@mitre/hdf-converters 2.13.0 → 3.0.1

package/lib/src/dbprotect-mapper.js

@@ -1,185 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.DBProtectMapper = void 0;
-const inspecjs_1 = require("inspecjs");
-const _ = __importStar(require("lodash"));
-const package_json_1 = require("../package.json");
-const base_converter_1 = require("./base-converter");
-const global_1 = require("./utils/global");
-const IMPACT_MAPPING = new Map([
-    ['high', 0.7],
-    ['medium', 0.5],
-    ['low', 0.3],
-    ['informational', 0]
-]);
-function compileFindings(input) {
-    const keys = _.get(input, 'dataset.metadata.item');
-    const findings = _.get(input, 'dataset.data.row');
-    let output = [];
-    if (Array.isArray(keys) && Array.isArray(findings)) {
-        const keyNames = keys.map((element) => {
-            return _.get(element, 'name');
-        });
-        output = findings.map((element) => {
-            return Object.fromEntries(keyNames.map(function (name, i) {
-                return [name, _.get(element, `value[${i}]`)];
-            }));
-        });
-    }
-    return Object.fromEntries([['data', output]]);
-}
-function formatSummary(entry) {
-    const text = [];
-    text.push(`Organization : ${_.get(entry, 'Organization')}`);
-    text.push(`Asset : ${_.get(entry, 'Check Asset')}`);
-    text.push(`Asset Type : ${_.get(entry, 'Asset Type')}`);
-    text.push(`IP Address, Port, Instance : ${_.get(entry, 'Asset Type')}`);
-    text.push(`IP Address, Port, Instance : ${_.get(entry, 'IP Address, Port, Instance')} `);
-    return text.join('\n');
-}
-function formatDesc(entry) {
-    const text = [];
-    text.push(`Task : ${_.get(entry, 'Task')}`);
-    text.push(`Check Category : ${_.get(entry, 'Check Category')}`);
-    return text.join('; ');
-}
-function getStatus(input) {
-    switch (input) {
-        case 'Fact':
-            return inspecjs_1.ExecJSON.ControlResultStatus.Skipped;
-        case 'Failed':
-            return inspecjs_1.ExecJSON.ControlResultStatus.Failed;
-        case 'Finding':
-            return inspecjs_1.ExecJSON.ControlResultStatus.Failed;
-        case 'Not A Finding':
-            return inspecjs_1.ExecJSON.ControlResultStatus.Passed;
-    }
-    return inspecjs_1.ExecJSON.ControlResultStatus.Skipped;
-}
-function getBacktrace(input) {
-    if (input === 'Failed') {
-        return 'DB Protect Failed Check';
-    }
-    else {
-        return '';
-    }
-}
-function handleBacktrace(input) {
-    if (Array.isArray(input)) {
-        input = input.map((element) => {
-            if (_.get(element, 'backtrace')[0] === '') {
-                return _.omit(element, 'backtrace');
-            }
-            else {
-                return element;
-            }
-        });
-    }
-    return input;
-}
-function idToString(id) {
-    if (typeof id === 'string' || typeof id === 'number') {
-        return id.toString();
-    }
-    else {
-        return '';
-    }
-}
-class DBProtectMapper extends base_converter_1.BaseConverter {
-    withRaw;
-    mappings = {
-        platform: {
-            name: 'Heimdall Tools',
-            release: package_json_1.version
-        },
-        version: package_json_1.version,
-        statistics: {},
-        profiles: [
-            {
-                name: { path: 'data.[0].Policy' },
-                title: { path: 'data.[0].Job Name' },
-                summary: { path: 'data.[0]', transformer: formatSummary },
-                supports: [],
-                attributes: [],
-                groups: [],
-                status: 'loaded',
-                controls: [
-                    {
-                        path: 'data',
-                        key: 'id',
-                        tags: {
-                            nist: global_1.DEFAULT_STATIC_CODE_ANALYSIS_NIST_TAGS,
-                            cci: (0, global_1.getCCIsForNISTTags)(global_1.DEFAULT_STATIC_CODE_ANALYSIS_NIST_TAGS)
-                        },
-                        refs: [],
-                        source_location: {},
-                        title: { path: 'Check' },
-                        id: { path: 'Check ID', transformer: idToString },
-                        desc: { transformer: formatDesc },
-                        impact: {
-                            path: 'Risk DV',
-                            transformer: (0, base_converter_1.impactMapping)(IMPACT_MAPPING)
-                        },
-                        code: {
-                            transformer: (vulnerability) => JSON.stringify(vulnerability, null, 2)
-                        },
-                        results: [
-                            {
-                                arrayTransformer: handleBacktrace,
-                                status: { path: 'Result Status', transformer: getStatus },
