@mitre/hdf-converters 2.6.2 → 2.6.8

package/lib/src/aws-config-mapper.js

@@ -0,0 +1,369 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AwsConfigMapper = void 0;
+const aws_sdk_1 = __importDefault(require("aws-sdk"));
+const https_1 = __importDefault(require("https"));
+const inspecjs_1 = require("inspecjs");
+const lodash_1 = __importDefault(require("lodash"));
+const package_json_1 = require("../package.json");
+const AwsConfigMapping_1 = require("./mappings/AwsConfigMapping");
+const NOT_APPLICABLE_MSG = 'No AWS resources found to evaluate compliance for this rule';
+const INSUFFICIENT_DATA_MSG = 'Not enough data has been collected to determine compliance yet.';
+const NAME = 'AWS Config';
+const AWS_CONFIG_MAPPING = new AwsConfigMapping_1.AwsConfigMapping();
+class AwsConfigMapper {
+    constructor(options, verifySSLCertificates = true) {
+        aws_sdk_1.default.config.update({
+            httpOptions: {
+                agent: new https_1.default.Agent({
+                    rejectUnauthorized: verifySSLCertificates
+                })
+            }
+        });
+        this.configService = new aws_sdk_1.default.ConfigService(options);
+        this.results = [];
+        this.issues = this.getAllConfigRules();
+    }
+    delay(ms) {
+        return new Promise((resolve) => setTimeout(resolve, ms));
+    }
+    async getAllConfigRules() {
+        let params = {
+            ConfigRuleNames: [],
+            NextToken: ''
+        };
+        const configRules = [];
+        let response = await this.getConfigRulePage(params);
+        if (response.ConfigRules === undefined) {
+            throw new Error('No data was returned');
+        }
+        else {
+            while (response !== undefined && response.ConfigRules !== undefined) {
+                response.ConfigRules.forEach((rule) => {
+                    configRules.push(rule);
+                });
+                if (response.NextToken) {
+                    params = lodash_1.default.set(params, 'NextToken', response.NextToken);
+                }
+                else {
+                    break;
+                }
+                response = await this.getConfigRulePage(params);
+            }
+        }
+        this.results = await this.getResults(configRules);
+        return configRules;
+    }
+    chunkArray(sourceArray, chunkSize) {
+        const result = [];
+        for (let i = 0; i < sourceArray.length; i += chunkSize) {
+            result.push(sourceArray.slice(i, i + chunkSize));
+        }
+        return result;
+    }
+    async getConfigRulePage(params) {
+        await this.delay(150);
+        return this.configService.describeConfigRules(params).promise();
+    }
+    async getResults(configRules) {
+        const complianceResults = await this.fetchAllComplianceInfo(configRules);
+        const ruleData = [];
+        const allRulesResolved = [];
+        for (const configRule of configRules) {
+            const result = [];
+            let params = {
+                ConfigRuleName: configRule.ConfigRuleName || '',
+                Limit: 100
+            };
+            await this.delay(150);
+            let response = await this.configService
+                .getComplianceDetailsByConfigRule(params)
+                .promise();
+            let ruleResults = response.EvaluationResults || [];
+            allRulesResolved.push(...ruleResults);
+            while (response.NextToken !== undefined) {
+                params = lodash_1.default.set(params, 'NextToken', response.NextToken);
+                await this.delay(150);
+                response = await this.configService
