@mitre/hdf-converters 2.13.0 → 3.0.0

package/lib/src/scoutsuite-mapper.js

@@ -1,302 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ScoutsuiteMapper = void 0;
-const inspecjs_1 = require("inspecjs");
-const _ = __importStar(require("lodash"));
-const package_json_1 = require("../package.json");
-const base_converter_1 = require("./base-converter");
-const ScoutsuiteNistMapping_1 = require("./mappings/ScoutsuiteNistMapping");
-const global_1 = require("./utils/global");
-const INSPEC_INPUTS_MAPPING = {
-    string: 'String',
-    numeric: 'Numeric',
-    regexp: 'Regexp',
-    array: 'Array',
-    hash: 'Hash',
-    boolean: 'Boolean',
-    any: 'Any'
-};
-const IMPACT_MAPPING = new Map([
-    ['danger', 0.7],
-    ['warning', 0.5]
-]);
-const SCOUTSUITE_NIST_MAPPING = new ScoutsuiteNistMapping_1.ScoutsuiteNistMapping();
-function getRulesetName(file) {
-    return _.get(file, 'last_run.ruleset_name');
-}
-function formatTargetId(file) {
-    return `${getRulesetName(file)} ruleset:${_.get(file, 'provider_name')}:${_.get(file, 'account_id')}`;
-}
-function formatTitle(file) {
-    return `Scout Suite Report using ${getRulesetName(file)} ruleset on ${_.get(file, 'provider_name')} with account ${_.get(file, 'account_id')}`;
-}
-function compliance(input) {
-    if (Array.isArray(input)) {
-        return input
-            .map((element) => `Compliant with ${_.get(element, 'name')}, reference ${_.get(element, 'reference')}, version ${_.get(element, 'version')}`)
-            .join('\n');
-    }
-    else {
-        return '';
-    }
-}
-function getStatus(input) {
-    if (_.get(input, 'checked_items') === 0) {
-        return inspecjs_1.ExecJSON.ControlResultStatus.Skipped;
-    }
-    else if (_.get(input, 'flagged_items') === 0) {
-        return inspecjs_1.ExecJSON.ControlResultStatus.Passed;
-    }
-    else {
-        return inspecjs_1.ExecJSON.ControlResultStatus.Failed;
-    }
-}
-function checkSkip(input) {
-    if (_.get(input, 'checked_items') === 0) {
-        return 'Skipped because no items were checked';
-    }
-    else {
-        return '';
-    }
-}
-function getMessage(input) {
-    if (_.get(input, 'checked_items') === 0) {
-        return '';
-    }
-    else if (_.get(input, 'flagged_items') === 0) {
-        return `0 flagged items out of ${_.get(input, 'checked_items')} checked items`;
-    }
-    else {
-        return `${_.get(input, 'flagged_items')} flagged items out of ${_.get(input, 'checked_items')} checked items:\n${_.get(input, 'items').join('\n')}`;
-    }
-}
-function nistTag(rule) {
-    return SCOUTSUITE_NIST_MAPPING.nistTag(rule);
-}
-function checkArray(input) {
-    if (typeof input === 'string') {
-        return input;
-    }
-    return input.join(', ');
-}
-function collapseServices(file) {
-    const services = Object.values(_.get(file, 'services'));
-    const findings = [];
-    services.forEach((element) => {
-        findings.push(_.get(element, 'findings'));
-    });
-    const entries = [];
-    Object.values(findings).forEach((element) => {
-        Object.entries(element).forEach((subElement) => {
-            entries.push(subElement);
-        });
-    });
-    _.set(file, 'services', entries);
-    return file;
-}
-class ScoutsuiteMapper extends base_converter_1.BaseConverter {
-    withRaw;
-    mappings = {
-        platform: {
-            name: 'Heimdall Tools',
-            release: package_json_1.version,
-            target_id: { transformer: formatTargetId }
-        },
-        version: package_json_1.version,
-        statistics: {},
-        profiles: [
-            {
-                name: 'Scout Suite Multi-Cloud Security Auditing Tool',
-                version: { path: 'last_run.version' },
-                title: { transformer: formatTitle },
-                summary: { path: 'last_run.ruleset_about' },
-                supports: [],
-                attributes: [
-                    {
-                        name: 'account_id',
-                        options: {
-                            value: { path: 'account_id' },
-                            required: true,
-                            sensitive: false,
-                            type: INSPEC_INPUTS_MAPPING.string
-                        }
-                    },
-                    {
-                        name: 'environment',
-                        options: {
-                            value: { path: 'environment' }
-                        }
-                    },
-                    {
-                        name: 'ruleset',
-                        options: {
-                            value: { path: 'last_run.ruleset_name' }
-                        }
-                    },
-                    {
-                        name: 'run_parameters_excluded_regions',
-                        options: {
-                            value: {
-                                path: 'last_run.run_parameters.excluded_region',
-                                transformer: checkArray
-                            }
-                        }
-                    },
-                    {
-                        name: 'run_parameters_regions',
-                        options: {
-                            value: {
-                                path: 'last_run.run_parameters.regions',
-                                transformer: checkArray
-                            }
-                        }
