@mitre/hdf-converters 2.13.0 → 3.0.0

package/lib/src/fortify-mapper.js

@@ -1,235 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.FortifyMapper = exports.FortifyResults = void 0;
-const inspecjs_1 = require("inspecjs");
-const _ = __importStar(require("lodash"));
-const package_json_1 = require("../package.json");
-const base_converter_1 = require("./base-converter");
-const global_1 = require("./utils/global");
-const NIST_REFERENCE_NAME = 'Standards Mapping - NIST Special Publication 800-53 Revision 4';
-const DEFAULT_NIST_TAG = [];
-let parseHtml;
-function impactMapping(input, id) {
-    if (Array.isArray(input)) {
-        const matches = input.find((element) => {
-            return _.get(element, 'ClassInfo.ClassID') === id;
-        });
-        return parseFloat(_.get(matches, 'ClassInfo.DefaultSeverity')) / 5;
-    }
-    else {
-        return parseFloat(_.get(input, 'ClassInfo.DefaultSeverity')) / 5;
-    }
-}
-function nistTag(rule) {
-    let references = _.get(rule, 'References.Reference');
-    if (!Array.isArray(references)) {
-        references = [references];
-    }
-    if (Array.isArray(references)) {
-        const tag = references.find((element) => {
-            return _.get(element, 'Author') === NIST_REFERENCE_NAME;
-        });
-        if (tag === null || tag === undefined) {
-            return DEFAULT_NIST_TAG;
-        }
-        else {
-            return _.get(tag, 'Title').match(/[a-zA-Z][a-zA-Z]-\d{1,2}/);
-        }
-    }
-    return [];
-}
-function processEntry(input) {
-    const output = [];
-    output.push(`${_.get(input, 'id')}<=SNIPPET`);
-    output.push(`\nPath: ${_.get(input, 'File')}\n`);
-    output.push(`StartLine: ${_.get(input, 'StartLine')}, `);
-    output.push(`EndLine: ${_.get(input, 'EndLine')}\n`);
-    output.push(`Code:\n${_.get(input, 'Text').trim()}`);
-    return output.join('');
-}
-function makeArray(input) {
-    if (Array.isArray(input)) {
-        return input;
-    }
-    else {
-        return [input];
-    }
-}
-function filterVuln(input, file) {
-    input.forEach((element) => {
-        if (element instanceof Object) {
-            _.set(element, 'results', _.get(element, 'results').filter((result) => {
-                const codedesc = _.get(result, 'code_desc').split('<=SNIPPET');
-                const snippetid = codedesc[0];
-                const classid = _.get(element, 'id');
-                _.set(result, 'code_desc', codedesc[1]);
-                let isMatch = false;
-                const matches = _.get(file, 'FVDL.Vulnerabilities.Vulnerability').filter((subElement) => {
-                    return _.get(subElement, 'ClassInfo.ClassID') === classid;
-                });
-                matches.forEach((match) => {
-                    const traces = makeArray(_.get(match, 'AnalysisInfo.Unified.Trace'));
-                    traces.forEach((trace) => {
-                        const entries = makeArray(_.get(trace, 'Primary.Entry'));
-                        const filteredEntries = entries.filter((entry) => {
-                            return _.has(entry, 'Node.SourceLocation.snippet');
-                        });
-                        filteredEntries.forEach((entry) => {
-                            if (_.get(entry, 'Node.SourceLocation.snippet') === snippetid) {
-                                isMatch = true;
-                            }
-                        });
-                    });
-                });
-                return isMatch;
-            }));
-            _.set(element, 'impact', impactMapping(_.get(element, 'impact'), _.get(element, 'id')));
-        }
-        return element;
-    });
-    return input;
-}
-class FortifyResults {
-    fvdl;
-    withRaw;
-    constructor(fvdl, withRaw = false) {
-        this.fvdl = fvdl;
-        this.withRaw = withRaw;
-    }
-    async toHdf() {
-        parseHtml = await (0, base_converter_1.buildParseHtmlFunc)();
-        return (new FortifyMapper(this.fvdl, this.withRaw)).toHdf();
-    }
-}
-exports.FortifyResults = FortifyResults;
-class FortifyMapper extends base_converter_1.BaseConverter {
-    startTime;
-    withRaw;
-    mappings = {
-        platform: {
-            name: 'Heimdall Tools',
-            release: package_json_1.version
-        },
-        version: package_json_1.version,
-        statistics: {},
-        profiles: [
-            {
-                name: 'Fortify Static Analyzer Scan',
-                version: { path: 'FVDL.EngineData.EngineVersion' },
-                title: 'Fortify Static Analyzer Scan',
-                summary: {
-                    path: 'FVDL.UUID',
-                    transformer: (uuid) => {
-                        return `Fortify Static Analyzer Scan of UUID: ${uuid}`;
-                    }
-                },
