@mitre/hdf-converters 2.6.19 → 2.6.22

package/lib/src/asff-mapper/case-firewall-manager.js

@@ -0,0 +1,27 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getFirewallManager = void 0;
+const html_entities_1 = require("html-entities");
+const lodash_1 = __importDefault(require("lodash"));
+function findingId(finding) {
+    return (0, html_entities_1.encode)(lodash_1.default.get(finding, 'Title'));
+}
+function productName(findings) {
+    const finding = Array.isArray(findings) ? findings[0] : findings;
+    return (0, html_entities_1.encode)(`${lodash_1.default.get(finding, 'ProductFields.aws/securityhub/CompanyName')} ${lodash_1.default.get(finding, 'ProductFields.aws/securityhub/ProductName')}`);
+}
+function filename(findingInfo) {
+    return `${productName(findingInfo[1])}.json`;
+}
+function getFirewallManager() {
+    return {
+        findingId,
+        productName,
+        filename
+    };
+}
+exports.getFirewallManager = getFirewallManager;
+//# sourceMappingURL=case-firewall-manager.js.map

package/lib/src/asff-mapper/case-firewall-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"case-firewall-manager.js","sourceRoot":"","sources":["../../../src/asff-mapper/case-firewall-manager.ts"],"names":[],"mappings":";;;;;;AAAA,iDAAqC;AACrC,oDAAuB;AAEvB,SAAS,SAAS,CAAC,OAAgC;IACjD,OAAO,IAAA,sBAAM,EAAC,gBAAC,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAW,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,WAAW,CAClB,QAA6D;IAE7D,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IACjE,OAAO,IAAA,sBAAM,EACX,GAAG,gBAAC,CAAC,GAAG,CAAC,OAAO,EAAE,2CAA2C,CAAC,IAAI,gBAAC,CAAC,GAAG,CACrE,OAAO,EACP,2CAA2C,CAC5C,EAAE,CACJ,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CACf,WAAiE;IAEjE,OAAO,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;AAC/C,CAAC;AAED,SAAgB,kBAAkB;IAChC,OAAO;QACL,SAAS;QACT,WAAW;QACX,QAAQ;KACT,CAAC;AACJ,CAAC;AAND,gDAMC"}

package/lib/src/asff-mapper/case-hdf2asff.d.ts

@@ -0,0 +1 @@
+export declare function getHDF2ASFF(): Record<string, (...inputs: any) => any>;

