@mitre/hdf-converters 2.5.1

package/lib/src/xccdf-results-mapper.js

@@ -0,0 +1,206 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.XCCDFResultsMapper = void 0;
+const fast_xml_parser_1 = __importDefault(require("fast-xml-parser"));
+const inspecjs_1 = require("inspecjs");
+const lodash_1 = __importDefault(require("lodash"));
+const path_1 = __importDefault(require("path"));
+const package_json_1 = require("../package.json");
+const base_converter_1 = require("./base-converter");
+const CciNistMapping_1 = require("./mappings/CciNistMapping");
+const IMPACT_MAPPING = new Map([
+    ['critical', 0.9],
+    ['high', 0.7],
+    ['medium', 0.5],
+    ['low', 0.3]
+]);
+const RULE_DESCRIPTION = 'cdf:Rule.cdf:description';
+const CCI_REGEX = /CCI-(\d*)/;
+const CCI_NIST_MAPPING_FILE = path_1.default.resolve(__dirname, '../data/U_CCI_List.xml');
+const CCI_NIST_MAPPING = new CciNistMapping_1.CciNistMapping(CCI_NIST_MAPPING_FILE);
+const DEFAULT_NIST_TAG = ['SA-11', 'RA-5', 'Rev_4'];
+let counter = '';
+function getStatus(file) {
+    const match = lodash_1.default.get(file, 'cdf:rule-result').find((element) => lodash_1.default.get(element, 'idref') === counter);
+    if (lodash_1.default.get(match, 'cdf:result') === 'pass') {
+        return inspecjs_1.ExecJSON.ControlResultStatus.Passed;
+    }
+    else {
+        return inspecjs_1.ExecJSON.ControlResultStatus.Failed;
+    }
+}
+function extractCci(input) {
+    const output = [];
+    input.forEach((element) => {
+        if (lodash_1.default.get(element, 'text').match(CCI_REGEX)) {
+            output.push(lodash_1.default.get(element, 'text'));
+        }
+    });
+    return output;
+}
+function nistTag(input) {
+    const identifiers = extractCci(input);
+    return CCI_NIST_MAPPING.nistFilter(identifiers, DEFAULT_NIST_TAG, false);
+}
+function parseXml(xml) {
+    const options = {
+        attributeNamePrefix: '',
+        textNodeName: 'text',
+        ignoreAttributes: false
+    };
+    return fast_xml_parser_1.default.parse(xml, options);
+}
+class XCCDFResultsMapper extends base_converter_1.BaseConverter {
+    constructor(scapXml) {
+        super(parseXml(scapXml));
+        this.mappings = {
+            platform: {
+                name: 'Heimdall Tools',
+                release: package_json_1.version,
+                target_id: ''
+            },
+            version: package_json_1.version,
+            statistics: {
+                duration: 0
+            },
+            profiles: [
+                {
+                    name: { path: 'cdf:Benchmark.id' },
+                    version: { path: 'cdf:Benchmark.style' },
+                    title: { path: 'cdf:Benchmark.cdf:title' },
+                    maintainer: { path: 'cdf:Benchmark.cdf:reference.dc:publisher' },
+                    summary: { path: 'cdf:Benchmark.cdf:description' },
+                    license: { path: 'cdf:Benchmark.cdf:notice.id' },
+                    copyright: { path: 'cdf:Benchmark.cdf:metadata.dc:creator' },
+                    copyright_email: 'disa.stig_spt@mail.mil',
+                    supports: [],
+                    attributes: [],
+                    depends: [],
+                    groups: [],
+                    status: 'loaded',
+                    controls: [
+                        {
+                            path: 'cdf:Benchmark.cdf:Group',
+                            key: 'id',
+                            id: {
+                                path: 'cdf:Rule.id',
+                                transformer: (input) => {
+                                    if (typeof input === 'string') {
