@mitre/hdf-converters 2.13.0 → 3.0.1

package/lib/src/trufflehog-mapper.d.ts

@@ -1,16 +0,0 @@
-import { ExecJSON } from 'inspecjs';
-import { BaseConverter, ILookupPath, MappedTransform } from './base-converter';
-export declare class TrufflehogResults {
-    data: Record<string, unknown>;
-    withRaw: boolean;
-    constructor(trufflehogJson: string, withRaw?: boolean);
-    toHdf(): ExecJSON.Execution;
-}
-export declare class TrufflehogMapper extends BaseConverter {
-    withRaw: boolean;
-    mappings: MappedTransform<ExecJSON.Execution & {
-        passthrough: unknown;
-    }, ILookupPath>;
-    constructor(trufflehogJson: Record<string, unknown>, withRaw?: boolean);
-}
-//# sourceMappingURL=trufflehog-mapper.d.ts.map

package/lib/src/trufflehog-mapper.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"trufflehog-mapper.d.ts","sourceRoot":"","sources":["../../src/trufflehog-mapper.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,QAAQ,EAAC,MAAM,UAAU,CAAC;AAGlC,OAAO,EAAC,aAAa,EAAE,WAAW,EAAE,eAAe,EAAC,MAAM,kBAAkB,CAAC;AAE7E,qBAAa,iBAAiB;IAC5B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,OAAO,EAAE,OAAO,CAAC;gBACL,cAAc,EAAE,MAAM,EAAE,OAAO,UAAQ;IAkBnD,KAAK,IAAI,QAAQ,CAAC,SAAS;CAG5B;AAED,qBAAa,gBAAiB,SAAQ,aAAa;IACjD,OAAO,EAAE,OAAO,CAAC;IAEjB,QAAQ,EAAE,eAAe,CACvB,QAAQ,CAAC,SAAS,GAAG;QAAC,WAAW,EAAE,OAAO,CAAA;KAAC,EAC3C,WAAW,CACZ,CAgFC;gBACU,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,UAAQ;CAIrE"}

package/lib/src/trufflehog-mapper.js

@@ -1,115 +0,0 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.TrufflehogMapper = exports.TrufflehogResults = void 0;
-const inspecjs_1 = require("inspecjs");
-const lodash_1 = __importDefault(require("lodash"));
-const package_json_1 = require("../package.json");
-const base_converter_1 = require("./base-converter");
-class TrufflehogResults {
-    data;
-    withRaw;
-    constructor(trufflehogJson, withRaw = false) {
-        let parsedData = {};
-        try {
-            parsedData = JSON.parse(trufflehogJson.trim());
-        }
-        catch (e) {
-            parsedData = trufflehogJson
-                .trim()
-                .split('\n')
-                .map((line) => JSON.parse(line.trim()));
-        }
-        this.withRaw = withRaw;
-        if (lodash_1.default.isArray(parsedData)) {
-            this.data = { wrapper: parsedData };
-        }
-        else {
-            this.data = { wrapper: [parsedData] };
-        }
-    }
-    toHdf() {
-        return new TrufflehogMapper(this.data, this.withRaw).toHdf();
-    }
-}
-exports.TrufflehogResults = TrufflehogResults;
-class TrufflehogMapper extends base_converter_1.BaseConverter {
-    withRaw;
-    mappings = {
-        platform: {
-            name: 'Heimdall Tools',
-            release: package_json_1.version
-        },
-        version: package_json_1.version,
-        statistics: {},
-        profiles: [
-            {
-                name: {
-                    path: 'wrapper[0]',
-                    transformer: (data) => `Source ID: ${lodash_1.default.get(data, 'SourceID')}, Source Name: ${lodash_1.default.get(data, 'SourceName')}`
-                },
-                title: { path: 'wrapper[0].SourceName' },
-                supports: [],
-                attributes: [],
-                groups: [],
-                status: 'loaded',
-                controls: [
-                    {
-                        key: 'id',
-                        path: 'wrapper',
-                        tags: {
-                            nist: ['IA-5(7)'],
-                            cci: ['CCI-004069', 'CCI-000202', 'CCI-000203', 'CCI-002367'],
-                            severity: 'medium'
-                        },
-                        refs: [],
-                        source_location: {},
-                        title: {
-                            transformer: (data) => `Found ${lodash_1.default.get(data, 'DetectorName')} secret using ${lodash_1.default.get(data, 'DecoderName')} decoder`
-                        },
-                        id: {
-                            transformer: (data) => `${lodash_1.default.get(data, 'DetectorName')} ${lodash_1.default.get(data, 'DecoderName')}`
