n  finding: unknown,\n  {awsConfigMapping}: {awsConfigMapping: AwsConfigMapping}\n) {\n  if (\n    _.get(finding, 'ProductFields.RelatedAWSResources:0/type') !==\n    'AWS::Config::ConfigRule'\n  ) {\n    return [];\n  }\n  return awsConfigMapping.searchNIST([\n    _.get(\n      finding,\n      'ProductFields.RelatedAWSResources:0/name'\n    ) as unknown as string\n  ]);\n}\n\nfunction findingTitle(\n  finding: unknown,\n  {controls = null}: {controls: unknown[] | null}\n) {\n  let control;\n  if (\n    controls !== null &&\n    (control = correspondingControl(controls, finding)) !== null\n  ) {\n    return encode(_.get(control, 'Title'));\n  } else {\n    return encode(_.get(finding, 'Title'));\n  }\n}\n\nfunction productName(\n  findings: Record<string, unknown> | Record<string, unknown>[]\n) {\n  const finding = Array.isArray(findings) ? findings[0] : findings;\n  // `${_.get(findings[0], 'ProductFields.aws/securityhub/CompanyName')} ${_.get(findings[0], 'ProductFields.aws/securityhub/ProductName')}`\n  // not using above due to wanting to provide the standard's name instead\n  let standardName: string;\n  if (\n    (_.get(finding, 'Types[0]') as string)\n      .split('/')\n      .slice(-1)[0]\n      .replace(/-/gi, ' ')\n      .toLowerCase() ===\n    (_.get(finding, FINDING_STANDARDS_CONTROL_ARN) as string)\n      .split('/')\n      .slice(-4)[0]\n      .replace(/-/gi, ' ')\n      .toLowerCase()\n  ) {\n    standardName = (_.get(finding, 'Types[0]') as string)\n      .split('/')\n      .slice(-1)[0]\n      .replace(/-/gi, ' ');\n  } else {\n    standardName = (_.get(finding, FINDING_STANDARDS_CONTROL_ARN) as string)\n      .split('/')\n      .slice(-4)[0]\n      .replace(/-/gi, ' ')\n      .split(/\\s+/)\n      .map((element: string) => {\n        return element.charAt(0).toUpperCase() + element.slice(1);\n      })\n      .join(' ');\n  }\n  return encode(\n    `${standardName} v${\n      (_.get(finding, FINDING_STANDARDS_CONTROL_ARN) as string)\n        .split('/')\n        .slice(-2)[0]\n    }`\n  );\n}\n\nfunction filename(\n  findingInfo: [Record<string, unknown>, Record<string, unknown>[]]\n) {\n  return `${productName(findingInfo[0])}.json`;\n}\n\nexport function getSecurityHub(): Record<string, (...inputs: any) => any> {\n  return {\n    securityhubSupportingDocs,\n    findingId,\n    findingImpact,\n    findingNistTag,\n    findingTitle,\n    productName,\n    filename\n  };\n}\n"]}

package/lib/src/asff-mapper/case-trivy.d.ts

@@ -1,2 +0,0 @@
-export declare function getTrivy(): Record<string, (...inputs: any) => any>;
-//# sourceMappingURL=case-trivy.d.ts.map

package/lib/src/asff-mapper/case-trivy.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"case-trivy.d.ts","sourceRoot":"","sources":["../../../src/asff-mapper/case-trivy.ts"],"names":[],"mappings":"AAoEA,wBAAgB,QAAQ,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,MAAM,EAAE,GAAG,KAAK,GAAG,CAAC,CAWlE"}