@mitre/hdf-converters 2.13.0 → 3.0.0

package/lib/src/ckl-mapper/checklist-mapper.js

@@ -1,518 +0,0 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ChecklistMapper = exports.ChecklistResults = void 0;
-exports.getChecklistObjectFromHdf = getChecklistObjectFromHdf;
-const inspecjs_1 = require("inspecjs");
-const lodash_1 = __importDefault(require("lodash"));
-const xml_formatter_1 = __importDefault(require("xml-formatter"));
-const package_json_1 = require("../../package.json");
-const base_converter_1 = require("../base-converter");
-const CciNistMapping_1 = require("../mappings/CciNistMapping");
-const global_1 = require("../utils/global");
-const checklist_jsonix_converter_1 = require("./checklist-jsonix-converter");
-const jsonixMapping_1 = require("./jsonixMapping");
-const checklist_metadata_utils_1 = require("./checklist-metadata-utils");
-const parseJson_1 = require("../utils/parseJson");
-var ImpactMapping;
-(function (ImpactMapping) {
-    ImpactMapping[ImpactMapping["high"] = 0.7] = "high";
-    ImpactMapping[ImpactMapping["medium"] = 0.5] = "medium";
-    ImpactMapping[ImpactMapping["low"] = 0.3] = "low";
-})(ImpactMapping || (ImpactMapping = {}));
-const CCI_NIST_TWO_WAY_MAPPER = new CciNistMapping_1.CciNistTwoWayMapper();
-/**
- * Tranformer function that splits a string and return array
- * @param input - string of CCI references
- * @returns ref - array of CCI references
- */
-function cciRef(input) {
-    return input.split('; ');
-}
-/**
- * Transformer function that splits string and maps resulting array
- * into NIST control tags
- * @param input - string of CCI references
- * @returns tag - array of NIST Control Tags
- */
-function nistTag(input) {
-    const identifiers = cciRef(input);
-    return CCI_NIST_TWO_WAY_MAPPER.nistFilter(identifiers, global_1.DEFAULT_STATIC_CODE_ANALYSIS_NIST_TAGS);
-}
-/**
- * Inner function to find the severity of the vuln
- * Does not account for severity override, so this should
- * not be taken as the final severity value
- * Uses thirdPartyTools.hdfExistingData.severity first,
- * then falls back to checklist severity tag
- * @param vuln - checklist vulnerability object
- * @returns - severity
- */
-function findSeverity(vuln) {
-    let severity = vuln.severity;
-    const hdfExistingData = (0, parseJson_1.parseJson)(vuln.thirdPartyTools);
-    if (hdfExistingData.ok) {
-        severity = lodash_1.default.get(hdfExistingData.value, 'hdfSpecificData.severity', severity);
-    }
-    return severity;
-}
-/**
- * Inner function to find the severityoverride of the vuln
- * Uses thirdPartyTools.hdfExistingData.severityoverride first,
- * then falls back to checklist severityoverride tag
- * @param vuln - checklist vulnerability object
- * @returns - severityoverride
- */
-function findSeverityOverride(vuln) {
-    let severityOverride = vuln.severityoverride;
-    const hdfExistingData = (0, parseJson_1.parseJson)(vuln.thirdPartyTools);
-    if (hdfExistingData.ok) {
-        severityOverride = lodash_1.default.get(hdfExistingData.value, 'hdfSpecificData.severityoverride', severityOverride);
-    }
-    return severityOverride;
-}
-/**
- * Function to find the computed severity of the given vuln
- * with order of precedence as:
- * thirdPartyTools.hdfSpecificData.severityoverride, severityoverride,
- * thidPartyTools.hdfSpecificData.severity, severity
- * @param vuln - checklist vulnerability object
- * @returns severity - string none, low, medium, high, critical
- */
-function computeSeverity(vuln) {
-    const severity = findSeverity(vuln);
-    const severityOverride = findSeverityOverride(vuln);
-    let computed = severity;
-    if (severityOverride)
-        computed = severityOverride;
-    if (!inspecjs_1.severities.find((severity) => severity === computed))
-        throw new Error(`Severity "${computed}" does not match none, low, medium, high, or critical, please check severity for ${vuln.vulnNum}`);
-    return computed;
-}
-/**
- * Transformer function that checks if the status is 'Not Applicable' returning a 0.
- * Otherwise, maps computed severity to ImpactMapping
- * @param vuln - checklist vulnerability object
- * @returns impact - number
- */
-function transformImpact(vuln) {
-    if (vuln.status === 'Not Applicable')
-        return 0.0;
-    const severity = computeSeverity(vuln);
-    let impact = ImpactMapping[severity];
-    const hdfExistingData = (0, parseJson_1.parseJson)(vuln.thirdPartyTools);
-    if (hdfExistingData.ok) {
-        const maybeImpact = lodash_1.default.get(hdfExistingData.value, 'hdfSpecificData.impact', impact);
-        if (typeof maybeImpact === 'number')
-            impact = maybeImpact;
-    }
-    if (!impact)
-        throw new Error(`Severity "${severity}" does not match low, medium, or high, please check severity for ${vuln.vulnNum}`);
-    return impact;
-}
-/**
- * Transformer function that returns appropriate enum value based on param
- * This is required because the status value of the ControlResult object
- * must be an ExecJSON.ControlResultStatus type
- * @param input - string
- * @returns enum ExecJSON.ControlResultStatus
- */
-function getStatus(input) {
-    const status = input.toLowerCase();
-    switch (status) {
-        case 'notafinding':
-        case 'passed':
-            return inspecjs_1.ExecJSON.ControlResultStatus.Passed;
-        case 'open':
-        case 'failed':
-            return inspecjs_1.ExecJSON.ControlResultStatus.Failed;
-        case 'error':
-            return inspecjs_1.ExecJSON.ControlResultStatus.Error;
-        default:
-            return inspecjs_1.ExecJSON.ControlResultStatus.Skipped;
-    }
-}
-function checkMessage(typeCheck, messageType, message) {
-    if (typeCheck === messageType) {
-        return message;
-    }
-    else {
-        return null;
-    }
-}
-/**
- * Transformer function that uses current heimdall checklist export syntax for
- * findingDetails attribute to separate a single string into multiple
- * result objects
- * @param input - array of one element consisting of {code_desc, status, start_time}
- * @returns ExecJSON.ControlResult
- */
-function parseFindingDetails(input) {
-    const findings = input;
-    const results = [];
-    const findingDetails = findings[0].code_desc;
-    const regex = /^(failed|passed|skipped|error) :: TEST (.*?)(?: :: (MESSAGE|SKIP_MESSAGE) (.*?))?$/s;
-    // check if code_desc is empty or does not match the above regular expression
-    if (!RegExp(regex).exec(findingDetails)) {
-        return [
-            {
-                status: findings[0].status,
-                code_desc: findings[0].code_desc,
-                start_time: ''
-            }
-        ];
-    }
-    else {
-        // split into multiple findings details using heimdall2 CKLExport functionality
-        for (const details of findingDetails.split('\n--------------------------------\n')) {
-            // regex of four groups (five if you count the full match) consisting of the four possible status
-            // followed by any number of characters after :: TEST which represents the code_desc
-            // followed by an optionally :: MESSAGE or SKIP_MESSAGE representing the message type
-            // followed by any number of characters representing the message
-            // split details for status
-            const match = regex.exec(details.trim());
-            if (match) {
-                const [, mStatus, mCode_dec, messageType, mMessage] = match;
-                results.push({
-                    status: getStatus(mStatus),
-                    code_desc: mCode_dec,
-                    message: checkMessage('MESSAGE', messageType, mMessage),
-                    start_time: '',
-                    skip_message: checkMessage('SKIP_MESSAGE', messageType, mMessage)
-                });
-            }
-        }
-    }
-    return results;
-}
-function parseComments(input) {
-    const descriptions = input;
-    const results = [];
-    const commentString = descriptions[0].data;
-    if (!commentString) {
-        return results;
-    }
-    else if (!commentString.includes(' :: ')) {
-        return [
-            {
-                label: descriptions[0].label,
-                data: descriptions[0].data
-            }
-        ];
-    }
-    else {
-        for (const section of commentString.split(/\n(?=[A-Z]+ ::)/)) {
-            const matches = RegExp(/([A-Z]+) :: (.+)/s).exec(section);
-            if (matches) {
-                const [, label, data] = matches;
-                if (data) {
-                    results.push({ data, label: label.toLowerCase() });
-                }
-            }
-        }
-    }
-    return results;
-}
-function containsChecklist(object) {
-    return lodash_1.default.has(object, 'passthrough.checklist');
-}