-                        },
-                        impact: 0.5,
-                        results: [
-                            {
-                                status: inspecjs_1.ExecJSON.ControlResultStatus.Failed,
-                                code_desc: {
-                                    transformer: (data) => `${JSON.stringify(lodash_1.default.get(data, 'SourceMetadata'), null, 2)}`
-                                },
-                                message: {
-                                    transformer: (data) => `${JSON.stringify(lodash_1.default.omitBy(lodash_1.default.pick(data, [
-                                        'Verified',
-                                        'VerificationError',
-                                        'Raw',
-                                        'RawV2',
-                                        'Redacted',
-                                        'ExtraData',
-                                        'StructuredData'
-                                    ]), (value) => value === null || value === ''), null, 2)}`
-                                },
-                                start_time: ''
-                            }
-                        ]
-                    }
-                ],
-                sha256: ''
-            }
-        ],
-        passthrough: {
-            transformer: (data) => {
-                return {
-                    ...(this.withRaw && { raw: data })
-                };
-            }
-        }
-    };
-    constructor(trufflehogJson, withRaw = false) {
-        super(trufflehogJson, true);
-        this.withRaw = withRaw;
-    }
-}
-exports.TrufflehogMapper = TrufflehogMapper;
-//# sourceMappingURL=trufflehog-mapper.js.map

package/lib/src/trufflehog-mapper.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"trufflehog-mapper.js","sourceRoot":"","sources":["../../src/trufflehog-mapper.ts"],"names":[],"mappings":";;;;;;AAAA,uCAAkC;AAClC,oDAAuB;AACvB,kDAAgE;AAChE,qDAA6E;AAE7E,MAAa,iBAAiB;IAC5B,IAAI,CAA0B;IAC9B,OAAO,CAAU;IACjB,YAAY,cAAsB,EAAE,OAAO,GAAG,KAAK;QACjD,IAAI,UAAU,GAAG,EAAE,CAAC;QACpB,IAAI,CAAC;YACH,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,UAAU,GAAG,cAAc;iBACxB,IAAI,EAAE;iBACN,KAAK,CAAC,IAAI,CAAC;iBACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC5C,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,gBAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YAC1B,IAAI,CAAC,IAAI,GAAG,EAAC,OAAO,EAAE,UAAU,EAAC,CAAC;QACpC,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,IAAI,GAAG,EAAC,OAAO,EAAE,CAAC,UAAU,CAAC,EAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAED,KAAK;QACH,OAAO,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,CAAC;IAC/D,CAAC;CACF;AAxBD,8CAwBC;AAED,MAAa,gBAAiB,SAAQ,8BAAa;IACjD,OAAO,CAAU;IAEjB,QAAQ,GAGJ;QACF,QAAQ,EAAE;YACR,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,sBAAoB;SAC9B;QACD,OAAO,EAAE,sBAAoB;QAC7B,UAAU,EAAE,EAAE;QACd,QAAQ,EAAE;YACR;gBACE,IAAI,EAAE;oBACJ,IAAI,EAAE,YAAY;oBAClB,WAAW,EAAE,CAAC,IAA6B,EAAU,EAAE,CACrD,cAAc,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,kBAAkB,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE;iBACrF;gBACD,KAAK,EAAE,EAAC,IAAI,EAAE,uBAAuB,EAAC;gBACtC,QAAQ,EAAE,EAAE;gBACZ,UAAU,EAAE,EAAE;gBACd,MAAM,EAAE,EAAE;gBACV,MAAM,EAAE,QAAQ;gBAChB,QAAQ,EAAE;oBACR;wBACE,GAAG,EAAE,IAAI;wBACT,IAAI,EAAE,SAAS;wBACf,IAAI,EAAE;4BACJ,IAAI,EAAE,CAAC,SAAS,CAAC;4BACjB,GAAG,EAAE,CAAC,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,CAAC;4BAC7D,QAAQ,EAAE,QAAQ;yBACnB;wBACD,IAAI,EAAE,EAAE;wBACR,eAAe,EAAE,EAAE;wBACnB,KAAK,EAAE;4BACL,WAAW,EAAE,CAAC,IAA6B,EAAU,EAAE,CACrD,SAAS,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,cAAc,CAAC,iBAAiB,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,aAAa,CAAC,UAAU;yBAC5F;wBACD,EAAE,EAAE;4BACF,WAAW,EAAE,CAAC,IAA6B,EAAU,EAAE,CACrD,GAAG,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,cAAc,CAAC,IAAI,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE;yBACjE;wBACD,MAAM,EAAE,GAAG;wBACX,OAAO,EAAE;4BACP;gCACE,MAAM,EAAE,mBAAQ,CAAC,mBAAmB,CAAC,MAAM;gCAC3C,SAAS,EAAE;oCACT,WAAW,EAAE,CAAC,IAA6B,EAAU,EAAE,CACrD,GAAG,IAAI,CAAC,SAAS,CAAC,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