+                    .getComplianceDetailsByConfigRule(params)
+                    .promise();
+                ruleResults = ruleResults === null || ruleResults === void 0 ? void 0 : ruleResults.concat(response.EvaluationResults || []);
+                allRulesResolved.push(...ruleResults);
+            }
+            ruleResults.forEach((evaluation) => {
+                var _a, _b, _c;
+                const hdfResult = {
+                    code_desc: this.getCodeDesc(evaluation),
+                    start_time: ((_a = evaluation.ConfigRuleInvokedTime) === null || _a === void 0 ? void 0 : _a.toISOString()) || '',
+                    run_time: this.getRunTime(evaluation),
+                    status: this.getStatus(evaluation),
+                    message: this.getMessage(evaluation, this.getCodeDesc(evaluation), this.getStatus(evaluation))
+                };
+                result.push(hdfResult);
+                const currentDate = new Date().toISOString();
+                if (result.length === 0) {
+                    switch ((_c = (_b = complianceResults.find((complianceResult) => complianceResult.ConfigRuleName === configRule.ConfigRuleName)) === null || _b === void 0 ? void 0 : _b.Compliance) === null || _c === void 0 ? void 0 : _c.ComplianceType) {
+                        case 'NOT_APPLICABLE':
+                            return [
+                                {
+                                    run_time: 0,
+                                    code_desc: NOT_APPLICABLE_MSG,
+                                    skip_message: NOT_APPLICABLE_MSG,
+                                    start_time: currentDate,
+                                    status: inspecjs_1.ExecJSON.ControlResultStatus.Skipped
+                                }
+                            ];
+                        case 'INSUFFICIENT_DATA':
+                            return [
+                                {
+                                    run_time: 0,
+                                    code_desc: INSUFFICIENT_DATA_MSG,
+                                    skip_message: INSUFFICIENT_DATA_MSG,
+                                    start_time: currentDate,
+                                    status: inspecjs_1.ExecJSON.ControlResultStatus.Skipped
+                                }
+                            ];
+                        default:
+                            return [];
+                    }
+                }
+                else {
+                    return ruleData.push(result);
+                }
+            });
+        }
+        return this.appendResourceNamesToResults(await Promise.all(ruleData), await this.extractResourceNamesFromIds(allRulesResolved));
+    }
+    async appendResourceNamesToResults(completedControlResults, extractedResourceNames) {
+        return completedControlResults.map((completedControlResult) => completedControlResult.map((completedControl) => {
+            for (const extractedResourceName in extractedResourceNames) {
+                if (completedControl.code_desc.indexOf(JSON.stringify(extractedResourceName)
+                    .replace(/\"/gi, '')
+                    .replace(/{/gi, '')
+                    .replace(/}/gi, '')) !== -1) {
+                    return {
+                        ...completedControl,
+                        code_desc: `${completedControl.code_desc}, resource_name: ${extractedResourceNames[extractedResourceName]}`
+                    };
+                }
+            }
+            return completedControl;
+        }));
+    }
+    async extractResourceNamesFromIds(evaluationResults) {