-function getChecklistObjectFromHdf(hdf) {
-    if (lodash_1.default.get(hdf, 'passthrough.metadata')) {
-        return (0, checklist_jsonix_converter_1.updateChecklistWithMetadata)(hdf);
-    }
-    return lodash_1.default.get(hdf, 'passthrough.checklist', checklist_jsonix_converter_1.EmptyChecklistObject);
-}
-// baseconverter makes it difficult to assign an array to attributes using just path+transformer in this case because i think it gets instantly redirected along the 'isString' pathway due to the path pointing at a stringified json blob
-// consequently we have to use the arraytransformer, but that doesn't run if we provide a path at the top level of the object for the same reason as specified above, so we have to put the 'hdfSpecificData' object into the subobject 'data'
-// which we can then extract here
-function getAttributes(input) {
-    const passthrough = input;
-    const data = passthrough[0].data;
-    if (!data) {
-        return [];
-    }
-    else {
-        return JSON.parse(data).hdfSpecificData?.attributes || [];
-    }
-}
-function getHdfSpecificDataAttribute(attribute, input) {
-    const data = (0, parseJson_1.parseJson)(input);
-    if (!data.ok)
-        return undefined;
-    const hdfSpecificData = lodash_1.default.get(data.value, 'hdfSpecificData');
-    if (!lodash_1.default.isObject(hdfSpecificData))
-        return undefined;
-    return lodash_1.default.get(hdfSpecificData, attribute);
-}
-/**
- * The `ChecklistResults` class extends the `ChecklistJsonixConverter` and is responsible for converting
- * checklist data between different formats (XML CKL, HDF JSON).
- *
- * @extends ChecklistJsonixConverter
- *
- * @property {string | ExecJSON.Execution} data - The input data, which can be a string of XML data or an HDF JSON execution object.
- * @property {Checklist} jsonixData - The JSON representation of the checklist data using the jsonix library.
- * @property {ChecklistObject} checklistObject - The intermediate object representation of the checklist data.
- * @property {boolean} withRaw - A flag indicating whether to include raw data in the output.
- */
-class ChecklistResults extends checklist_jsonix_converter_1.ChecklistJsonixConverter {
-    data;
-    jsonixData;
-    checklistObject;
-    withRaw;
-    /**
-     * @param {string | ExecJSON.Execution} data - The input data, which can be either an HDF JSON object
-     * or an XML CKL string, depending on the direction of the conversion.
-     * @param {boolean} [withRaw=false] - A flag indicating whether to include raw data in the output.
-     * Defaults to false.
-     *
-     * @throws Will throw an error if the asset metadata is invalid.
-     */
-    constructor(data, withRaw = false) {
-        super(jsonixMapping_1.jsonixMapping);
-        this.data = data;
-        if (typeof data === 'string') {
-            this.jsonixData = super.toJsonix(data);
-            this.checklistObject = super.toIntermediateObject(this.jsonixData);
-            (0, checklist_metadata_utils_1.throwIfInvalidAssetMetadata)(this.checklistObject.asset);
-        }
-        else if (containsChecklist(data)) {
-            this.checklistObject = getChecklistObjectFromHdf(data);
-            (0, checklist_metadata_utils_1.throwIfInvalidAssetMetadata)(this.checklistObject.asset);
-            this.jsonixData = super.fromIntermediateObject(this.checklistObject);
-        }
-        else {
-            // CREATE Intermediate Object from HDF
-            this.checklistObject = super.hdfToIntermediateObject(data);
-            (0, checklist_metadata_utils_1.throwIfInvalidAssetMetadata)(this.checklistObject.asset);
-            this.jsonixData = super.fromIntermediateObject(this.checklistObject);
-        }
-        this.withRaw = withRaw;
-    }
-    /**
-     * @method getJsonix
-     * @returns {Checklist} - Returns the JSON representation of the checklist data.
-     */
-    getJsonix() {
-        return this.jsonixData;
-    }
-    /**
-     * @method toCkl
-     * @returns {string} - Converts JSON data in jsonix format to CKL (Checklist) XML format.
-     */
-    toCkl() {
-        return (0, xml_formatter_1.default)(`<?xml version="1.0" encoding="UTF-8"?><!--Heimdall Version :: ${package_json_1.version}-->${super.fromJsonix(this.jsonixData)}`, { lineSeparator: '\n', collapseContent: true, indentation: '\t' });
-    }
-    /**
-     * @method toHdf
-     * @returns {ExecJSON.Execution} - Converts JSON data in intermediate format to HDF (Heimdall Data Format).
-     */
-    toHdf() {
-        const numberOfStigs = this.checklistObject.stigs.length;
-        if (numberOfStigs === 1) {
-            const defaultChecklist = new ChecklistMapper(this.checklistObject);
-            return defaultChecklist.toHdf();
-        }
-        else {
-            const checklist = new ChecklistMapper(this.checklistObject);
-            const original = checklist.toHdf();
-            const parentProfileName = 'Parent Profile';
-            const parent_profile = {
-                name: parentProfileName,
-                version: package_json_1.version,
-                supports: [],
-                attributes: [],
-                groups: [],
-                depends: [],
-                controls: [],
-                sha256: ''
-            };
-            for (const profile of original.profiles) {
-                parent_profile.depends?.push({ name: profile.name });
-                parent_profile.controls.push(...profile.controls);
-                profile.parent_profile = parentProfileName;
-                profile.sha256 = (0, base_converter_1.generateHash)(JSON.stringify(profile));
-            }
-            parent_profile.sha256 = (0, base_converter_1.generateHash)(JSON.stringify(parent_profile));
-            original.profiles.unshift(parent_profile);
-            return original;
-        }
-    }
-}
-exports.ChecklistResults = ChecklistResults;
-/**
- * Checklist mapper
- */
-class ChecklistMapper extends base_converter_1.BaseConverter {
-    withRaw;
-    mappings = {
-        platform: {
-            name: 'Heimdall Tools',
-            release: package_json_1.version
-        },
-        version: package_json_1.version,
-        statistics: {},
-        profiles: [
-            {
-                path: 'stigs',
-                name: { path: 'header.stigid' },
-                version: {
-                    path: 'header',
-                    transformer: (input) => {
-                        const ret = getHdfSpecificDataAttribute('version', input.customname) ||
-                            input.version;
-                        return ret;
-                    }
-                },
-                title: { path: 'header.title' },
-                maintainer: {
-                    path: 'header.customname',
-                    transformer: lodash_1.default.partial(getHdfSpecificDataAttribute, 'maintainer')
-                },
-                summary: { path: 'header.description' },
-                license: { path: 'header.notice' },
-                copyright: {
-                    path: 'header.customname',
-                    transformer: lodash_1.default.partial(getHdfSpecificDataAttribute, 'copyright')
-                },
-                copyright_email: {
-                    path: 'header.customname',
-                    transformer: lodash_1.default.partial(getHdfSpecificDataAttribute, 'copyright_email')
-                },
-                supports: [],
-                attributes: [
-                    {
-                        arrayTransformer: getAttributes,
-                        data: { path: 'header.customname' }
-                    }
-                ],
-                groups: [],
-                status: 'loaded',
-                controls: [
-                    {
-                        path: 'vulns',
-                        key: 'id',
-                        tags: {
-                            gtitle: { path: 'groupTitle' },
-                            rid: { path: 'ruleId' },
-                            gid: { path: 'vulnNum' },
-                            stig_id: { path: 'ruleVer' },
-                            cci: {
-                                path: 'cciRef',
-                                transformer: cciRef
-                            },
-                            nist: {
-                                path: 'cciRef',
-                                transformer: nistTag
-                            },
-                            severity: {
-                                transformer: findSeverity
-                            },
-                            weight: { path: 'weight' },
-                            // following transform takes the available attributes found in a checklist vuln and if available will add to the tags.