,gBAAgB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;iCAC9D;gCACD,OAAO,EAAE;oCACP,WAAW,EAAE,CAAC,IAA6B,EAAU,EAAE,CACrD,GAAG,IAAI,CAAC,SAAS,CACf,gBAAC,CAAC,MAAM,CACN,gBAAC,CAAC,IAAI,CAAC,IAAI,EAAE;wCACX,UAAU;wCACV,mBAAmB;wCACnB,KAAK;wCACL,OAAO;wCACP,UAAU;wCACV,WAAW;wCACX,gBAAgB;qCACjB,CAAC,EACF,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE,CAC1C,EACD,IAAI,EACJ,CAAC,CACF,EAAE;iCACN;gCACD,UAAU,EAAE,EAAE;6BACf;yBACF;qBACF;iBACF;gBACD,MAAM,EAAE,EAAE;aACX;SACF;QACD,WAAW,EAAE;YACX,WAAW,EAAE,CAAC,IAAyB,EAA2B,EAAE;gBAClE,OAAO;oBACL,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAC,GAAG,EAAE,IAAI,EAAC,CAAC;iBACjC,CAAC;YACJ,CAAC;SACF;KACF,CAAC;IACF,YAAY,cAAuC,EAAE,OAAO,GAAG,KAAK;QAClE,KAAK,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;QAC5B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;CACF;AA3FD,4CA2FC","sourcesContent":["import {ExecJSON} from 'inspecjs';\nimport _ from 'lodash';\nimport {version as HeimdallToolsVersion} from '../package.json';\nimport {BaseConverter, ILookupPath, MappedTransform} from './base-converter';\n\nexport class TrufflehogResults {\n  data: Record<string, unknown>;\n  withRaw: boolean;\n  constructor(trufflehogJson: string, withRaw = false) {\n    let parsedData = {};\n    try {\n      parsedData = JSON.parse(trufflehogJson.trim());\n    } catch (e) {\n      parsedData = trufflehogJson\n        .trim()\n        .split('\\n')\n        .map((line) => JSON.parse(line.trim()));\n    }\n    this.withRaw = withRaw;\n    if (_.isArray(parsedData)) {\n      this.data = {wrapper: parsedData};\n    } else {\n      this.data = {wrapper: [parsedData]};\n    }\n  }\n\n  toHdf(): ExecJSON.Execution {\n    return new TrufflehogMapper(this.data, this.withRaw).toHdf();\n  }\n}\n\nexport class TrufflehogMapper extends BaseConverter {\n  withRaw: boolean;\n\n  mappings: MappedTransform<\n    ExecJSON.Execution & {passthrough: unknown},\n    ILookupPath\n  > = {\n    platform: {\n      name: 'Heimdall Tools',\n      release: HeimdallToolsVersion\n    },\n    version: HeimdallToolsVersion,\n    statistics: {},\n    profiles: [\n      {\n        name: {\n          path: 'wrapper[0]',\n          transformer: (data: Record<string, unknown>): string =>\n            `Source ID: ${_.get(data, 'SourceID')}, Source Name: ${_.get(data, 'SourceName')}`\n        },\n        title: {path: 'wrapper[0].SourceName'},\n        supports: [],\n        attributes: [],\n        groups: [],\n        status: 'loaded',\n        controls: [\n          {\n            key: 'id',\n            path: 'wrapper',\n            tags: {\n              nist: ['IA-5(7)'],\n              cci: ['CCI-004069', 'CCI-000202', 'CCI-000203', 'CCI-002367'],\n              severity: 'medium'\n            },\n            refs: [],\n            source_location: {},\n            title: {\n              transformer: (data: Record<string, unknown>): string =>\n                `Found ${_.get(data, 'DetectorName')} secret using ${_.get(data, 'DecoderName')} decoder`\n            },\n            id: {\n              transformer: (data: Record<string, unknown>): string =>\n                `${_.get(data, 'DetectorName')} ${_.get(data, 'DecoderName')}`\n            },\n            impact: 0.5,\n            results: [\n              {\n                status: ExecJSON.ControlResultStatus.Failed,\n                code_desc: {\n                  transformer: (data: Record<string, unknown>): string =>\n                    `${JSON.stringify(_.get(data, 'SourceMetadata'), null, 2)}`\n                },\n                message: {\n                  transformer: (data: Record<string, unknown>): string =>\n                    `${JSON.stringify(\n                      _.omitBy(\n                        _.pick(data, [\n                          'Verified',\n                          'VerificationError',\n                          'Raw',\n                          'RawV2',\n                          'Redacted',\n                          'ExtraData',\n                          'StructuredData'\n                        ]),\n                        (value) => value === null || value === ''\n                      ),\n                      null,\n                      2\n                    )}`\n                },\n                start_time: ''\n              }\n            ]\n          }\n        ],\n        sha256: ''\n      }\n    ],\n    passthrough: {\n      transformer: (data: Record<string, any>): Record<string, unknown> => {\n        return {\n          ...(this.withRaw && {raw: data})\n        };\n      }\n    }\n  };\n  constructor(trufflehogJson: Record<string, unknown>, withRaw = false) {\n    super(trufflehogJson, true);\n    this.withRaw = withRaw;\n  }\n}\n"]}