package/lib/src/asff-mapper/case-hdf2asff.js

@@ -0,0 +1,192 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getHDF2ASFF = void 0;
+const html_entities_1 = require("html-entities");
+const lodash_1 = __importDefault(require("lodash"));
+const global_1 = require("../utils/global");
+const asff_mapper_1 = require("./asff-mapper");
+function replaceTypesSlashes(type) {
+    if (!lodash_1.default.isString(type)) {
+        return type;
+    }
+    return type.replace(global_1.FROM_ASFF_TYPES_SLASH_REPLACEMENT, '/');
+}
+function objectifyTypesArray(typesArray) {
+    if (!Array.isArray(typesArray)) {
+        typesArray = lodash_1.default.get(typesArray, 'FindingProviderFields.Types');
+    }
+    const ret = {};
+    for (const typeString of typesArray) {
+        lodash_1.default.merge(ret, (() => {
+            const [type, attribute, value] = typeString.split('/');
+            let parsed = replaceTypesSlashes(value);
+            try {
+                parsed = JSON.parse(parsed);
+            }
+            catch { }
+            return { [type]: { [attribute]: parsed } };
+        })());
+    }
+    return ret;
+}
+function findExecutionFindingIndex(asffOrFindings, asffFindingToMatch) {
+    if (asffFindingToMatch) {
+        const targetToMatch = asffFindingToMatch.Id.split('/')[0];
+        return lodash_1.default.findIndex(Array.isArray(asffOrFindings)
+            ? asffOrFindings
+            : lodash_1.default.get(asffOrFindings, 'Findings'), (finding) => lodash_1.default.get(finding, 'Id').split('/').length === 2 &&
+            lodash_1.default.get(finding, 'Id').startsWith(targetToMatch));
+    }
+    return lodash_1.default.findIndex(Array.isArray(asffOrFindings)
+        ? asffOrFindings
+        : lodash_1.default.get(asffOrFindings, 'Findings'), (finding) => lodash_1.default.get(finding, 'Id').split('/').length === 2);
+}
+function preprocessingASFF(asff) {
+    const clone = lodash_1.default.cloneDeep(asff);
+    const index = findExecutionFindingIndex(clone);
+    lodash_1.default.pullAt(lodash_1.default.get(clone, 'Findings'), index);
+    return clone;
+}
+function supportingDocs(input) {
+    const [asff, docs] = input;
+    const index = findExecutionFindingIndex(asff);
+    const docsClone = lodash_1.default.cloneDeep(docs);
+    docsClone.set(asff_mapper_1.SpecialCasing.HDF2ASFF, {
+        execution: lodash_1.default.get(asff, `Findings[${index}]`)
+    });
+    return docsClone;
+}
+function productName(findings) {
+    const finding = Array.isArray(findings) ? findings[0] : findings;
+    const name = lodash_1.default.get(finding, 'Id');
+    return (0, html_entities_1.encode)(name.split('/').slice(0, 2).join(' - '));
+}
+function doesNotHaveFindingTitlePrefix() {
+    return true;
+}
+function code(group) {
+    return group[0].code || '';
+}
+function waiverData(group) {
+    return group[0].waiver_data || {};
+}
+function filename(findingInfo) {
+    const index = findExecutionFindingIndex(findingInfo[1], findingInfo[0]);
+    const target = replaceTypesSlashes(lodash_1.default.get(findingInfo[1][index], 'Id').split('/')[0]);
+    const finding = findingInfo[0];
+    return `${lodash_1.default.get(objectifyTypesArray(finding), 'File.Input')}-${target}.json`;
+}
+function getCodeForProfileLayer(finding, profileName) {
+    var _a, _b, _c;
+    const profileLayerToCodeMapping = {};
+    (_c = (_b = (_a = lodash_1.default.get(finding, 'Resources')
+        .find((resource) => resource.Type === 'AwsIamRole')) === null || _a === void 0 ? void 0 : _a.Details) === null || _b === void 0 ? void 0 : _b.AwsIamRole) === null || _c === void 0 ? void 0 : _c.AssumeRolePolicyDocument.split('=========================================================\n# Profile name: ').filter((codeLayer) => codeLayer).forEach((codeLayer) => {
+        const [profileLevel, code] = codeLayer.split('\n=========================================================\n\n');
+        profileLayerToCodeMapping[profileLevel] = code
+            .split('Test Description:')[0]
+            .trim();
+    });
+    if (profileName in profileLayerToCodeMapping) {
+        return profileLayerToCodeMapping[profileName];
+    }
+    else {
+        return '';
+    }
+}
+function mapping(context) {
+    var _a;
+    const execution = lodash_1.default.get(context.supportingDocs.get(asff_mapper_1.SpecialCasing.HDF2ASFF), 'execution');
+    const executionTypes = objectifyTypesArray(execution);
+    const profileNames = Object.keys(executionTypes || {}).filter((type) => !['MITRE', 'File', 'Execution'].includes(type));
+    return {
+        shortcircuit: true,
+        passthrough: lodash_1.default.get(executionTypes, 'Execution.passthrough'),
+        platform: {
+            ...lodash_1.default.get(executionTypes, 'Execution.platform'),
+            target_id: ((_a = context.supportingDocs.get(asff_mapper_1.SpecialCasing.HDF2ASFF)) === null || _a === void 0 ? void 0 : _a.execution.Id).split('/')[0]
+        },
+        version: lodash_1.default.get(executionTypes, 'Execution.version'),
+        statistics: lodash_1.default.get(executionTypes, 'Execution.statistics'),
+        profiles: lodash_1.default.map(profileNames, (profileName, index) => {
+            return {
+                name: lodash_1.default.get(executionTypes, `${profileName}.name`),
+                version: lodash_1.default.get(executionTypes, `${profileName}.version`),
+                title: lodash_1.default.get(executionTypes, `${profileName}.title`),
+                maintainer: lodash_1.default.get(executionTypes, `${profileName}.maintainer`),
+                summary: lodash_1.default.get(executionTypes, `${profileName}.summary`),
+                license: lodash_1.default.get(executionTypes, `${profileName}.license`),
+                copyright: lodash_1.default.get(executionTypes, `${profileName}.copyright`),
+                copyright_email: lodash_1.default.get(executionTypes, `${profileName}.copyright_email`),
+                supports: lodash_1.default.get(executionTypes, `${profileName}.supports`, []),
+                attributes: lodash_1.default.get(executionTypes, `${profileName}.attributes`, []),
+                depends: lodash_1.default.get(executionTypes, `${profileName}.depends`),
+                groups: [],
+                status: lodash_1.default.get(executionTypes, `${profileName}.status`),
+                description: lodash_1.default.get(executionTypes, `${profileName}.description`),
+                inspec_version: lodash_1.default.get(executionTypes, `${profileName}.inspec_version`),
+                parent_profile: lodash_1.default.get(executionTypes, `${profileName}.parent_profile`),
+                skip_message: lodash_1.default.get(executionTypes, `${profileName}.skip_message`),
+                status_message: lodash_1.default.get(executionTypes, `${profileName}.status_message`),
+                controls: (0, asff_mapper_1.consolidate)(context, (() => {
+                    return lodash_1.default.map(lodash_1.default.get(context.data, 'Findings'), (finding) => {
+                        const findingTypes = objectifyTypesArray(finding);
+                        return {
+                            id: lodash_1.default.get(findingTypes, 'Control.ID'),
+                            ...(lodash_1.default.has(findingTypes, 'Control.Title') && {
+                                title: lodash_1.default.get(findingTypes, 'Control.Title')
+                            }),
+                            ...(lodash_1.default.has(findingTypes, 'Control.Desc') && {
+                                desc: lodash_1.default.get(findingTypes, 'Control.Desc')
+                            }),
+                            impact: lodash_1.default.get(findingTypes, 'Control.Impact'),
+                            tags: {
+                                ...lodash_1.default.omit(lodash_1.default.get(findingTypes, 'Tags'), ['nist']),
+                                nist: (() => {
+                                    const nisttags = lodash_1.default.get(findingTypes, 'Tags.nist');
+                                    if (nisttags === undefined || nisttags.length === 0) {
+                                        return global_1.DEFAULT_STATIC_CODE_ANALYSIS_NIST_TAGS;
+                                    }
+                                    return nisttags;
+                                })()
+                            },
+                            descriptions: lodash_1.default.map(Object.entries(lodash_1.default.get(findingTypes, 'Descriptions') || {}), ([key, value]) => ({ label: key, data: value })),
+                            refs: lodash_1.default.get(findingTypes, 'Control.Refs', []),
+                            source_location: lodash_1.default.get(findingTypes, 'Control.Source_Location', {}),
+                            ...(lodash_1.default.has(findingTypes, 'Control.Waiver_Data') && {
+                                waiver_data: lodash_1.default.get(findingTypes, 'Control.Waiver_Data')
+                            }),
+                            code: getCodeForProfileLayer(finding, profileName),
+                            results: index === profileNames.length - 1
+                                ? [
+                                    {
+                                        code_desc: lodash_1.default.get(findingTypes, 'Segment.code_desc'),
+                                        start_time: lodash_1.default.get(findingTypes, 'Segment.start_time'),
+                                        ...lodash_1.default.omit(lodash_1.default.get(findingTypes, 'Segment'), ['code_desc', 'start_time'])
+                                    }
+                                ]
+                                : []
+                        };
+                    });
+                })(), context.data),
+                sha256: lodash_1.default.get(executionTypes, `${profileName}.sha256`)
+            };
+        })
+    };
+}
+function getHDF2ASFF() {
+    return {
+        preprocessingASFF,
+        supportingDocs,
+        productName,
+        doesNotHaveFindingTitlePrefix,
+        code,
+        waiverData,
+        filename,
+        mapping
+    };
+}
+exports.getHDF2ASFF = getHDF2ASFF;
+//# sourceMappingURL=case-hdf2asff.js.map