-                    },
-                    {
-                        name: 'run_parameters_services',
-                        options: {
-                            value: {
-                                path: 'last_run.run_parameters.services',
-                                transformer: checkArray
-                            }
-                        }
-                    },
-                    {
-                        name: 'run_parameters_skipped_services',
-                        options: {
-                            value: {
-                                path: 'last_run.run_parameters.skipped_services',
-                                transformer: checkArray
-                            }
-                        }
-                    },
-                    {
-                        name: 'time',
-                        options: {
-                            value: { path: 'last_run.time' }
-                        }
-                    },
-                    {
-                        name: 'partition',
-                        options: {
-                            value: { path: 'partition' }
-                        }
-                    },
-                    {
-                        name: 'provider_code',
-                        options: {
-                            value: { path: 'provider_code' }
-                        }
-                    },
-                    {
-                        name: 'provider_name',
-                        options: {
-                            value: { path: 'provider_name' }
-                        }
-                    }
-                ],
-                groups: [],
-                status: 'loaded',
-                controls: [
-                    {
-                        path: 'services',
-                        key: 'id',
-                        tags: {
-                            nist: { path: '[0]', transformer: nistTag },
-                            cci: {
-                                path: '[0]',
-                                transformer: (data) => (0, global_1.getCCIsForNISTTags)(nistTag(data))
-                            }
-                        },
-                        refs: [
-                            { url: { path: '[1].references[0]' } },
-                            { ref: { path: '[1].compliance', transformer: compliance } }
-                        ],
-                        source_location: {},
-                        title: { path: '[1].description' },
-                        id: { path: '[0]' },
-                        desc: { path: '[1].rationale' },
-                        descriptions: [
-                            { data: { path: '[1].remediation' }, label: 'fix' },
-                            { data: { path: '[1].service' }, label: 'service' },
-                            { data: { path: '[1].path' }, label: 'path' },
-                            { data: { path: '[1].id_suffix' }, label: 'id_suffix' }
-                        ],
-                        impact: {
-                            path: '[1].level',
-                            transformer: (0, base_converter_1.impactMapping)(IMPACT_MAPPING)
-                        },
-                        code: {
-                            transformer: (vulnerability) => JSON.stringify(vulnerability, null, 2)
-                        },
-                        results: [
-                            {
-                                status: { path: '[1]', transformer: getStatus },
-                                skip_message: { path: '[1]', transformer: checkSkip },
-                                code_desc: { path: '[1].description' },
-                                message: { path: '[1]', transformer: getMessage },
-                                start_time: { path: '$.last_run.time' }
-                            }
-                        ]
-                    }
-                ],
-                sha256: ''
-            }
-        ],
-        passthrough: {
-            transformer: (data) => {
-                const auxData = _.omit(data, [
-                    'account_id',
-                    'environment',
-                    'partition',
-                    'provider_code',
-                    'provider_name',
-                    'services'
-                ]);
-                auxData.last_run = _.pick(auxData.last_run, ['summary']);
-                return {
-                    auxiliary_data: auxData,
-                    ...(this.withRaw && { raw: data })
-                };
-            }
-        }
-    };
-    constructor(scoutsuiteJson, withRaw = false) {
-        super(collapseServices(JSON.parse(scoutsuiteJson.split('\n', 2)[1])));
-        this.withRaw = withRaw;
-    }
-}
-exports.ScoutsuiteMapper = ScoutsuiteMapper;
-//# sourceMappingURL=scoutsuite-mapper.js.map