-                            // first element is the label name as it will appear in UI while the second is the ChecklistObject keyname
-                            transformer: (input) => {
-                                const tags = [
-                                    ['IA_Controls', 'iaControls'],
-                                    ['Legacy_ID', 'legacyId'],
-                                    ['False_Positives', 'falsePositives'],
-                                    ['False_Negatives', 'falseNegatives'],
-                                    ['Mitigations', 'mitigations'],
-                                    ['Mitigation_Controls', 'mitigationControl'],
-                                    ['Potential_Impact', 'potentialImpact'],
-                                    ['Responsibility', 'responsibility'],
-                                    ['STIGRef', 'stigRef'],
-                                    ['Security_Override_Guidance', 'securityOverrideGuidance'],
-                                    // does not follow above naming convention
-                                    // because it could be used in other converters
-                                    ['severityjustification', 'severityjustification']
-                                ];
-                                const fullTags = {};
-                                for (const [key, path] of tags) {
-                                    const tagValue = lodash_1.default.get(input, path);
-                                    if (tagValue && tagValue !== '; ') {
-                                        fullTags[key] = tagValue;
-                                    }
-                                }
-                                // another special case that does
-                                // not follow above naming conventions
-                                const severityOverride = findSeverityOverride(input);
-                                if (severityOverride) {
-                                    fullTags['severityoverride'] = severityOverride;
-                                }
-                                return fullTags;
-                            }
-                        },
-                        refs: [],
-                        source_location: {},
-                        title: { path: 'ruleTitle' },
-                        id: { path: 'vulnNum' },
-                        desc: { path: 'vulnDiscuss' },
-                        descriptions: [
-                            {
-                                data: { path: 'checkContent' },
-                                label: 'check'
-                            },
-                            {
-                                data: { path: 'fixText' },
-                                label: 'fix'
-                            },
-                            {
-                                arrayTransformer: parseComments,
-                                data: { path: 'comments' },
-                                label: 'comments'
-                            }
-                        ],
-                        impact: {
-                            transformer: transformImpact
-                        },
-                        code: {
-                            transformer: (vulnerability) => {
-                                const data = (0, parseJson_1.parseJson)(vulnerability.thirdPartyTools);
-                                if (data.ok) {
-                                    const code = lodash_1.default.get(data.value, 'hdfSpecificData.code');
-                                    if (code)
-                                        return code;
-                                }
-                                return JSON.stringify(vulnerability, null, 2);
-                            }
-                        },
-                        results: [
-                            {
-                                arrayTransformer: parseFindingDetails,
-                                status: {
-                                    path: 'status',
-                                    transformer: getStatus
-                                },
-                                code_desc: { path: 'findingdetails' },
-                                start_time: ''
-                            }
-                        ]
-                    }
-                ],
-                sha256: ''
-            }
-        ],
-        passthrough: {
-            transformer: (data) => {
-                return {
-                    ...{
-                        checklist: {
-                            asset: data.asset,
-                            stigs: data.stigs
-                        }
-                    },
-                    ...(this.withRaw && { raw: data.jsonixData })
-                };
-            }
-        }
-    };
-    constructor(checklistObject, withRaw = false) {
-        super(checklistObject);
-        this.withRaw = withRaw;
-    }
-}
-exports.ChecklistMapper = ChecklistMapper;
-//# sourceMappingURL=checklist-mapper.js.map

package/lib/src/ckl-mapper/checklist-mapper.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"checklist-mapper.js","sourceRoot":"","sources":["../../../src/ckl-mapper/checklist-mapper.ts"],"names":[],"mappings":";;;;;;AAwQA,8DAOC;AA/QD,uCAA8C;AAC9C,oDAAuB;AACvB,kEAAsC;AACtC,qDAAmE;AACnE,sDAK2B;AAC3B,+DAA+D;AAC/D,4CAAuE;AACvE,6EAMsC;AAEtC,mDAA8C;AAC9C,yEAAuE;AACvE,kDAA6C;AAE7C,IAAK,aAIJ;AAJD,WAAK,aAAa;IAChB,mDAAU,CAAA;IACV,uDAAY,CAAA;IACZ,iDAAS,CAAA;AACX,CAAC,EAJI,aAAa,KAAb,aAAa,QAIjB;AAED,MAAM,uBAAuB,GAAG,IAAI,oCAAmB,EAAE,CAAC;AAE1D;;;;GAIG;AACH,SAAS,MAAM,CAAC,KAAa;IAC3B,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC3B,CAAC;AAED;;;;;GAKG;AACH,SAAS,OAAO,CAAC,KAAa;IAC5B,MAAM,WAAW,GAAa,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5C,OAAO,uBAAuB,CAAC,UAAU,CACvC,WAAW,EACX,+CAAsC,CACvC,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,YAAY,CAAC,IAAmB;IACvC,IAAI,QAAQ,GAAW,IAAI,CAAC,QAAQ,CAAC;IACrC,MAAM,eAAe,GAAG,IAAA,qBAAS,EAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACxD,IAAI,eAAe,CAAC,EAAE,EAAE,CAAC;QACvB,QAAQ,GAAG,gBAAC,CAAC,GAAG,CACd,eAAe,CAAC,KAAK,EACrB,0BAA0B,EAC1B,QAAQ,CACC,CAAC;IACd,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;GAMG;AACH,SAAS,oBAAoB,CAAC,IAAmB;IAC/C,IAAI,gBAAgB,GAAW,IAAI,CAAC,gBAAgB,CAAC;IACrD,MAAM,eAAe,GAAG,IAAA,qBAAS,EAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACxD,IAAI,eAAe,CAAC,EAAE,EAAE,CAAC;QACvB,gBAAgB,GAAG,gBAAC,CAAC,GAAG,CACtB,eAAe,CAAC,KAAK,EACrB,kCAAkC,EAClC,gBAAgB,CACP,CAAC;IACd,CAAC;IACD,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,eAAe,CAAC,IAAmB;IAC1C,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,gBAAgB