package/lib/src/twistlock-mapper.d.ts

@@ -1,16 +0,0 @@
-import { ExecJSON } from 'inspecjs';
-import { BaseConverter, ILookupPath, MappedTransform } from './base-converter';
-export declare class TwistlockResults {
-    data: Record<string, unknown>;
-    withRaw: boolean;
-    constructor(twistlockJson: string, withRaw?: boolean);
-    toHdf(): ExecJSON.Execution;
-}
-export declare class TwistlockMapper extends BaseConverter {
-    withRaw: boolean;
-    mappings: MappedTransform<ExecJSON.Execution & {
-        passthrough: unknown;
-    }, ILookupPath>;
-    constructor(twistlockJson: Record<string, unknown>, withRaw?: boolean);
-}
-//# sourceMappingURL=twistlock-mapper.d.ts.map

package/lib/src/twistlock-mapper.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"twistlock-mapper.d.ts","sourceRoot":"","sources":["../../src/twistlock-mapper.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,QAAQ,EAAC,MAAM,UAAU,CAAC;AAGlC,OAAO,EACL,aAAa,EACb,WAAW,EAEX,eAAe,EAChB,MAAM,kBAAkB,CAAC;AAe1B,qBAAa,gBAAgB;IAC3B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,OAAO,EAAE,OAAO,CAAC;gBACL,aAAa,EAAE,MAAM,EAAE,OAAO,UAAQ;IAUlD,KAAK,IAAI,QAAQ,CAAC,SAAS;CAG5B;AAED,qBAAa,eAAgB,SAAQ,aAAa;IAChD,OAAO,EAAE,OAAO,CAAC;IAEjB,QAAQ,EAAE,eAAe,CACvB,QAAQ,CAAC,SAAS,GAAG;QAAC,WAAW,EAAE,OAAO,CAAA;KAAC,EAC3C,WAAW,CACZ,CAgIC;gBACU,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,UAAQ;CAIpE"}

package/lib/src/twistlock-mapper.js

@@ -1,198 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.TwistlockMapper = exports.TwistlockResults = void 0;
-const inspecjs_1 = require("inspecjs");
-const _ = __importStar(require("lodash"));
-const package_json_1 = require("../package.json");
-const base_converter_1 = require("./base-converter");
-const global_1 = require("./utils/global");
-const IMPACT_MAPPING = new Map([
-    ['critical', 0.9],
-    ['important', 0.9],
-    ['high', 0.7],
-    ['medium', 0.5],
-    ['moderate', 0.5],
-    ['low', 0.3]
-]);
-class TwistlockResults {
-    data;
-    withRaw;
-    constructor(twistlockJson, withRaw = false) {
-        this.data = JSON.parse(twistlockJson);
-        this.withRaw = withRaw;
-        // Add a wrapper to the data for the repository scan case which doesn't include the `results` key
-        if (!_.has(this.data, 'results')) {
-            this.data = { results: [this.data] };
-        }
-    }
-    toHdf() {
-        return new TwistlockMapper(this.data, this.withRaw).toHdf();
-    }
-}
-exports.TwistlockResults = TwistlockResults;
-class TwistlockMapper extends base_converter_1.BaseConverter {
-    withRaw;
-    mappings = {
-        platform: {
-            name: 'Heimdall Tools',
-            release: package_json_1.version,
-            target_id: { path: ['results[0].name', 'results[0].repository'] }
-        },
-        version: package_json_1.version,
-        statistics: {},
-        profiles: [
-            {
-                path: 'results',
-                name: 'Twistlock Scan',
-                title: {
-                    transformer: (data) => {
-                        let projectArr = 'N/A';
-                        if (_.has(data, 'collections')) {
-                            projectArr = _.get(data, 'collections');
-                        }
-                        if (_.has(data, 'repository')) {
-                            projectArr = _.get(data, 'repository');
-                        }
-                        const projectName = Array.isArray(projectArr)
-                            ? projectArr.join(' / ')
-                            : projectArr;
-                        return `Twistlock Project: ${projectName}`;
-                    }