package/lib/src/scoutsuite-mapper.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"scoutsuite-mapper.js","sourceRoot":"","sources":["../../src/scoutsuite-mapper.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCAAkC;AAClC,0CAA4B;AAC5B,kDAAgE;AAChE,qDAK0B;AAC1B,4EAAuE;AACvE,2CAAkD;AAElD,MAAM,qBAAqB,GAAG;IAC5B,MAAM,EAAE,QAAQ;IAChB,OAAO,EAAE,SAAS;IAClB,MAAM,EAAE,QAAQ;IAChB,KAAK,EAAE,OAAO;IACd,IAAI,EAAE,MAAM;IACZ,OAAO,EAAE,SAAS;IAClB,GAAG,EAAE,KAAK;CACX,CAAC;AACF,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC;IAClD,CAAC,QAAQ,EAAE,GAAG,CAAC;IACf,CAAC,SAAS,EAAE,GAAG,CAAC;CACjB,CAAC,CAAC;AAEH,MAAM,uBAAuB,GAAG,IAAI,6CAAqB,EAAE,CAAC;AAE5D,SAAS,cAAc,CAAC,IAAa;IACnC,OAAO,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,uBAAuB,CAAC,CAAC;AAC9C,CAAC;AACD,SAAS,cAAc,CAAC,IAAa;IACnC,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,CAC7C,IAAI,EACJ,eAAe,CAChB,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,CAAC;AACnC,CAAC;AACD,SAAS,WAAW,CAAC,IAAa;IAChC,OAAO,4BAA4B,cAAc,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,GAAG,CACzE,IAAI,EACJ,eAAe,CAChB,iBAAiB,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,CAAC;AAChD,CAAC;AACD,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK;aACT,GAAG,CACF,CAAC,OAAO,EAAE,EAAE,CACV,kBAAkB,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC,GAAG,CAC1D,OAAO,EACP,WAAW,CACZ,aAAa,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,CAC5C;aACA,IAAI,CAAC,IAAI,CAAC,CAAC;IAChB,CAAC;SAAM,CAAC;QACN,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AACD,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;QACxC,OAAO,mBAAQ,CAAC,mBAAmB,CAAC,OAAO,CAAC;IAC9C,CAAC;SAAM,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/C,OAAO,mBAAQ,CAAC,mBAAmB,CAAC,MAAM,CAAC;IAC7C,CAAC;SAAM,CAAC;QACN,OAAO,mBAAQ,CAAC,mBAAmB,CAAC,MAAM,CAAC;IAC7C,CAAC;AACH,CAAC;AACD,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;QACxC,OAAO,uCAAuC,CAAC;IACjD,CAAC;SAAM,CAAC;QACN,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AACD,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;QACxC,OAAO,EAAE,CAAC;IACZ,CAAC;SAAM,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/C,OAAO,0BAA0B,CAAC,CAAC,GAAG,CACpC,KAAK,EACL,eAAe,CAChB,gBAAgB,CAAC;IACpB,CAAC;SAAM,CAAC;QACN,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,eAAe,CAAC,yBAAyB,CAAC,CAAC,GAAG,CACnE,KAAK,EACL,eAAe,CAChB,oBAAqB,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAyB,CAAC,IAAI,CACtE,IAAI,CACL,EAAE,CAAC;IACN,CAAC;AACH,CAAC;AACD,SAAS,OAAO,CAAC,IAAY;IAC3B,OAAO,uBAAuB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AAC/C,CAAC;AACD,SAAS,UAAU,CAAC,KAAyB;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,gBAAgB,CACvB,IAA6B;IAE7B,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAC5B,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,CAA4B,CACnD,CAAC;IACF,MAAM,QAAQ,GAA8B,EAAE,CAAC;IAC/C,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC3B,QAAQ,CAAC,IAAI,CACX,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,UAAU,CAAuC,CACjE,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAwB,EAAE,CAAC;IACxC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC1C,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE;YAC7C,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC3B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;IACjC,OAAO,IAAI,CAAC;AACd,CAAC;AACD,MAAa,gBAAiB,SAAQ,8BAAa;IACjD,OAAO,CAAU;IAEjB,QAAQ,GAGJ;QACF,QAAQ,EAAE;YACR,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,sBAAoB;YAC7B,SAAS,EAAE,EAAC,WAAW,EAAE,cAAc,EAAC;SACzC;QACD,OAAO,EAAE,sBAAoB;QAC7B,UAAU,EAAE,EAAE;QACd,QAAQ,EAAE;YACR;gBACE,IAAI,EAAE,gDAAgD;gBACtD,OAAO,EAAE,EAAC,IAAI,EAAE,kBAAkB,EAAC;gBACnC,KAAK,EAAE,EAAC,WAAW,EAAE,WAAW,EAAC;gBACjC,OAAO,EAAE,EAAC,IAAI,EAAE,wBAAwB,EAAC;gBACzC,QAAQ,EAAE,EAAE;gBACZ,UAAU,EAAE;oBACV;wBACE,IAAI,EAAE,YAAY;wBAClB,OAAO,EAAE;4BACP,KAAK,EAAE,EAAC,IAAI,EAAE,YAAY,EAAC;4BAC3B,QAAQ,EAAE,IAAI;4BACd,SAAS,EAAE,KAAK;4BAChB,IAAI,EAAE,qBAAqB,CAAC,MAAM;yBACnC;qBACF;oBACD;wBACE,IAAI,EAAE,aAAa;wBACnB,OAAO,EAAE;4BACP,KAAK,EAAE,EAAC,IAAI,EAAE,aAAa,EAAC;yBAC7B;qBACF;oBACD;wBACE,IAAI,EAAE,SAAS;wBACf,OAAO,EAAE;4BACP,KAAK,EAAE,EAAC,IAAI,EAAE,uBAAuB,EAAC;yBACvC;qBACF;oBACD;wBACE,IAAI,EAAE,iCAAiC;wBACvC,OAAO,EAAE;4BACP,KAAK,EAAE;gCACL,IAAI,EAAE,yCAAyC;gCAC/C,WAAW,EAAE,UAAU;6BACxB;yBACF;qBACF;oBACD;wBACE,IAAI,EAAE,wBAAwB;wBAC9B,OAAO,EAAE;4BACP,KAAK,EAAE;gCACL,IAAI,EAAE,iCAAiC;gCACvC,WAAW,EAAE,UAAU;6BACxB;yBACF;qBACF;oBACD;wBACE,IAAI,EAAE,yBAAyB;wBAC/B,OAAO,EAAE;4BACP,KAAK,EAAE;gCACL,IAAI,EAAE,kCAAkC;gCACxC,WAAW,EAAE,UAAU;6BACxB;yBACF;qBACF;oBACD;wBACE,IAAI,EAAE,iCAAiC;wBACvC,OAAO,EAAE;4BACP,KAAK,EAAE;gCACL,IAAI,EAAE,0CAA0C;gCAChD,WAAW,EAAE,UAAU;6BACxB;yBACF;qBACF;oBACD;wBACE,IAAI,EAAE,MAAM;wBACZ,OAAO,EAAE;4BACP,KAAK,EAAE,EAAC,IAAI,EAAE,eAAe,EAAC;yBAC/B;qBACF;oBACD;wBACE,IAAI,EAAE,WAAW;wBACjB,OAAO,EAAE;4BACP,KAAK,EAAE,EAAC,IAAI,EAAE,WAAW,EAAC;yBAC3B;qBACF;oBACD;wBACE,IAAI,EAAE,eAAe;wBACrB,OAAO,EAAE;4BACP,KAAK,EAAE,EAAC,IAAI,EAAE,eAAe,EAAC;yBAC/B;qBACF;oBACD;wBACE,IAAI,EAAE,eAAe;wBACrB,OAAO,EAAE;4BACP,KAAK,EAAE,EAAC,IAAI,EAAE,eAAe,EAAC;yBAC/B;qBACF;iBACF;gBACD,MAAM,EAAE,EAAE;gBACV,MAAM,EAAE,QAAQ;gBAChB,QAAQ,EAAE;oBACR;wBACE,IAAI,EAAE,UAAU;wBAChB,GAAG,EAAE,IAAI;wBACT,IAAI,EAAE;4BACJ,IAAI,EAAE,EAAC,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAC;4BACzC,GAAG,EAAE;gCACH,IAAI,EAAE,KAAK;gCACX,WAAW,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,IAAA,2BAAkB,EAAC,OAAO,CAAC,IAAI,CAAC,CAAC;6BACjE;yBACF;wBACD,IAAI,EAAE;4BACJ,EAAC,GAAG,EAAE,EAAC,IAAI,EAAE,mBAAmB,EAAC,EAAC;4BAClC,EAAC,GAAG,EAAE,EAAC,IAAI,EAAE,gBAAgB,EAAE,WAAW,EAAE,UAAU,EAAC,EAAC;yBACzD;wBACD,eAAe,EAAE,EAAE;wBACnB,KAAK,EAAE,EAAC,IAAI,EAAE,iBAAiB,EAAC;wBAChC,EAAE,EAAE,EAAC,IAAI,EAAE,KAAK,EAAC;wBACjB,IAAI,EAAE,EAAC,IAAI,EAAE,eAAe,EAAC;wBAC7B,YAAY,EAAE;4BACZ,EAAC,IAAI,EAAE,EAAC,IAAI,EAAE,iBAAiB,EAAC,EAAE,KAAK,EAAE,KAAK,EAAC;4BAC/C,EAAC,IAAI,EAAE,EAAC,IAAI,EAAE,aAAa,EAAC,EAAE,KAAK,EAAE,SAAS,EAAC;4BAC/C,EAAC,IAAI,EAAE,EAAC,IAAI,EAAE,UAAU,EAAC,EAAE,KAAK,EAAE,MAAM,EAAC;4BACzC,EAAC,IAAI,EAAE,EAAC,IAAI,EAAE,eAAe,EAAC,