+                                        counter = input;
+                                        return input.split('_S')[1].split('r')[0];
+                                    }
+                                    else {
+                                        return '';
+                                    }
+                                }
+                            },
+                            title: { path: 'cdf:Rule.cdf:title' },
+                            desc: {
+                                path: RULE_DESCRIPTION,
+                                transformer: (input) => {
+                                    if (typeof input === 'string') {
+                                        return (0, base_converter_1.parseHtml)(input.split('Satisfies')[0]);
+                                    }
+                                    else {
+                                        return '';
+                                    }
+                                }
+                            },
+                            descriptions: [
+                                {
+                                    data: {
+                                        path: RULE_DESCRIPTION,
+                                        transformer: (input) => {
+                                            if (typeof input === 'string') {
+                                                return (0, base_converter_1.parseHtml)(input);
+                                            }
+                                            else {
+                                                return '';
+                                            }
+                                        }
+                                    },
+                                    label: 'default'
+                                },
+                                {
+                                    data: 'NA',
+                                    label: 'rationale'
+                                },
+                                {
+                                    data: {
+                                        path: 'cdf:Rule.cdf:check.cdf:check-content-ref.name',
+                                        transformer: base_converter_1.parseHtml
+                                    },
+                                    label: 'check'
+                                },
+                                {
+                                    data: {
+                                        path: 'cdf:Rule.cdf:fixtext.text',
+                                        transformer: base_converter_1.parseHtml
+                                    },
+                                    label: 'fix'
+                                }
+                            ],
+                            impact: {
+                                path: 'cdf:Rule.severity',
+                                transformer: (0, base_converter_1.impactMapping)(IMPACT_MAPPING)
+                            },
+                            refs: [],
+                            tags: {
+                                severity: null,
+                                gtitle: { path: 'cdf:title' },
+                                satisfies: {
+                                    path: RULE_DESCRIPTION,
+                                    transformer: (input) => {
+                                        if (input.split('Satisfies: ')[1] !== undefined) {
+                                            return input
+                                                .split('Satisfies: ')[1]