-                                code_desc: { path: 'Details' },
-                                start_time: { path: 'Date' },
-                                backtrace: [{ path: 'Result Status', transformer: getBacktrace }]
-                            }
-                        ]
-                    }
-                ],
-                sha256: ''
-            }
-        ],
-        passthrough: {
-            transformer: (data) => {
-                return { ...(this.withRaw && { raw: data }) };
-            }
-        }
-    };
-    constructor(dbProtectXml, withRaw = false) {
-        super(compileFindings((0, base_converter_1.parseXml)(dbProtectXml)));
-        this.withRaw = withRaw;
-    }
-}
-exports.DBProtectMapper = DBProtectMapper;
-//# sourceMappingURL=dbprotect-mapper.js.map

package/lib/src/dbprotect-mapper.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"dbprotect-mapper.js","sourceRoot":"","sources":["../../src/dbprotect-mapper.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCAAkC;AAClC,0CAA4B;AAC5B,kDAAgE;AAChE,qDAM0B;AAC1B,2CAGwB;AAExB,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC;IAClD,CAAC,MAAM,EAAE,GAAG,CAAC;IACb,CAAC,QAAQ,EAAE,GAAG,CAAC;IACf,CAAC,KAAK,EAAE,GAAG,CAAC;IACZ,CAAC,eAAe,EAAE,CAAC,CAAC;CACrB,CAAC,CAAC;AAEH,SAAS,eAAe,CACtB,KAA8B;IAE9B,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,uBAAuB,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;IAElD,IAAI,MAAM,GAAc,EAAE,CAAC;IAE3B,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,OAAgC,EAAU,EAAE;YACrE,OAAO,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAW,CAAC;QAC1C,CAAC,CAAC,CAAC;QACH,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAgC,EAAE,EAAE;YACzD,OAAO,MAAM,CAAC,WAAW,CACvB,QAAQ,CAAC,GAAG,CAAC,UAAU,IAAY,EAAE,CAAS;gBAC5C,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;YAC/C,CAAC,CAAC,CACH,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;AAChD,CAAC;AACD,SAAS,aAAa,CAAC,KAAc;IACnC,MAAM,IAAI,GAAG,EAAE,CAAC;IAChB,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,cAAc,CAAC,EAAE,CAAC,CAAC;IAC5D,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,aAAa,CAAC,EAAE,CAAC,CAAC;IACpD,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC;IACxD,IAAI,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC;IACxE,IAAI,CAAC,IAAI,CACP,gCAAgC,CAAC,CAAC,GAAG,CACnC,KAAK,EACL,4BAA4B,CAC7B,GAAG,CACL,CAAC;IACF,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC;AACD,SAAS,UAAU,CAAC,KAAc;IAChC,MAAM,IAAI,GAAG,EAAE,CAAC;IAChB,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IAC5C,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,gBAAgB,CAAC,EAAE,CAAC,CAAC;IAChE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC;AACD,SAAS,SAAS,CAAC,KAAc;IAC/B,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,MAAM;YACT,OAAO,mBAAQ,CAAC,mBAAmB,CAAC,OAAO,CAAC;QAC9C,KAAK,QAAQ;YACX,OAAO,mBAAQ,CAAC,mBAAmB,CAAC,MAAM,CAAC;QAC7C,KAAK,SAAS;YACZ,OAAO,mBAAQ,CAAC,mBAAmB,CAAC,MAAM,CAAC;QAC7C,KAAK,eAAe;YAClB,OAAO,mBAAQ,CAAC,mBAAmB,CAAC,MAAM,CAAC;IAC/C,CAAC;IACD,OAAO,mBAAQ,CAAC,mBAAmB,CAAC,OAAO,CAAC;AAC9C,CAAC;AACD,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvB,OAAO,yBAAyB,CAAC;IACnC,CAAC;SAAM,CAAC;QACN,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AACD,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;YAC5B,IAAI,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;gBAC1C,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;YACtC,CAAC;iBAAM,CAAC;gBACN,OAAO,OAAO,CAAC;YACjB,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,KAAiC,CAAC;AAC3C,CAAC;AACD,SAAS,UAAU,CAAC,EAAW;IAC7B,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,OAAO,EAAE,KAAK,QAAQ,EAAE,CAAC;QACrD,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC;IACvB,CAAC;SAAM,CAAC;QACN,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAa,eAAgB,SAAQ,8BAAa;IAChD,OAAO,CAAU;IAEjB,QAAQ,GAGJ;QACF,QAAQ,EAAE;YACR,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,sBAAoB;SAC9B;QACD,OAAO,EAAE,sBAAoB;QAC7B,UAAU,EAAE,EAAE;QACd,QAAQ,EAAE;YACR;gBACE,IAAI,EAAE,EAAC,IAAI,EAAE,iBAAiB,EAAC;gBAC/B,KAAK,EAAE,EAAC,IAAI,EAAE,mBAAmB,EAAC;gBAClC,OAAO,EAAE,EAAC,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,aAAa,EAAC;gBACvD,QAAQ,EAAE,EAAE;gBACZ,UAAU,EAAE,EAAE;gBACd,MAAM,EAAE,EAAE;gBACV,MAAM,EAAE,QAAQ;gBAChB,QAAQ,EAAE;oBACR;wBACE,IAAI,EAAE,MAAM;wBACZ,GAAG,EAAE,IAAI;wBACT,IAAI,EAAE;4BACJ,IAAI,EAAE,+CAAsC;4BAC5C,GAAG,EAAE,IAAA,2BAAkB,EAAC,+CAAsC,CAAC;yBAChE;wBACD,IAAI,EAAE,EAAE;wBACR,eAAe,EAAE,EAAE;wBACnB,KAAK,EAAE,EAAC,IAAI,EAAE,OAAO,EAAC;wBACtB,EAAE,EAAE,EAAC,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAC;wBAC/C,IAAI,EAAE,EAAC,WAAW,EAAE,UAAU,EAAC;wBAC/B,MAAM,EAAE;4BACN,IAAI,EAAE,SAAS;4BACf,WAAW,EAAE,IAAA,8BAAa,EAAC,cAAc,CAAC;yBAC3C;wBACD,IAAI,EAAE;4BACJ,WAAW,EAAE,CAAC,aAAsC,EAAU,EAAE,CAC9D,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;yBACzC;wBACD,OAAO,EAAE;4BACP;gCACE,gBAAgB,EAAE,eAAe;gCACjC,MAAM,EAAE,EAAC,IAAI,EAAE,eAAe,EAAE,WAAW,EAAE,SAAS,EAAC;gCACvD,SAAS,EAAE,EAAC,IAAI,EAAE,SAAS,EAAC;gCAC5B,UAAU,EAAE,EAAC,IAAI,EAAE,MAAM,EAAC;gCAC1B,SAAS,EAAE,CAAC,EAAC,IAAI,EAAE,eAAe,EAAE,WAAW,EAAE,YAAY,EAAC,CAAC;6BAChE;yBACF;qBACF;iBACF;gBACD,MAAM,EAAE,EAAE;aACX;SACF;QACD,WAAW,EAAE;YACX,WAAW,EAAE,CAAC,IAA6B,EAA2B,EAAE;gBACtE,OAAO,EAAC,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAC,GAAG,EAAE,IAAI,EAAC,CAAC,EAAC,CAAC;YAC5C,CAAC;SACF;KACF,CAAC;IACF,YAAY,YAAoB,EAAE,OAAO,GAAG,KAAK;QAC/C,KAAK,CAAC,eAAe,CAAC,IAAA,yBAAQ,EAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC/C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;CACF;AAnED,0CAmEC","sourcesContent":["import {ExecJSON} from 'inspecjs';\nimport * as _ from 'lodash';\nimport {version as HeimdallToolsVersion} from '../package.json';\nimport {\n  BaseConverter,\n  ILookupPath,\n  impactMapping,\n  MappedTransform,\n  parseXml\n} from './base-converter';\nimport {\n  DEFAULT_STATIC_CODE_ANALYSIS_NIST_TAGS,\n  getCCIsForNISTTags\n} from './utils/global';\n\nconst IMPACT_MAPPING: Map<string, number> = new Map([\n  ['high', 0.7],\n  ['medium', 0.5],\n  ['low', 0.3],\n  ['informational', 0]\n]);\n\nfunction compileFindings(\n  input: Record<string, unknown>\n): Record<string, unknown> {\n  const keys = _.get(input, 'dataset.metadata.item');\n  const findings = _.get(input, 'dataset.data.row');\n\n  let output: unknown[] = [];\n\n  if (Array.isArray(keys) && Array.isArray(findings)) {\n    const keyNames = keys.map((element: Record<string, unknown>): string => {\n      return _.get(element, 'name') as string;\n    });\n    output = findings.map((element: Record<string, unknown>) => {\n      return Object.fromEntries(\n        keyNames.map(function (name: string, i: number) {\n          return [name, _.get(element, `value[${i}]`)];\n        })\n      );\n    });\n  }\n  return Object.fromEntries([['data', output]]);\n}\nfunction formatSummary(entry: unknown): string {\n  const text = [];\n  text.push(`Organization : ${_.get(entry, 'Organization')}`);\n  text.push(`Asset : ${_.get(entry, 'Check Asset')}`);\n  text.push(`Asset Type : ${_.get(entry, 'Asset Type')}`);\n  text.push(`IP Address, Port, Instance : ${_.get(entry, 'Asset Type')}`);\n  text.push(\n    `IP Address, Port, Instance : ${_.get(\n      entry,\n      'IP Address, Port, Instance'\n    )} `\n  );\n  return text.join('\\n');\n}\nfunction formatDesc(entry: unknown): string {\n  const text = [];\n  text.push(`Task : ${_.get(entry, 'Task')}`);\n  text.push(`Check Category : ${_.get(entry, 'Check Category')}`);\n  return text.join('; ');\n}\nfunction getStatus(input: unknown): ExecJSON.ControlResultStatus {\n  switch (input) {\n    case 'Fact':\n      return ExecJSON.ControlResultStatus.Skipped;\n    case 'Failed':\n      return ExecJSON.ControlResultStatus.Failed;\n    case 'Finding':\n      return ExecJSON.ControlResultStatus.Failed;\n    case 'Not A Finding':\n      return ExecJSON.ControlResultStatus.Passed;\n  }\n  return ExecJSON.ControlResultStatus.Skipped;\n}\nfunction getBacktrace(input: unknown): string {\n  if (input === 'Failed') {\n    return 'DB Protect Failed Check';\n  } else {\n    return '';\n  }\n}\nfunction handleBacktrace(input: unknown): ExecJSON.ControlResult[] {\n  if (Array.isArray(input)) {\n    input = input.map((element) => {\n      if (_.get(element, 'backtrace')[0] === '') {\n        return _.omit(element, 'backtrace');\n      } else {\n        return element;\n      }\n    });\n  }\n  return input as ExecJSON.ControlResult[];\n}\nfunction idToString(id: unknown): string {\n  if (typeof id === 'string' || typeof id === 'number') {\n    return id.toString();\n  } else {\n    return '';\n  }\n}\n\nexport class DBProtectMapper extends BaseConverter {\n  withRaw: boolean;\n\n  mappings: MappedTransform<\n    ExecJSON.Execution & {passthrough: unknown},\n    ILookupPath\n  > = {\n    platform: {\n      name: 'Heimdall Tools',\n      release: HeimdallToolsVersion\n    },\n    version: HeimdallToolsVersion,\n    statistics: {},\n    profiles: [\n      {\n        name: {path: 'data.[0].Policy'},\n        title: {path: 'data.[0].Job Name'},\n        summary: {path: 'data.