,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAEpD,IAAI,QAAQ,GAAG,QAAQ,CAAC;IACxB,IAAI,gBAAgB;QAAE,QAAQ,GAAG,gBAAgB,CAAC;IAElD,IAAI,CAAC,qBAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,KAAK,QAAQ,CAAC;QACvD,MAAM,IAAI,KAAK,CACb,aAAa,QAAQ,oFACnB,IAAI,CAAC,OACP,EAAE,CACH,CAAC;IACJ,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;GAKG;AACH,SAAS,eAAe,CAAC,IAAmB;IAC1C,IAAI,IAAI,CAAC,MAAM,KAAK,gBAAgB;QAAE,OAAO,GAAG,CAAC;IACjD,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,MAAM,GAAW,aAAa,CAAC,QAAsC,CAAC,CAAC;IAC3E,MAAM,eAAe,GAAG,IAAA,qBAAS,EAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACxD,IAAI,eAAe,CAAC,EAAE,EAAE,CAAC;QACvB,MAAM,WAAW,GAAG,gBAAC,CAAC,GAAG,CACvB,eAAe,CAAC,KAAK,EACrB,wBAAwB,EACxB,MAAM,CACP,CAAC;QACF,IAAI,OAAO,WAAW,KAAK,QAAQ;YAAE,MAAM,GAAG,WAAW,CAAC;IAC5D,CAAC;IACD,IAAI,CAAC,MAAM;QACT,MAAM,IAAI,KAAK,CACb,aAAa,QAAQ,oEACnB,IAAI,CAAC,OACP,EAAE,CACH,CAAC;IACJ,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;GAMG;AACH,SAAS,SAAS,CAAC,KAAa;IAC9B,MAAM,MAAM,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;IACnC,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,aAAa,CAAC;QACnB,KAAK,QAAQ;YACX,OAAO,mBAAQ,CAAC,mBAAmB,CAAC,MAAM,CAAC;QAC7C,KAAK,MAAM,CAAC;QACZ,KAAK,QAAQ;YACX,OAAO,mBAAQ,CAAC,mBAAmB,CAAC,MAAM,CAAC;QAC7C,KAAK,OAAO;YACV,OAAO,mBAAQ,CAAC,mBAAmB,CAAC,KAAK,CAAC;QAC5C;YACE,OAAO,mBAAQ,CAAC,mBAAmB,CAAC,OAAO,CAAC;IAChD,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CACnB,SAAiB,EACjB,WAAmB,EACnB,OAAe;IAEf,IAAI,SAAS,KAAK,WAAW,EAAE,CAAC;QAC9B,OAAO,OAAO,CAAC;IACjB,CAAC;SAAM,CAAC;QACN,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,mBAAmB,CAAC,KAAgB;IAC3C,MAAM,QAAQ,GAAG,KAA4C,CAAC;IAC9D,MAAM,OAAO,GAA6B,EAAE,CAAC;IAC7C,MAAM,cAAc,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7C,MAAM,KAAK,GACT,qFAAqF,CAAC;IAExF,6EAA6E;IAC7E,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;QACxC,OAAO;YACL;gBACE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM;gBAC1B,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;gBAChC,UAAU,EAAE,EAAE;aACf;SACF,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,+EAA+E;QAC/E,KAAK,MAAM,OAAO,IAAI,cAAc,CAAC,KAAK,CACxC,sCAAsC,CACvC,EAAE,CAAC;YACF,iGAAiG;YACjG,oFAAoF;YACpF,qFAAqF;YACrF,gEAAgE;YAChE,2BAA2B;YAC3B,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YACzC,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,CAAC,GAAG,KAAK,CAAC;gBAC5D,OAAO,CAAC,IAAI,CAAC;oBACX,MAAM,EAAE,SAAS,CAAC,OAAO,CAAC;oBAC1B,SAAS,EAAE,SAAS;oBACpB,OAAO,EAAE,YAAY,CAAC,SAAS,EAAE,WAAW,EAAE,QAAQ,CAAC;oBACvD,UAAU,EAAE,EAAE;oBACd,YAAY,EAAE,YAAY,CAAC,cAAc,EAAE,WAAW,EAAE,QAAQ,CAAC;iBAClE,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,aAAa,CAAC,KAAgB;IACrC,MAAM,YAAY,GAAG,KAAiD,CAAC;IACvE,MAAM,OAAO,GAAkC,EAAE,CAAC;IAClD,MAAM,aAAa,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3C,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,OAAO,OAAO,CAAC;IACjB,CAAC;SAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3C,OAAO;YACL;gBACE,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,KAAK;gBAC5B,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI;aAC3B;SACF,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,OAAO,IAAI,aAAa,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,CAAC;YAC7D,MAAM,OAAO,GAAG,MAAM,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC1D,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,OAAO,CAAC;gBAChC,IAAI,IAAI,EAAE,CAAC;oBACT,OAAO,CAAC,IAAI,CAAC,EAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE,EAAC,CAAC,CAAC;gBACnD,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,iBAAiB,CAAC,MAA0B;IACnD,OAAO,gBAAC,CAAC,GAAG,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;AAChD,CAAC;AAED,SAAgB,yBAAyB,CACvC,GAAuB;IAEvB,IAAI,gBAAC,CAAC,GAAG,CAAC,GAAG,EAAE,sBAAsB,CAAC,EAAE,CAAC;QACvC,OAAO,IAAA,wDAA2B,EAAC,GAAG,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,gBAAC,CAAC,GAAG,CAAC,GAAG,EAAE,uBAAuB,EAAE,iDAAoB,CAAC,CAAC;AACnE,CAAC;AAED,2OAA2O;AAC3O,8OAA8O;AAC9O,iCAAiC;AACjC,SAAS,aAAa,CAAC,KAAgB;IACrC,MAAM,WAAW,GAAG,KAAoC,CAAC;IACzD,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACjC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,EAAE,CAAC;IACZ,CAAC;SAAM,CAAC;QACN,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,eAAe,EAAE,UAAU,IAAI,EAAE,CAAC;IAC5D,CAAC;AACH,CAAC;AAED,SAAS,2BAA2B,CAClC,SAAiB,EACjB,KAAa;IAEb,MAAM,IAAI,GAAG,IAAA,qBAAS,EAAC,KAAK,CAAC,CAAC;IAC9B,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,SAAS,CAAC;IAC/B,MAAM,eAAe,GAAG,gBAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAC;IAC7D,IAAI,CAAC,gBAAC,CAAC,QAAQ,CAAC,eAAe,CAAC;QAAE,OAAO,SAAS,CAAC;IACnD,OAAO,gBAAC,CAAC,GAAG,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC;AAC3C,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAa,gBAAiB,SAAQ,qDAAwB;IAC5D,IAAI,CAA8B;IAClC,UAAU,CAAY;IACtB,eAAe,CAAkB;IACjC,OAAO,CAAU;IAEjB;;;;;;;OAOG;IACH,YAAY,IAAiC,EAAE,OAAO,GAAG,KAAK;QAC5D,KAAK,CAAC,6BAAa,CAAC,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QAEjB,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACvC,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC,oBAAoB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACnE,IAAA,sDAA2B,EAAC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAC1D,CAAC;aAAM,IAAI,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,IAAI,CAAC,eAAe,GAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC;YACvD,IAAA,sDAA2B,EAAC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;YACxD,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,sBAAsB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACvE,CAAC;aAAM,CAAC;YACN,sCAAsC;YACtC,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC;YAC3D,IAAA,sDAA2B,EAAC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;YACxD,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,sBAAsB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED;;;OAGG;IACH,SAAS;QACP,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED;;;OAGG;IACH,KAAK;QACH,OAAO,IAAA,uBAAS,EACd,iEAAiE,sBAAoB,MAAM,KAAK,CAAC,UAAU,CACzG,IAAI,CAAC,UAAU,CAChB,EAAE,EACH,EAAC,aAAa,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAC,CAChE,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK;QACH,MAAM,aAAa,GAAG,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC;QACxD,IAAI,aAAa,KAAK,CAAC,EAAE,CAAC;YACxB,MAAM,gBAAgB,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YACnE,OAAO,gBAAgB,CAAC,KAAK,EAAE,CAAC;QAClC,CAAC;aAAM,CAAC;YACN,MAAM,SAAS,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YAC5D,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC;YACnC,MAAM,iBAAiB,GAAG,gBAAgB,CAAC;YAC3C,MAAM,cAAc,GAAqB;gBACvC,IAAI,EAAE,iBAAiB;gBACvB,OAAO,EAAE,sBAAoB;gBAC7B,QAAQ,EAAE,EAAE;gBACZ,UAAU,EAAE,EAAE;gBACd,MAAM,EAAE,EAAE;gBACV,OAAO,EAAE,EAAE;gBACX,QAAQ,EAAE,EAAE;gBACZ,MAAM,EAAE,EAAE;aACX,CAAC;YACF,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;gBACxC,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,EAAC,IAAI,EAAE,OAAO,CAAC,IAAI,EAAC,CAAC,CAAC;gBACnD,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAClD,OAAO,CAAC,cAAc,GAAG,iBAAiB,CAAC;gBAC3C,OAAO,CAAC,MAAM,GAAG,IAAA,6BAAY,EAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;YACzD,CAAC;YACD,cAAc,CAAC,MAAM,GAAG,IAAA,6BAAY,EAAC,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,CAAC;YACrE,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;YAC1C,OAAO,QAAQ,CAAC;QAClB,CAAC;IACH,CAAC;CACF;AA1FD,4CA0FC;AAED;;GAEG;AACH,MAAa,eAAgB,SAAQ,8BAAa;IAChD,OAAO,CAAU;IACjB,QAAQ,GAGJ;QACF,QAAQ,EAAE;YACR,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,sBAAoB;SAC9B;QACD,OAAO,EAAE,sBAAoB;QAC7B,UAAU,EAAE,EAAE;QACd,QAAQ,EAAE;YACR;gBACE,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,EAAC,IAAI,EAAE,eAAe,EAAC;gBAC7B,OAAO,EAAE;oBACP,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,CAAC,KAAK,EAAE,EAAE;wBACrB,MAAM,GAAG,GACP,2BAA2B,CAAC,SAAS,EAAE,KAAK,CAAC,UAAU,CAAC;4BACxD,KAAK,CAAC,OAAO,CAAC;wBAChB,OAAO,GAAG,CAAC;oBACb,CAAC;iBACF;gBACD,KAAK,EAAE,EAAC,IAAI,EAAE,cAAc,EAAC;gBAC7B,UAAU,EAAE;oBACV,IAAI,EAAE,mBAAmB;oBACzB,WAAW,EAAE,gBAAC,CAAC,OAAO,CAAC,2BAA2B,EAAE,YAAY,CAAC;iBAClE;gBACD,OAAO,EAAE,EAAC,IAAI,EAAE,oBAAoB,EAAC;gBACrC,OAAO,EAAE,EAAC,IAAI,EAAE,eAAe,EAAC;gBAChC,SAAS,EAAE;oBACT,IAAI,EAAE,mBAAmB;oBACzB,WAAW,EAAE,gBAAC,CAAC,OAAO,CAAC,2BAA2B,EAAE,WAAW,CAAC;iBACjE;gBACD,eAAe,EAAE;oBACf,IAAI,EAAE,mBAAmB;oBACzB,WAAW,EAAE,gBAAC,CAAC,OAAO,CAAC,2BAA2B,EAAE,iBAAiB,CAAC;iBACvE;gBACD,QAAQ,EAAE,EAAE;gBACZ,UAAU,EAAE;oBACV;wBACE,gBAAgB,EAAE,aAAa;wBAC/B,IAAI,EAAE,EAAC,IAAI,EAAE,mBAAmB,EAAC;qBAClC;iBACF;gBACD,MAAM,EAAE,EAAE;gBACV,MAAM,EAAE,QAAQ;gBAChB,QAAQ,EAAE;oBACR;wBACE,IAAI,EAAE,OAAO;wBACb,GAAG,EAAE,IAAI;wBACT,IAAI,EAAE;4BACJ,MAAM,EAAE,EAAC,IAAI,EAAE,YAAY,EAAC;4BAC5B,GAAG,EAAE,EAAC,IAAI,EAAE,QAAQ,EAAC;4BACrB,GAAG,EAAE,EAAC,IAAI,EAAE,SAAS,EAAC;4BACtB,OAAO,EAAE,EAAC,IAAI,EAAE,SAAS,EAAC;4BAC1B,GAAG,EAAE;gCACH,IAAI,EAAE,QAAQ;gCACd,WAAW,EAAE,MAAM;6BACpB;4BACD,IAAI,EAAE;gCACJ,IAAI,EAAE,QAAQ;gCACd,WAAW,EAAE,OAAO;6BACrB;4BACD,QAAQ,EAAE;gCACR,WAAW,EAAE,YAAY;6BAC1B;4BACD,MAAM,EAAE,EAAC,IAAI,EAAE,QAAQ,EAAC;4BACxB,sHAAsH;4BACtH,0GAA0G;4BAC1G,WAAW,EAAE,CAAC,KAAoB,EAA2B,EAAE;gCAC7D,MAAM,IAAI,GAAG;oCACX,CAAC,aAAa,EAAE,YAAY,CAAC;oCAC7B,CAAC,WAAW,EAAE,UAAU,CAAC;oCACzB,CAAC,iBAAiB,EAAE,gBAAgB,CAAC;oCACrC,CAAC,iBAAiB,EAAE,gBAAgB,CAAC;oCACrC,CAAC,aAAa,EAAE,aAAa,CAAC;oCAC9B,CAAC,qBAAqB,EAAE,mBAAmB,CAAC;oCAC5C,CAAC,kBAAkB,EAAE,iBAAiB,CAAC;oCACvC,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;oCACpC,CAAC,SAAS,EAAE,SAAS,CAAC;oCACtB,CAAC,4BAA4B,EAAE,0BAA0B,CAAC;oCAE1D,0CAA0C;oCAC1C,+CAA+C;oCAC/C,CAAC,uBAAuB,EAAE,uBAAuB,CAAC;iCACnD,CAAC;gCACF,MAAM,QAAQ,GAA4B,EAAE,CAAC;gCAC7C,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;oCAC/B,MAAM,QAAQ,GAAG,gBAAC,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;oCACpC,IAAI,QAAQ,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;wCAClC,QAAQ,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC;oCAC3B,CAAC;gCACH,CAAC;gCAED,iCAAiC;gCACjC,sCAAsC;gCACtC,MAAM,gBAAgB,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;gCACrD,IAAI,gBAAgB,EAAE,CAAC;oCACrB,QAAQ,CAAC,kBAAkB,CAAC,GAAG,gBAAgB,CAAC;gCAClD,CAAC;gCACD,OAAO,QAAQ,CAAC;4BAClB,CAAC;yBACF;wBACD,IAAI,EAAE,EAAE;wBACR,eAAe,EAAE,EAAE;wBACnB,KAAK,EAAE,EAAC,IAAI,EAAE,WAAW,EAAC;wBAC1B,EAAE,EAAE,EAAC,IAAI,EAAE,SAAS,EAAC;wBACrB,IAAI,EAAE,EAAC,IAAI,EAAE,aAAa,EAAC;wBAC3B,YAAY,EAAE;4BACZ;gCACE,IAAI,EAAE,EAAC,IAAI,EAAE,cAAc,EAAC;gCAC5B,KAAK,EAAE,OAAO;6BACf;4BACD;gCACE,IAAI,EAAE,EAAC,IAAI,EAAE,SAAS,EAAC;gCACvB,KAAK,EAAE,KAAK;6BACb;4BACD;gCACE,gBAAgB,EAAE,aAAa;gCAC/B,IAAI,EAAE,EAAC,IAAI,EAAE,UAAU,EAAC;gCACxB,KAAK,EAAE,UAAU;6BAClB;yBACF;wBACD,MAAM,EAAE;4BACN,WAAW,EAAE,eAAe;yBAC7B;wBACD,IAAI,EAAE;4BACJ,WAAW,EAAE,CAAC,aAA4B,EAAU,EAAE;gCACpD,MAAM,IAAI,GAAG,IAAA,qBAAS,EAAC,aAAa,CAAC,eAAe,CAAC,CAAC;gCACtD,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;oCACZ,MAAM,IAAI,GAAG,gBAAC,CAAC,GAAG,CAChB,IAAI,CAAC,KAAK,EACV,sBAAsB,CACF,CAAC;oCACvB,IAAI,IAAI;wCAAE,OAAO,IAAI,CAAC;gCACxB,CAAC;gCACD,OAAO,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;4BAChD,CAAC;yBACF;wBACD,OAAO,EAAE;4BACP;gCACE,gBAAgB,EAAE,mBAAmB;gCACrC,MAAM,EAAE;oCACN,IAAI,EAAE,QAAQ;oCACd,WAAW,EAAE,SAAS;iCACvB;gCACD,SAAS,EAAE,EAAC,IAAI,EAAE,gBAAgB,EAAC;gCACnC,UAAU,EAAE,EAAE;6BACf;yBACF;qBACF;iBACF;gBACD,MAAM,EAAE,EAAE;aACX;SACF;QACD,WAAW,EAAE;YACX,WAAW,EAAE,CAAC,IAAqB,EAA2B,EAAE;gBAC9D,OAAO;oBACL,GAAG;wBACD,SAAS,EAAE;4BACT,KAAK,EAAE,IAAI,CAAC,KAAK;4BACjB,KAAK,EAAE,IAAI,CAAC,KAAK;yBAClB;qBACF;oBACD,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAC,GAAG,EAAE,IAAI,CAAC,UAAU,EAAC,CAAC;iBAC5C,CAAC;YACJ,CAAC;SACF;KACF,CAAC;IAEF,YAAY,eAAgC,EAAE,OAAO,GAAG,KAAK;QAC3D,KAAK,CAAC,eAAe,CAAC,CAAC;QACvB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;CACF;AAjLD,0CAiLC","sourcesContent":["import {ExecJSON, severities} from 'inspecjs';\nimport _ from 'lodash';\nimport xmlFormat from 'xml-formatter';\nimport {version as HeimdallToolsVersion} from '../../package.json';\nimport {\n  BaseConverter,\n  generateHash,\n  ILookupPath,\n  MappedTransform\n} from '../base-converter';\nimport {CciNistTwoWayMapper} from '../mappings/CciNistMapping';\nimport {DEFAULT_STATIC_CODE_ANALYSIS_NIST_TAGS} from '../utils/global';\nimport {\n  ChecklistJsonixConverter,\n  ChecklistObject,\n  ChecklistVuln,\n  EmptyChecklistObject,\n  updateChecklistWithMetadata\n} from './checklist-jsonix-converter';\nimport {Checklist} from './checklistJsonix';\nimport {jsonixMapping} from './jsonixMapping';\nimport {throwIfInvalidAssetMetadata} from './checklist-metadata-utils';\nimport {parseJson} from '../utils/parseJson';\n\nenum ImpactMapping {\n  high = 0.7,\n  medium = 0.5,\n  low = 0.3\n}\n\nconst CCI_NIST_TWO_WAY_MAPPER = new CciNistTwoWayMapper();\n\n/**\n * Tranformer function that splits a string and return array\n * @param input - string of CCI references\n * @returns ref - array of CCI references\n */\nfunction cciRef(input: string): string[] {\n  return input.split('; ');\n}\n\n/**\n * Transformer function that splits string and maps resulting array\n * into NIST control tags\n * @param input - string of CCI references\n * @returns tag - array of NIST Control Tags\n */\nfunction nistTag(input: string): string[] {\n  const identifiers: string[] = cciRef(input);\n  return CCI_NIST_TWO_WAY_MAPPER.nistFilter(\n    identifiers,\n    DEFAULT_STATIC_CODE_ANALYSIS_NIST_TAGS\n  );\n}\n\n/**\n * Inner function to find the severity of the vuln\n * Does not account for severity override, so this should\n * not be taken as the final severity value\n * Uses thirdPartyTools.hdfExistingData.severity first,\n * then falls back to checklist severity tag\n * @param vuln - checklist vulnerability object\n * @returns - severity\n */\nfunction findSeverity(vuln: ChecklistVuln): string {\n  let severity: string = vuln.severity;\n  const hdfExistingData = parseJson(vuln.thirdPartyTools);\n  if (hdfExistingData.ok) {\n    severity = _.get(\n      hdfExistingData.value,\n      'hdfSpecificData.severity',\n      severity\n    ) as string;\n  }\n  return severity;\n}\n\n/**\n * Inner function to find the severityoverride of the vuln\n * Uses thirdPartyTools.hdfExistingData.severityoverride first,\n * then falls back to checklist severityoverride tag\n * @param vuln - checklist vulnerability object\n * @returns - severityoverride\n */\nfunction findSeverityOverride(vuln: ChecklistVuln): string {\n  let severityOverride: string = vuln.severityoverride;\n  const hdfExistingData = parseJson(vuln.thirdPartyTools);\n  if (hdfExistingData.ok) {\n    severityOverride = _.get(\n      hdfExistingData.value,\n      'hdfSpecificData.severityoverride',\n      severityOverride\n    ) as string;\n  }\n  return severityOverride;\n}\n\n/**\n * Function to find the computed severity of the given vuln\n * with order of precedence as:\n * thirdPartyTools.hdfSpecificData.severityoverride, severityoverride,\n * thidPartyTools.hdfSpecificData.severity, severity\n * @param vuln - checklist vulnerability object\n * @returns severity - string none, low, medium, high, critical\n */\nfunction computeSeverity(vuln: ChecklistVuln): string {\n  const severity = findSeverity(vuln);\n  const severityOverride = findSeverityOverride(vuln);\n\n  let computed = severity;\n  if (severityOverride) computed = severityOverride;\n\n  if (!severities.find((severity) => severity === computed))\n    throw new Error(\n      `Severity \"${computed}\" does not match none, low, medium, high, or critical, please check severity for ${\n        vuln.vulnNum\n      }`\n    );\n  return computed;\n}\n\n/**\n * Transformer function that checks if the status is 'Not Applicable' returning a 0.\n * Otherwise, maps computed severity to ImpactMapping\n * @param vuln - checklist vulnerability object\n * @returns impact - number\n */\nfunction transformImpact(vuln: ChecklistVuln): number {\n  if (vuln.status === 'Not Applicable') return 0.0;\n  const severity = computeSeverity(vuln);\n  let impact: number = ImpactMapping[severity as keyof typeof ImpactMapping];\n  const hdfExistingData = parseJson(vuln.thirdPartyTools);\n  if (hdfExistingData.ok) {\n    const maybeImpact = _.get(\n      hdfExistingData.value,\n      'hdfSpecificData.impact',\n      impact\n    );\n    if (typeof maybeImpact === 'number') impact = maybeImpact;\n  }\n  if (!impact)\n    throw new Error(\n      `Severity \"${severity}\" does not match low, medium, or high, please check severity for ${\n        vuln.vulnNum\n      }`\n    );\n  return impact;\n}\n\n/**\n * Transformer function that returns appropriate enum value based on param\n * This is required because the status value of the ControlResult object\n * must be an ExecJSON.ControlResultStatus type\n * @param input - string\n * @returns enum ExecJSON.ControlResultStatus\n */\nfunction getStatus(input: string): ExecJSON.ControlResultStatus {\n  const status = input.toLowerCase();\n  switch (status) {\n    case 'notafinding':\n    case 'passed':\n      return ExecJSON.ControlResultStatus.Passed;\n    case 'open':\n    case 'failed':\n      return ExecJSON.ControlResultStatus.Failed;\n    case 'error':\n      return ExecJSON.ControlResultStatus.Error;\n    default:\n      return ExecJSON.ControlResultStatus.Skipped;\n  }\n}\n\nfunction checkMessage(\n  typeCheck: string,\n  messageType: string,\n  message: string\n): string | null {\n  if (typeCheck === messageType) {\n    return message;\n  } else {\n    return null;\n  }\n}\n\n/**\n * Transformer function that uses current heimdall checklist export syntax for\n * findingDetails attribute to separate a single string into multiple\n * result objects\n * @param input - array of one element consisting of {code_desc, status, start_time}\n * @returns ExecJSON.ControlResult\n */\nfunction parseFindingDetails(input: unknown[]): ExecJSON.ControlResult[] {\n  const findings = input as unknown as ExecJSON.ControlResult[];\n  const results: ExecJSON.ControlResult[] = [];\n  const findingDetails = findings[0].code_desc;\n  const regex =\n    /^(failed|passed|skipped|error) :: TEST (.*?)(?: :: (MESSAGE|SKIP_MESSAGE) (.*?))?$/s;\n\n  // check if code_desc is empty or does not match the above regular expression\n  if (!RegExp(regex).exec(findingDetails)) {\n    return [\n      {\n        status: findings[0].status,\n        code_desc: findings[0].code_desc,\n        start_time: ''\n      }\n    ];\n  } else {\n    // split into multiple findings details using heimdall2 CKLExport functionality\n    for (const details of findingDetails.split(\n      '\\n--------------------------------\\n'\n    )) {\n      // regex of four groups (five if you count the full match) consisting of the four possible status\n      // followed by any number of characters after :: TEST which represents the code_desc\n      // followed by an optionally :: MESSAGE or SKIP_MESSAGE representing the message type\n      // followed by any number of characters representing the message\n      // split details for status\n      const match = regex.exec(details.trim());\n      if (match) {\n        const [, mStatus, mCode_dec, messageType, mMessage] = match;\n        results.push({\n          status: getStatus(mStatus),\n          code_desc: mCode_dec,\n          message: checkMessage('MESSAGE', messageType, mMessage),\n          start_time: '',\n          skip_message: checkMessage('SKIP_MESSAGE', messageType, mMessage)\n        });\n      }\n    }\n  }\n  return results;\n}\n\nfunction parseComments(input: unknown[]): ExecJSON.ControlDescription[] {\n  const descriptions = input as unknown as ExecJSON.ControlDescription[];\n  const results: ExecJSON.ControlDescription[] = [];\n  const commentString = descriptions[0].data;\n  if (!commentString) {\n    return results;\n  } else if (!commentString.includes(' :: ')) {\n    return [\n      {\n        label: descriptions[0].label,\n        data: descriptions[0].data\n      }\n    ];\n  } else {\n    for (const section of commentString.split(/\\n(?=[A-Z]+ ::)/)) {\n      const matches = RegExp(/([A-Z]+) :: (.