+                                                .split('&lt')[0]
+                                                .replace(/', /gi, ',')
+                                                .split(',');
+                                        }
+                                        else {
+                                            return [];
+                                        }
+                                    }
+                                },
+                                gid: {
+                                    path: 'cdf:Rule.id',
+                                    transformer: (input) => {
+                                        return input.split('_').slice(-2, -1)[0].split('r')[0];
+                                    }
+                                },
+                                legacy_id: { path: 'cdf:Rule.cdf:ident[2].text' },
+                                rid: { path: 'cdf:Rule.cdf:ident[1].text' },
+                                stig_id: { path: '$.cdf:Benchmark.id' },
+                                fix_id: { path: 'cdf:Rule.cdf:fix.id' },
+                                cci: { path: 'cdf:Rule.cdf:ident', transformer: extractCci },
+                                nist: { path: 'cdf:Rule.cdf:ident', transformer: nistTag }
+                            },
+                            code: '',
+                            source_location: {},
+                            results: [
+                                {
+                                    status: {
+                                        path: '$.cdf:Benchmark.cdf:TestResult',
+                                        transformer: getStatus
+                                    },
+                                    code_desc: '',
+                                    run_time: 0,
+                                    start_time: { path: '$.cdf:Benchmark.cdf:TestResult.start-time' },
+                                    message: '',
+                                    resource: ''
+                                }
+                            ]
+                        }
+                    ],
+                    sha256: ''
+                }
+            ]
+        };
+    }
+}
+exports.XCCDFResultsMapper = XCCDFResultsMapper;
+//# sourceMappingURL=xccdf-results-mapper.js.map

package/lib/src/xccdf-results-mapper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"xccdf-results-mapper.js","sourceRoot":"","sources":["../../src/xccdf-results-mapper.ts"],"names":[],"mappings":";;;;;;AAAA,sEAAqC;AACrC,uCAAkC;AAClC,oDAAuB;AACvB,gDAAwB;AACxB,kDAAgE;AAChE,qDAM0B;AAC1B,8DAAyD;AAEzD,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC;IAClD,CAAC,UAAU,EAAE,GAAG,CAAC;IACjB,CAAC,MAAM,EAAE,GAAG,CAAC;IACb,CAAC,QAAQ,EAAE,GAAG,CAAC;IACf,CAAC,KAAK,EAAE,GAAG,CAAC;CACb,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,0BAA0B,CAAC;AACpD,MAAM,SAAS,GAAG,WAAW,CAAC;AAC9B,MAAM,qBAAqB,GAAG,cAAI,CAAC,OAAO,CAAC,SAAS,EAAE,wBAAwB,CAAC,CAAC;AAChF,MAAM,gBAAgB,GAAG,IAAI,+BAAc,CAAC,qBAAqB,CAAC,CAAC;AACnE,MAAM,gBAAgB,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;AAEpD,IAAI,OAAO,GAAG,EAAE,CAAC;AAEjB,SAAS,SAAS,CAAC,IAAa;IAC9B,MAAM,KAAK,GAAG,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC,IAAI,CAC/C,CAAC,OAAgC,EAAE,EAAE,CAAC,gBAAC,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,OAAO,CAC1E,CAAC;IACF,IAAI,gBAAC,CAAC,GAAG,CAAC,KAAK,EAAE,YAAY,CAAC,KAAK,MAAM,EAAE;QACzC,OAAO,mBAAQ,CAAC,mBAAmB,CAAC,MAAM,CAAC;KAC5C;SAAM;QACL,OAAO,mBAAQ,CAAC,mBAAmB,CAAC,MAAM,CAAC;KAC5C;AACH,CAAC;AACD,SAAS,UAAU,CAAC,KAAgB;IAClC