package/lib/src/asff-mapper/case-hdf2asff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"case-hdf2asff.js","sourceRoot":"","sources":["../../../src/asff-mapper/case-hdf2asff.ts"],"names":[],"mappings":";;;;;;AAAA,iDAAqC;AAErC,oDAAuB;AAEvB,4CAGyB;AACzB,+CAAqE;AAErE,SAAS,mBAAmB,CAAI,IAAO;IACrC,IAAI,CAAC,gBAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE;QACrB,OAAO,IAAI,CAAC;KACb;IACD,OAAO,IAAI,CAAC,OAAO,CAAC,0CAAiC,EAAE,GAAG,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,mBAAmB,CAC1B,UAA8C;IAE9C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE;QAC9B,UAAU,GAAG,gBAAC,CAAC,GAAG,CAAC,UAAU,EAAE,6BAA6B,CAAa,CAAC;KAC3E;IACD,MAAM,GAAG,GAAG,EAAE,CAAC;IACf,KAAK,MAAM,UAAU,IAAI,UAAU,EAAE;QACnC,gBAAC,CAAC,KAAK,CACL,GAAG,EACH,CAAC,GAA4B,EAAE;YAC7B,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACvD,IAAI,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;YACxC,IAAI;gBACF,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;aAC7B;YAAC,MAAM,GAAE;YACV,OAAO,EAAC,CAAC,IAAI,CAAC,EAAE,EAAC,CAAC,SAAS,CAAC,EAAE,MAAM,EAAC,EAAC,CAAC;QACzC,CAAC,CAAC,EAAE,CACL,CAAC;KACH;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,yBAAyB,CAChC,cAAmE,EACnE,kBAAiC;IAEjC,IAAI,kBAAkB,EAAE;QACtB,MAAM,aAAa,GAAG,kBAAkB,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1D,OAAO,gBAAC,CAAC,SAAS,CAChB,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC;YAC3B,CAAC,CAAC,cAAc;YAChB,CAAC,CAAE,gBAAC,CAAC,GAAG,CAAC,cAAc,EAAE,UAAU,CAA+B,EACpE,CAAC,OAAO,EAAE,EAAE,CACT,gBAAC,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC;YACvD,gBAAC,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAY,CAAC,UAAU,CAAC,aAAa,CAAC,CAC7D,CAAC;KACH;IACD,OAAO,gBAAC,CAAC,SAAS,CAChB,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC;QAC3B,CAAC,CAAC,cAAc;QAChB,CAAC,CAAE,gBAAC,CAAC,GAAG,CAAC,cAAc,EAAE,UAAU,CAA+B,EACpE,CAAC,OAAO,EAAE,EAAE,CAAE,gBAAC,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,CACtE,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CACxB,IAA6B;IAE7B,MAAM,KAAK,GAAG,gBAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,KAAK,GAAG,yBAAyB,CAAC,KAAK,CAAC,CAAC;IAC/C,gBAAC,CAAC,MAAM,CAAC,gBAAC,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,CAA8B,EAAE,KAAK,CAAC,CAAC;IACvE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CACrB,KAGC;IAED,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,KAAK,CAAC;IAC3B,MAAM,KAAK,GAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,gBAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACpC,SAAS,CAAC,GAAG,CAAC,2BAAa,CAAC,QAAQ,EAAE;QACpC,SAAS,EAAE,gBAAC,CAAC,GAAG,CAAC,IAAI,EAAE,YAAY,KAAK,GAAG,CAA4B;KACxE,CAAC,CAAC;IACH,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,WAAW,CAClB,QAA6D;IAE7D,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IACjE,MAAM,IAAI,GAAG,gBAAC,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAW,CAAC;IAC5C,OAAO,IAAA,sBAAM,EAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,6BAA6B;IACpC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,IAAI,CAAC,KAAyB;IACrC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;AAC7B,CAAC;AAED,SAAS,UAAU,CAAC,KAAyB;IAC3C,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC;AACpC,CAAC;AAED,SAAS,QAAQ,CACf,WAAiE;IAEjE,MAAM,KAAK,GAAG,yBAAyB,CACrC,WAAW,CAAC,CAAC,CAAC,EACd,WAAW,CAAC,CAAC,CAAiB,CAC/B,CAAC;IAEF,MAAM,MAAM,GAAG,mBAAmB,CAC/B,gBAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,IAAI,CAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAC7D,CAAC;IACF,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;IAC/B,OAAO,GAAG,gBAAC,CAAC,GAAG,CAAC,mBAAmB,CAAC,OAAO,CAAC,EAAE,YAAY,CAAC,IAAI,MAAM,OAAO,CAAC;AAC/E,CAAC;AAED,SAAS,sBAAsB,CAC7B,OAAgC,EAChC,WAAmB;;IAEnB,MAAM,yBAAyB,GAA2B,EAAE,CAAC;IAC7D,MAAA,MAAA,MACE,gBAAC,CAAC,GAAG,CAAC,OAAO,EAAE,WAAW,CAO3B;SACE,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,KAAK,YAAY,CAAC,0CACjD,OAAO,0CAAE,UAAU,0CAAE,wBAAwB,CAAC,KAAK,CACnD,6EAA6E,EAE9E,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,EAC/B,OAAO,CAAC,CAAC,SAAS,EAAE,EAAE;QACrB,MAAM,CAAC,YAAY,EAAE,IAAI,CAAC,GAAG,SAAS,CAAC,KAAK,CAC1C,iEAAiE,CAClE,CAAC;QACF,yBAAyB,CAAC,YAAY,CAAC,GAAG,IAAI;aAC3C,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;aAC7B,IAAI,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;IACL,IAAI,WAAW,IAAI,yBAAyB,EAAE;QAC5C,OAAO,yBAAyB,CAAC,WAAW,CAAC,CAAC;KAC/C;SAAM;QACL,OAAO,EAAE,CAAC;KACX;AACH,CAAC;AAED,SAAS,OAAO,CACd,OAAmB;;IAEnB,MAAM,SAAS,GAAG,gBAAC,CAAC,GAAG,CACrB,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,2BAAa,CAAC,QAAQ,CAAC,EAClD,WAAW,CACZ,CAAC;IACF,MAAM,cAAc,GAAG,mBAAmB,CACxC,SAAoC,CACrC,CAAC;IACF,