EAAE,KAAK,EAAE,WAAW,EAAC;yBACpD;wBACD,MAAM,EAAE;4BACN,IAAI,EAAE,WAAW;4BACjB,WAAW,EAAE,IAAA,8BAAa,EAAC,cAAc,CAAC;yBAC3C;wBACD,IAAI,EAAE;4BACJ,WAAW,EAAE,CAAC,aAAsC,EAAU,EAAE,CAC9D,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;yBACzC;wBACD,OAAO,EAAE;4BACP;gCACE,MAAM,EAAE,EAAC,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAC;gCAC7C,YAAY,EAAE,EAAC,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAC;gCACnD,SAAS,EAAE,EAAC,IAAI,EAAE,iBAAiB,EAAC;gCACpC,OAAO,EAAE,EAAC,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,UAAU,EAAC;gCAC/C,UAAU,EAAE,EAAC,IAAI,EAAE,iBAAiB,EAAC;6BACtC;yBACF;qBACF;iBACF;gBACD,MAAM,EAAE,EAAE;aACX;SACF;QACD,WAAW,EAAE;YACX,WAAW,EAAE,CAAC,IAA6B,EAA2B,EAAE;gBACtE,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE;oBAC3B,YAAY;oBACZ,aAAa;oBACb,WAAW;oBACX,eAAe;oBACf,eAAe;oBACf,UAAU;iBACX,CAAC,CAAC;gBACH,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;gBACzD,OAAO;oBACL,cAAc,EAAE,OAAO;oBACvB,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAC,GAAG,EAAE,IAAI,EAAC,CAAC;iBACjC,CAAC;YACJ,CAAC;SACF;KACF,CAAC;IACF,YAAY,cAAsB,EAAE,OAAO,GAAG,KAAK;QACjD,KAAK,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACtE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;CACF;AA/KD,4CA+KC","sourcesContent":["import {ExecJSON} from 'inspecjs';\nimport * as _ from 'lodash';\nimport {version as HeimdallToolsVersion} from '../package.json';\nimport {\n  BaseConverter,\n  ILookupPath,\n  impactMapping,\n  MappedTransform\n} from './base-converter';\nimport {ScoutsuiteNistMapping} from './mappings/ScoutsuiteNistMapping';\nimport {getCCIsForNISTTags} from './utils/global';\n\nconst INSPEC_INPUTS_MAPPING = {\n  string: 'String',\n  numeric: 'Numeric',\n  regexp: 'Regexp',\n  array: 'Array',\n  hash: 'Hash',\n  boolean: 'Boolean',\n  any: 'Any'\n};\nconst IMPACT_MAPPING: Map<string, number> = new Map([\n  ['danger', 0.7],\n  ['warning', 0.5]\n]);\n\nconst SCOUTSUITE_NIST_MAPPING = new ScoutsuiteNistMapping();\n\nfunction getRulesetName(file: unknown) {\n  return _.get(file, 'last_run.ruleset_name');\n}\nfunction formatTargetId(file: unknown): string {\n  return `${getRulesetName(file)} ruleset:${_.get(\n    file,\n    'provider_name'\n  )}:${_.get(file, 'account_id')}`;\n}\nfunction formatTitle(file: unknown): string {\n  return `Scout Suite Report using ${getRulesetName(file)} ruleset on ${_.get(\n    file,\n    'provider_name'\n  )} with account ${_.get(file, 'account_id')}`;\n}\nfunction compliance(input: unknown): string {\n  if (Array.isArray(input)) {\n    return input\n      .map(\n        (element) =>\n          `Compliant with ${_.get(element, 'name')}, reference ${_.get(\n            element,\n            'reference'\n          )}, version ${_.get(element, 'version')}`\n      )\n      .join('\\n');\n  } else {\n    return '';\n  }\n}\nfunction getStatus(input: unknown): ExecJSON.ControlResultStatus {\n  if (_.get(input, 'checked_items') === 0) {\n    return ExecJSON.ControlResultStatus.Skipped;\n  } else if (_.get(input, 'flagged_items') === 0) {\n    return ExecJSON.ControlResultStatus.Passed;\n  } else {\n    return ExecJSON.ControlResultStatus.Failed;\n  }\n}\nfunction checkSkip(input: unknown): string {\n  if (_.get(input, 'checked_items') === 0) {\n    return 'Skipped because no items were checked';\n  } else {\n    return '';\n  }\n}\nfunction getMessage(input: unknown): string {\n  if (_.get(input, 'checked_items') === 0) {\n    return '';\n  } else if (_.get(input, 'flagged_items') === 0) {\n    return `0 flagged items out of ${_.get(\n      input,\n      'checked_items'\n    )} checked items`;\n  } else {\n    return `${_.get(input, 'flagged_items')} flagged items out of ${_.get(\n      input,\n      'checked_items'\n    )} checked items:\\n${(_.get(input, 'items') as unknown as string[]).join(\n      '\\n'\n    )}`;\n  }\n}\nfunction nistTag(rule: string): string[] {\n  return SCOUTSUITE_NIST_MAPPING.nistTag(rule);\n}\nfunction checkArray(input: unknown[] | string): string {\n  if (typeof input === 'string') {\n    return input;\n  }\n  return input.join(', ');\n}\n\nfunction collapseServices(\n  file: Record<string, unknown>\n): Record<string, unknown> {\n  const services = Object.values(\n    _.get(file, 'services') as Record<string, unknown>\n  );\n  const findings: Record<string, unknown>[] = [];\n  services.forEach((element) => {\n    findings.push(\n      _.get(element, 'findings') as unknown as Record<string, unknown>\n    );\n  });\n  const entries: [string, unknown][] = [];\n  Object.values(findings).forEach((element) => {\n    Object.entries(element).forEach((subElement) => {\n      entries.push(subElement);\n    });\n  });\n  _.set(file, 'services', entries);\n  return file;\n}\nexport class ScoutsuiteMapper extends BaseConverter {\n  withRaw: boolean;\n\n  mappings: MappedTransform<\n    ExecJSON.Execution & {passthrough: unknown},\n    ILookupPath\n  > = {\n    platform: {\n      name: 'Heimdall Tools',\n      release: HeimdallToolsVersion,\n      target_id: {transformer: formatTargetId}\n    },\n    version: HeimdallToolsVersion,\n    statistics: {},\n    profiles: [\n      {\n        name: 'Scout Suite Multi-Cloud Security Auditing Tool',\n        version: {path: 'last_run.version'},\n        title: {transformer: formatTitle},\n        summary: {path: 'last_run.ruleset_about'},\n        supports: [],\n        attributes: [\n          {\n            name: 'account_id',\n            