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QACxB,IAAI,gBAAC,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE;YAC3C,MAAM,CAAC,IAAI,CAAC,gBAAC,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;SACrC;IACH,CAAC,CAAC,CAAC;IACH,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,SAAS,OAAO,CAAC,KAAgB;IAC/B,MAAM,WAAW,GAAa,UAAU,CAAC,KAAK,CAAC,CAAC;IAChD,OAAO,gBAAgB,CAAC,UAAU,CAAC,WAAW,EAAE,gBAAgB,EAAE,KAAK,CAAC,CAAC;AAC3E,CAAC;AACD,SAAS,QAAQ,CAAC,GAAW;IAC3B,MAAM,OAAO,GAAG;QACd,mBAAmB,EAAE,EAAE;QACvB,YAAY,EAAE,MAAM;QACpB,gBAAgB,EAAE,KAAK;KACxB,CAAC;IACF,OAAO,yBAAM,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;AACpC,CAAC;AAED,MAAa,kBAAmB,SAAQ,8BAAa;IA6InD,YAAY,OAAe;QACzB,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QA7I3B,aAAQ,GAAqD;YAC3D,QAAQ,EAAE;gBACR,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,sBAAoB;gBAC7B,SAAS,EAAE,EAAE;aACd;YACD,OAAO,EAAE,sBAAoB;YAC7B,UAAU,EAAE;gBACV,QAAQ,EAAE,CAAC;aACZ;YACD,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,EAAC,IAAI,EAAE,kBAAkB,EAAC;oBAChC,OAAO,EAAE,EAAC,IAAI,EAAE,qBAAqB,EAAC;oBACtC,KAAK,EAAE,EAAC,IAAI,EAAE,yBAAyB,EAAC;oBACxC,UAAU,EAAE,EAAC,IAAI,EAAE,0CAA0C,EAAC;oBAC9D,OAAO,EAAE,EAAC,IAAI,EAAE,+BAA+B,EAAC;oBAChD,OAAO,EAAE,EAAC,IAAI,EAAE,6BAA6B,EAAC;oBAC9C,SAAS,EAAE,EAAC,IAAI,EAAE,uCAAuC,EAAC;oBAC1D,eAAe,EAAE,wBAAwB;oBACzC,QAAQ,EAAE,EAAE;oBACZ,UAAU,EAAE,EAAE;oBACd,OAAO,EAAE,EAAE;oBACX,MAAM,EAAE,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE;wBACR;4BACE,IAAI,EAAE,yBAAyB;4BAC/B,GAAG,EAAE,IAAI;4BACT,EAAE,EAAE;gCACF,IAAI,EAAE,aAAa;gCACnB,WAAW,EAAE,CAAC,KAAc,EAAU,EAAE;oCACtC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE;wCAC7B,OAAO,GAAG,KAAK,CAAC;wCAChB,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;qCAC3C;yCAAM;wCACL,OAAO,EAAE,CAAC;qCACX;gCACH,CAAC;6BACF;4BACD,KAAK,EAAE,EAAC,IAAI,EAAE,oBAAoB,EAAC;4BACnC,IAAI,EAAE;gCACJ,IAAI,EAAE,gBAAgB;gCACtB,WAAW,EAAE,CAAC,KAAc,EAAU,EAAE;oCACtC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE;wCAC7B,OAAO,IAAA,0BAAS,EAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;qCAC/C;yCAAM;wCACL,OAAO,EAAE,CAAC;qCACX;gCACH,CAAC;6BACF;4BACD,YAAY,EAAE;gCACZ;oCACE,IAAI,EAAE;wCACJ,IAAI,EAAE,gBAAgB;wCACtB,WAAW,EAAE,CAAC,KAAc,EAAU,EAAE;4CACtC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE;gDAC7B,OAAO,IAAA,0BAAS,EAAC,KAAK,CAAC,CAAC;6CACzB;iDAAM;gDACL,OAAO,EAAE,CAAC;6CACX;wCACH,CAAC;qCACF;oCACD,KAAK,EAAE,SAAS;iCACjB;gCACD;oCACE,IAAI,EAAE,IAAI;oCACV,KAAK,EAAE,WAAW;iCACnB;gCACD;oCACE,IAAI,EAAE;wCACJ,IAAI,EAAE,+CAA+C;wCACrD,WAAW,EAAE,0BAAS;qCACvB;oCACD,KAAK,EAAE,OAAO;iCACf;gCACD;oCACE,IAAI,EAAE;wCACJ,IAAI,EAAE,2BAA2B;wCACjC,WAAW,EAAE,0BAAS;qCACvB;oCACD,KAAK,EAAE,KAAK;iCACb;6BACF;4BACD,MAAM,EAAE;gCACN,IAAI,EAAE,mBAAmB;gCACzB,WAAW,EAAE,IAAA,8BAAa,EAAC,cAAc,CAAC;6BAC3C;4BACD,IAAI,EAAE,EAAE;4BACR,IAAI,EAAE;gCACJ,QAAQ,EAAE,IAAI;gCACd,MAAM,EAAE,EAAC,IAAI,EAAE,WAAW,EAAC;gCAC3B,SAAS,EAAE;oCACT,IAAI,EAAE,gBAAgB;oCACtB,WAAW,EAAE,CAAC,KAAa,EAAY,EAAE;wCACvC,IAAI,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE;4CAC/C,OAAO,KAAK;iDACT,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;iDACvB,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;iDACf,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC;iDACrB,KAAK,CAAC,GAAG,CAAC,CAAC;yCACf;6CAAM;4CACL,OAAO,EAAE,CAAC;yCACX;oCACH,CAAC;iCACF;gCACD,GAAG,EAAE;oCACH,IAAI,EAAE,aAAa;oCACnB,WAAW,EAAE,CAAC,KAAa,EAAU,EAAE;wCACrC,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;oCACzD,CAAC;iCACF;gCACD,SAAS,EAAE,EAAC,IAAI,EAAE,4BAA4B,EAAC;gCAC/C,GAAG,EAAE,EAAC,IAAI,EAAE,4BAA4B,EAAC;gCACzC,OAAO,EAAE,EAAC,IAAI,EAAE,oBAAoB,EAAC;gCACrC,MAAM,EAAE,EAAC,IAAI,EAAE,qBAAqB,EAAC;gCACrC,GAAG,EAAE,EAAC,IAAI,EAAE,oBAAoB,EAAE,WAAW,EAAE,UAAU,EAAC;gCAC1D,IAAI,EAAE,EAAC,IAAI,EAAE,oBAAoB,EAAE,WAAW,EAAE,OAAO,EAAC;6BACzD;4BACD,IAAI,EAAE,EAAE;4BACR,eAAe,EAAE,EAAE;4BACnB,OAAO,EAAE;gCACP;oCACE,MAAM,EAAE;wCACN,IAAI,EAAE,gCAAgC;wCACtC,WAAW,EAAE,SAAS;qCACvB;oCACD,SAAS,EAAE,EAAE;oCACb,QAAQ,EAAE,CAAC;oCACX,UAAU,EAAE,EAAC,IAAI,EAAE,2CAA2C,EAAC;oCAC/D,OAAO,EAAE,EAAE;oCACX,QAAQ,EAAE,EAAE;iCACb;6BACF;yBACF;qBACF;oBACD,MAAM,EAAE,EAAE;iBACX;aACF;SACF,CAAC;IAGF,CAAC;CACF;AAhJD,gDAgJC"}