+        var _a;
+        const resourceMap = {};
+        const resolvedResourcesMap = {};
+        evaluationResults.forEach((result) => {
+            const resourceType = lodash_1.default.get(result, 'EvaluationResultIdentifier.EvaluationResultQualifier.ResourceType');
+            const resourceId = lodash_1.default.get(result, 'EvaluationResultIdentifier.EvaluationResultQualifier.ResourceId');
+            if (!(resourceType in resourceMap)) {
+                resourceMap[resourceType] = [resourceId];
+            }
+            else {
+                if (!resourceMap[resourceType].includes(resourceId) &&
+                    typeof resourceId === 'string') {
+                    resourceMap[resourceType].push(resourceId);
+                }
+            }
+        });
+        for (const resourceType in resourceMap) {
+            const resourceIDSlices = this.chunkArray(resourceMap[resourceType], 20);
+            for (const slice of resourceIDSlices) {
+                await this.delay(150);
+                const resources = await this.configService
+                    .listDiscoveredResources({
+                    resourceType: resourceType,
+                    resourceIds: slice
+                })
+                    .promise();
+                (_a = resources.resourceIdentifiers) === null || _a === void 0 ? void 0 : _a.forEach((resource) => {
+                    if (resource.resourceId && resource.resourceName) {
+                        resolvedResourcesMap[resource.resourceId] = resource.resourceName;
+                    }
+                });
+            }
+        }
+        return resolvedResourcesMap;
+    }
+    getCodeDesc(result) {
+        let output = '';
+        if (result.EvaluationResultIdentifier !== undefined &&
+            result.EvaluationResultIdentifier.EvaluationResultQualifier !== undefined) {
+            output = JSON.stringify(result.EvaluationResultIdentifier.EvaluationResultQualifier)
+                .replace(/\"/gi, '')
+                .replace(/{/gi, '')
+                .replace(/}/gi, '');
+        }
+        return output;
+    }
+    getRunTime(result) {
+        let diff = 0;
+        if (result.ResultRecordedTime !== undefined &&
+            result.ConfigRuleInvokedTime !== undefined) {
+            diff =
+                (result.ResultRecordedTime.getTime() -
+                    result.ConfigRuleInvokedTime.getTime()) /
+                    1000;
+        }
+        return diff;
+    }
+    getStatus(result) {
+        if (result.ComplianceType === 'COMPLIANT') {
+            return inspecjs_1.ExecJSON.ControlResultStatus.Passed;
+        }
+        else if (result.ComplianceType === 'NON_COMPLIANT') {
+            return inspecjs_1.ExecJSON.ControlResultStatus.Failed;
+        }
+        else {
+            return inspecjs_1.ExecJSON.ControlResultStatus.Skipped;
+        }
+    }
+    getMessage(result, codeDesc, status) {
+        if (status === inspecjs_1.ExecJSON.ControlResultStatus.Failed) {
+            return `${codeDesc}: ${result.Annotation || 'Rule does not pass rule compliance'}`;
+        }
+        else {
+            return undefined;
+        }
+    }
+    async fetchAllComplianceInfo(configRules) {
+        var _a;
+        const complianceResults = [];
+        const configRuleSlices = this.chunkArray(configRules, 25);
+        for (const slice of configRuleSlices) {
+            await this.delay(150);
+            const response = await this.configService
+                .describeComplianceByConfigRule({
+                ConfigRuleNames: slice.map((rule) => rule.ConfigRuleName || '')
+            })