-                supports: [],
-                attributes: [],
-                groups: [],
-                status: 'loaded',
-                controls: [
-                    {
-                        arrayTransformer: filterVuln,
-                        path: 'FVDL.Description',
-                        key: 'id',
-                        tags: {
-                            nist: { transformer: nistTag },
-                            cci: {
-                                transformer: (data) => (0, global_1.getCCIsForNISTTags)(nistTag(data))
-                            }
-                        },
-                        refs: [],
-                        source_location: {},
-                        title: { path: 'Abstract', transformer: parseHtml }, // there are embedded nodes that do not show up properly
-                        id: { path: 'classID' },
-                        desc: { path: 'Explanation', transformer: parseHtml },
-                        impact: { path: '$.FVDL.Vulnerabilities.Vulnerability' },
-                        code: {
-                            transformer: (vulnerability) => {
-                                return JSON.stringify(vulnerability, null, 2);
-                            }
-                        },
-                        results: [
-                            {
-                                path: '$.FVDL.Snippets.Snippet',
-                                status: inspecjs_1.ExecJSON.ControlResultStatus.Failed,
-                                code_desc: { transformer: processEntry },
-                                start_time: {
-                                    path: '$.FVDL.CreatedTS',
-                                    transformer: (input) => {
-                                        return `${_.get(input, 'date')} ${_.get(input, 'time')}`;
-                                    }
-                                }
-                            }
-                        ]
-                    }
-                ],
-                sha256: ''
-            }
-        ],
-        passthrough: {
-            transformer: (data) => {
-                let auxData = _.get(data, 'FVDL');
-                if (_.isObject(auxData)) {
-                    auxData = _.omit(auxData, [
-                        'CreatedTS',
-                        'UUID',
-                        'Description',
-                        'Snippets'
-                    ]);
-                }
-                return {
-                    auxiliary_data: [
-                        {
-                            name: 'Fortify',
-                            data: { FVDL: auxData }
-                        }
-                    ],
-                    ...(this.withRaw && { raw: data })
-                };
-            }
-        }
-    };
-    constructor(fvdl, withRaw = false) {
-        super((0, base_converter_1.parseXml)(fvdl, {
-            stopNodes: ['FVDL.Description.Abstract', 'FVDL.Description.Explanation']
-        }));
-        this.startTime = `${_.get(this.data, 'FVDL.CreatedTS.date')} ${_.get(this.data, 'FVDL.CreatedTS.time')}`;
-        this.withRaw = withRaw;
-    }
-}
-exports.FortifyMapper = FortifyMapper;
-//# sourceMappingURL=fortify-mapper.js.map

package/lib/src/fortify-mapper.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"fortify-mapper.js","sourceRoot":"","sources":["../../src/fortify-mapper.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCAAkC;AAClC,0CAA4B;AAC5B,kDAAgE;AAChE,qDAM0B;AAC1B,2CAAkD;AAElD,MAAM,mBAAmB,GACvB,gEAAgE,CAAC;AACnE,MAAM,gBAAgB,GAAa,EAAE,CAAC;AAEtC,IAAI,SAAqC,CAAC;AAE1C,SAAS,aAAa,CAAC,KAA8B,EAAE,EAAU;IAC/D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;YACrC,OAAO,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,mBAAmB,CAAC,KAAK,EAAE,CAAC;QACpD,CAAC,CAAC,CAAC;QACH,OAAO,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,2BAA2B,CAAC,CAAC,GAAG,CAAC,CAAC;IACrE,CAAC;SAAM,CAAC;QACN,OAAO,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,2BAA2B,CAAW,CAAC,GAAG,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,IAA6B;IAC5C,IAAI,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAC;IACrD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,UAAU,GAAG,CAAC,UAAU,CAAC,CAAC;IAC5B,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,OAAgC,EAAE,EAAE;YAC/D,OAAO,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,mBAAmB,CAAC;QAC1D,CAAC,CAAC,CAAC;QACH,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtC,OAAO,gBAAgB,CAAC;QAC1B,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,MAAM,MAAM,GAAG,EAAE,CAAC;IAClB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IAC9C,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IACjD,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC;IACzD,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;IACrD,MAAM,CAAC,IAAI,CAAC,UAAW,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAuB,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAE5E,OAAO,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACzB,CAAC;AACD,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAkB,CAAC;IAC5B,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,KAAK,CAAC,CAAC;IACjB,CAAC;AACH,CAAC;AACD,SAAS,UAAU,CAAC,KAAgB,EAAE,IAAa;IACjD,KAAK,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QACxB,IAAI,OAAO,YAAY,MAAM,EAAE,CAAC;YAC9B,CAAC,CAAC,GAAG,CACH,OAAO,EACP,SAAS,EACR,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,CAAS,CAAC,MAAM,CACvC,CAAC,MAA8B,EAAE,EAAE;gBACjC,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;gBAC/D,MAAM,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;gBAC9B,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;gBACrC,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;gBAExC,IAAI,OAAO,GAAG,KAAK,CAAC;gBACpB,MAAM,OAAO,GACX,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,oCAAoC,CACjD,CAAC,MAAM,CAAC,CAAC,UAAmC,EAAE,EAAE;oBAC/C,OAAO,CAAC,CAAC,GAAG,CAAC,UAAU,EAAE,mBAAmB,CAAC,KAAK,OAAO,CAAC;gBAC5D,CAAC,CAAC,CAAC;gBACH,OAAO,CAAC,OAAO,CAAC,CAAC,KAA8B,EAAE,EAAE;oBACjD,MAAM,MAAM,GAAc,SAAS,CACjC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,4BAA4B,CAAC,CAC3C,CAAC;oBACF,MAAM,CAAC,OAAO,CAAC,CAAC,KAAc,EAAE,EAAE;wBAChC,MAAM,OAAO,GAAc,SAAS,CAClC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,eAAe,CAAC,CAC9B,CAAC;wBACF,MAAM,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,KAAc,EAAE,EAAE;4BACxD,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,6BAA6B,CAAC,CAAC;wBACrD,CAAC,CAAC,CAAC;wBACH,eAAe,CAAC,OAAO,CAAC,CAAC,KAAc,EAAE,EAAE;4BACzC,IACE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,6BAA6B,CAAC,KAAK,SAAS,EACzD,CAAC;gCACD,OAAO,GAAG,IAAI,CAAC;4BACjB,CAAC;wBACH,CAAC,CAAC,CAAC;oBACL,CAAC,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;gBACH,OAAO,OAAO,CAAC;YACjB,CAAC,CACF,CACF,CAAC;YACF,CAAC,CAAC,GAAG,CACH,OAAO,EACP,QAAQ,EACR,aAAa,CACX,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAuC,EAC9D,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAsB,CAC1C,CACF,CAAC;QACJ,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC,CAAC;IACH,OAAO,KAA2B,CAAC;AACrC,CAAC;AAED,MAAa,cAAc;IACJ;IAAuB;IAA5C,YAAqB,IAAY,EAAW,UAAU,KAAK;QAAtC,SAAI,GAAJ,IAAI,CAAQ;QAAW,YAAO,GAAP,OAAO,CAAQ;IAAG,CAAC;IAE/D,KAAK,CAAC,KAAK;QACT,SAAS,GAAG,MAAM,IAAA,mCAAkB,GAAE,CAAC;QAEvC,OAAO,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;IAC9D,CAAC;CACF;AARD,wCAQC;AAED,MAAa,aAAc,SAAQ,8BAAa;IAC9C,SAAS,CAAS;IAClB,OAAO,CAAU;IAEjB,QAAQ,GAGJ;QACF,QAAQ,EAAE;YACR,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,sBAAoB;SAC9B;QACD,OAAO,EAAE,sBAAoB;QAC7B,UAAU,EAAE,EAAE;QACd,QAAQ,EAAE;YACR;gBACE,IAAI,EAAE,8BAA8B;gBACpC,OAAO,EAAE,EAAC,IAAI,EAAE,+BAA+B,EAAC;gBAChD,KAAK,EAAE,8BAA8B;gBACrC,OAAO,EAAE;oBACP,IAAI,EAAE,WAAW;oBACjB,WAAW,EAAE,CAAC,IAAa,EAAU,EAAE;wBACrC,OAAO,yCAAyC,IAAI,EAAE,CAAC;oBACzD,CAAC;iBACF;gBACD,QAAQ,EAAE,EAAE;gBACZ,UAAU,EAAE,EAAE;gBACd,MAAM,EAAE,EAAE;gBACV,MAAM,EAAE,QAAQ;gBAChB,QAAQ,EAAE;oBACR;wBACE,gBAAgB,EAAE,UAAU;wBAC5B,IAAI,EAAE,kBAAkB;wBACxB,GAAG,EAAE,IAAI;wBACT,IAAI,EAAE;4BACJ,IAAI,EAAE,EAAC,WAAW,EAAE,OAAO,EAAC;4BAC5B,GAAG,EAAE;gCACH,WAAW,EAAE,CAAC,IAA6B,EAAE,EAAE,CAC7C,IAAA,2BAAkB,EAAC,OAAO,CAAC,IAAI,CAAC,CAAC;6BACpC;yBACF;wBACD,IAAI,EAAE,EAAE;wBACR,eAAe,EAAE,EAAE;wBACnB,KAAK,EAAE,EAAC,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAC,EAAE,wDAAwD;wBAC3G,EAAE,EAAE,EAAC,IAAI,EAAE,SAAS,EAAC;wBACrB,IAAI,EAAE,EAAC,IAAI,EAAE,aAAa,EAAE,WAAW,EAAE,SAAS,EAAC;wBACnD,MAAM,EAAE,EAAC,IAAI,EAAE,sCAAsC,EAAC;wBACtD,IAAI,EAAE;4BACJ,WAAW,EAAE,CAAC,aAAsC,EAAU,EAAE;gCAC9D,OAAO,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;4BAChD,CAAC;yBACF;wBACD,OAAO,EAAE;4BACP;gCACE,IAAI,EAAE,yBAAyB;gCAC/B,MAAM,EAAE,mBAAQ,CAAC,mBAAmB,CAAC,MAAM;gCAC3C,SAAS,EAAE,EAAC,WAAW,EAAE,YAAY,EAAC;gCACtC,UAAU,EAAE;oCACV,IAAI,EAAE,kBAAkB;oCACxB,WAAW,EAAE,CAAC,KAAc,EAAU,EAAE;wCACtC,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC;oCAC3D,CAAC;iCACF;6BACF;yBACF;qBACF;iBACF;gBACD,MAAM,EAAE,EAAE;aACX;SACF;QACD,WAAW,EAAE;YACX,WAAW,EAAE,CAAC,IAA6B,EAA2B,EAAE;gBACtE,IAAI,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBAClC,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;oBACxB,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE;wBACxB,WAAW;wBACX,MAAM;wBACN,aAAa;wBACb,UAAU;qBACX,CAAC,CAAC;gBACL,CAAC;gBACD,OAAO;oBACL,cAAc,EAAE;wBACd;4BACE,IAAI,EAAE,SAAS;4BACf,IAAI,EAAE,EAAC,IAAI,EAAE,OAAO,EAAC;yBACtB;qBACF;oBACD,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAC,GAAG,EAAE,IAAI,EAAC,CAAC;iBACjC,CAAC;YACJ,CAAC;SACF;KACF,CAAC;IACF,YAAY,IAAY,EAAE,OAAO,GAAG,KAAK;QACvC,KAAK,CACH,IAAA,yBAAQ,EAAC,IAAI,EAAE;YACb,SAAS,EAAE,CAAC,2BAA2B,EAAE,8BAA8B,CAAC;SACzE,CAAC,CACH,CAAC;QACF,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,qBAAqB,CAAC,IAAI,CAAC,CAAC,GAAG,CAClE,IAAI,CAAC,IAAI,EACT,qBAAqB,CACtB,EAAE,CAAC;QACJ,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;CACF;AAzGD,sCAyGC","sourcesContent":["import {ExecJSON} from 'inspecjs';\nimport * as _ from 'lodash';\nimport {version as HeimdallToolsVersion} from '../package.json';\nimport {\n  BaseConverter,\n  ILookupPath,\n  MappedTransform,\n  buildParseHtmlFunc,\n  parseXml\n} from './base-converter';\nimport {getCCIsForNISTTags} from './utils/global';\n\nconst NIST_REFERENCE_NAME =\n  'Standards Mapping - NIST Special Publication 800-53 Revision 4';\nconst DEFAULT_NIST_TAG: string[] = [];\n\nlet parseHtml: (input: unknown) => string;\n\nfunction impactMapping(input: Record<string, unknown>, id: string): number {\n  if (Array.isArray(input)) {\n    const matches = input.find((element) => {\n      return _.get(element, 'ClassInfo.ClassID') === id;\n    });\n    return parseFloat(_.get(matches, 'ClassInfo.DefaultSeverity')) / 5;\n  } else {\n    return parseFloat(_.get(input, 'ClassInfo.DefaultSeverity') as string) / 5;\n  }\n}\n\nfunction nistTag(rule: Record<string, unknown>): string[] {\n  let references = _.get(rule, 'References.Reference');\n  if (!Array.isArray(references)) {\n    references = [references];\n  }\n  if (Array.isArray(references)) {\n    const tag = references.find((element: Record<string, unknown>) => {\n      return _.get(element, 'Author') === NIST_REFERENCE_NAME;\n    });\n    if (tag === null || tag === undefined) {\n      return DEFAULT_NIST_TAG;\n    } else {\n      return _.get(tag, 'Title').match(/[a-zA-Z][a-zA-Z]-\\d{1,2}/);\n    }\n  }\n  return [];\n}\n\nfunction processEntry(input: unknown): string {\n  const output = [];\n  output.push(`${_.get(input, 'id')}<=SNIPPET`);\n  output.push(`\\nPath: ${_.get(input, 'File')}\\n`);\n  output.push(`StartLine: ${_.get(input, 'StartLine')}, `);\n  output.push(`EndLine: ${_.get(input, 'EndLine')}\\n`);\n  output.push(`Code:\\n${(_.get(input, 'Text') as unknown as string).trim()}`);\n\n  return output.join('');\n}\nfunction makeArray(input: unknown): unknown[] {\n  if (Array.isArray(input)) {\n    return input as unknown[];\n  } else {\n    return [input];\n  }\n}\nfunction filterVuln(input: unknown[], file: unknown): ExecJSON.Control[] {\n  input.forEach((element) => {\n    if (element instanceof Object) {\n      _.set(\n        element,\n        'results',\n        (_.get(element, 'results') as any).filter(\n          (result: ExecJSON.ControlResult) => {\n            const codedesc = _.get(result, 'code_desc').split('<=SNIPPET');\n            const snippetid = codedesc[0];\n            const classid = _.get(element, 'id');\n            _.set(result, 'code_desc', codedesc[1]);\n\n            let isMatch = false;\n            const matches = (\n              _.get(file, 'FVDL.Vulnerabilities.Vulnerability') as any\n            ).filter((subElement: Record<string, unknown>) => {\n              return _.get(subElement, 'ClassInfo.ClassID') === classid;\n            });\n            matches.forEach((match: Record<string, unknown>) => {\n              const traces: unknown[] = makeArray(\n                _.get(match, 'AnalysisInfo.Unified.Trace')\n              );\n              traces.forEach((trace: unknown) => {\n                const entries: unknown[] = makeArray(\n                  _.get(trace, 'Primary.Entry')\n                );\n                const filteredEntries = entries.filter((entry: unknown) => {\n                  return _.has(entry, 'Node.SourceLocation.snippet');\n                });\n                filteredEntries.forEach((entry: unknown) => {\n                  if (\n                    _.get(entry, 'Node.SourceLocation.snippet') === snippetid\n                  ) {\n                    isMatch = true;\n                  }\n                });\n              });\n            });\n            return isMatch;\n          }\n        )\n      );\n      _.set(\n        element,\n        'impact',\n        impactMapping(\n          _.get(element, 'impact') as unknown as Record<string, unknown>,\n          _.get(element, 'id') as unknown as string\n        )\n      );\n    }\n    return element;\n  });\n  return input as ExecJSON.Control[];\n}\n\nexport class FortifyResults {\n  constructor(readonly fvdl: string, readonly withRaw = false) {}\n\n  async toHdf(): Promise<ExecJSON.Execution> {\n    parseHtml = await buildParseHtmlFunc();\n\n    return (new FortifyMapper(this.fvdl, this.withRaw)).toHdf();\n  }\n}\n\nexport class FortifyMapper extends BaseConverter {\n  startTime: string;\n  withRaw: boolean;\n\n  mappings: MappedTransform<\n    ExecJSON.Execution & {passthrough: unknown},\n    ILookupPath\n  > = {\n    platform: {\n      name: 'Heimdall Tools',\n      release: HeimdallToolsVersion\n    },\n    