package/lib/src/zap-mapper.d.ts

@@ -0,0 +1,8 @@
+import { ExecJSON } from 'inspecjs';
+import { BaseConverter, ILookupPath, MappedTransform } from './base-converter';
+export declare class ZapMapper extends BaseConverter {
+    mappings: MappedTransform<ExecJSON.Execution, ILookupPath>;
+    constructor(zapJson: string, name: string);
+    setMappings(customMappings: MappedTransform<ExecJSON.Execution, ILookupPath>): void;
+    toHdf(): ExecJSON.Execution;
+}

package/lib/src/zap-mapper.js

@@ -0,0 +1,177 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ZapMapper = void 0;
+const inspecjs_1 = require("inspecjs");
+const lodash_1 = __importDefault(require("lodash"));
+const path_1 = __importDefault(require("path"));
+const package_json_1 = require("../package.json");
+const base_converter_1 = require("./base-converter");
+const CweNistMapping_1 = require("./mappings/CweNistMapping");
+const CWE_NIST_MAPPING_FILE = path_1.default.resolve(__dirname, '../data/cwe-nist-mapping.csv');
+const CWE_NIST_MAPPING = new CweNistMapping_1.CweNistMapping(CWE_NIST_MAPPING_FILE);
+const DEFAULT_NIST_TAG = ['SA-11', 'RA-5'];
+function filterSite(input, name) {
+    return input.find((element) => lodash_1.default.get(element, '@name') === name);
+}
+function impactMapping(input) {
+    if (typeof input === 'string') {
+        const impact = parseInt(input);
+        if (0 <= impact && impact <= 1) {
+            return 0.3;
+        }
+        else if (impact === 2) {
+            return 0.5;
+        }
+        else if (impact >= 3) {
+            return 0.7;
+        }
+        else {
+            return 0;
+        }
+    }
+    else {
+        return 0;
+    }
+}
+function nistTag(cweid) {
+    const result = CWE_NIST_MAPPING.nistFilter([cweid], DEFAULT_NIST_TAG);
+    if (result === DEFAULT_NIST_TAG) {
+        return result;
+    }
+    else {
+        return result.concat('Rev_4');
+    }
+}
+function checkText(input) {
+    const text = [];
+    text.push(lodash_1.default.get(input, 'solution'));
+    text.push(lodash_1.default.get(input, 'otherinfo'));
+    text.push(lodash_1.default.get(input, 'otherinfo'));
+    return text.join('\n');
+}
+function formatCodeDesc(input) {
+    const text = [];
+    if (input instanceof Object) {
+        Object.keys(input).forEach((key) => {
+            text.push(`${key.charAt(0).toUpperCase() + key.slice(1)}: ${lodash_1.default.get(input, key)}`);
+        });
+    }
+    return text.join('\n') + '\n';
+}
+function deduplicateId(input) {
+    const controlId = input.map((element) => {
+        return lodash_1.default.get(element, 'id');
+    });
+    const dupId = (0, lodash_1.default)(controlId)
+        .groupBy()
+        .pickBy((value) => value.length > 1)
+        .keys()
+        .value();
+    dupId.forEach((id) => {
+        let index = 1;
+        input
+            .filter((element) => lodash_1.default.get(element, 'id') === id)
+            .forEach((element) => {
+            if (element instanceof Object) {
+                lodash_1.default.set(element, 'id', `${id}.${index.toString()}`);
+            }
+            index++;