[0]', transformer: formatSummary},\n        supports: [],\n        attributes: [],\n        groups: [],\n        status: 'loaded',\n        controls: [\n          {\n            path: 'data',\n            key: 'id',\n            tags: {\n              nist: DEFAULT_STATIC_CODE_ANALYSIS_NIST_TAGS,\n              cci: getCCIsForNISTTags(DEFAULT_STATIC_CODE_ANALYSIS_NIST_TAGS)\n            },\n            refs: [],\n            source_location: {},\n            title: {path: 'Check'},\n            id: {path: 'Check ID', transformer: idToString},\n            desc: {transformer: formatDesc},\n            impact: {\n              path: 'Risk DV',\n              transformer: impactMapping(IMPACT_MAPPING)\n            },\n            code: {\n              transformer: (vulnerability: Record<string, unknown>): string =>\n                JSON.stringify(vulnerability, null, 2)\n            },\n            results: [\n              {\n                arrayTransformer: handleBacktrace,\n                status: {path: 'Result Status', transformer: getStatus},\n                code_desc: {path: 'Details'},\n                start_time: {path: 'Date'},\n                backtrace: [{path: 'Result Status', transformer: getBacktrace}]\n              }\n            ]\n          }\n        ],\n        sha256: ''\n      }\n    ],\n    passthrough: {\n      transformer: (data: Record<string, unknown>): Record<string, unknown> => {\n        return {...(this.withRaw && {raw: data})};\n      }\n    }\n  };\n  constructor(dbProtectXml: string, withRaw = false) {\n    super(compileFindings(parseXml(dbProtectXml)));\n    this.withRaw = withRaw;\n  }\n}\n"]}

package/lib/src/dependency-track-mapper.d.ts

@@ -1,10 +0,0 @@
-import { ExecJSON } from 'inspecjs';
-import { BaseConverter, ILookupPath, MappedTransform } from './base-converter';
-export declare class DependencyTrackMapper extends BaseConverter {
-    withRaw: boolean;
-    mappings: MappedTransform<ExecJSON.Execution & {
-        passthrough: unknown;
-    }, ILookupPath>;
-    constructor(dtJson: string, withRaw?: boolean);
-}
-//# sourceMappingURL=dependency-track-mapper.d.ts.map

package/lib/src/dependency-track-mapper.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"dependency-track-mapper.d.ts","sourceRoot":"","sources":["../../src/dependency-track-mapper.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,QAAQ,EAAC,MAAM,UAAU,CAAC;AAGlC,OAAO,EACL,aAAa,EACb,WAAW,EAEX,eAAe,EAChB,MAAM,kBAAkB,CAAC;AAqD1B,qBAAa,qBAAsB,SAAQ,aAAa;IACtD,OAAO,EAAE,OAAO,CAAC;IAEjB,QAAQ,EAAE,eAAe,CACvB,QAAQ,CAAC,SAAS,GAAG;QAAC,WAAW,EAAE,OAAO,CAAA;KAAC,EAC3C,WAAW,CACZ,CAkIC;gBACU,MAAM,EAAE,MAAM,EAAE,OAAO,UAAQ;CAI5C"}

package/lib/src/dependency-track-mapper.js

@@ -1,211 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.DependencyTrackMapper = void 0;
-const inspecjs_1 = require("inspecjs");
-const _ = __importStar(require("lodash"));
-const package_json_1 = require("../package.json");
-const base_converter_1 = require("./base-converter");
-const CweNistMapping_1 = require("./mappings/CweNistMapping");
-const global_1 = require("./utils/global");
-const IMPACT_MAPPING = new Map([
-    ['critical', 0.9],
-    ['high', 0.7],
-    ['medium', 0.5],
-    ['low', 0.3],
-    ['info', 0],
-    ['unassigned', 0.5]
-]);
-const CWE_NIST_MAPPING = new CweNistMapping_1.CweNistMapping();
-function nistTags(input) {
-    const cwes = input.map((cweId) => cweId.toString());
-    return CWE_NIST_MAPPING.nistFilter(cwes, global_1.DEFAULT_STATIC_CODE_ANALYSIS_NIST_TAGS);
-}
-function getVersion(file) {
-    return `${_.get(file, 'version')} ${_.get(file, 'meta.version')}`;
-}
-function getTitle(finding) {
-    const title = _.get(finding, 'vulnerability.title');
-    return `${_.get(finding, 'component.purl')}${title ? ' - ' + title : ''}`;
-}
-function getCweIds(cwes) {
-    if (!cwes) {
-        return [];
-    }
-    return cwes.map(({ cweId }) => cweId);
-}
-function getCweNames(cwes) {
-    if (!cwes) {
-        return [];
-    }
-    return cwes.map(({ name }) => name);
-}
-class DependencyTrackMapper extends base_converter_1.BaseConverter {
-    withRaw;
-    mappings = {
-        platform: {
-            name: { path: 'meta.application' },
-            release: { transformer: getVersion },
-            target_id: { path: 'meta.baseUrl' }
-        },
-        version: package_json_1.version,
-        statistics: {},
-        profiles: [
-            {
-                name: { path: 'project.uuid' },
-                version: { path: 'project.version' },
-                title: { path: 'project.name' },
-                summary: { path: 'project.description' },
-                supports: [],
-                attributes: [],
-                groups: [],
-                status: 'loaded',
-                controls: [
-                    {
-                        path: 'findings',
-                        key: 'id',
-                        tags: {
-                            // cwes not always present in vulnerability
-                            cweIds: { path: 'vulnerability.cwes', transformer: getCweIds },
-                            cweNames: { path: 'vulnerability.cwes', transformer: getCweNames },
-                            nist: {
-                                path: 'vulnerability.cwes',
-                                transformer: (cwes) => nistTags(getCweIds(cwes))
-                            },