+)/s).exec(section);\n      if (matches) {\n        const [, label, data] = matches;\n        if (data) {\n          results.push({data, label: label.toLowerCase()});\n        }\n      }\n    }\n  }\n  return results;\n}\n\nfunction containsChecklist(object: ExecJSON.Execution): boolean {\n  return _.has(object, 'passthrough.checklist');\n}\n\nexport function getChecklistObjectFromHdf(\n  hdf: ExecJSON.Execution\n): ChecklistObject {\n  if (_.get(hdf, 'passthrough.metadata')) {\n    return updateChecklistWithMetadata(hdf);\n  }\n  return _.get(hdf, 'passthrough.checklist', EmptyChecklistObject);\n}\n\n// baseconverter makes it difficult to assign an array to attributes using just path+transformer in this case because i think it gets instantly redirected along the 'isString' pathway due to the path pointing at a stringified json blob\n// consequently we have to use the arraytransformer, but that doesn't run if we provide a path at the top level of the object for the same reason as specified above, so we have to put the 'hdfSpecificData' object into the subobject 'data'\n// which we can then extract here\nfunction getAttributes(input: unknown[]) {\n  const passthrough = input as unknown as [{data: string}];\n  const data = passthrough[0].data;\n  if (!data) {\n    return [];\n  } else {\n    return JSON.parse(data).hdfSpecificData?.attributes || [];\n  }\n}\n\nfunction getHdfSpecificDataAttribute(\n  attribute: string,\n  input: string\n): {[key: string]: any}[] | string | undefined {\n  const data = parseJson(input);\n  if (!data.ok) return undefined;\n  const hdfSpecificData = _.get(data.value, 'hdfSpecificData');\n  if (!_.isObject(hdfSpecificData)) return undefined;\n  return _.get(hdfSpecificData, attribute);\n}\n\n/**\n * The `ChecklistResults` class extends the `ChecklistJsonixConverter` and is responsible for converting\n * checklist data between different formats (XML CKL, HDF JSON).\n *\n * @extends ChecklistJsonixConverter\n *\n * @property {string | ExecJSON.Execution} data - The input data, which can be a string of XML data or an HDF JSON execution object.\n * @property {Checklist} jsonixData - The JSON representation of the checklist data using the jsonix library.\n * @property {ChecklistObject} checklistObject - The intermediate object representation of the checklist data.\n * @property {boolean} withRaw - A flag indicating whether to include raw data in the output.\n */\nexport class ChecklistResults extends ChecklistJsonixConverter {\n  data: string | ExecJSON.Execution;\n  jsonixData: Checklist;\n  checklistObject: ChecklistObject;\n  withRaw: boolean;\n\n  /**\n   * @param {string | ExecJSON.Execution} data - The input data, which can be either an HDF JSON object\n   * or an XML CKL string, depending on the direction of the conversion.\n   * @param {boolean} [withRaw=false] - A flag indicating whether to include raw data in the output.\n   * Defaults to false.\n   *\n   * @throws Will throw an error if the asset metadata is invalid.\n   */\n  constructor(data: string | ExecJSON.Execution, withRaw = false) {\n    super(jsonixMapping);\n    this.data = data;\n\n    if (typeof data === 'string') {\n      this.jsonixData = super.toJsonix(data);\n      this.checklistObject = super.toIntermediateObject(this.jsonixData);\n      throwIfInvalidAssetMetadata(this.checklistObject.asset);\n    } else if (containsChecklist(data)) {\n      this.checklistObject = getChecklistObjectFromHdf(data);\n      throwIfInvalidAssetMetadata(this.checklistObject.asset);\n      this.jsonixData = super.fromIntermediateObject(this.checklistObject);\n    } else {\n      // CREATE Intermediate Object from HDF\n      this.checklistObject = super.hdfToIntermediateObject(data);\n      throwIfInvalidAssetMetadata(this.checklistObject.asset);\n      this.jsonixData = super.fromIntermediateObject(this.checklistObject);\n    }\n    this.withRaw = withRaw;\n  }\n\n  /**\n   * @method getJsonix\n   * @returns {Checklist} - Returns the JSON representation of the checklist data.\n   */\n  getJsonix(): Checklist {\n    return this.jsonixData;\n  }\n\n  /**\n   * @method toCkl\n   * @returns {string} - Converts JSON data in jsonix format to CKL (Checklist) XML format.\n   */\n  toCkl(): string {\n    return xmlFormat(\n      `<?xml version=\"1.0\" encoding=\"UTF-8\"?><!--Heimdall Version :: ${HeimdallToolsVersion}-->${super.fromJsonix(\n        this.jsonixData\n      )}`,\n      {lineSeparator: '\\n', collapseContent: true, indentation: '\\t'}\n    );\n  }\n\n  /**\n   * @method toHdf\n   * @returns {ExecJSON.Execution} - Converts JSON data in intermediate format to HDF (Heimdall Data Format).\n   */\n  toHdf(): ExecJSON.Execution {\n    const numberOfStigs = this.checklistObject.stigs.length;\n    if (numberOfStigs === 1) {\n      const defaultChecklist = new ChecklistMapper(this.checklistObject);\n      return defaultChecklist.toHdf();\n    } else {\n      const checklist = new ChecklistMapper(this.checklistObject);\n      const original = checklist.toHdf();\n      const parentProfileName = 'Parent Profile';\n      const parent_profile: ExecJSON.Profile = {\n        name: parentProfileName,\n        version: HeimdallToolsVersion,\n        supports: [],\n        attributes: [],\n        groups: [],\n        depends: [],\n        controls: [],\n        sha256: ''\n      };\n      for (const profile of original.profiles) {\n        parent_profile.depends?.push({name: profile.name});\n        parent_profile.controls.push(...profile.controls);\n        profile.parent_profile = parentProfileName;\n        profile.sha256 = generateHash(JSON.stringify(profile));\n      }\n      parent_profile.sha256 = generateHash(JSON.stringify(parent_profile));\n      original.profiles.unshift(parent_profile);\n      return original;\n    }\n  }\n}\n\n/**\n * Checklist mapper\n */\nexport class ChecklistMapper extends BaseConverter {\n  withRaw: boolean;\n  mappings: MappedTransform<\n    ExecJSON.Execution & {passthrough: unknown},\n    ILookupPath\n  > = {\n    platform: {\n      name: 'Heimdall Tools',\n      release: HeimdallToolsVersion\n    },\n    version: HeimdallToolsVersion,\n    statistics: {},\n    profiles: [\n      {\n        path: 'stigs',\n        name: {path: 'header.stigid'},\n        version: {\n          path: 'header',\n          transformer: (input) => {\n            const ret =\n              getHdfSpecificDataAttribute('version', input.customname) ||\n              input.version;\n            return ret;\n          }\n        },\n        title: {path: 'header.title'},\n        maintainer: {\n          path: 'header.customname',\n          transformer: _.partial(getHdfSpecificDataAttribute, 'maintainer')\n        },\n        summary: {path: 'header.description'},\n        license: {path: 'header.notice'},\n        copyright: {\n          path: 'header.customname',\n          transformer: _.partial(getHdfSpecificDataAttribute, 'copyright')\n        },\n        copyright_email: {\n          path: 'header.customname',\n          transformer: _.partial(getHdfSpecificDataAttribute, 'copyright_email')\n        },\n        supports: [],\n        attributes: [\n          {\n            arrayTransformer: getAttributes,\n            data: {path: 'header.customname'}\n          }\n        ],\n        groups: [],\n        status: 'loaded',\n        controls: [\n          {\n            path: 'vulns',\n            key: 'id',\n            tags: {\n              gtitle: {path: 'groupTitle'},\n              rid: {path: 'ruleId'},\n              gid: {path: 'vulnNum'},\n              stig_id: {path: 'ruleVer'},\n              cci: {\n                path: 'cciRef',\n                transformer: cciRef\n              },\n              nist: {\n                path: 'cciRef',\n                transformer: nistTag\n              },\n              severity: {\n                transformer: findSeverity\n              },\n              weight: {path: 'weight'},\n              // following transform takes the available attributes found in a checklist vuln and if available will add to the tags.