-                },
-                summary: {
-                    transformer: (data) => {
-                        const vulnerabilityTotal = _.has(data, 'vulnerabilityDistribution')
-                            ? `${JSON.stringify(_.get(data, 'vulnerabilityDistribution.total'))}`
-                            : 'N/A';
-                        const complianceTotal = _.has(data, 'complianceDistribution')
-                            ? `${JSON.stringify(_.get(data, 'complianceDistribution.total'))}`
-                            : 'N/A';
-                        return `Package Vulnerability Summary: ${vulnerabilityTotal} Application Compliance Issue Total: ${complianceTotal}`;
-                    }
-                },
-                supports: [],
-                attributes: [],
-                groups: [],
-                status: 'loaded',
-                controls: [
-                    {
-                        path: 'vulnerabilities',
-                        key: 'id',
-                        pathTransform: (value) => (Array.isArray(value) ? value : []),
-                        tags: {
-                            nist: global_1.DEFAULT_UPDATE_REMEDIATION_NIST_TAGS,
-                            cci: (0, global_1.getCCIsForNISTTags)(global_1.DEFAULT_UPDATE_REMEDIATION_NIST_TAGS),
-                            cveid: { path: 'id' }
-                        },
-                        refs: [],
-                        source_location: {},
-                        title: { path: 'id' },
-                        id: { path: 'id' },
-                        desc: { path: 'description' },
-                        impact: {
-                            path: 'severity',
-                            transformer: (0, base_converter_1.impactMapping)(IMPACT_MAPPING)
-                        },
-                        code: {
-                            transformer: (vulnerability) => JSON.stringify(vulnerability, null, 2)
-                        },
-                        results: [
-                            {
-                                status: inspecjs_1.ExecJSON.ControlResultStatus.Failed,
-                                code_desc: {
-                                    transformer: (data) => {
-                                        const packageName = _.has(data, 'packageName')
-                                            ? `${JSON.stringify(_.get(data, 'packageName'))}`
-                                            : 'N/A';
-                                        const impactedVersions = _.has(data, 'impactedVersions')
-                                            ? `${JSON.stringify(_.get(data, 'impactedVersions'))}`
-                                            : 'N/A';
-                                        return `Package ${packageName} should be updated to latest version above impacted versions ${impactedVersions}`;
-                                    }
-                                },
-                                message: {
-                                    transformer: (data) => {
-                                        const packageName = _.has(data, 'packageName')
-                                            ? `${JSON.stringify(_.get(data, 'packageName'))}`
-                                            : 'N/A';
-                                        const packageVersion = _.has(data, 'packageVersion')
-                                            ? `${JSON.stringify(_.get(data, 'packageVersion'))}`
-                                            : 'N/A';
-                                        return `Expected latest version of ${packageName}\nDetected vulnerable version ${packageVersion} of ${packageName}`;
-                                    }
-                                },
-                                start_time: { path: 'discoveredDate' }
-                            }
-                        ]
-                    }
-                ],
-                sha256: ''
-            }
-        ],
-        passthrough: {
-            transformer: (data) => {
-                let resultsData = _.get(data, 'results');
-                if (Array.isArray(resultsData)) {