-                            cci: {
-                                path: 'vulnerability.cwes',
-                                transformer: (cwes) => (0, global_1.getCCIsForNISTTags)(nistTags(getCweIds(cwes)))
-                            },
-                            componentUuid: { path: 'component.uuid' },
-                            componentName: { path: 'component.name' },
-                            componentGroup: { path: 'component.group' },
-                            componentVersion: { path: 'component.version' },
-                            componentLatestVersion: { path: 'component.latestVersion' },
-                            componentPurl: { path: 'component.purl' },
-                            componentCpe: { path: 'component.cpe' },
-                            componentProject: { path: 'component.project' },
-                            vulnerabilityUuid: { path: 'vulnerability.uuid' },
-                            vulnerabilitySource: { path: 'vulnerability.source' },
-                            vulnerabilityVulnId: { path: 'vulnerability.vulnId' },
-                            vulnerabilityTitle: { path: 'vulnerability.title' },
-                            vulnerabilitySubtitle: { path: 'vulnerability.subtitle' },
-                            vulnerabilityAliases: {
-                                path: 'vulnerability.aliases',
-                                transformer: (aliases) => JSON.stringify(aliases, null, 2)
-                            },
-                            vulnerabilityCvssV2BaseScore: {
-                                path: 'vulnerability.cvssV2BaseScore'
-                            },
-                            vulnerabilityCvssV3BaseScore: {
-                                path: 'vulnerability.cvssV3BaseScore'
-                            },
-                            vulnerabilityOwaspLikelihoodScore: {
-                                path: 'vulnerability.owaspLikelihoodScore'
-                            },
-                            vulnerabilityOwaspTechnicalImpactScore: {
-                                path: 'vulnerability.owaspTechnicalImpactScore'
-                            },
-                            vulnerabilityOwaspBusinessImpactScore: {
-                                path: 'vulnerability.owaspBusinessImpactScore'
-                            },
-                            vulnerabilitySeverityRank: { path: 'vulnerability.severityRank' },
-                            vulnerabilityEpssScore: { path: 'vulnerability.epssScore' },
-                            vulnerabilityEpssPercentile: {
-                                path: 'vulnerability.epssPercentile'
-                            },
-                            // Schema is deprecating these attributes: cweId, cweName
-                            vulnerabilityCweId: { path: 'vulnerability.cweId' },
-                            vulnerabilityCweName: { path: 'vulnerability.cweName' },
-                            attributionAnalyzerIdentity: {
-                                path: 'attribution.analyzerIdentity'
-                            },
-                            attributionAttributedOn: { path: 'attribution.attributedOn' },
-                            attributionAlternateIdentifier: {
-                                path: 'attribution.alternateIdentifier'
-                            },
-                            attributionReferenceUrl: { path: 'attribution.referenceUrl' },
-                            analysisState: { path: 'analysis.state' },
-                            analysisIsSuppressed: { path: 'analysis.isSuppressed' }
-                        },
-                        refs: [],
-                        source_location: {},
-                        title: { transformer: getTitle },
-                        id: { path: 'matrix' },
-                        desc: { path: 'vulnerability.description' },
-                        descriptions: [
-                            {
-                                data: { path: 'vulnerability.description' },
-                                label: 'check'
-                            },
-                            {
-                                data: { path: 'vulnerability.recommendation' },
-                                label: 'fix'
-                            }
-                        ],
-                        impact: {
-                            path: 'vulnerability.severity',
-                            transformer: (0, base_converter_1.impactMapping)(IMPACT_MAPPING)
-                        },
-                        code: {
-                            transformer: (finding) => JSON.stringify(finding, null, 2)
-                        },
-                        results: [
-                            {