\n              // first element is the label name as it will appear in UI while the second is the ChecklistObject keyname\n              transformer: (input: ChecklistVuln): Record<string, unknown> => {\n                const tags = [\n                  ['IA_Controls', 'iaControls'],\n                  ['Legacy_ID', 'legacyId'],\n                  ['False_Positives', 'falsePositives'],\n                  ['False_Negatives', 'falseNegatives'],\n                  ['Mitigations', 'mitigations'],\n                  ['Mitigation_Controls', 'mitigationControl'],\n                  ['Potential_Impact', 'potentialImpact'],\n                  ['Responsibility', 'responsibility'],\n                  ['STIGRef', 'stigRef'],\n                  ['Security_Override_Guidance', 'securityOverrideGuidance'],\n\n                  // does not follow above naming convention\n                  // because it could be used in other converters\n                  ['severityjustification', 'severityjustification']\n                ];\n                const fullTags: Record<string, unknown> = {};\n                for (const [key, path] of tags) {\n                  const tagValue = _.get(input, path);\n                  if (tagValue && tagValue !== '; ') {\n                    fullTags[key] = tagValue;\n                  }\n                }\n\n                // another special case that does\n                // not follow above naming conventions\n                const severityOverride = findSeverityOverride(input);\n                if (severityOverride) {\n                  fullTags['severityoverride'] = severityOverride;\n                }\n                return fullTags;\n              }\n            },\n            refs: [],\n            source_location: {},\n            title: {path: 'ruleTitle'},\n            id: {path: 'vulnNum'},\n            desc: {path: 'vulnDiscuss'},\n            descriptions: [\n              {\n                data: {path: 'checkContent'},\n                label: 'check'\n              },\n              {\n                data: {path: 'fixText'},\n                label: 'fix'\n              },\n              {\n                arrayTransformer: parseComments,\n                data: {path: 'comments'},\n                label: 'comments'\n              }\n            ],\n            impact: {\n              transformer: transformImpact\n            },\n            code: {\n              transformer: (vulnerability: ChecklistVuln): string => {\n                const data = parseJson(vulnerability.thirdPartyTools);\n                if (data.ok) {\n                  const code = _.get(\n                    data.value,\n                    'hdfSpecificData.code'\n                  ) as unknown as string;\n                  if (code) return code;\n                }\n                return JSON.stringify(vulnerability, null, 2);\n              }\n            },\n            results: [\n              {\n                arrayTransformer: parseFindingDetails,\n                status: {\n                  path: 'status',\n                  transformer: getStatus\n                },\n                code_desc: {path: 'findingdetails'},\n                start_time: ''\n              }\n            ]\n          }\n        ],\n        sha256: ''\n      }\n    ],\n    passthrough: {\n      transformer: (data: ChecklistObject): Record<string, unknown> => {\n        return {\n          ...{\n            checklist: {\n              asset: data.asset,\n              stigs: data.stigs\n            }\n          },\n          ...(this.withRaw && {raw: data.jsonixData})\n        };\n      }\n    }\n  };\n\n  constructor(checklistObject: ChecklistObject, withRaw = false) {\n    super(checklistObject);\n    this.withRaw = withRaw;\n  }\n}\n"]}

package/lib/src/ckl-mapper/checklist-metadata-utils.d.ts

@@ -1,20 +0,0 @@
-import { Result } from '../utils/result';
-import { ChecklistMetadata, StigMetadata } from './checklist-jsonix-converter';
-import { Asset } from './checklistJsonix';
-export declare class InvalidChecklistMetadataException extends Error {
-}
-export declare function validateChecklistAssetMetadata(asset: Asset): Result<true, {
-    invalid: string[];
-    message: string;
-}>;
-export declare function validateChecklistProfileMetadata(metadata: StigMetadata): Result<true, {
-    invalid: string[];
-    message: string;
-}>;
-export declare function validateChecklistMetadata(metadata: ChecklistMetadata): Result<true, {
-    invalid: string[];
-    message: string;
-}>;
-export declare function throwIfInvalidProfileMetadata(profileMetadata?: StigMetadata): void;
-export declare function throwIfInvalidAssetMetadata(metadata: Asset): void;
-//# sourceMappingURL=checklist-metadata-utils.d.ts.map

package/lib/src/ckl-mapper/checklist-metadata-utils.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"checklist-metadata-utils.d.ts","sourceRoot":"","sources":["../../../src/ckl-mapper/checklist-metadata-utils.ts"],"names":[],"mappings":"AACA,OAAO,EAAC,MAAM,EAAC,MAAM,iBAAiB,CAAC;AACvC,OAAO,EAAC,iBAAiB,EAAE,YAAY,EAAC,MAAM,8BAA8B,CAAC;AAC7E,OAAO,EAAC,KAAK,EAA4B,MAAM,mBAAmB,CAAC;AAInE,qBAAa,iCAAkC,SAAQ,KAAK;CAAG;AA4E/D,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,KAAK,GACX,MAAM,CAAC,IAAI,EAAE;IAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAC,CAAC,CAUpD;AAED,wBAAgB,gCAAgC,CAC9C,QAAQ,EAAE,YAAY,GACrB,MAAM,CAAC,IAAI,EAAE;IAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAC,CAAC,CAYpD;AAED,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,iBAAiB,GAC1B,MAAM,CAAC,IAAI,EAAE;IAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAC,CAAC,CA2BpD;AAED,wBAAgB,6BAA6B,CAAC,eAAe,CAAC,EAAE,YAAY,QAO3E;AAED,wBAAgB,2BAA2B,CAAC,QAAQ,EAAE,KAAK,QAI1D"}