version: HeimdallToolsVersion,\n    statistics: {},\n    profiles: [\n      {\n        name: 'Fortify Static Analyzer Scan',\n        version: {path: 'FVDL.EngineData.EngineVersion'},\n        title: 'Fortify Static Analyzer Scan',\n        summary: {\n          path: 'FVDL.UUID',\n          transformer: (uuid: unknown): string => {\n            return `Fortify Static Analyzer Scan of UUID: ${uuid}`;\n          }\n        },\n        supports: [],\n        attributes: [],\n        groups: [],\n        status: 'loaded',\n        controls: [\n          {\n            arrayTransformer: filterVuln,\n            path: 'FVDL.Description',\n            key: 'id',\n            tags: {\n              nist: {transformer: nistTag},\n              cci: {\n                transformer: (data: Record<string, unknown>) =>\n                  getCCIsForNISTTags(nistTag(data))\n              }\n            },\n            refs: [],\n            source_location: {},\n            title: {path: 'Abstract', transformer: parseHtml}, // there are embedded nodes that do not show up properly\n            id: {path: 'classID'},\n            desc: {path: 'Explanation', transformer: parseHtml},\n            impact: {path: '$.FVDL.Vulnerabilities.Vulnerability'},\n            code: {\n              transformer: (vulnerability: Record<string, unknown>): string => {\n                return JSON.stringify(vulnerability, null, 2);\n              }\n            },\n            results: [\n              {\n                path: '$.FVDL.Snippets.Snippet',\n                status: ExecJSON.ControlResultStatus.Failed,\n                code_desc: {transformer: processEntry},\n                start_time: {\n                  path: '$.FVDL.CreatedTS',\n                  transformer: (input: unknown): string => {\n                    return `${_.get(input, 'date')} ${_.get(input, 'time')}`;\n                  }\n                }\n              }\n            ]\n          }\n        ],\n        sha256: ''\n      }\n    ],\n    passthrough: {\n      transformer: (data: Record<string, unknown>): Record<string, unknown> => {\n        let auxData = _.get(data, 'FVDL');\n        if (_.isObject(auxData)) {\n          auxData = _.omit(auxData, [\n            'CreatedTS',\n            'UUID',\n            'Description',\n            'Snippets'\n          ]);\n        }\n        return {\n          auxiliary_data: [\n            {\n              name: 'Fortify',\n              data: {FVDL: auxData}\n            }\n          ],\n          ...(this.withRaw && {raw: data})\n        };\n      }\n    }\n  };\n  constructor(fvdl: string, withRaw = false) {\n    super(\n      parseXml(fvdl, {\n        stopNodes: ['FVDL.Description.Abstract', 'FVDL.Description.Explanation']\n      })\n    );\n    this.startTime = `${_.get(this.data, 'FVDL.CreatedTS.date')} ${_.get(\n      this.data,\n      'FVDL.CreatedTS.time'\n    )}`;\n    this.withRaw = withRaw;\n  }\n}\n"]}

package/lib/src/gosec-mapper.d.ts

@@ -1,10 +0,0 @@
-import { ExecJSON } from 'inspecjs';
-import { BaseConverter, ILookupPath, MappedTransform } from './base-converter';
-export declare class GosecMapper extends BaseConverter {
-    withRaw: boolean;
-    mappings: MappedTransform<ExecJSON.Execution & {
-        passthrough: unknown;
-    }, ILookupPath>;
-    constructor(gosecJson: string, withRaw?: boolean);
-}
-//# sourceMappingURL=gosec-mapper.d.ts.map

package/lib/src/gosec-mapper.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"gosec-mapper.d.ts","sourceRoot":"","sources":["../../src/gosec-mapper.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,QAAQ,EAAC,MAAM,UAAU,CAAC;AAGlC,OAAO,EACL,aAAa,EACb,WAAW,EAEX,eAAe,EAChB,MAAM,kBAAkB,CAAC;AAwD1B,qBAAa,WAAY,SAAQ,aAAa;IAC5C,OAAO,EAAE,OAAO,CAAC;IAEjB,QAAQ,EAAE,eAAe,CACvB,QAAQ,CAAC,SAAS,GAAG;QAAC,WAAW,EAAE,OAAO,CAAA;KAAC,EAC3C,WAAW,CACZ,CAkEC;gBACU,SAAS,EAAE,MAAM,EAAE,OAAO,UAAQ;CAI/C"}

package/lib/src/gosec-mapper.js

@@ -1,159 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.GosecMapper = void 0;
-const inspecjs_1 = require("inspecjs");
-const _ = __importStar(require("lodash"));
-const package_json_1 = require("../package.json");
-const base_converter_1 = require("./base-converter");
-const CweNistMapping_1 = require("./mappings/CweNistMapping");
-const CWE_NIST_MAPPING = new CweNistMapping_1.CweNistMapping();
-const DEFAULT_NIST_TAG = ['SI-2', 'RA-5'];
-const IMPACT_MAPPING = new Map([
-    ['high', 0.7],
-    ['medium', 0.5],
-    ['low', 0.3]
-]);
-function nistTag(input) {
-    const cwe = [`${_.get(input, 'id')}`];
-    return CWE_NIST_MAPPING.nistFilter(cwe, DEFAULT_NIST_TAG);
-}
-// Check `nosec` and `suppressions` fields which denote whether the gosec rule violation should be suppressed/skipped
-function formatStatus(input) {
-    return `${_.get(input, 'nosec')}` === 'false' &&