-                                status: inspecjs_1.ExecJSON.ControlResultStatus.Failed,
-                                // recommendation not always present in vulnerability
-                                code_desc: { path: 'vulnerability.recommendation' },
-                                start_time: { path: '$.meta.timestamp' }
-                            }
-                        ]
-                    }
-                ],
-                sha256: ''
-            }
-        ],
-        passthrough: {
-            transformer: (data) => {
-                return {
-                    ...(this.withRaw && { raw: data })
-                };
-            }
-        }
-    };
-    constructor(dtJson, withRaw = false) {
-        super(JSON.parse(dtJson));
-        this.withRaw = withRaw;
-    }
-}
-exports.DependencyTrackMapper = DependencyTrackMapper;
-//# sourceMappingURL=dependency-track-mapper.js.map

package/lib/src/dependency-track-mapper.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"dependency-track-mapper.js","sourceRoot":"","sources":["../../src/dependency-track-mapper.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCAAkC;AAClC,0CAA4B;AAC5B,kDAAgE;AAChE,qDAK0B;AAC1B,8DAAyD;AACzD,2CAGwB;AAOxB,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC;IAClD,CAAC,UAAU,EAAE,GAAG,CAAC;IACjB,CAAC,MAAM,EAAE,GAAG,CAAC;IACb,CAAC,QAAQ,EAAE,GAAG,CAAC;IACf,CAAC,KAAK,EAAE,GAAG,CAAC;IACZ,CAAC,MAAM,EAAE,CAAC,CAAC;IACX,CAAC,YAAY,EAAE,GAAG,CAAC;CACpB,CAAC,CAAC;AACH,MAAM,gBAAgB,GAAG,IAAI,+BAAc,EAAE,CAAC;AAE9C,SAAS,QAAQ,CAAC,KAAe;IAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC5D,OAAO,gBAAgB,CAAC,UAAU,CAChC,IAAI,EACJ,+CAAsC,CACvC,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,IAAa;IAC/B,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,CAAC;AACpE,CAAC;AAED,SAAS,QAAQ,CAAC,OAAgB;IAChC,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;IACpD,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AAC5E,CAAC;AAED,SAAS,SAAS,CAAC,IAA6B;IAC9C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAC,KAAK,EAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,WAAW,CAAC,IAA6B;IAChD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAC,IAAI,EAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;AACpC,CAAC;AAED,MAAa,qBAAsB,SAAQ,8BAAa;IACtD,OAAO,CAAU;IAEjB,QAAQ,GAGJ;QACF,QAAQ,EAAE;YACR,IAAI,EAAE,EAAC,IAAI,EAAE,kBAAkB,EAAC;YAChC,OAAO,EAAE,EAAC,WAAW,EAAE,UAAU,EAAC;YAClC,SAAS,EAAE,EAAC,IAAI,EAAE,cAAc,EAAC;SAClC;QACD,OAAO,EAAE,sBAAoB;QAC7B,UAAU,EAAE,EAAE;QACd,QAAQ,EAAE;YACR;gBACE,IAAI,EAAE,EAAC,IAAI,EAAE,cAAc,EAAC;gBAC5B,OAAO,EAAE,EAAC,IAAI,EAAE,iBAAiB,EAAC;gBAClC,KAAK,EAAE,EAAC,IAAI,EAAE,cAAc,EAAC;gBAC7B,OAAO,EAAE,EAAC,IAAI,EAAE,qBAAqB,EAAC;gBACtC,QAAQ,EAAE,EAAE;gBACZ,UAAU,EAAE,EAAE;gBACd,MAAM,EAAE,EAAE;gBACV,MAAM,EAAE,QAAQ;gBAChB,QAAQ,EAAE;oBACR;wBACE,IAAI,EAAE,UAAU;wBAChB,GAAG,EAAE,IAAI;wBACT,IAAI,EAAE;4BACJ,2CAA2C;4BAC3C,MAAM,EAAE,EAAC,IAAI,EAAE,oBAAoB,EAAE,WAAW,EAAE,SAAS,EAAC;4BAC5D,QAAQ,EAAE,EAAC,IAAI,EAAE,oBAAoB,EAAE,WAAW,EAAE,WAAW,EAAC;4BAChE,IAAI,EAAE;gCACJ,IAAI,EAAE,oBAAoB;gCAC1B,WAAW,EAAE,CAAC,IAAiB,EAAE,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;6BAC9D;4BACD,GAAG,EAAE;gCACH,IAAI,EAAE,oBAAoB;gCAC1B,WAAW,EAAE,CAAC,IAAiB,EAAE,EAAE,CACjC,IAAA,2BAAkB,EAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;6BAChD;4BACD,aAAa,EAAE,EAAC,IAAI,EAAE,gBAAgB,EAAC;4BACvC,aAAa,EAAE,EAAC,IAAI,EAAE,gBAAgB,EAAC;4BACvC,cAAc,EAAE,EAAC,IAAI,EAAE,iBAAiB,EAAC;4BACzC,gBAAgB,EAAE,EAAC,IAAI,EAAE,mBAAmB,EAAC;4BAC7C,sBAAsB,EAAE,EAAC,IAAI,EAAE,yBAAyB,EAAC;4BACzD,aAAa,EAAE,EAAC,IAAI,EAAE,gBAAgB,EAAC;4BACvC,YAAY,EAAE,EAAC,IAAI,EAAE,eAAe,EAAC;4BACrC,gBAAgB,EAAE,EAAC,IAAI,EAAE,mBAAmB,EAAC;4BAC7C,iBAAiB,EAAE,EAAC,IAAI,EAAE,oBAAoB,EAAC;4BAC/C,mBAAmB,EAAE,EAAC,IAAI,EAAE,sBAAsB,EAAC;4BACnD,mBAAmB,EAAE,EAAC,IAAI,EAAE,sBAAsB,EAAC;4BACnD,kBAAkB,EAAE,EAAC,IAAI,EAAE,qBAAqB,EAAC;4BACjD,qBAAqB,EAAE,EAAC,IAAI,EAAE,wBAAwB,EAAC;4BACvD,oBAAoB,EAAE;gCACpB,IAAI,EAAE,uBAAuB;gCAC7B,WAAW,EAAE,CAAC,OAAsC,EAAU,EAAE,CAC9D,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;6BACnC;4BACD,4BAA4B,EAAE;gCAC5B,IAAI,EAAE,+BAA+B;6BACtC;4BACD,4BAA4B,EAAE;gCAC5B,IAAI,EAAE,+BAA+B;6BACtC;4BACD,iCAAiC,EAAE;gCACjC,IAAI,EAAE,oCAAoC;6BAC3C;4BACD,sCAAsC,EAAE;gCACtC,IAAI,EAAE,yCAAyC;6BAChD;4BACD,qCAAqC,EAAE;gCACrC,IAAI,EAAE,wCAAwC;6BAC/C;4BACD,yBAAyB,EAAE,EAAC,IAAI,EAAE,4BAA4B,EAAC;4BAC/D,sBAAsB,EAAE,EAAC,IAAI,EAAE,yBAAyB,EAAC;4BACzD,2BAA2B,EAAE;gCAC3B,IAAI,EAAE,8BAA8B;6BACrC;4BACD,yDAAyD;4BACzD,kBAAkB,EAAE,EAAC,IAAI,EAAE,qBAAqB,EAAC;4BACjD,oBAAoB,EAAE,EAAC,IAAI,EAAE,uBAAuB,EAAC;4BACrD,2BAA2B,EAAE;gCAC3B,IAAI,EAAE,8BAA8B;6BACrC;4BACD,uBAAuB,EAAE,EAAC,IAAI,EAAE,0BAA0B,EAAC;4BAC3D,8BAA8B,EAAE;gCAC9B,IAAI,EAAE,iCAAiC;6BACxC;4BACD,uBAAuB,EAAE,EAAC,IAAI,EAAE,0BAA0B,EAAC;4BAC3D,aAAa,EAAE,EAAC,IAAI,EAAE,gBAAgB,EAAC;4BACvC,oBAAoB,EAAE,EAAC,IAAI,EAAE,uBAAuB,EAAC;yBACtD;wBACD,IAAI,EAAE,EAAE;wBACR,eAAe,EAAE,EAAE;wBACnB,KAAK,EAAE,EAAC,WAAW,EAAE,QAAQ,EAAC;wBAC9B,EAAE,EAAE,EAAC,IAAI,EAAE,QAAQ,EAAC;wBACpB,IAAI,EAAE,EAAC,IAAI,EAAE,2BAA2B,EAAC;wBACzC,YAAY,EAAE;4BACZ;gCACE,IAAI,EAAE,EAAC,IAAI,EAAE,2BAA2B,EAAC;gCACzC,KAAK,EAAE,OAAO;6BACf;4BACD;gCACE,IAAI,EAAE,EAAC,IAAI,EAAE,8BAA8B,EAAC;gCAC5C,KAAK,EAAE,KAAK;6BACb;yBACF;wBACD,MAAM,EAAE;4BACN,IAAI,EAAE,wBAAwB;4BAC9B,WAAW,EAAE,IAAA,8BAAa,EAAC,cAAc,CAAC;yBAC3C;wBACD,IAAI,EAAE;4BACJ,WAAW,EAAE,CAAC,OAAgC,EAAU,EAAE,CACxD,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;yBACnC;wBACD,OAAO,EAAE;4BACP;gCACE,MAAM,EAAE,mBAAQ,CAAC,mBAAmB,CAAC,MAAM;gCAC3C,qDAAqD;gCACrD,SAAS,EAAE,EAAC,IAAI,EAAE,8BAA8B,EAAC;gCACjD,UAAU,EAAE,EAAC,IAAI,EAAE,kBAAkB,EAAC;6BACvC;yBACF;qBACF;iBACF;gBACD,MAAM,EAAE,EAAE;aACX;SACF;QACD,WAAW,EAAE;YACX,WAAW,EAAE,CAAC,IAA6B,EAA2B,EAAE;gBACtE,OAAO;oBACL,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAC,GAAG,EAAE,IAAI,EAAC,CAAC;iBACjC,CAAC;YACJ,CAAC;SACF;KACF,CAAC;IACF,YAAY,MAAc,EAAE,OAAO,GAAG,KAAK;QACzC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QAC1B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;CACF;AA7ID,sDA6IC","sourcesContent":["import {ExecJSON} from 'inspecjs';\nimport * as _ from 'lodash';\nimport {version as HeimdallToolsVersion} from '../package.json';\nimport {\n  BaseConverter,\n  ILookupPath,\n  impactMapping,\n  MappedTransform\n} from './base-converter';\nimport {CweNistMapping} from './mappings/CweNistMapping';\nimport {\n  DEFAULT_STATIC_CODE_ANALYSIS_NIST_TAGS,\n  getCCIsForNISTTags\n} from './utils/global';\n\ninterface ICweEntry {\n  cweId: number;\n  name: string;\n}\n\nconst IMPACT_MAPPING: Map<string, number> = new Map([\n  ['critical', 0.9],\n  ['high', 0.7],\n  ['medium', 0.5],\n  ['low', 0.3],\n  ['info', 0],\n  ['unassigned', 0.5]\n]);\nconst CWE_NIST_MAPPING = new CweNistMapping();\n\nfunction nistTags(input: number[]): string[] {\n  const cwes = input.map((cweId: number) => cweId.toString());\n  return CWE_NIST_MAPPING.nistFilter(\n    cwes,\n    DEFAULT_STATIC_CODE_ANALYSIS_NIST_TAGS\n  );\n}\n\nfunction getVersion(file: unknown): string {\n  return `${_.get(file, 'version')} ${_.get(file, 'meta.version')}`;\n}\n\nfunction getTitle(finding: unknown) {\n  const title = _.get(finding, 'vulnerability.title');\n  return `${_.get(finding, 'component.purl')}${title ? ' - ' + title : ''}`;\n}\n\nfunction getCweIds(cwes: ICweEntry[] | undefined) {\n  if (!cwes) {\n    return [];\n  }\n  return cwes.map(({cweId}) => cweId);\n}\n\nfunction getCweNames(cwes: ICweEntry[] | undefined) {\n  if (!cwes) {\n    return [];\n  }\n  return cwes.map(({name}) => name);\n}\n\nexport class DependencyTrackMapper extends BaseConverter {\n  withRaw: boolean;\n\n  mappings: MappedTransform<\n    ExecJSON.Execution & {passthrough: unknown},\n    ILookupPath\n  > = {\n    platform: {\n      name: {path: 'meta.application'},\n      release: {transformer: getVersion},\n      target_id: {path: 'meta.baseUrl'}\n    },\n    version: HeimdallToolsVersion,\n    statistics: {},\n    profiles: [\n      {\n        name: {path: 'project.uuid'},\n        version: {path: 'project.version'},\n        title: {path: 'project.name'},\n        summary: {path: 'project.description'},\n        supports: [],\n        attributes: [],\n        groups: [],\n        status: 'loaded',\n        controls: [\n          {\n            path: 'findings',\n            key: 'id',\n            tags: {\n              // cwes not always present in vulnerability\n              cweIds: {path: 'vulnerability.cwes', transformer: getCweIds},\n              cweNames: {path: 'vulnerability.cwes', transformer: getCweNames},\n              nist: {\n                path: 'vulnerability.cwes',\n                transformer: (cwes: ICweEntry[]) => nistTags(getCweIds(cwes))\n              },\n              cci: {\n                path: 'vulnerability.cwes',\n                transformer: (cwes: ICweEntry[]) =>\n                  getCCIsForNISTTags(nistTags(getCweIds(cwes)))\n              },\n              componentUuid: {path: 'component.uuid'},\n              componentName: {path: 'component.name'},\n              componentGroup: {path: 'component.group'},\n              componentVersion: {path: 'component.version'},\n              componentLatestVersion: {path: 'component.latestVersion'},\n              componentPurl: {path: 'component.purl'},\n              componentCpe: {path: 'component.cpe'},\n              componentProject: {path: 'component.project'},\n              vulnerabilityUuid: {path: 'vulnerability.uuid'},\n              vulnerabilitySource: {path: 'vulnerability.source'},\n              vulnerabilityVulnId: {path: 'vulnerability.vulnId'},\n              vulnerabilityTitle: {path: 'vulnerability.title'},\n              vulnerabilitySubtitle: {path: 