+        });
+    });
+    return input;
+}
+class ZapMapper extends base_converter_1.BaseConverter {
+    constructor(zapJson, name) {
+        super(lodash_1.default.set(JSON.parse(zapJson), 'site', filterSite(lodash_1.default.get(JSON.parse(zapJson), 'site'), name)), false);
+        this.mappings = {
+            platform: {
+                name: 'Heimdall Tools',
+                release: package_json_1.version,
+                target_id: ''
+            },
+            version: package_json_1.version,
+            statistics: {
+                duration: null
+            },
+            profiles: [
+                {
+                    name: 'OWASP ZAP Scan',
+                    version: { path: '@version' },
+                    title: {
+                        path: 'site.@host',
+                        transformer: (input) => {
+                            return `OWASP ZAP Scan of Host: ${input}`;
+                        }
+                    },
+                    maintainer: null,
+                    summary: {
+                        path: 'site.@host',
+                        transformer: (input) => {
+                            return `OWASP ZAP Scan of Host: ${input}`;
+                        }
+                    },
+                    license: null,
+                    copyright: null,
+                    copyright_email: null,
+                    supports: [],
+                    attributes: [],
+                    depends: [],
+                    groups: [],
+                    status: 'loaded',
+                    controls: [
+                        {
+                            path: 'site.alerts',
+                            arrayTransformer: deduplicateId,
+                            id: { path: 'pluginid' },
+                            title: { path: 'name' },
+                            desc: { path: 'desc', transformer: base_converter_1.parseHtml },
+                            impact: { path: 'riskcode', transformer: impactMapping },
+                            tags: {
+                                nist: { path: 'cweid', transformer: nistTag },
+                                cweid: { path: 'cweid' },
+                                wascid: { path: 'wascid' },
+                                sourceid: { path: 'sourceid' },
+                                confidence: { path: 'confidence' },
+                                riskdesc: { path: 'riskdesc' },
+                                check: { transformer: checkText }
+                            },
+                            descriptions: [],
+                            refs: [],
+                            source_location: {},
+                            code: '',
+                            results: [
+                                {
+                                    path: 'instances',
+                                    status: inspecjs_1.ExecJSON.ControlResultStatus.Failed,
+                                    code_desc: { transformer: formatCodeDesc },
+                                    run_time: 0,
+                                    start_time: { path: '$.@generated' }
+                                }
+                            ]
+                        }
+                    ],
+                    sha256: ''
+                }
+            ]
+        };
+    }
+    setMappings(customMappings) {
+        super.setMappings(customMappings);
+    }
+    toHdf() {
+        const original = super.toHdf();
+        lodash_1.default.get(original, 'profiles').forEach((profile) => {