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,MAAM,CAC3D,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CACzD,CAAC;IACF,OAAO;QACL,YAAY,EAAE,IAAI;QAClB,WAAW,EAAE,gBAAC,CAAC,GAAG,CAAC,cAAc,EAAE,uBAAuB,CAAC;QAC3D,QAAQ,EAAE;YACR,GAAI,gBAAC,CAAC,GAAG,CAAC,cAAc,EAAE,oBAAoB,CAAuB;YACrE,SAAS,EAAE,CACT,MAAA,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,2BAAa,CAAC,QAAQ,CAAC,0CAAE,SAAS,CAC1D,EACJ,CAAA,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;SAChB;QACD,OAAO,EAAE,gBAAC,CAAC,GAAG,CAAC,cAAc,EAAE,mBAAmB,CAAC;QACnD,UAAU,EAAE,gBAAC,CAAC,GAAG,CAAC,cAAc,EAAE,sBAAsB,CAAC;QACzD,QAAQ,EAAE,gBAAC,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,WAAmB,EAAE,KAAa,EAAE,EAAE;YAEnE,OAAO;gBACL,IAAI,EAAE,gBAAC,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,WAAW,OAAO,CAAC;gBAClD,OAAO,EAAE,gBAAC,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,WAAW,UAAU,CAAC;gBACxD,KAAK,EAAE,gBAAC,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,WAAW,QAAQ,CAAC;gBACpD,UAAU,EAAE,gBAAC,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,WAAW,aAAa,CAAC;gBAC9D,OAAO,EAAE,gBAAC,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,WAAW,UAAU,CAAC;gBACxD,OAAO,EAAE,gBAAC,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,WAAW,UAAU,CAAC;gBACxD,SAAS,EAAE,gBAAC,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,WAAW,YAAY,CAAC;gBAC5D,eAAe,EAAE,gBAAC,CAAC,GAAG,CACpB,cAAc,EACd,GAAG,WAAW,kBAAkB,CACjC;gBACD,QAAQ,EAAE,gBAAC,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,WAAW,WAAW,EAAE,EAAE,CAAC;gBAC9D,UAAU,EAAE,gBAAC,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,WAAW,aAAa,EAAE,EAAE,CAAC;gBAClE,OAAO,EAAE,gBAAC,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,WAAW,UAAU,CAAC;gBACxD,MAAM,EAAE,EAAE;gBACV,MAAM,EAAE,gBAAC,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,WAAW,SAAS,CAAC;gBACtD,WAAW,EAAE,gBAAC,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,WAAW,cAAc,CAAC;gBAChE,cAAc,EAAE,gBAAC,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,WAAW,iBAAiB,CAAC;gBACtE,cAAc,EAAE,gBAAC,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,WAAW,iBAAiB,CAAC;gBACtE,YAAY,EAAE,gBAAC,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,WAAW,eAAe,CAAC;gBAClE,cAAc,EAAE,gBAAC,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,WAAW,iBAAiB,CAAC;gBACtE,QAAQ,EAAE,IAAA,yBAAW,EACnB,OAAO,EACP,CAAC,GAAuB,EAAE;oBACxB,OAAO,gBAAC,CAAC,GAAG,CACV,gBAAC,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,CAA8B,EAC5D,CAAC,OAAgC,EAAE,EAAE;wBACnC,MAAM,YAAY,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;wBAClD,OAAO;4BACL,EAAE,EAAE,gBAAC,CAAC,GAAG,CAAC,YAAY,EAAE,YAAY,CAAC;4BACrC,GAAG,CAAC,gBAAC,CAAC,GAAG,CAAC,YAAY,EAAE,eAAe,CAAC,IAAI;gCAC1C,KAAK,EAAE,gBAAC,CAAC,GAAG,CAAC,YAAY,EAAE,eAAe,CAAC;6BAC5C,CAAC;4BACF,GAAG,CAAC,gBAAC,CAAC,GAAG,CAAC,YAAY,EAAE,cAAc,CAAC,IAAI;gCACzC,IAAI,EAAE,gBAAC,CAAC,GAAG,CAAC,YAAY,EAAE,cAAc,CAAC;6BAC1C,CAAC;4BACF,MAAM,EAAE,gBAAC,CAAC,GAAG,CAAC,YAAY,EAAE,gBAAgB,CAAC;4BAC7C,IAAI,EAAE;gCACJ,GAAG,gBAAC,CAAC,IAAI,CACP,gBAAC,CAAC,GAAG,CAAC,YAAY,EAAE,MAAM,CAA8B,EACxD,CAAC,MAAM,CAAC,CACT;gCACD,IAAI,EAAE,CAAC,GAAa,EAAE;oCACpB,MAAM,QAAQ,GAAG,gBAAC,CAAC,GAAG,CAAC,YAAY,EAAE,WAAW,CAEpC,CAAC;oCACb,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE;wCACnD,OAAO,+CAAsC,CAAC;qCAC/C;oCACD,OAAO,QAAQ,CAAC;gCAClB,CAAC,CAAC,EAAE;6BACL;4BACD,YAAY,EAAE,gBAAC,CAAC,GAAG,CACjB,MAAM,CAAC,OAAO,CACX,gBAAC,CAAC,GAAG,CAAC,YAAY,EAAE,cAAc,CAGjC,IAAI,EAAE,CACT,EACD,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAC,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAC,CAAC,CAC9C;4BACD,IAAI,EAAE,gBAAC,CAAC,GAAG,CAAC,YAAY,EAAE,cAAc,EAAE,EAAE,CAAC;4BAC7C,eAAe,EAAE,gBAAC,CAAC,GAAG,CACpB,YAAY,EACZ,yBAAyB,EACzB,EAAE,CACH;4BACD,GAAG,CAAC,gBAAC,CAAC,GAAG,CAAC,YAAY,EAAE,qBAAqB,CAAC,IAAI;gCAChD,WAAW,EAAE,gBAAC,CAAC,GAAG,CAAC,YAAY,EAAE,qBAAqB,CAAC;6BACxD,CAAC;4BACF,IAAI,EAAE,sBAAsB,CAAC,OAAO,EAAE,WAAW,CAAC;4BAElD,OAAO,EACL,KAAK,KAAK,YAAY,CAAC,MAAM,GAAG,CAAC;gCAC/B,CAAC,CAAC;oCACE;wCACE,SAAS,EAAE,gBAAC,CAAC,GAAG,CACd,YAAY,EACZ,mBAAmB,CACV;wCACX,UAAU,EAAE,gBAAC,CAAC,GAAG,CACf,YAAY,EACZ,oBAAoB,CACX;wCACX,GAAG,gBAAC,CAAC,IAAI,CACP,gBAAC,CAAC,GAAG,CAAC,YAAY,EAAE,SAAS,CAG5B,EACD,CAAC,WAAW,EAAE,YAAY,CAAC,CAC5B;qCACF;iCACF;gCACH,CAAC,CAAC,EAAE;yBACW,CAAC;oBACxB,CAAC,CACF,CAAC;gBACJ,CAAC,CAAC,EAAE,EACJ,OAAO,CAAC,IAAI,CACb;gBACD,MAAM,EAAE,gBAAC,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,WAAW,SAAS,CAAC;aACnC,CAAC;QACxB,CAAC,CAAC;KACiD,CAAC;AACxD,CAAC;AAED,SAAgB,WAAW;IACzB,OAAO;QACL,iBAAiB;QACjB,cAAc;QACd,WAAW;QACX,6BAA6B;QAC7B,IAAI;QACJ,UAAU;QACV,QAAQ;QACR,OAAO;KACR,CAAC;AACJ,CAAC;AAXD,kCAWC"}