'vulnerability.subtitle'},\n              vulnerabilityAliases: {\n                path: 'vulnerability.aliases',\n                transformer: (aliases: Array<Record<string, string>>): string =>\n                  JSON.stringify(aliases, null, 2)\n              },\n              vulnerabilityCvssV2BaseScore: {\n                path: 'vulnerability.cvssV2BaseScore'\n              },\n              vulnerabilityCvssV3BaseScore: {\n                path: 'vulnerability.cvssV3BaseScore'\n              },\n              vulnerabilityOwaspLikelihoodScore: {\n                path: 'vulnerability.owaspLikelihoodScore'\n              },\n              vulnerabilityOwaspTechnicalImpactScore: {\n                path: 'vulnerability.owaspTechnicalImpactScore'\n              },\n              vulnerabilityOwaspBusinessImpactScore: {\n                path: 'vulnerability.owaspBusinessImpactScore'\n              },\n              vulnerabilitySeverityRank: {path: 'vulnerability.severityRank'},\n              vulnerabilityEpssScore: {path: 'vulnerability.epssScore'},\n              vulnerabilityEpssPercentile: {\n                path: 'vulnerability.epssPercentile'\n              },\n              // Schema is deprecating these attributes: cweId, cweName\n              vulnerabilityCweId: {path: 'vulnerability.cweId'},\n              vulnerabilityCweName: {path: 'vulnerability.cweName'},\n              attributionAnalyzerIdentity: {\n                path: 'attribution.analyzerIdentity'\n              },\n              attributionAttributedOn: {path: 'attribution.attributedOn'},\n              attributionAlternateIdentifier: {\n                path: 'attribution.alternateIdentifier'\n              },\n              attributionReferenceUrl: {path: 'attribution.referenceUrl'},\n              analysisState: {path: 'analysis.state'},\n              analysisIsSuppressed: {path: 'analysis.isSuppressed'}\n            },\n            refs: [],\n            source_location: {},\n            title: {transformer: getTitle},\n            id: {path: 'matrix'},\n            desc: {path: 'vulnerability.description'},\n            descriptions: [\n              {\n                data: {path: 'vulnerability.description'},\n                label: 'check'\n              },\n              {\n                data: {path: 'vulnerability.recommendation'},\n                label: 'fix'\n              }\n            ],\n            impact: {\n              path: 'vulnerability.severity',\n              transformer: impactMapping(IMPACT_MAPPING)\n            },\n            code: {\n              transformer: (finding: Record<string, unknown>): string =>\n                JSON.stringify(finding, null, 2)\n            },\n            results: [\n              {\n                status: ExecJSON.ControlResultStatus.Failed,\n                // recommendation not always present in vulnerability\n                code_desc: {path: 'vulnerability.recommendation'},\n                start_time: {path: '$.meta.timestamp'}\n              }\n            ]\n          }\n        ],\n        sha256: ''\n      }\n    ],\n    passthrough: {\n      transformer: (data: Record<string, unknown>): Record<string, unknown> => {\n        return {\n          ...(this.withRaw && {raw: data})\n        };\n      }\n    }\n  };\n  constructor(dtJson: string, withRaw = false) {\n    super(JSON.parse(dtJson));\n    this.withRaw = withRaw;\n  }\n}\n"]}

package/lib/src/fortify-mapper.d.ts

@@ -1,17 +0,0 @@
-import { ExecJSON } from 'inspecjs';
-import { BaseConverter, ILookupPath, MappedTransform } from './base-converter';
-export declare class FortifyResults {
-    readonly fvdl: string;
-    readonly withRaw: boolean;
-    constructor(fvdl: string, withRaw?: boolean);
-    toHdf(): Promise<ExecJSON.Execution>;
-}
-export declare class FortifyMapper extends BaseConverter {
-    startTime: string;
-    withRaw: boolean;
-    mappings: MappedTransform<ExecJSON.Execution & {
-        passthrough: unknown;
-    }, ILookupPath>;
-    constructor(fvdl: string, withRaw?: boolean);
-}
-//# sourceMappingURL=fortify-mapper.d.ts.map

package/lib/src/fortify-mapper.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"fortify-mapper.d.ts","sourceRoot":"","sources":["../../src/fortify-mapper.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,QAAQ,EAAC,MAAM,UAAU,CAAC;AAGlC,OAAO,EACL,aAAa,EACb,WAAW,EACX,eAAe,EAGhB,MAAM,kBAAkB,CAAC;AAgH1B,qBAAa,cAAc;IACb,QAAQ,CAAC,IAAI,EAAE,MAAM;IAAE,QAAQ,CAAC,OAAO;gBAA9B,IAAI,EAAE,MAAM,EAAW,OAAO,UAAQ;IAErD,KAAK,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;CAK3C;AAED,qBAAa,aAAc,SAAQ,aAAa;IAC9C,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IAEjB,QAAQ,EAAE,eAAe,CACvB,QAAQ,CAAC,SAAS,GAAG;QAAC,WAAW,EAAE,OAAO,CAAA;KAAC,EAC3C,WAAW,CACZ,CAqFC;gBACU,IAAI,EAAE,MAAM,EAAE,OAAO,UAAQ;CAY1C"}