-                    resultsData = resultsData.map((result) => _.omit(result, [
-                        'name',
-                        'collections',
-                        'complianceDistribution',
-                        'vulnerabilities',
-                        'vulnerabilityDistribution'
-                    ]));
-                }
-                return {
-                    auxiliary_data: [
-                        {
-                            name: 'Twistlock',
-                            data: {
-                                results: resultsData,
-                                consoleURL: _.get(data, 'consoleURL')
-                            }
-                        }
-                    ],
-                    ...(this.withRaw && { raw: data })
-                };
-            }
-        }
-    };
-    constructor(twistlockJson, withRaw = false) {
-        super(twistlockJson, true);
-        this.withRaw = withRaw;
-    }
-}
-exports.TwistlockMapper = TwistlockMapper;
-//# sourceMappingURL=twistlock-mapper.js.map

package/lib/src/twistlock-mapper.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"twistlock-mapper.js","sourceRoot":"","sources":["../../src/twistlock-mapper.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCAAkC;AAClC,0CAA4B;AAC5B,kDAAgE;AAChE,qDAK0B;AAC1B,2CAGwB;AAExB,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC;IAClD,CAAC,UAAU,EAAE,GAAG,CAAC;IACjB,CAAC,WAAW,EAAE,GAAG,CAAC;IAClB,CAAC,MAAM,EAAE,GAAG,CAAC;IACb,CAAC,QAAQ,EAAE,GAAG,CAAC;IACf,CAAC,UAAU,EAAE,GAAG,CAAC;IACjB,CAAC,KAAK,EAAE,GAAG,CAAC;CACb,CAAC,CAAC;AAEH,MAAa,gBAAgB;IAC3B,IAAI,CAA0B;IAC9B,OAAO,CAAU;IACjB,YAAY,aAAqB,EAAE,OAAO,GAAG,KAAK;QAChD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QACtC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QAEvB,iGAAiG;QACjG,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC;YACjC,IAAI,CAAC,IAAI,GAAG,EAAC,OAAO,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAC,CAAC;QACrC,CAAC;IACH,CAAC;IAED,KAAK;QACH,OAAO,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,CAAC;IAC9D,CAAC;CACF;AAhBD,4CAgBC;AAED,MAAa,eAAgB,SAAQ,8BAAa;IAChD,OAAO,CAAU;IAEjB,QAAQ,GAGJ;QACF,QAAQ,EAAE;YACR,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,sBAAoB;YAC7B,SAAS,EAAE,EAAC,IAAI,EAAE,CAAC,iBAAiB,EAAE,uBAAuB,CAAC,EAAC;SAChE;QACD,OAAO,EAAE,sBAAoB;QAC7B,UAAU,EAAE,EAAE;QACd,QAAQ,EAAE;YACR;gBACE,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE,gBAAgB;gBACtB,KAAK,EAAE;oBACL,WAAW,EAAE,CAAC,IAA6B,EAAU,EAAE;wBACrD,IAAI,UAAU,GAAY,KAAK,CAAC;wBAChC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE,CAAC;4BAC/B,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;wBAC1C,CAAC;wBACD,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,CAAC;4BAC9B,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;wBACzC,CAAC;wBACD,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;4BAC3C,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;4BACxB,CAAC,CAAC,UAAU,CAAC;wBACf,OAAO,sBAAsB,WAAW,EAAE,CAAC;oBAC7C,CAAC;iBACF;gBACD,OAAO,EAAE;oBACP,WAAW,EAAE,CAAC,IAA6B,EAAU,EAAE;wBACrD,MAAM,kBAAkB,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,2BAA2B,CAAC;4BACjE,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CACf,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,iCAAiC,CAAC,CAC/C,EAAE;4BACL,CAAC,CAAC,KAAK,CAAC;wBACV,MAAM,eAAe,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,wBAAwB,CAAC;4BAC3D,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,8BAA8B,CAAC,CAAC,EAAE;4BAClE,CAAC,CAAC,KAAK,CAAC;wBACV,OAAO,kCAAkC,kBAAkB,wCAAwC,eAAe,EAAE,CAAC;oBACvH,CAAC;iBACF;gBACD,QAAQ,EAAE,EAAE;gBACZ,UAAU,EAAE,EAAE;gBACd,MAAM,EAAE,EAAE;gBACV,MAAM,EAAE,QAAQ;gBAChB,QAAQ,EAAE;oBACR;wBACE,IAAI,EAAE,iBAAiB;wBACvB,GAAG,EAAE,IAAI;wBACT,aAAa,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC7D,IAAI,EAAE;4BACJ,IAAI,EAAE,6CAAoC;4BAC1C,GAAG,EAAE,IAAA,2BAAkB,EAAC,6CAAoC,CAAC;4BAC7D,KAAK,EAAE,EAAC,IAAI,EAAE,IAAI,EAAC;yBACpB;wBACD,IAAI,EAAE,EAAE;wBACR,eAAe,EAAE,EAAE;wBACnB,KAAK,EAAE,EAAC,IAAI,EAAE,IAAI,EAAC;wBACnB,EAAE,EAAE,EAAC,IAAI,EAAE,IAAI,EAAC;wBAChB,IAAI,EAAE,EAAC,IAAI,EAAE,aAAa,EAAC;wBAC3B,MAAM,EAAE;4BACN,IAAI,EAAE,UAAU;4BAChB,WAAW,EAAE,IAAA,8BAAa,EAAC,cAAc,CAAC;yBAC3C;wBACD,IAAI,EAAE;4BACJ,WAAW,EAAE,CAAC,aAAsC,EAAU,EAAE,CAC9D,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;yBACzC;wBACD,OAAO,EAAE;4BACP;gCACE,MAAM,EAAE,mBAAQ,CAAC,mBAAmB,CAAC,MAAM;gCAC3C,SAAS,EAAE;oCACT,WAAW,EAAE,CAAC,IAA6B,EAAU,EAAE;wCACrD,MAAM,WAAW,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,aAAa,CAAC;4CAC5C,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,EAAE;4CACjD,CAAC,CAAC,KAAK,CAAC;wCACV,MAAM,gBAAgB,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,kBAAkB,CAAC;4CACtD,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC,EAAE;4CACtD,CAAC,CAAC,KAAK,CAAC;wCACV,OAAO,WAAW,WAAW,gEAAgE,gBAAgB,EAAE,CAAC;oCAClH,CAAC;iCACF;gCACD,OAAO,EAAE;oCACP,WAAW,EAAE,CAAC,IAA6B,EAAU,EAAE;wCACrD,MAAM,WAAW,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,aAAa,CAAC;4CAC5C,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,EAAE;4CACjD,CAAC,CAAC,KAAK,CAAC;wCACV,MAAM,cAAc,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,gBAAgB,CAAC;4CAClD,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC,EAAE;4CACpD,CAAC,CAAC,KAAK,CAAC;wCACV,OAAO,8BAA8B,WAAW,iCAAiC,cAAc,OAAO,WAAW,EAAE,CAAC;oCACtH,CAAC;iCACF;gCACD,UAAU,EAAE,EAAC,IAAI,EAAE,gBAAgB,EAAC;6BACrC;yBACF;qBACF;iBACF;gBACD,MAAM,EAAE,EAAE;aACX;SACF;QACD,WAAW,EAAE;YACX,WAAW,EAAE,CAAC,IAA6B,EAA2B,EAAE;gBACtE,IAAI,WAAW,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;gBACzC,IAAI,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;oBAC/B,WAAW,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,MAA+B,EAAE,EAAE,CAChE,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE;wBACb,MAAM;wBACN,aAAa;wBACb,wBAAwB;wBACxB,iBAAiB;wBACjB,2BAA2B;qBAC5B,CAAC,CACH,CAAC;gBACJ,CAAC;gBACD,OAAO;oBACL,cAAc,EAAE;wBACd;4BACE,IAAI,EAAE,WAAW;4BACjB,IAAI,EAAE;gCACJ,OAAO,EAAE,WAAW;gCACpB,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,YAAY,CAAC;6BACtC;yBACF;qBACF;oBACD,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAC,GAAG,EAAE,IAAI,EAAC,CAAC;iBACjC,CAAC;YACJ,CAAC;SACF;KACF,CAAC;IACF,YAAY,aAAsC,EAAE,OAAO,GAAG,KAAK;QACjE,KAAK,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;QAC3B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;CACF;AA3ID,0CA2IC","sourcesContent":["import {ExecJSON} from 'inspecjs';\nimport * as _ from 'lodash';\nimport {version as HeimdallToolsVersion} from '../package.json';\nimport {\n  BaseConverter,\n  ILookupPath,\n  impactMapping,\n  MappedTransform\n} from './base-converter';\nimport {\n  DEFAULT_UPDATE_REMEDIATION_NIST_TAGS,\n  getCCIsForNISTTags\n} from './utils/global';\n\nconst IMPACT_MAPPING: Map<string, number> = new Map([\n  ['critical', 0.9],\n  ['important', 0.9],\n  ['high', 0.7],\n  ['medium', 0.5],\n  ['moderate', 0.5],\n  ['low', 0.3]\n]);\n\nexport class TwistlockResults {\n  data: Record<string, unknown>;\n  withRaw: boolean;\n  constructor(twistlockJson: string, withRaw = false) {\n    this.data = JSON.parse(twistlockJson);\n    this.withRaw = withRaw;\n\n    // Add a wrapper to the data for the repository scan case which doesn't include the `results` key\n    if (!_.has(this.data, 'results')) {\n      this.data = {results: [this.data]};\n    }\n  }\n\n  toHdf(): ExecJSON.Execution {\n    return new TwistlockMapper(this.data, this.withRaw).toHdf();\n  }\n}\n\nexport class TwistlockMapper extends BaseConverter {\n  withRaw: boolean;\n\n  mappings: MappedTransform<\n    ExecJSON.Execution & {passthrough: unknown},\n    ILookupPath\n  > = {\n    platform: {\n      name: 'Heimdall Tools',\n      release: HeimdallToolsVersion,\n      target_id: {path: ['results[0].name', 'results[0].repository']}\n    },\n    version: HeimdallToolsVersion,\n    statistics: {},\n    profiles: [\n      {\n        path: 'results',\n        name: 'Twistlock Scan',\n        title: {\n          transformer: (data: Record<string, unknown>): string => {\n            let projectArr: unknown = 'N/A';\n            if (_.has(data, 'collections')) {\n              projectArr = _.get(data, 'collections');\n            }\n            if (_.has(data, 'repository')) {\n              projectArr = _.get(data, 'repository');\n            }\n            const projectName = Array.isArray(projectArr)\n              ? projectArr.join(' / ')\n              : projectArr;\n            return `Twistlock Project: ${projectName}`;\n          }\n        },\n        summary: {\n          transformer: (data: Record<string, unknown>): string => {\n            const vulnerabilityTotal = _.has(data, 'vulnerabilityDistribution')\n              ? `${JSON.stringify(\n                  _.get(data, 'vulnerabilityDistribution.total')\n                )}`\n              : 'N/A';\n            const complianceTotal = _.has(data, 'complianceDistribution')\n              ? `${JSON.stringify(_.get(data, 'complianceDistribution.total'))}`\n              : 'N/A';\n            return `Package Vulnerability Summary: ${vulnerabilityTotal} Application Compliance Issue Total: ${complianceTotal}`;\n          }\n        },\n        supports: [],\n        attributes: [],\n        groups: [],\n        status: 'loaded',\n        controls: [\n          {\n            path: 'vulnerabilities',\n            key: 'id',\n            pathTransform: (value) => (Array.isArray(value) ? value : []),\n            tags: {\n              nist: DEFAULT_UPDATE_REMEDIATION_NIST_TAGS,\n              cci: getCCIsForNISTTags(DEFAULT_UPDATE_REMEDIATION_NIST_TAGS),\n              cveid: {path: 'id'}\n            },\n            refs: [],\n            source_location: {},\n            title: {path: 'id'},\n            id: {path: 'id'},\n            desc: {path: 'description'},\n            impact: {\n              path: 'severity',\n              transformer: impactMapping(IMPACT_MAPPING)\n            },\n            code: {\n              transformer: (vulnerability: Record<string, unknown>): string =>\n                JSON.stringify(vulnerability, null, 2)\n            },\n            results: [\n              {\n                status: ExecJSON.ControlResultStatus.Failed,\n                code_desc: {\n                  transformer: (data: Record<string, unknown>): string => {\n                    const packageName = _.has(data, 'packageName')\n                      ? `${JSON.stringify(_.get(data, 'packageName'))}`\n                      : 'N/A';\n                    const impactedVersions = _.has(data, 'impactedVersions')\n                      ? `${JSON.stringify(_.get(data, 'impactedVersions'))}`\n                      : 'N/A';\n                    return `Package ${packageName} should be updated to latest version above impacted versions ${impactedVersions}`;\n                  }\n                },\n                message: {\n                  transformer: (data: Record<string, unknown>): string => {\n                    const packageName = _.has(data, 'packageName')\n                      ? `${JSON.stringify(_.get(data, 'packageName'))}`\n                      : 'N/A';\n                    const packageVersion = _.has(data, 'packageVersion')\n                      ? `${JSON.stringify(_.get(data, 'packageVersion'))}`\n                      : 'N/A';\n                    return `Expected latest version of ${packageName}\\nDetected vulnerable version ${packageVersion} of ${packageName}`;\n                  }\n                },\n                start_time: {path: 'discoveredDate'}\n              }\n            ]\n          }\n        ],\n        sha256: ''\n      }\n    ],\n    passthrough: {\n      transformer: (data: Record<string, unknown>): Record<string, unknown> => {\n        let resultsData = _.get(data, 'results');\n        if (Array.isArray(resultsData)) {\n          resultsData = resultsData.map((result: Record<string, unknown>) =>\n            _.omit(result, [\n              'name',\n              'collections',\n              'complianceDistribution',\n              'vulnerabilities',\n              'vulnerabilityDistribution'\n            ])\n          );\n        }\n        return {\n          auxiliary_data: [\n            {\n              name: 'Twistlock',\n              data: {\n                results: resultsData,\n                consoleURL: _.get(data, 'consoleURL')\n              }\n            }\n          ],\n          ...(this.withRaw && {raw: data})\n        };\n      }\n    }\n  };\n  constructor(twistlockJson: Record<string, unknown>, withRaw = false) {\n    super(twistlockJson, true);\n    this.withRaw = withRaw;\n  }\n}\n"]}