package/lib/src/asff-mapper/case-prowler.d.ts

@@ -0,0 +1 @@
+export declare function getProwler(): Record<string, (...inputs: any) => any>;

package/lib/src/asff-mapper/case-prowler.js

@@ -0,0 +1,39 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getProwler = void 0;
+const html_entities_1 = require("html-entities");
+const lodash_1 = __importDefault(require("lodash"));
+const desc = () => ' ';
+function subfindingsCodeDesc(finding) {
+    return (0, html_entities_1.encode)(lodash_1.default.get(finding, 'Description'));
+}
+function findingId(finding) {
+    const generatorId = lodash_1.default.get(finding, 'GeneratorId');
+    const hyphenIndex = generatorId.indexOf('-');
+    return (0, html_entities_1.encode)(generatorId.slice(hyphenIndex + 1));
+}
+function productName(findings) {
+    const finding = Array.isArray(findings) ? findings[0] : findings;
+    return (0, html_entities_1.encode)(lodash_1.default.get(finding, 'ProductFields.ProviderName'));
+}
+function filename(findingInfo) {
+    return `${productName(findingInfo[1])}.json`;
+}
+function meta() {
+    return { name: 'Prowler', title: 'Prowler Findings' };
+}
+function getProwler() {
+    return {
+        subfindingsCodeDesc,
+        findingId,
+        productName,
+        desc,
+        filename,
+        meta
+    };
+}
+exports.getProwler = getProwler;
+//# sourceMappingURL=case-prowler.js.map

package/lib/src/asff-mapper/case-prowler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"case-prowler.js","sourceRoot":"","sources":["../../../src/asff-mapper/case-prowler.ts"],"names":[],"mappings":";;;;;;AAAA,iDAAqC;AACrC,oDAAuB;AAEvB,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,GAAG,CAAC;AAEvB,SAAS,mBAAmB,CAAC,OAAgB;IAC3C,OAAO,IAAA,sBAAM,EAAC,gBAAC,CAAC,GAAG,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,SAAS,CAAC,OAAgB;IACjC,MAAM,WAAW,GAAG,gBAAC,CAAC,GAAG,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IAClD,MAAM,WAAW,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7C,OAAO,IAAA,sBAAM,EAAC,WAAW,CAAC,KAAK,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,WAAW,CAClB,QAA6D;IAE7D,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IACjE,OAAO,IAAA,sBAAM,EAAC,gBAAC,CAAC,GAAG,CAAC,OAAO,EAAE,4BAA4B,CAAW,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,QAAQ,CACf,WAAiE;IAEjE,OAAO,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;AAC/C,CAAC;AAED,SAAS,IAAI;IACX,OAAO,EAAC,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,kBAAkB,EAAC,CAAC;AACtD,CAAC;AAGD,SAAgB,UAAU;IACxB,OAAO;QACL,mBAAmB;QACnB,SAAS;QACT,WAAW;QACX,IAAI;QACJ,QAAQ;QACR,IAAI;KACL,CAAC;AACJ,CAAC;AATD,gCASC"}

package/lib/src/asff-mapper/case-security-hub.d.ts

@@ -0,0 +1 @@
+export declare function getSecurityHub(): Record<string, (...inputs: any) => any>;