-        `${_.get(input, 'suppressions')}` === 'null'
-        ? inspecjs_1.ExecJSON.ControlResultStatus.Failed
-        : inspecjs_1.ExecJSON.ControlResultStatus.Skipped;
-}
-// If a gosec rule violation is suppressed, forward the given justification
-function formatSkipMessage(input) {
-    const suppressions = _.get(input, 'suppressions');
-    // If test is not skipped
-    if (`${suppressions}` === 'null') {
-        return undefined;
-    }
-    // If test is skipped and there are no justifications, report that none are given
-    if (!Array.isArray(suppressions)) {
-        return 'No justification provided';
-    }
-    // otherwise, supply the justifications
-    return suppressions
-        .map((suppression) => `${suppression.justification ? suppression.justification : 'No justification provided'} (${suppression.kind})`)
-        .join('\n');
-}
-// Report gosec rule violation and violation location
-function formatCodeDesc(input) {
-    return `Rule ${_.get(input, 'rule_id')} violation detected at:\nFile: ${_.get(input, 'file')}\nLine: ${_.get(input, 'line')}\nColumn: ${_.get(input, 'column')}`;
-}
-// Report confidence of violation and specific offending code
-function formatMessage(input) {
-    return `${_.get(input, 'confidence')} confidence of rule violation at:\n${_.get(input, 'code')}`;
-}
-class GosecMapper extends base_converter_1.BaseConverter {
-    withRaw;
-    mappings = {
-        platform: {
-            name: 'Heimdall Tools',
-            release: package_json_1.version
-        },
-        version: package_json_1.version,
-        statistics: {},
-        profiles: [
-            {
-                name: 'gosec Scan',
-                title: 'gosec Scan',
-                version: { path: 'GosecVersion' },
-                supports: [],
-                attributes: [],
-                groups: [],
-                status: 'loaded',
-                controls: [
-                    {
-                        path: 'Issues',
-                        key: 'id',
-                        tags: {
-                            nist: {
-                                path: 'cwe',
-                                transformer: nistTag
-                            },
-                            cwe: { path: 'cwe' }
-                        },
-                        refs: [],
-                        source_location: {},
-                        title: { path: 'details' },
-                        id: { path: 'rule_id' },
-                        desc: '',
-                        impact: {
-                            path: 'severity',
-                            transformer: (0, base_converter_1.impactMapping)(IMPACT_MAPPING)
-                        },
-                        results: [
-                            {
-                                status: { transformer: formatStatus },
-                                skip_message: { transformer: formatSkipMessage },
-                                code_desc: { transformer: formatCodeDesc },
-                                message: { transformer: formatMessage },
-                                start_time: ''
-                            }
-                        ]
-                    }
-                ],
-                sha256: ''
-            }
-        ],
-        passthrough: {
-            transformer: (data) => {
-                return {
-                    auxiliary_data: [
-                        {
-                            name: 'gosec',
-                            data: {
-                                'Golang errors': _.get(data, 'Golang errors'),
-                                Stats: _.get(data, 'Stats')
-                            }
-                        }
-                    ],
-                    ...(this.withRaw && { raw: data })
-                };
-            }
-        }
-    };
-    constructor(gosecJson, withRaw = false) {
-        super(JSON.parse(gosecJson));
-        this.withRaw = withRaw;
-    }
-}
-exports.GosecMapper = GosecMapper;
-//# sourceMappingURL=gosec-mapper.js.map