+                .promise();
+            if (response.ComplianceByConfigRules === undefined) {
+                throw new Error('No compliance data was returned');
+            }
+            else {
+                (_a = response.ComplianceByConfigRules) === null || _a === void 0 ? void 0 : _a.forEach((compliance) => complianceResults.push(compliance));
+            }
+        }
+        return complianceResults;
+    }
+    hdfTags(configRule) {
+        var _a;
+        let result = {};
+        const sourceIdentifier = (_a = configRule.Source) === null || _a === void 0 ? void 0 : _a.SourceIdentifier;
+        result = lodash_1.default.set(result, 'nist', []);
+        let defaultMatch = [];
+        if (sourceIdentifier !== undefined) {
+            defaultMatch = AWS_CONFIG_MAPPING.nistFilter([sourceIdentifier]);
+        }
+        if (Array.isArray(defaultMatch) && defaultMatch.length !== 0) {
+            result = lodash_1.default.set(result, 'nist', lodash_1.default.get(result, 'nist').concat(defaultMatch));
+        }
+        if (Array.isArray(lodash_1.default.get(result, 'nist')) &&
+            lodash_1.default.get(result, 'nist').length === 0) {
+            result = lodash_1.default.set(result, 'nist', ['unmapped']);
+        }
+        return result;
+    }
+    checkText(configRule) {
+        var _a;
+        let params = [];
+        if (configRule.InputParameters !== undefined &&
+            configRule.InputParameters !== '{}') {
+            params = configRule.InputParameters.replace(/{/gi, '')
+                .replace(/}/gi, '')
+                .split(',');
+        }
+        const checkText = [];
+        checkText.push(`ARN: ${configRule.ConfigRuleArn || 'N/A'}`);
+        checkText.push(`Source Identifier: ${((_a = configRule.Source) === null || _a === void 0 ? void 0 : _a.SourceIdentifier) || 'N/A'}`);
+        if (params.length !== 0) {
+            checkText.push(`${params.join('<br/>').replace(/\"/gi, '')}`);
+        }
+        return checkText.join('<br/>');
+    }
+    hdfDescriptions(configRule) {
+        return [
+            {
+                data: this.checkText(configRule),
+                label: 'check'
+            }
+        ];
+    }
+    getAccountId(arn) {
+        const matches = arn.match(/:(\d{12}):config-rule/);
+        if (matches === null) {
+            return 'no-account-id';
+        }
+        else {
+            return matches[0];
+        }
+    }
+    async getControls() {
+        let index = 0;
+        return (await this.issues).map((issue) => {
+            const control = {
+                id: issue.ConfigRuleId || '',
+                title: `${this.getAccountId(issue.ConfigRuleArn || '')} - ${issue.ConfigRuleName}`
+                    .replace(/:/gi, '')
+                    .replace(/config-rule/gi, ''),
+                desc: issue.Description || null,
+                impact: this.getImpact(issue),
+                tags: this.hdfTags(issue),
+                descriptions: this.hdfDescriptions(issue),
+                refs: [],
+                source_location: { ref: issue.ConfigRuleArn, line: 1 },
+                code: '',
+                results: this.results[index]
+            };
+            index++;
+            return control;
+        });
+    }
+    getImpact(issue) {
+        if (lodash_1.default.get(issue, 'compliance') === 'NOT_APPLICABLE') {
+            return 0;
+        }
+        else {
+            return 0.5;
+        }
+    }
+    async toHdf() {
+        const hdf = {
+            platform: {
+                name: 'Heimdall Tools',
+                release: package_json_1.version,