options: {\n              value: {path: 'account_id'},\n              required: true,\n              sensitive: false,\n              type: INSPEC_INPUTS_MAPPING.string\n            }\n          },\n          {\n            name: 'environment',\n            options: {\n              value: {path: 'environment'}\n            }\n          },\n          {\n            name: 'ruleset',\n            options: {\n              value: {path: 'last_run.ruleset_name'}\n            }\n          },\n          {\n            name: 'run_parameters_excluded_regions',\n            options: {\n              value: {\n                path: 'last_run.run_parameters.excluded_region',\n                transformer: checkArray\n              }\n            }\n          },\n          {\n            name: 'run_parameters_regions',\n            options: {\n              value: {\n                path: 'last_run.run_parameters.regions',\n                transformer: checkArray\n              }\n            }\n          },\n          {\n            name: 'run_parameters_services',\n            options: {\n              value: {\n                path: 'last_run.run_parameters.services',\n                transformer: checkArray\n              }\n            }\n          },\n          {\n            name: 'run_parameters_skipped_services',\n            options: {\n              value: {\n                path: 'last_run.run_parameters.skipped_services',\n                transformer: checkArray\n              }\n            }\n          },\n          {\n            name: 'time',\n            options: {\n              value: {path: 'last_run.time'}\n            }\n          },\n          {\n            name: 'partition',\n            options: {\n              value: {path: 'partition'}\n            }\n          },\n          {\n            name: 'provider_code',\n            options: {\n              value: {path: 'provider_code'}\n            }\n          },\n          {\n            name: 'provider_name',\n            options: {\n              value: {path: 'provider_name'}\n            }\n          }\n        ],\n        groups: [],\n        status: 'loaded',\n        controls: [\n          {\n            path: 'services',\n            key: 'id',\n            tags: {\n              nist: {path: '[0]', transformer: nistTag},\n              cci: {\n                path: '[0]',\n                transformer: (data: string) => getCCIsForNISTTags(nistTag(data))\n              }\n            },\n            refs: [\n              {url: {path: '[1].references[0]'}},\n              {ref: {path: '[1].compliance', transformer: compliance}}\n            ],\n            source_location: {},\n            title: {path: '[1].description'},\n            id: {path: '[0]'},\n            desc: {path: '[1].rationale'},\n            descriptions: [\n              {data: {path: '[1].remediation'}, label: 'fix'},\n              {data: {path: '[1].service'}, label: 'service'},\n              {data: {path: '[1].path'}, label: 'path'},\n              {data: {path: '[1].id_suffix'}, label: 'id_suffix'}\n            ],\n            impact: {\n              path: '[1].level',\n              transformer: impactMapping(IMPACT_MAPPING)\n            },\n            code: {\n              transformer: (vulnerability: Record<string, unknown>): string =>\n                JSON.stringify(vulnerability, null, 2)\n            },\n            results: [\n              {\n                status: {path: '[1]', transformer: getStatus},\n                skip_message: {path: '[1]', transformer: checkSkip},\n                code_desc: {path: '[1].description'},\n                message: {path: '[1]', transformer: getMessage},\n                start_time: {path: '$.last_run.time'}\n              }\n            ]\n          }\n        ],\n        sha256: ''\n      }\n    ],\n    passthrough: {\n      transformer: (data: Record<string, unknown>): Record<string, unknown> => {\n        const auxData = _.omit(data, [\n          'account_id',\n          'environment',\n          'partition',\n          'provider_code',\n          'provider_name',\n          'services'\n        ]);\n        auxData.last_run = _.pick(auxData.last_run, ['summary']);\n        return {\n          auxiliary_data: auxData,\n          ...(this.withRaw && {raw: data})\n        };\n      }\n    }\n  };\n  constructor(scoutsuiteJson: string, withRaw = false) {\n    super(collapseServices(JSON.parse(scoutsuiteJson.split('\\n', 2)[1])));\n    this.withRaw = withRaw;\n  }\n}\n"]}

package/lib/src/snyk-mapper.d.ts

@@ -1,15 +0,0 @@
-import { ExecJSON } from 'inspecjs';
-import { BaseConverter, ILookupPath, MappedTransform } from './base-converter';
-export declare class SnykResults {
-    data: Record<string, unknown>;
-    customMapping?: MappedTransform<ExecJSON.Execution, ILookupPath>;
-    constructor(snykJson: string);
-    toHdf(): ExecJSON.Execution[] | ExecJSON.Execution;
-}
-export declare class SnykMapper extends BaseConverter {
-    mappings: MappedTransform<ExecJSON.Execution & {
-        passthrough: unknown;
-    }, ILookupPath>;
-    constructor(snykJson: Record<string, unknown>);
-}
-//# sourceMappingURL=snyk-mapper.d.ts.map