package/lib/src/asff-mapper/case-security-hub.js

@@ -0,0 +1,136 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getSecurityHub = void 0;
+const html_entities_1 = require("html-entities");
+const lodash_1 = __importDefault(require("lodash"));
+const AwsConfigMapping_1 = require("../mappings/AwsConfigMapping");
+const FINDING_STANDARDS_CONTROL_ARN = 'ProductFields.StandardsControlArn';
+function correspondingControl(controls, finding) {
+    return controls.find((control) => lodash_1.default.get(control, 'StandardsControlArn') ===
+        lodash_1.default.get(finding, FINDING_STANDARDS_CONTROL_ARN));
+}
+function securityhubSupportingDocs(standards) {
+    let controls;
+    try {
+        if (Array.isArray(standards)) {
+            controls = standards
+                .map((standard) => lodash_1.default.get(JSON.parse(standard), 'Controls'))
+                .flat();
+        }
+        else {
+            controls = null;
+        }
+    }
+    catch (error) {
+        throw new Error(`Invalid supporting docs for Security Hub:\nException: ${error}`);
+    }
+    const AWS_CONFIG_MAPPING = new AwsConfigMapping_1.AwsConfigMapping();
+    return {
+        controls,
+        awsConfigMapping: AWS_CONFIG_MAPPING
+    };
+}
+function findingId(finding, { controls = null }) {
+    let control;
+    if (controls !== null &&
+        (control = correspondingControl(controls, finding)) !== null) {
+        return (0, html_entities_1.encode)(lodash_1.default.get(control, 'ControlId'));
+    }
+    else if (lodash_1.default.has(finding, 'ProductFields.ControlId')) {
+        return lodash_1.default.get(finding, 'ProductFields.ControlId');
+    }
+    else if (lodash_1.default.has(finding, 'ProductFields.RuleId')) {
+        return (0, html_entities_1.encode)(lodash_1.default.get(finding, 'ProductFields.RuleId'));
+    }
+    else {
+        return (0, html_entities_1.encode)(lodash_1.default.get(finding, 'GeneratorId').split('/').slice(-1)[0]);
+    }
+}
+function findingImpact(finding, { controls = null }) {
+    let impact;
+    let control;
+    if (controls !== null &&
+        (control = correspondingControl(controls, finding)) !== null) {
+        impact = lodash_1.default.get(control, 'SeverityRating');
+    }
+    else {
+        impact =
+            lodash_1.default.get(finding, 'Severity.Label') ||
+                lodash_1.default.get(finding, 'Severity.Normalized') / 100.0;
+        if (typeof impact === 'string' && impact === 'INFORMATIONAL') {
+            impact = 'MEDIUM';
+        }
+    }
+    return impact;
+}
+function findingNistTag(finding, { awsConfigMapping }) {
+    if (lodash_1.default.get(finding, 'ProductFields.RelatedAWSResources:0/type') !==
+        'AWS::Config::ConfigRule') {
+        return [];
+    }
+    return awsConfigMapping.searchNIST([
+        lodash_1.default.get(finding, 'ProductFields.RelatedAWSResources:0/name')
+    ]);
+}
+function findingTitle(finding, { controls = null }) {
+    let control;
+    if (controls !== null &&
+        (control = correspondingControl(controls, finding)) !== null) {
+        return (0, html_entities_1.encode)(lodash_1.default.get(control, 'Title'));
+    }
+    else {
+        return (0, html_entities_1.encode)(lodash_1.default.get(finding, 'Title'));
+    }
+}
+function productName(findings) {
+    const finding = Array.isArray(findings) ? findings[0] : findings;
+    let standardName;
+    if (lodash_1.default.get(finding, 'Types[0]')
+        .split('/')
+        .slice(-1)[0]
+        .replace(/-/gi, ' ')
+        .toLowerCase() ===
+        lodash_1.default.get(finding, FINDING_STANDARDS_CONTROL_ARN)
+            .split('/')
+            .slice(-4)[0]
+            .replace(/-/gi, ' ')
+            .toLowerCase()) {
+        standardName = lodash_1.default.get(finding, 'Types[0]')
+            .split('/')
+            .slice(-1)[0]
+            .replace(/-/gi, ' ');
+    }
+    else {
+        standardName = lodash_1.default.get(finding, FINDING_STANDARDS_CONTROL_ARN)
+            .split('/')
+            .slice(-4)[0]
+            .replace(/-/gi, ' ')
+            .split(/\s+/)
+            .map((element) => {
+            return element.charAt(0).toUpperCase() + element.slice(1);
+        })
+            .join(' ');
+    }
+    return (0, html_entities_1.encode)(`${standardName} v${lodash_1.default.get(finding, FINDING_STANDARDS_CONTROL_ARN)
+        .split('/')
+        .slice(-2)[0]}`);
+}
+function filename(findingInfo) {
+    return `${productName(findingInfo[0])}.json`;
+}
+function getSecurityHub() {
+    return {
+        securityhubSupportingDocs,
+        findingId,
+        findingImpact,
+        findingNistTag,
+        findingTitle,
+        productName,
+        filename
+    };
+}
+exports.getSecurityHub = getSecurityHub;
+//# sourceMappingURL=case-security-hub.js.map