+            lodash_1.default.get(profile, 'controls').forEach((control) => {
+                lodash_1.default.set(control, 'results', lodash_1.default.get(control, 'results').filter(function (element, index, self) {
+                    return index === self.indexOf(element);
+                }));
+            });
+        });
+        return original;
+    }
+}
+exports.ZapMapper = ZapMapper;
+//# sourceMappingURL=zap-mapper.js.map

package/lib/src/zap-mapper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"zap-mapper.js","sourceRoot":"","sources":["../../src/zap-mapper.ts"],"names":[],"mappings":";;;;;;AAAA,uCAAkC;AAClC,oDAAuB;AACvB,gDAAwB;AACxB,kDAAgE;AAChE,qDAK0B;AAC1B,8DAAyD;AAEzD,MAAM,qBAAqB,GAAG,cAAI,CAAC,OAAO,CACxC,SAAS,EACT,8BAA8B,CAC/B,CAAC;AACF,MAAM,gBAAgB,GAAG,IAAI,+BAAc,CAAC,qBAAqB,CAAC,CAAC;AACnE,MAAM,gBAAgB,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AAE3C,SAAS,UAAU,CAAI,KAAe,EAAE,IAAY;IAClD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,gBAAC,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC;AACnE,CAAC;AACD,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE;QAC7B,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,CAAC,IAAI,MAAM,IAAI,MAAM,IAAI,CAAC,EAAE;YAC9B,OAAO,GAAG,CAAC;SACZ;aAAM,IAAI,MAAM,KAAK,CAAC,EAAE;YACvB,OAAO,GAAG,CAAC;SACZ;aAAM,IAAI,MAAM,IAAI,CAAC,EAAE;YACtB,OAAO,GAAG,CAAC;SACZ;aAAM;YACL,OAAO,CAAC,CAAC;SACV;KACF;SAAM;QACL,OAAO,CAAC,CAAC;KACV;AACH,CAAC;AACD,SAAS,OAAO,CAAC,KAAa;IAC5B,MAAM,MAAM,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACtE,IAAI,MAAM,KAAK,gBAAgB,EAAE;QAC/B,OAAO,MAAM,CAAC;KACf;SAAM;QACL,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;KAC/B;AACH,CAAC;AACD,SAAS,SAAS,CAAC,KAA8B;IAC/C,MAAM,IAAI,GAAG,EAAE,CAAC;IAChB,IAAI,CAAC,IAAI,CAAC,gBAAC,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC;IACpC,IAAI,CAAC,IAAI,CAAC,gBAAC,CAAC,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC;IACrC,IAAI,CAAC,IAAI,CAAC,gBAAC,CAAC,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC;IACrC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC;AACD,SAAS,cAAc,CAAC,KAAc;IACpC,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,KAAK,YAAY,MAAM,EAAE;QAC3B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;YACjC,IAAI,CAAC,IAAI,CACP,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,gBAAC,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CACtE,CAAC;QACJ,CAAC,CAAC,CAAC;KACJ;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AAChC,CAAC;AACD,SAAS,aAAa,CAAC,KAAgB;IACrC,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QACtC,OAAO,gBAAC,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,IAAA,gBAAC,EAAC,SAAS,CAAC;SACvB,OAAO,EAAE;SACT,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;SACnC,IAAI,EAAE;SACN,KAAK,EAAE,CAAC;IACX,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE;QACnB,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK;aACF,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,gBAAC,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;aAChD,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YACnB,IAAI,OAAO,YAAY,MAAM,EAAE;gBAC7B,gBAAC,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;aACnD;YACD,KAAK,EAAE,CAAC;QACV,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IACH,OAAO,KAA2B,CAAC;AACrC,CAAC;AAED,MAAa,SAAU,SAAQ,8BAAa;IAwE1C,YAAY,OAAe,EAAE,IAAY;QACvC,KAAK,CACH,gBAAC,CAAC,GAAG,CACH,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EACnB,MAAM,EACN,UAAU,CAAC,gBAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,CACrD,EACD,KAAK,CACN,CAAC;QA/EJ,aAAQ,GAAqD;YAC3D,QAAQ,EAAE;gBACR,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,sBAAoB;gBAC7B,SAAS,EAAE,EAAE