package/lib/src/gosec-mapper.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"gosec-mapper.js","sourceRoot":"","sources":["../../src/gosec-mapper.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCAAkC;AAClC,0CAA4B;AAC5B,kDAAgE;AAChE,qDAK0B;AAC1B,8DAAyD;AAEzD,MAAM,gBAAgB,GAAG,IAAI,+BAAc,EAAE,CAAC;AAC9C,MAAM,gBAAgB,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAC1C,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC;IAClD,CAAC,MAAM,EAAE,GAAG,CAAC;IACb,CAAC,QAAQ,EAAE,GAAG,CAAC;IACf,CAAC,KAAK,EAAE,GAAG,CAAC;CACb,CAAC,CAAC;AAEH,SAAS,OAAO,CAAC,KAA8B;IAC7C,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IACtC,OAAO,gBAAgB,CAAC,UAAU,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;AAC5D,CAAC;AAED,qHAAqH;AACrH,SAAS,YAAY,CAAC,KAA8B;IAClD,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,KAAK,OAAO;QAC3C,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,cAAc,CAAC,EAAE,KAAK,MAAM;QAC5C,CAAC,CAAC,mBAAQ,CAAC,mBAAmB,CAAC,MAAM;QACrC,CAAC,CAAC,mBAAQ,CAAC,mBAAmB,CAAC,OAAO,CAAC;AAC3C,CAAC;AAED,2EAA2E;AAC3E,SAAS,iBAAiB,CAAC,KAA8B;IACvD,MAAM,YAAY,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IAElD,yBAAyB;IACzB,IAAI,GAAG,YAAY,EAAE,KAAK,MAAM,EAAE,CAAC;QACjC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,iFAAiF;IACjF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QACjC,OAAO,2BAA2B,CAAC;IACrC,CAAC;IACD,uCAAuC;IACvC,OAAO,YAAY;SAChB,GAAG,CACF,CAAC,WAAW,EAAE,EAAE,CACd,GAAG,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,2BAA2B,KAAK,WAAW,CAAC,IAAI,GAAG,CACjH;SACA,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,qDAAqD;AACrD,SAAS,cAAc,CAAC,KAA8B;IACpD,OAAO,QAAQ,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,kCAAkC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;AACnK,CAAC;AAED,6DAA6D;AAC7D,SAAS,aAAa,CAAC,KAA8B;IACnD,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,YAAY,CAAC,sCAAsC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC;AACnG,CAAC;AAED,MAAa,WAAY,SAAQ,8BAAa;IAC5C,OAAO,CAAU;IAEjB,QAAQ,GAGJ;QACF,QAAQ,EAAE;YACR,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,sBAAoB;SAC9B;QACD,OAAO,EAAE,sBAAoB;QAC7B,UAAU,EAAE,EAAE;QACd,QAAQ,EAAE;YACR;gBACE,IAAI,EAAE,YAAY;gBAClB,KAAK,EAAE,YAAY;gBACnB,OAAO,EAAE,EAAC,IAAI,EAAE,cAAc,EAAC;gBAC/B,QAAQ,EAAE,EAAE;gBACZ,UAAU,EAAE,EAAE;gBACd,MAAM,EAAE,EAAE;gBACV,MAAM,EAAE,QAAQ;gBAChB,QAAQ,EAAE;oBACR;wBACE,IAAI,EAAE,QAAQ;wBACd,GAAG,EAAE,IAAI;wBACT,IAAI,EAAE;4BACJ,IAAI,EAAE;gCACJ,IAAI,EAAE,KAAK;gCACX,WAAW,EAAE,OAAO;6BACrB;4BACD,GAAG,EAAE,EAAC,IAAI,EAAE,KAAK,EAAC;yBACnB;wBACD,IAAI,EAAE,EAAE;wBACR,eAAe,EAAE,EAAE;wBACnB,KAAK,EAAE,EAAC,IAAI,EAAE,SAAS,EAAC;wBACxB,EAAE,EAAE,EAAC,IAAI,EAAE,SAAS,EAAC;wBACrB,IAAI,EAAE,EAAE;wBACR,MAAM,EAAE;4BACN,IAAI,EAAE,UAAU;4BAChB,WAAW,EAAE,IAAA,8BAAa,EAAC,cAAc,CAAC;yBAC3C;wBACD,OAAO,EAAE;4BACP;gCACE,MAAM,EAAE,EAAC,WAAW,EAAE,YAAY,EAAC;gCACnC,YAAY,EAAE,EAAC,WAAW,EAAE,iBAAiB,EAAC;gCAC9C,SAAS,EAAE,EAAC,WAAW,EAAE,cAAc,EAAC;gCACxC,OAAO,EAAE,EAAC,WAAW,EAAE,aAAa,EAAC;gCACrC,UAAU,EAAE,EAAE;6BACf;yBACF;qBACF;iBACF;gBACD,MAAM,EAAE,EAAE;aACX;SACF;QACD,WAAW,EAAE;YACX,WAAW,EAAE,CAAC,IAA6B,EAA2B,EAAE;gBACtE,OAAO;oBACL,cAAc,EAAE;wBACd;4BACE,IAAI,EAAE,OAAO;4BACb,IAAI,EAAE;gCACJ,eAAe,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,eAAe,CAAC;gCAC7C,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC;6BAC5B;yBACF;qBACF;oBACD,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAC,GAAG,EAAE,IAAI,EAAC,CAAC;iBACjC,CAAC;YACJ,CAAC;SACF;KACF,CAAC;IACF,YAAY,SAAiB,EAAE,OAAO,GAAG,KAAK;QAC5C,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QAC7B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;CACF;AA7ED,kCA6EC","sourcesContent":["import {ExecJSON} from 'inspecjs';\nimport * as _ from 'lodash';\nimport {version as HeimdallToolsVersion} from '../package.json';\nimport {\n  BaseConverter,\n  ILookupPath,\n  impactMapping,\n  MappedTransform\n} from './base-converter';\nimport {CweNistMapping} from './mappings/CweNistMapping';\n\nconst CWE_NIST_MAPPING = new CweNistMapping();\nconst DEFAULT_NIST_TAG = ['SI-2', 'RA-5'];\nconst IMPACT_MAPPING: Map<string, number> = new Map([\n  ['high', 0.7],\n  ['medium', 0.5],\n  ['low', 0.3]\n]);\n\nfunction nistTag(input: Record<string, unknown>): string[] {\n  const cwe = [`${_.get(input, 'id')}`];\n  return CWE_NIST_MAPPING.nistFilter(cwe, DEFAULT_NIST_TAG);\n}\n\n// Check `nosec` and `suppressions` fields which denote whether the gosec rule violation should be suppressed/skipped\nfunction formatStatus(input: Record<string, unknown>): string {\n  return `${_.get(input, 'nosec')}` === 'false' &&\n    `${_.get(input, 'suppressions')}` === 'null'\n    ? ExecJSON.ControlResultStatus.Failed\n    : ExecJSON.ControlResultStatus.Skipped;\n}\n\n// If a gosec rule violation is suppressed, forward the given justification\nfunction formatSkipMessage(input: Record<string, unknown>): string | undefined {\n  const suppressions = _.get(input, 'suppressions');\n\n  // If test is not skipped\n  if (`${suppressions}` === 'null') {\n    return undefined;\n  }\n\n  // If test is skipped and there are no justifications, report that none are given\n  if (!Array.isArray(suppressions)) {\n    return 'No justification provided';\n  }\n  // otherwise, supply the justifications\n  return suppressions\n    .map(\n      (suppression) =>\n        `${suppression.justification ? suppression.justification : 'No justification provided'} (${suppression.kind})`\n    )\n    .join('\\n');\n}\n\n// Report gosec rule violation and violation location\nfunction formatCodeDesc(input: Record<string, unknown>): string {\n  return `Rule ${_.get(input, 'rule_id')} violation detected at:\\nFile: ${_.get(input, 'file')}\\nLine: ${_.get(input, 'line')}\\nColumn: ${_.get(input, 'column')}`;\n}\n\n// Report confidence of violation and specific offending code\nfunction formatMessage(input: Record<string, unknown>): string {\n  return `${_.get(input, 'confidence')} confidence of rule violation at:\\n${_.get(input, 'code')}`;\n}\n\nexport class GosecMapper extends BaseConverter {\n  withRaw: boolean;\n\n  mappings: MappedTransform<\n    ExecJSON.Execution & {passthrough: unknown},\n    ILookupPath\n  > = {\n    platform: {\n      name: 'Heimdall Tools',\n      release: HeimdallToolsVersion\n    },\n    version: HeimdallToolsVersion,\n    statistics: {},\n    profiles: [\n      {\n        name: 'gosec Scan',\n        title: 'gosec Scan',\n        version: {path: 'GosecVersion'},\n        supports: [],\n        attributes: [],\n        groups: [],\n        status: 'loaded',\n        controls: [\n          {\n            path: 'Issues',\n            key: 'id',\n            tags: {\n              nist: {\n                path: 'cwe',\n                transformer: nistTag\n              },\n              cwe: {path: 'cwe'}\n            },\n            refs: [],\n            source_location: {},\n            title: {path: 'details'},\n            id: {path: 'rule_id'},\n            desc: '',\n            impact: {\n              path: 'severity',\n              transformer: impactMapping(IMPACT_MAPPING)\n            },\n            results: [\n              {\n                status: {transformer: formatStatus},\n                skip_message: {transformer: formatSkipMessage},\n                code_desc: {transformer: formatCodeDesc},\n                message: {transformer: formatMessage},\n                start_time: ''\n              }\n            ]\n          }\n        ],\n        sha256: ''\n      }\n    ],\n    passthrough: {\n      transformer: (data: Record<string, unknown>): Record<string, unknown> => {\n        return {\n          auxiliary_data: [\n            {\n              name: 'gosec',\n              data: {\n                'Golang errors': _.get(data, 'Golang errors'),\n                Stats: _.get(data, 'Stats')\n              }\n            }\n          ],\n          ...(this.withRaw && {raw: data})\n        };\n      }\n    }\n  };\n  constructor(gosecJson: string, withRaw = false) {\n    super(JSON.parse(gosecJson));\n    this.withRaw = withRaw;\n  }\n}\n"]}

package/lib/src/ionchannel-mapper.d.ts

@@ -1,27 +0,0 @@
-import { AxiosInstance } from 'axios';
-import { ExecJSON } from 'inspecjs';
-import { IonChannelAnalysisResponse } from '../types/ionchannelAnalysis';
-import { Project } from '../types/ionchannelProjects';
-import { Team } from '../types/ionchannelTeams';
-import { BaseConverter, ILookupPath, MappedTransform } from './base-converter';
-export declare class IonChannelAPIMapper {
-    apiKey: string;
-    projectId?: string;
-    teamId?: string;
-    analysisId?: string;
-    apiClient: AxiosInstance;
-    constructor(apiKey: string, projectId?: string, teamId?: string, analysisId?: string);
-    toHdf(): Promise<ExecJSON.Execution>;
-    setTeam(teamName: string): Promise<void>;
-    getTeams(): Promise<Team[]>;
-    setProject(projectName: string): Promise<void>;
-    getProjects(): Promise<Project[]>;
-    getAnalysis(): Promise<IonChannelAnalysisResponse>;
-}
-export declare class IonChannelMapper extends BaseConverter {
-    mappings: MappedTransform<ExecJSON.Execution & {
-        passthrough: unknown;
-    }, ILookupPath>;
-    constructor(ionchannelJson: string);
-}
-//# sourceMappingURL=ionchannel-mapper.d.ts.map

package/lib/src/ionchannel-mapper.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ionchannel-mapper.d.ts","sourceRoot":"","sources":["../../src/ionchannel-mapper.ts"],"names":[],"mappings":"AAAA,OAAc,EAAC,aAAa,EAAC,MAAM,OAAO,CAAC;AAC3C,OAAO,EAAC,QAAQ,EAAC,MAAM,UAAU,CAAC;AAGlC,OAAO,EAGL,0BAA0B,EAE3B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAC,OAAO,EAAC,MAAM,6BAA6B,CAAC;AACpD,OAAO,EAAC,IAAI,EAAC,MAAM,0BAA0B,CAAC;AAC9C,OAAO,EAAC,aAAa,EAAE,WAAW,EAAE,eAAe,EAAC,MAAM,kBAAkB,CAAC;AAgG7E,qBAAa,mBAAmB;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,SAAS,EAAE,aAAa,CAAC;gBAGvB,MAAM,EAAE,MAAM,EACd,SAAS,CAAC,EAAE,MAAM,EAClB,MAAM,CAAC,EAAE,MAAM,EACf,UAAU,CAAC,EAAE,MAAM;IAcf,KAAK,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;IAMpC,OAAO,CAAC,QAAQ,EAAE,MAAM;IAexB,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;IAS3B,UAAU,CAAC,WAAW,EAAE,MAAM;IAgB9B,WAAW,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IAgBjC,WAAW,IAAI,OAAO,CAAC,0BAA0B,CAAC;CAuBzD;AAED,qBAAa,gBAAiB,SAAQ,aAAa;IACjD,QAAQ,EAAE,eAAe,CACvB,QAAQ,CAAC,SAAS,GAAG;QAAC,WAAW,EAAE,OAAO,CAAA;KAAC,EAC3C,WAAW,CACZ,CA6GC;gBAEU,cAAc,EAAE,MAAM;CAGnC"}