package/lib/src/asff-mapper/case-security-hub.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"case-security-hub.js","sourceRoot":"","sources":["../../../src/asff-mapper/case-security-hub.ts"],"names":[],"mappings":";;;;;;AAAA,iDAAqC;AACrC,oDAAuB;AACvB,mEAA8D;AAC9D,MAAM,6BAA6B,GAAG,mCAAmC,CAAC;AAE1E,SAAS,oBAAoB,CAAC,QAAmB,EAAE,OAAgB;IACjE,OAAO,QAAQ,CAAC,IAAI,CAClB,CAAC,OAAO,EAAE,EAAE,CACV,gBAAC,CAAC,GAAG,CAAC,OAAO,EAAE,qBAAqB,CAAC;QACrC,gBAAC,CAAC,GAAG,CAAC,OAAO,EAAE,6BAA6B,CAAC,CAChD,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CAAC,SAA+B;IAChE,IAAI,QAA0B,CAAC;IAC/B,IAAI;QACF,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE;YAC5B,QAAQ,GAAG,SAAS;iBACjB,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,gBAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,UAAU,CAAC,CAAC;iBAC1D,IAAI,EAAE,CAAC;SACX;aAAM;YACL,QAAQ,GAAG,IAAI,CAAC;SACjB;KACF;IAAC,OAAO,KAAK,EAAE;QACd,MAAM,IAAI,KAAK,CACb,yDAAyD,KAAK,EAAE,CACjE,CAAC;KACH;IACD,MAAM,kBAAkB,GAAG,IAAI,mCAAgB,EAAE,CAAC;IAClD,OAAO;QACL,QAAQ;QACR,gBAAgB,EAAE,kBAAkB;KACrC,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAChB,OAAgB,EAChB,EAAC,QAAQ,GAAG,IAAI,EAA+B;IAE/C,IAAI,OAAO,CAAC;IACZ,IACE,QAAQ,KAAK,IAAI;QACjB,CAAC,OAAO,GAAG,oBAAoB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,KAAK,IAAI,EAC5D;QACA,OAAO,IAAA,sBAAM,EAAC,gBAAC,CAAC,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC;KAC5C;SAAM,IAAI,gBAAC,CAAC,GAAG,CAAC,OAAO,EAAE,yBAAyB,CAAC,EAAE;QAEpD,OAAO,gBAAC,CAAC,GAAG,CAAC,OAAO,EAAE,yBAAyB,CAAC,CAAC;KAClD;SAAM,IAAI,gBAAC,CAAC,GAAG,CAAC,OAAO,EAAE,sBAAsB,CAAC,EAAE;QAEjD,OAAO,IAAA,sBAAM,EAAC,gBAAC,CAAC,GAAG,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC,CAAC;KACvD;SAAM;QACL,OAAO,IAAA,sBAAM,EAAC,gBAAC,CAAC,GAAG,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;KACtE;AACH,CAAC;AAED,SAAS,aAAa,CACpB,OAAgB,EAChB,EAAC,QAAQ,GAAG,IAAI,EAA+B;IAE/C,IAAI,MAAuB,CAAC;IAC5B,IAAI,OAAO,CAAC;IACZ,IACE,QAAQ,KAAK,IAAI;QACjB,CAAC,OAAO,GAAG,oBAAoB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,KAAK,IAAI,EAC5D;QACA,MAAM,GAAG,gBAAC,CAAC,GAAG,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;KAC3C;SAAM;QAEL,MAAM;YACJ,gBAAC,CAAC,GAAG,CAAC,OAAO,EAAE,gBAAgB,CAAC;gBAChC,gBAAC,CAAC,GAAG,CAAC,OAAO,EAAE,qBAAqB,CAAC,GAAG,KAAK,CAAC;QAEhD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,eAAe,EAAE;YAC5D,MAAM,GAAG,QAAQ,CAAC;SACnB;KACF;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,cAAc,CACrB,OAAgB,EAChB,EAAC,gBAAgB,EAAuC;IAExD,IACE,gBAAC,CAAC,GAAG,CAAC,OAAO,EAAE,0CAA0C,CAAC;QAC1D,yBAAyB,EACzB;QACA,OAAO,EAAE,CAAC;KACX;IACD,OAAO,gBAAgB,CAAC,UAAU,CAAC;QACjC,gBAAC,CAAC,GAAG,CAAC,OAAO,EAAE,0CAA0C,CAAC;KAC3D,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CACnB,OAAgB,EAChB,EAAC,QAAQ,GAAG,IAAI,EAA+B;IAE/C,IAAI,OAAO,CAAC;IACZ,IACE,QAAQ,KAAK,IAAI;QACjB,CAAC,OAAO,GAAG,oBAAoB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,KAAK,IAAI,EAC5D;QACA,OAAO,IAAA,sBAAM,EAAC,gBAAC,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;KACxC;SAAM;QACL,OAAO,IAAA,sBAAM,EAAC,gBAAC,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;KACxC;AACH,CAAC;AAED,SAAS,WAAW,CAClB,QAA6D;IAE7D,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IAGjE,IAAI,YAAoB,CAAC;IACzB,IACG,gBAAC,CAAC,GAAG,CAAC,OAAO,EAAE,UAAU,CAAY;SACnC,KAAK,CAAC,GAAG,CAAC;SACV,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;SACZ,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,WAAW,EAAE;QACf,gBAAC,CAAC,GAAG,CAAC,OAAO,EAAE,6BAA6B,CAAY;aACtD,KAAK,CAAC,GAAG,CAAC;aACV,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;aACZ,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;aACnB,WAAW,EAAE,EAChB;QACA,YAAY,GAAI,gBAAC,CAAC,GAAG,CAAC,OAAO,EAAE,UAAU,CAAY;aAClD,KAAK,CAAC,GAAG,CAAC;aACV,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;aACZ,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;KACxB;SAAM;QACL,YAAY,GAAI,gBAAC,CAAC,GAAG,CAAC,OAAO,EAAE,6BAA6B,CAAY;aACrE,KAAK,CAAC,GAAG,CAAC;aACV,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;aACZ,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;aACnB,KAAK,CAAC,KAAK,CAAC;aACZ,GAAG,CAAC,CAAC,OAAe,EAAE,EAAE;YACvB,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC5D,CAAC,CAAC;aACD,IAAI,CAAC,GAAG,CAAC,CAAC;KACd;IACD,OAAO,IAAA,sBAAM,EACX,GAAG,YAAY,KACZ,gBAAC,CAAC,GAAG,CAAC,OAAO,EAAE,6BAA6B,CAAY;SACtD,KAAK,CAAC,GAAG,CAAC;SACV,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAChB,EAAE,CACH,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CACf,WAAiE;IAEjE,OAAO,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;AAC/C,CAAC;AAED,SAAgB,cAAc;IAC5B,OAAO;QACL,yBAAyB;QACzB,SAAS;QACT,aAAa;QACb,cAAc;QACd,YAAY;QACZ,WAAW;QACX,QAAQ;KACT,CAAC;AACJ,CAAC;AAVD,wCAUC"}

package/lib/src/asff-mapper/case-trivy.d.ts

@@ -0,0 +1 @@
+export declare function getTrivy(): Record<string, (...inputs: any) => any>;

package/lib/src/asff-mapper/case-trivy.js

@@ -0,0 +1,71 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getTrivy = void 0;
+const html_entities_1 = require("html-entities");
+const inspecjs_1 = require("inspecjs");
+const lodash_1 = __importDefault(require("lodash"));
+function findingId(finding) {
+    const generatorId = lodash_1.default.get(finding, 'GeneratorId');
+    const cveId = lodash_1.default.get(finding, 'Resources[0].Details.Other.CVE ID');
+    if (typeof cveId === 'string') {
+        return (0, html_entities_1.encode)(`${generatorId}/${cveId}`);
+    }
+    else {
+        const id = lodash_1.default.get(finding, 'Id');
+        return (0, html_entities_1.encode)(`${generatorId}/${id}`);
+    }
+}
+function findingNistTag(finding) {
+    const cveId = lodash_1.default.get(finding, 'Resources[0].Details.Other.CVE ID');
+    if (typeof cveId === 'string') {
+        return ['SI-2', 'RA-5'];
+    }
+    else {
+        return [];
+    }
+}
+function subfindingsStatus() {
+    return inspecjs_1.ExecJSON.ControlResultStatus.Failed;
+}
+function subfindingsMessage(finding) {
+    const cveId = lodash_1.default.get(finding, 'Resources[0].Details.Other.CVE ID');
+    if (typeof cveId === 'string') {
+        const patchedPackage = lodash_1.default.get(finding, 'Resources[0].Details.Other.Patched Package');
+        const patchedVersionMessage = patchedPackage.length === 0
+            ? 'There is no patched version of the package.'
+            : `The package has been patched since version(s): ${patchedPackage}.`;
+        return `For package ${lodash_1.default.get(finding, 'Resources[0].Details.Other.PkgName')}, the current version that is installed is ${lodash_1.default.get(finding, 'Resources[0].Details.Other.Installed Package')}.  ${patchedVersionMessage}`;
+    }
+    else {
+        return undefined;
+    }
+}
+function productName() {
+    return 'Aqua Security - Trivy';
+}
+function doesNotHaveFindingTitlePrefix() {
+    return true;
+}
+function filename() {
+    return `${productName()}.json`;
+}
+function meta() {
+    return { name: 'Trivy', title: 'Trivy Findings' };
+}
+function getTrivy() {
+    return {
+        findingId,
+        findingNistTag,
+        subfindingsStatus,
+        subfindingsMessage,
+        doesNotHaveFindingTitlePrefix,
+        productName,
+        filename,
+        meta
+    };
+}
+exports.getTrivy = getTrivy;
+//# sourceMappingURL=case-trivy.js.map