package/lib/src/snyk-mapper.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"snyk-mapper.d.ts","sourceRoot":"","sources":["../../src/snyk-mapper.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,QAAQ,EAAC,MAAM,UAAU,CAAC;AAGlC,OAAO,EACL,aAAa,EACb,WAAW,EAEX,eAAe,EAChB,MAAM,kBAAkB,CAAC;AAoC1B,qBAAa,WAAW;IACtB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,aAAa,CAAC,EAAE,eAAe,CAAC,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;gBACrD,QAAQ,EAAE,MAAM;IAI5B,KAAK,IAAI,QAAQ,CAAC,SAAS,EAAE,GAAG,QAAQ,CAAC,SAAS;CAmBnD;AAED,qBAAa,UAAW,SAAQ,aAAa;IAC3C,QAAQ,EAAE,eAAe,CACvB,QAAQ,CAAC,SAAS,GAAG;QAAC,WAAW,EAAE,OAAO,CAAA;KAAC,EAC3C,WAAW,CACZ,CAiGC;gBACU,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAG9C"}

package/lib/src/snyk-mapper.js

@@ -1,197 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.SnykMapper = exports.SnykResults = void 0;
-const inspecjs_1 = require("inspecjs");
-const _ = __importStar(require("lodash"));
-const package_json_1 = require("../package.json");
-const base_converter_1 = require("./base-converter");
-const CweNistMapping_1 = require("./mappings/CweNistMapping");
-const global_1 = require("./utils/global");
-const IMPACT_MAPPING = new Map([
-    ['high', 0.7],
-    ['medium', 0.5],
-    ['low', 0.3]
-]);
-const CWE_NIST_MAPPING = new CweNistMapping_1.CweNistMapping();
-const CWE_PATH = 'identifiers.CWE';
-function parseIdentifier(identifiers) {
-    const output = [];
-    if (identifiers !== undefined && Array.isArray(identifiers)) {
-        identifiers.forEach((element) => {
-            const numbers = element.split('-');
-            numbers.shift();
-            output.push(numbers.join('-'));
-        });
-        return output;
-    }
-    else {
-        return [];
-    }
-}
-function nistTag(identifiers) {
-    return CWE_NIST_MAPPING.nistFilter(parseIdentifier(identifiers), global_1.DEFAULT_STATIC_CODE_ANALYSIS_NIST_TAGS);
-}
-class SnykResults {
-    data;
-    customMapping;
-    constructor(snykJson) {
-        this.data = JSON.parse(snykJson);
-    }
-    toHdf() {
-        const results = [];
-        if (Array.isArray(this.data)) {
-            this.data.forEach((element) => {
-                const entry = new SnykMapper(element);
-                if (this.customMapping !== undefined) {
-                    entry.setMappings(this.customMapping);
-                }
-                results.push(entry.toHdf());
-            });
-            return results;
-        }
-        else {
-            const result = new SnykMapper(this.data);
-            if (this.customMapping !== undefined) {
-                result.setMappings(this.customMapping);
-            }
-            return result.toHdf();
-        }
-    }
-}
-exports.SnykResults = SnykResults;
-class SnykMapper extends base_converter_1.BaseConverter {
-    mappings = {
-        platform: {
-            name: 'Heimdall Tools',
-            release: package_json_1.version,
-            target_id: { path: 'projectName' }
-        },
-        version: package_json_1.version,
-        statistics: {
-            duration: null
-        },
-        profiles: [
-            {
-                name: 'Snyk Scan',
-                title: {
-                    transformer: (data) => {
-                        const projectName = _.has(data, 'projectName')
-                            ? `Snyk Project: ${_.get(data, 'projectName')} `
-                            : '';
-                        return `${projectName}Snyk Path: ${_.get(data, 'path')}`;
-                    }
-                },
-                maintainer: null,
-                summary: {
-                    path: 'summary',
-                    transformer: (summary) => {
-                        return `Snyk Summary: ${summary}`;
-                    }
-                },
-                license: null,
-                copyright: null,
-                copyright_email: null,
-                supports: [],
-                attributes: [],
-                depends: [],
-                groups: [],
-                status: 'loaded',
-                controls: [
-                    {
-                        path: 'vulnerabilities',
-                        key: 'id',
-                        tags: {
-                            cci: {
-                                path: CWE_PATH,
-                                transformer: (cwe) => (0, global_1.getCCIsForNISTTags)(nistTag(cwe))
-                            },
-                            nist: { path: CWE_PATH, transformer: nistTag },
-                            cweid: { path: CWE_PATH, transformer: parseIdentifier },
-                            cveid: { path: 'identifiers.CVE', transformer: parseIdentifier },
-                            ghsaid: { path: 'identifiers.GHSA', transformer: parseIdentifier }
-                        },
-                        descriptions: [],
-                        refs: [],
-                        source_location: {},
-                        title: { path: 'title' },
-                        id: { path: 'id' },
-                        desc: { path: 'description' },
-                        impact: {
-                            path: 'severity',
-                            transformer: (0, base_converter_1.impactMapping)(IMPACT_MAPPING)
-                        },
-                        code: {
-                            transformer: (vulnerability) => {
-                                return JSON.stringify(vulnerability, null, 2);
-                            }
-                        },
-                        results: [
-                            {