+                target_id: ''
+            },
+            version: package_json_1.version,
+            statistics: {
+                duration: null
+            },
+            profiles: [
+                {
+                    name: NAME,
+                    version: '',
+                    title: NAME,
+                    maintainer: null,
+                    summary: NAME,
+                    license: null,
+                    copyright: null,
+                    copyright_email: null,
+                    supports: [],
+                    attributes: [],
+                    depends: [],
+                    groups: [],
+                    status: 'loaded',
+                    controls: await this.getControls(),
+                    sha256: ''
+                }
+            ]
+        };
+        return hdf;
+    }
+}
+exports.AwsConfigMapper = AwsConfigMapper;
+//# sourceMappingURL=aws-config-mapper.js.map

package/lib/src/aws-config-mapper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aws-config-mapper.js","sourceRoot":"","sources":["../../src/aws-config-mapper.ts"],"names":[],"mappings":";;;;;;AAMA,sDAA0B;AAC1B,kDAA0B;AAC1B,uCAAkC;AAClC,oDAAuB;AACvB,kDAAgE;AAChE,kEAA6D;AAE7D,MAAM,kBAAkB,GACtB,6DAA6D,CAAC;AAChE,MAAM,qBAAqB,GACzB,iEAAiE,CAAC;AACpE,MAAM,IAAI,GAAG,YAAY,CAAC;AAE1B,MAAM,kBAAkB,GAAG,IAAI,mCAAgB,EAAE,CAAC;AAElD,MAAa,eAAe;IAI1B,YACE,OAA8C,EAC9C,qBAAqB,GAAG,IAAI;QAE5B,iBAAG,CAAC,MAAM,CAAC,MAAM,CAAC;YAChB,WAAW,EAAE;gBACX,KAAK,EAAE,IAAI,eAAK,CAAC,KAAK,CAAC;oBACrB,kBAAkB,EAAE,qBAAqB;iBAC1C,CAAC;aACH;SACF,CAAC,CAAC;QACH,IAAI,CAAC,aAAa,GAAG,IAAI,iBAAG,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QACpD,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;QAClB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;IACzC,CAAC;IAEO,KAAK,CAAC,EAAU;QACtB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IAC3D,CAAC;IAEO,KAAK,CAAC,iBAAiB;QAC7B,IAAI,MAAM,GAAoC;YAC5C,eAAe,EAAE,EAAE;YACnB,SAAS,EAAE,EAAE;SACd,CAAC;QACF,MAAM,WAAW,GAAiB,EAAE,CAAC;QACrC,IAAI,QAAQ,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACpD,IAAI,QAAQ,CAAC,WAAW,KAAK,SAAS,EAAE;YACtC,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;SACzC;aAAM;YACL,OAAO,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,WAAW,KAAK,SAAS,EAAE;gBACnE,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;oBACpC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACzB,CAAC,CAAC,CAAC;gBACH,IAAI,QAAQ,CAAC,SAAS,EAAE;oBACtB,MAAM,GAAG,gBAAC,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;iBACzD;qBAAM;oBACL,MAAM;iBACP;gBACD,QAAQ,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;aACjD;SACF;QACD,IAAI,CAAC,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;QAClD,OAAO,WAAW,CAAC;IACrB,CAAC;IAEO,UAAU,CAAC,WAAuB,EAAE,SAAiB;QAC3D,MAAM,MAAM,GAAG,EAAE,CAAC;QAClB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,IAAI,SAAS,EAAE;YACtD,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC;SAClD;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAC7B,MAAuC;QAEvC,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACtB,OAAO,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC;IAClE,CAAC;IAEO,KAAK,CAAC,UAAU,CACtB,WAAyB;QAEzB,MAAM,iBAAiB,GACrB,MAAM,IAAI,CAAC,sBAAsB,CAAC,WAAW,CAAC,CAAC;QACjD,MAAM,QAAQ,GAA+B,EAAE,CAAC;QAChD,MAAM,gBAAgB,GAAwC,EAAE,CAAC;QACjE,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE;YACpC,MAAM,MAAM,GAA6B,EAAE,CAAC;YAC5C,IAAI,MAAM,GAAG;gBACX,cAAc,EAAE,UAAU,CAAC,cAAc,IAAI,EAAE;gBAC/C,KAAK,EAAE,GAAG;aACX,CAAC;YACF,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACtB,IAAI,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa;iBACpC,gCAAgC,CAAC,MAAM,CAAC;iBACxC,OAAO,EAAE,CAAC;YACb,IAAI,WAAW,GAAG,QAAQ,CAAC,iBAAiB,IAAI,EAAE,CAAC;YACnD,gBAAgB,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,CAAC;YACtC,OAAO,QAAQ,CAAC,SAAS,KAAK,SAAS,EAAE;gBACvC,MAAM,GAAG,gBAAC,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;gBACxD,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBACtB,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa;qBAChC,gCAAgC,CAAC,MAAM,CAAC;qBACxC,OAAO,EAAE,CAAC;gBACb,WAAW,GAAG,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,MAAM,CAAC,QAAQ,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC;gBACpE,gBAAgB,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,CAAC;aACvC;YACD,WAAW,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE;;gBACjC,MAAM,SAAS,GAA2B;oBACxC,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC;oBACvC,UAAU,EAAE,CAAA,MAAA,UAAU,CAAC,qBAAqB,0CAAE,WAAW,EAAE,KAAI,EAAE;oBACjE,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;oBACrC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC;oBAClC,OAAO,EAAE,IAAI,CAAC,UAAU,CACtB,UAAU,EACV,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,EAC5B,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAC3B;iBACF,CAAC;gBACF,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACvB,MAAM,WAAW,GAAW,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;gBACrD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE;oBACvB,QACE,MAAA,MAAA,iBAAiB,CAAC,IAAI,CACpB,CAAC,gBAAgB,EAAE,EAAE,CACnB,gBAAgB,CAAC,cAAc,KAAK,UAAU,CAAC,cAAc,CAChE,0CAAE,UAAU,0CAAE,cAAc,EAC7B;wBACA,KAAK,gBAAgB;4BACnB,OAAO;gCACL;oCACE,QAAQ,EAAE,CAAC;oCACX,SAAS,EAAE,kBAAkB;oCAC7B,YAAY,EAAE,kBAAkB;oCAChC,UAAU,EAAE,WAAW;oCACvB,MAAM,EAAE,mBAAQ,CAAC,mBAAmB,CAAC,OAAO;iCAC7C;6BACF,CAAC;wBACJ,KAAK,mBAAmB;4BACtB,OAAO;gCACL;oCACE,QAAQ,EAAE,CAAC;oCACX,SAAS,EAAE,qBAAqB;oCAChC,YAAY,EAAE,qBAAqB;oCACnC,UAAU,EAAE,WAAW;oCACvB,MAAM,EAAE,mBAAQ,CAAC,mBAAmB,CAAC,OAAO;iCAC7C;6BACF,CAAC;wBACJ;4BACE,OAAO,EAAE,CAAC;qBACb;iBACF;qBAAM;oBACL,OAAO,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;iBAC9B;YACH,CAAC,CAAC,CAAC;SACJ;QAED,OAAO,IAAI,CAAC,4BAA4B,CACtC,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAC3B,MAAM,IAAI,CAAC,2BAA2B,CAAC,gBAAgB,CAAC,CACzD,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,4BAA4B,CACxC,uBAAmD,EACnD,sBAA8C;QAE9C,OAAO,uBAAuB,CAAC,GAAG,CAAC,CAAC,sBAAsB,EAAE,EAAE,CAC5D,sBAAsB,CAAC,GAAG,CAAC,CAAC,gBAAgB,EAAE,EAAE;YAC9C,KAAK,MAAM,qBAAqB,IAAI,sBAAsB,EAAE;gBAC1D,IACE,gBAAgB,CAAC,SAAS,CAAC,OAAO,CAChC,IAAI,CAAC,SAAS,CAAC,qBAAqB,CAAC;qBAClC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;qBACnB,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;qBAClB,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CACtB,KAAK,CAAC,CAAC,EACR;oBACA,OAAO;wBACL,GAAG,gBAAgB;wBACnB,SAAS,EAAE,GAAG,gBAAgB,CAAC,SAAS,oBAAoB,sBAAsB,CAAC,qBAAqB,CAAC,EAAE;qBAC5G,CAAC;iBACH;aACF;YACD,OAAO,gBAAgB,CAAC;QAC1B,CAAC,CAAC,CACH,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,2BAA2B,CACvC,iBAAsD;;QAGtD,MAAM,WAAW,GAA6B,EAAE,CAAC;QAEjD,MAAM,oBAAoB,GAA2B,EAAE,CAAC;QAExD,iBAAiB,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;YACnC,MAAM,YAAY,GAAW,gBAAC,CAAC,GAAG,CAChC,MAAM,EACN,mEAAmE,CACpE,CAAC;YACF,MAAM,UAAU,GAAW,gBAAC,CAAC,GAAG,CAC9B,MAAM,EACN,iEAAiE,CAClE,CAAC;YACF,IAAI,CAAC,CAAC,YAAY,IAAI,WAAW,CAAC,EAAE;gBAClC,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;aAC1C;iBAAM;gBACL,IACE,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;oBAC/C,OAAO,UAAU,KAAK,QAAQ,EAC9B;oBACA,WAAW,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;iBAC5C;aACF;QACH,CAAC,CAAC,CAAC;QAEH,KAAK,MAAM,YAAY,IAAI,WAAW,EAAE;YACtC,MAAM,gBAAgB,GAAG,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC;YACxE,KAAK,MAAM,KAAK,IAAI,gBAAgB,EAAE;gBACpC,