package/lib/src/asff-mapper/case-trivy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"case-trivy.js","sourceRoot":"","sources":["../../../src/asff-mapper/case-trivy.ts"],"names":[],"mappings":";;;;;;AAAA,iDAAqC;AACrC,uCAAkC;AAClC,oDAAuB;AAEvB,SAAS,SAAS,CAAC,OAAgB;IACjC,MAAM,WAAW,GAAG,gBAAC,CAAC,GAAG,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,gBAAC,CAAC,GAAG,CAAC,OAAO,EAAE,mCAAmC,CAAC,CAAC;IAClE,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE;QAC7B,OAAO,IAAA,sBAAM,EAAC,GAAG,WAAW,IAAI,KAAK,EAAE,CAAC,CAAC;KAC1C;SAAM;QACL,MAAM,EAAE,GAAG,gBAAC,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAChC,OAAO,IAAA,sBAAM,EAAC,GAAG,WAAW,IAAI,EAAE,EAAE,CAAC,CAAC;KACvC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,OAAgB;IACtC,MAAM,KAAK,GAAG,gBAAC,CAAC,GAAG,CAAC,OAAO,EAAE,mCAAmC,CAAC,CAAC;IAClE,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE;QAC7B,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;KACzB;SAAM;QACL,OAAO,EAAE,CAAC;KACX;AACH,CAAC;AAED,SAAS,iBAAiB;IACxB,OAAO,mBAAQ,CAAC,mBAAmB,CAAC,MAAM,CAAC;AAC7C,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAgB;IAC1C,MAAM,KAAK,GAAG,gBAAC,CAAC,GAAG,CAAC,OAAO,EAAE,mCAAmC,CAAC,CAAC;IAClE,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE;QAC7B,MAAM,cAAc,GAAG,gBAAC,CAAC,GAAG,CAC1B,OAAO,EACP,4CAA4C,CAC7C,CAAC;QACF,MAAM,qBAAqB,GACzB,cAAc,CAAC,MAAM,KAAK,CAAC;YACzB,CAAC,CAAC,6CAA6C;YAC/C,CAAC,CAAC,kDAAkD,cAAc,GAAG,CAAC;QAC1E,OAAO,eAAe,gBAAC,CAAC,GAAG,CACzB,OAAO,EACP,oCAAoC,CACrC,8CAA8C,gBAAC,CAAC,GAAG,CAClD,OAAO,EACP,8CAA8C,CAC/C,MAAM,qBAAqB,EAAE,CAAC;KAChC;SAAM;QACL,OAAO,SAAS,CAAC;KAClB;AACH,CAAC;AAED,SAAS,WAAW;IAClB,OAAO,uBAAuB,CAAC;AACjC,CAAC;AAED,SAAS,6BAA6B;IACpC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,QAAQ;IACf,OAAO,GAAG,WAAW,EAAE,OAAO,CAAC;AACjC,CAAC;AAED,SAAS,IAAI;IACX,OAAO,EAAC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAC,CAAC;AAClD,CAAC;AAED,SAAgB,QAAQ;IACtB,OAAO;QACL,SAAS;QACT,cAAc;QACd,iBAAiB;QACjB,kBAAkB;QAClB,6BAA6B;QAC7B,WAAW;QACX,QAAQ;QACR,IAAI;KACL,CAAC;AACJ,CAAC;AAXD,4BAWC"}

package/lib/src/base-converter.d.ts

@@ -1,11 +1,12 @@
 import { ExecJSON } from 'inspecjs';
 export interface ILookupPath {
+    shortcircuit?: boolean;
     path?: string | string[];
     transformer?: (value: any) => unknown;
     arrayTransformer?: (value: unknown[], file: any) => unknown[];
     key?: string;
 }
-export declare type ObjectEntries<T> = {
+export declare type ObjectEntryValue<T> = {
     [K in keyof T]: readonly [K, T[K]];
 }[keyof T];
 export declare type MappedTransform<T, U extends ILookupPath> = {
@@ -26,12 +27,12 @@ export declare class BaseConverter {
     constructor(data: Record<string, unknown>, collapseResults?: boolean);
     setMappings(mappings: MappedTransform<ExecJSON.Execution, ILookupPath>): void;
     toHdf(): ExecJSON.Execution;
-    objectMap<T, V>(obj: T, fn: (v: ObjectEntries<T>) => V): {
+    objectMap<T, V>(obj: T, fn: (v: ObjectEntryValue<T>) => V): {
         [K in keyof T]: V;
     };
     convertInternal<T>(file: Record<string, unknown>, fields: T): MappedReform<T, ILookupPath>;
-    evaluate<T extends object>(file: Record<string, unknown>, v: Array<T> | T): T | Array<T> | MappedReform<T, ILookupPath>;
-    handleArray<T extends object>(file: Record<string, unknown>, v: Array<T & ILookupPath>): Array<T>;
+    evaluate<T>(file: Record<string, unknown>, v: T | Array<T>): T | Array<T> | MappedReform<T, ILookupPath>;
+    handleArray<T>(file: Record<string, unknown>, v: Array<T & ILookupPath>): Array<T>;
     handlePath(file: Record<string, unknown>, path: string | string[]): unknown;
     hasPath(file: Record<string, unknown>, path: string | string[]): boolean;
 }