-                                status: inspecjs_1.ExecJSON.ControlResultStatus.Failed,
-                                code_desc: {
-                                    path: 'from',
-                                    transformer: (input) => {
-                                        if (Array.isArray(input)) {
-                                            return `From : [ ${input.join(' , ')} ]`;
-                                        }
-                                        else {
-                                            return '';
-                                        }
-                                    }
-                                },
-                                run_time: 0,
-                                start_time: ''
-                            }
-                        ]
-                    }
-                ],
-                sha256: ''
-            }
-        ],
-        passthrough: {
-            snyk_metadata: {
-                transformer: (data) => {
-                    return _.omit(data, ['vulnerabilities']);
-                }
-            }
-        }
-    };
-    constructor(snykJson) {
-        super(snykJson);
-    }
-}
-exports.SnykMapper = SnykMapper;
-//# sourceMappingURL=snyk-mapper.js.map

package/lib/src/snyk-mapper.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"snyk-mapper.js","sourceRoot":"","sources":["../../src/snyk-mapper.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCAAkC;AAClC,0CAA4B;AAC5B,kDAAgE;AAChE,qDAK0B;AAC1B,8DAAyD;AACzD,2CAGwB;AAExB,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC;IAClD,CAAC,MAAM,EAAE,GAAG,CAAC;IACb,CAAC,QAAQ,EAAE,GAAG,CAAC;IACf,CAAC,KAAK,EAAE,GAAG,CAAC;CACb,CAAC,CAAC;AACH,MAAM,gBAAgB,GAAG,IAAI,+BAAc,EAAE,CAAC;AAE9C,MAAM,QAAQ,GAAG,iBAAiB,CAAC;AAEnC,SAAS,eAAe,CAAC,WAAgC;IACvD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,WAAW,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5D,WAAW,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC9B,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACnC,OAAO,CAAC,KAAK,EAAE,CAAC;YAChB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;IAChB,CAAC;SAAM,CAAC;QACN,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AACD,SAAS,OAAO,CAAC,WAAsB;IACrC,OAAO,gBAAgB,CAAC,UAAU,CAChC,eAAe,CAAC,WAAW,CAAC,EAC5B,+CAAsC,CACvC,CAAC;AACJ,CAAC;AAED,MAAa,WAAW;IACtB,IAAI,CAA0B;IAC9B,aAAa,CAAoD;IACjE,YAAY,QAAgB;QAC1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC;IAED,KAAK;QACH,MAAM,OAAO,GAAyB,EAAE,CAAC;QACzC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;gBAC5B,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC;gBACtC,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;oBACrC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;gBACxC,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;YAC9B,CAAC,CAAC,CAAC;YACH,OAAO,OAAO,CAAC;QACjB,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzC,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;gBACrC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YACzC,CAAC;YACD,OAAO,MAAM,CAAC,KAAK,EAAE,CAAC;QACxB,CAAC;IACH,CAAC;CACF;AA1BD,kCA0BC;AAED,MAAa,UAAW,SAAQ,8BAAa;IAC3C,QAAQ,GAGJ;QACF,QAAQ,EAAE;YACR,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,sBAAoB;YAC7B,SAAS,EAAE,EAAC,IAAI,EAAE,aAAa,EAAC;SACjC;QACD,OAAO,EAAE,sBAAoB;QAC7B,UAAU,EAAE;YACV,QAAQ,EAAE,IAAI;SACf;QACD,QAAQ,EAAE;YACR;gBACE,IAAI,EAAE,WAAW;gBACjB,KAAK,EAAE;oBACL,WAAW,EAAE,CAAC,IAA6B,EAAU,EAAE;wBACrD,MAAM,WAAW,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,aAAa,CAAC;4BAC5C,CAAC,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,aAAa,CAAC,GAAG;4BAChD,CAAC,CAAC,EAAE,CAAC;wBACP,OAAO,GAAG,WAAW,cAAc,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;oBAC3D,CAAC;iBACF;gBACD,UAAU,EAAE,IAAI;gBAChB,OAAO,EAAE;oBACP,IAAI,EAAE,SAAS;oBACf,WAAW,EAAE,CAAC,OAAe,EAAU,EAAE;wBACvC,OAAO,iBAAiB,OAAO,EAAE,CAAC;oBACpC,CAAC;iBACF;gBACD,OAAO,EAAE,IAAI;gBACb,SAAS,EAAE,IAAI;gBACf,eAAe,EAAE,IAAI;gBACrB,QAAQ,EAAE,EAAE;gBACZ,UAAU,EAAE,EAAE;gBACd,OAAO,EAAE,EAAE;gBACX,MAAM,EAAE,EAAE;gBACV,MAAM,EAAE,QAAQ;gBAChB,QAAQ,EAAE;oBACR;wBACE,IAAI,EAAE,iBAAiB;wBACvB,GAAG,EAAE,IAAI;wBACT,IAAI,EAAE;4BACJ,GAAG,EAAE;gCACH,IAAI,EAAE,QAAQ;gCACd,WAAW,EAAE,CAAC,GAAc,EAAE,EAAE,CAC9B,IAAA,2BAAkB,EAAC,OAAO,CAAC,GAAG,CAAC,CAAC;6BACnC;4BACD,IAAI,EAAE,EAAC,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAC;4BAC5C,KAAK,EAAE,EAAC,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,eAAe,EAAC;4BACrD,KAAK,EAAE,EAAC,IAAI,EAAE,iBAAiB,EAAE,WAAW,EAAE,eAAe,EAAC;4BAC9D,MAAM,EAAE,EAAC,IAAI,EAAE,kBAAkB,EAAE,WAAW,EAAE,eAAe,EAAC;yBACjE;wBACD,YAAY,EAAE,EAAE;wBAChB,IAAI,EAAE,EAAE;wBACR,eAAe,EAAE,EAAE;wBACnB,KAAK,EAAE,EAAC,IAAI,EAAE,OAAO,EAAC;wBACtB,EAAE,EAAE,EAAC,IAAI,EAAE,IAAI,EAAC;wBAChB,IAAI,EAAE,EAAC,IAAI,EAAE,aAAa,EAAC;wBAC3B,MAAM,EAAE;4BACN,IAAI,EAAE,UAAU;4BAChB,WAAW,EAAE,IAAA,8BAAa,EAAC,cAAc,CAAC;yBAC3C;wBACD,IAAI,EAAE;4BACJ,WAAW,EAAE,CAAC,aAAsC,EAAU,EAAE;gCAC9D,OAAO,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;4BAChD,CAAC;yBACF;wBACD,OAAO,EAAE;4BACP;gCACE,MAAM,EAAE,mBAAQ,CAAC,mBAAmB,CAAC,MAAM;gCAC3C,SAAS,EAAE;oCACT,IAAI,EAAE,MAAM;oCACZ,WAAW,EAAE,CAAC,KAAc,EAAU,EAAE;wCACtC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;4CACzB,OAAO,YAAY,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;wCAC3C,CAAC;6CAAM,CAAC;4CACN,OAAO,EAAE,CAAC;wCACZ,CAAC;oCACH,CAAC;iCACF;gCACD,QAAQ,EAAE,CAAC;gCACX,UAAU,EAAE,EAAE;6BACf;yBACF;qBACF;iBACF;gBACD,MAAM,EAAE,EAAE;aACX;SACF;QACD,WAAW,EAAE;YACX,aAAa,EAAE;gBACb,WAAW,EAAE,CACX,IAA6B,EACJ,EAAE;oBAC3B,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC;gBAC3C,CAAC;aACF;SACF;KACF,CAAC;IACF,YAAY,QAAiC;QAC3C,KAAK,CAAC,QAAQ,CAAC,CAAC;IAClB,CAAC;CACF;AAzGD,gCAyGC","sourcesContent":["import {ExecJSON} from 'inspecjs';\nimport * as _ from 'lodash';\nimport {version as HeimdallToolsVersion} from '../package.json';\nimport {\n  BaseConverter,\n  ILookupPath,\n  impactMapping,\n  MappedTransform\n} from './base-converter';\nimport {CweNistMapping} from './mappings/CweNistMapping';\nimport {\n  DEFAULT_STATIC_CODE_ANALYSIS_NIST_TAGS,\n  getCCIsForNISTTags\n} from './utils/global';\n\nconst IMPACT_MAPPING: Map<string, number> = new Map([\n  ['high', 0.7],\n  ['medium', 0.5],\n  ['low', 0.3]\n]);\nconst CWE_NIST_MAPPING = new CweNistMapping();\n\nconst CWE_PATH = 'identifiers.CWE';\n\nfunction parseIdentifier(identifiers: unknown[] | unknown): string[] {\n  const output: string[] = [];\n  if (identifiers !== undefined && Array.isArray(identifiers)) {\n    identifiers.forEach((element) => {\n      const numbers = element.split('-');\n      numbers.shift();\n      output.push(numbers.join('-'));\n    });\n    return output;\n  } else {\n    return [];\n  }\n}\nfunction nistTag(identifiers: unknown[]): string[] {\n  return CWE_NIST_MAPPING.nistFilter(\n    parseIdentifier(identifiers),\n    DEFAULT_STATIC_CODE_ANALYSIS_NIST_TAGS\n  );\n}\n\nexport class SnykResults {\n  data: Record<string, unknown>;\n  customMapping?: MappedTransform<ExecJSON.Execution, ILookupPath>;\n  constructor(snykJson: string) {\n    this.data = JSON.parse(snykJson);\n  }\n\n  toHdf(): ExecJSON.Execution[] | ExecJSON.Execution {\n    const results: ExecJSON.Execution[] = [];\n    if (Array.isArray(this.data)) {\n      this.data.forEach((element) => {\n        const entry = new SnykMapper(element);\n        if (this.customMapping !== undefined) {\n          entry.setMappings(this.customMapping);\n        }\n        results.push(entry.toHdf());\n      });\n      return results;\n    } else {\n      const result = new SnykMapper(this.data);\n      if (this.customMapping !== undefined) {\n        result.setMappings(this.customMapping);\n      }\n      return result.toHdf();\n    }\n  }\n}\n\nexport class SnykMapper extends BaseConverter {\n  mappings: MappedTransform<\n    ExecJSON.Execution & {passthrough: unknown},\n    ILookupPath\n  > = {\n    platform: {\n      name: 'Heimdall Tools',\n      release: HeimdallToolsVersion,\n      target_id: {path: 'projectName'}\n    },\n    version: HeimdallToolsVersion,\n    statistics: {\n      duration: null\n    },\n    profiles: [\n      {\n        name: 'Snyk Scan',\n        title: {\n          transformer: (data: Record<string, unknown>): string => {\n            const projectName = _.has(data, 'projectName')\n              ? `Snyk Project: ${_.get(data, 'projectName')} `\n              : '';\n            return `${projectName}Snyk Path: ${_.get(data, 'path')}`;\n          }\n        },\n        maintainer: null,\n        summary: {\n          path: 'summary',\n          transformer: (summary: string): string => {\n            return `Snyk Summary: ${summary}`;\n          }\n        },\n        license: null,\n        copyright: null,\n        copyright_email: null,\n        supports: [],\n        attributes: [],\n        depends: [],\n        groups: [],\n        status: 'loaded',\n        controls: [\n          {\n            path: 'vulnerabilities',\n            key: 'id',\n            tags: {\n              cci: {\n                path: CWE_PATH,\n                transformer: (cwe: unknown[]) =>\n                  getCCIsForNISTTags(nistTag(cwe))\n              },\n              nist: {path: CWE_PATH, transformer: nistTag},\n              cweid: {path: CWE_PATH, transformer: parseIdentifier},\n              cveid: {path: 'identifiers.CVE', transformer: parseIdentifier},\n              ghsaid: {path: 'identifiers.GHSA', transformer: parseIdentifier}\n            },\n            descriptions: [],\n            refs: [],\n            source_location: {},\n            title: {path: 'title'},\n            id: {path: 'id'},\n            desc: {path: 'description'},\n            impact: {\n              path: 'severity',\n              transformer: impactMapping(IMPACT_MAPPING)\n            },\n            code: {\n              transformer: (vulnerability: Record<string, unknown>): string => {\n                return JSON.stringify(vulnerability, null, 2);\n              }\n            },\n            results: [\n              {\n                status: ExecJSON.ControlResultStatus.Failed,\n                code_desc: {\n                  path: 'from',\n                  transformer: (input: unknown): string => {\n                    if (Array.isArray(input)) {\n                      return `From : [ ${input.join(' , ')} ]`;\n                    } else {\n                      return '';\n                    }\n                  }\n                },\n                run_time: 0,\n                start_time: ''\n              }\n            ]\n          }\n        ],\n        sha256: ''\n      }\n    ],\n    passthrough: {\n      snyk_metadata: {\n        transformer: (\n          data: Record<string, unknown>\n        ): Record<string, unknown> => {\n          return _.omit(data, ['vulnerabilities']);\n        }\n      }\n    }\n  };\n  constructor(snykJson: Record<string, unknown>) {\n    super(snykJson);\n  }\n}\n"]}