;aACd;YACD,OAAO,EAAE,sBAAoB;YAC7B,UAAU,EAAE;gBACV,QAAQ,EAAE,IAAI;aACf;YACD,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,gBAAgB;oBACtB,OAAO,EAAE,EAAC,IAAI,EAAE,UAAU,EAAC;oBAC3B,KAAK,EAAE;wBACL,IAAI,EAAE,YAAY;wBAClB,WAAW,EAAE,CAAC,KAAc,EAAU,EAAE;4BACtC,OAAO,2BAA2B,KAAK,EAAE,CAAC;wBAC5C,CAAC;qBACF;oBACD,UAAU,EAAE,IAAI;oBAChB,OAAO,EAAE;wBACP,IAAI,EAAE,YAAY;wBAClB,WAAW,EAAE,CAAC,KAAc,EAAU,EAAE;4BACtC,OAAO,2BAA2B,KAAK,EAAE,CAAC;wBAC5C,CAAC;qBACF;oBACD,OAAO,EAAE,IAAI;oBACb,SAAS,EAAE,IAAI;oBACf,eAAe,EAAE,IAAI;oBACrB,QAAQ,EAAE,EAAE;oBACZ,UAAU,EAAE,EAAE;oBACd,OAAO,EAAE,EAAE;oBACX,MAAM,EAAE,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE;wBACR;4BACE,IAAI,EAAE,aAAa;4BACnB,gBAAgB,EAAE,aAAa;4BAC/B,EAAE,EAAE,EAAC,IAAI,EAAE,UAAU,EAAC;4BACtB,KAAK,EAAE,EAAC,IAAI,EAAE,MAAM,EAAC;4BACrB,IAAI,EAAE,EAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,0BAAS,EAAC;4BAC5C,MAAM,EAAE,EAAC,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,aAAa,EAAC;4BACtD,IAAI,EAAE;gCACJ,IAAI,EAAE,EAAC,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAC;gCAC3C,KAAK,EAAE,EAAC,IAAI,EAAE,OAAO,EAAC;gCACtB,MAAM,EAAE,EAAC,IAAI,EAAE,QAAQ,EAAC;gCACxB,QAAQ,EAAE,EAAC,IAAI,EAAE,UAAU,EAAC;gCAC5B,UAAU,EAAE,EAAC,IAAI,EAAE,YAAY,EAAC;gCAChC,QAAQ,EAAE,EAAC,IAAI,EAAE,UAAU,EAAC;gCAC5B,KAAK,EAAE,EAAC,WAAW,EAAE,SAAS,EAAC;6BAChC;4BACD,YAAY,EAAE,EAAE;4BAChB,IAAI,EAAE,EAAE;4BACR,eAAe,EAAE,EAAE;4BACnB,IAAI,EAAE,EAAE;4BACR,OAAO,EAAE;gCACP;oCACE,IAAI,EAAE,WAAW;oCACjB,MAAM,EAAE,mBAAQ,CAAC,mBAAmB,CAAC,MAAM;oCAC3C,SAAS,EAAE,EAAC,WAAW,EAAE,cAAc,EAAC;oCACxC,QAAQ,EAAE,CAAC;oCACX,UAAU,EAAE,EAAC,IAAI,EAAE,cAAc,EAAC;iCACnC;6BACF;yBACF;qBACF;oBACD,MAAM,EAAE,EAAE;iBACX;aACF;SACF,CAAC;IAUF,CAAC;IACD,WAAW,CACT,cAAgE;QAEhE,KAAK,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC;IACpC,CAAC;IACD,KAAK;QACH,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC;QAC/B,gBAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC9C,gBAAC,CAAC,GAAG,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;gBAC7C,gBAAC,CAAC,GAAG,CACH,OAAO,EACP,SAAS,EACT,gBAAC,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,MAAM,CAAC,UAC/B,OAA+B,EAC/B,KAAa,EACb,IAA8B;oBAE9B,OAAO,KAAK,KAAK,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gBACzC,CAAC,CAAC,CACH,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF;AA1GD,8BA0GC"}

package/package.json

@@ -0,0 +1,45 @@
+{
+  "name": "@mitre/hdf-converters",
+  "version": "2.5.1",
+  "license": "Apache-2.0",
+  "description": "Converter util library used to transform various scan results into HDF format",
+  "files": [
+    "lib"
+  ],
+  "main": "lib/index.js",
+  "publishConfig": {
+    "main": "lib/index.js"
+  },
+  "scripts": {
+    "prepack": "yarn build && cp package.json package.json.orig && cat package.json.orig | jq '.main = (.publishConfig.main)' > package.json",
+    "postpack": "mv package.json.orig package.json",
+    "build": "tsc -p ./tsconfig.build.json && cp -R ./data ./lib",
+    "lint": "eslint \"**/*.ts\" --fix",
+    "lint:ci": "eslint \"**/*.ts\" --max-warnings 0",
+    "test": "jest --silent"
+  },
+  "dependencies": {
+    "csv-parse": "^4.16.0",
+    "fast-xml-parser": "^3.19.0",
+    "htmlparser2": "^6.1.0",
+    "inspecjs": "^2.5.1",
+    "lodash": "^4.17.21"
+  },
+  "devDependencies": {
+    "@types/jest": "^27.0.0",
+    "@types/lodash": "^4.14.161",
+    "@types/node": "^15.0.1",
+    "htmlparser2": "^6.1.0",
+    "jest": "^27.0.6",
+    "quicktype": "^15.0.260",
+    "ts-jest": "^27.0.3",
+    "ts-node": "^10.0.0",
+    "typedoc": "^0.22.1"
+  },
+  "jest": {
+    "rootDir": ".",
+    "transform": {
+      "^.+\\.ts$": "ts-jest"
+    }
+  }
+}