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBACtB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,aAAa;qBACvC,uBAAuB,CAAC;oBACvB,YAAY,EAAE,YAAY;oBAC1B,WAAW,EAAE,KAAK;iBACnB,CAAC;qBACD,OAAO,EAAE,CAAC;gBACb,MAAA,SAAS,CAAC,mBAAmB,0CAAE,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE;oBAClD,IAAI,QAAQ,CAAC,UAAU,IAAI,QAAQ,CAAC,YAAY,EAAE;wBAChD,oBAAoB,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,QAAQ,CAAC,YAAY,CAAC;qBACnE;gBACH,CAAC,CAAC,CAAC;aACJ;SACF;QACD,OAAO,oBAAoB,CAAC;IAC9B,CAAC;IAEO,WAAW,CAAC,MAAwB;QAC1C,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IACE,MAAM,CAAC,0BAA0B,KAAK,SAAS;YAC/C,MAAM,CAAC,0BAA0B,CAAC,yBAAyB,KAAK,SAAS,EACzE;YACA,MAAM,GAAG,IAAI,CAAC,SAAS,CACrB,MAAM,CAAC,0BAA0B,CAAC,yBAAyB,CAC5D;iBACE,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;iBACnB,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;iBAClB,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;SACvB;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,UAAU,CAAC,MAAwB;QACzC,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,IACE,MAAM,CAAC,kBAAkB,KAAK,SAAS;YACvC,MAAM,CAAC,qBAAqB,KAAK,SAAS,EAC1C;YACA,IAAI;gBACF,CAAC,MAAM,CAAC,kBAAkB,CAAC,OAAO,EAAE;oBAClC,MAAM,CAAC,qBAAqB,CAAC,OAAO,EAAE,CAAC;oBACzC,IAAI,CAAC;SACR;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,SAAS,CAAC,MAAwB;QACxC,IAAI,MAAM,CAAC,cAAc,KAAK,WAAW,EAAE;YACzC,OAAO,mBAAQ,CAAC,mBAAmB,CAAC,MAAM,CAAC;SAC5C;aAAM,IAAI,MAAM,CAAC,cAAc,KAAK,eAAe,EAAE;YACpD,OAAO,mBAAQ,CAAC,mBAAmB,CAAC,MAAM,CAAC;SAC5C;aAAM;YACL,OAAO,mBAAQ,CAAC,mBAAmB,CAAC,OAAO,CAAC;SAC7C;IACH,CAAC;IAEO,UAAU,CAChB,MAAwB,EACxB,QAAgB,EAChB,MAAoC;QAEpC,IAAI,MAAM,KAAK,mBAAQ,CAAC,mBAAmB,CAAC,MAAM,EAAE;YAClD,OAAO,GAAG,QAAQ,KAChB,MAAM,CAAC,UAAU,IAAI,oCACvB,EAAE,CAAC;SACJ;aAAM;YACL,OAAO,SAAS,CAAC;SAClB;IACH,CAAC;IAEO,KAAK,CAAC,sBAAsB,CAClC,WAAyB;;QAEzB,MAAM,iBAAiB,GAA6B,EAAE,CAAC;QAEvD,MAAM,gBAAgB,GAAG,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAC1D,KAAK,MAAM,KAAK,IAAI,gBAAgB,EAAE;YACpC,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACtB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa;iBACtC,8BAA8B,CAAC;gBAC9B,eAAe,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,IAAI,EAAE,CAAC;aAChE,CAAC;iBACD,OAAO,EAAE,CAAC;YACb,IAAI,QAAQ,CAAC,uBAAuB,KAAK,SAAS,EAAE;gBAClD,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;aACpD;iBAAM;gBACL,MAAA,QAAQ,CAAC,uBAAuB,0CAAE,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE,CACvD,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC,CACnC,CAAC;aACH;SACF;QACD,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IAGO,OAAO,CAAC,UAAsB;;QACpC,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,MAAM,gBAAgB,GAAG,MAAA,UAAU,CAAC,MAAM,0CAAE,gBAAgB,CAAC;QAC7D,MAAM,GAAG,gBAAC,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACnC,IAAI,YAAY,GAAoB,EAAE,CAAC;QACvC,IAAI,gBAAgB,KAAK,SAAS,EAAE;YAClC,YAAY,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC;SAClE;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE;YAC5D,MAAM,GAAG,gBAAC,CAAC,GAAG,CACZ,MAAM,EACN,MAAM,EACN,gBAAC,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAC3C,CAAC;SACH;QACD,IACE,KAAK,CAAC,OAAO,CAAC,gBAAC,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACpC,gBAAC,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,EAClC;YACA,MAAM,GAAG,gBAAC,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;SAC9C;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,SAAS,CAAC,UAAsB;;QACtC,IAAI,MAAM,GAAU,EAAE,CAAC;QACvB,IACE,UAAU,CAAC,eAAe,KAAK,SAAS;YACxC,UAAU,CAAC,eAAe,KAAK,IAAI,EACnC;YACA,MAAM,GAAG,UAAU,CAAC,eAAe,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;iBACnD,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;iBAClB,KAAK,CAAC,GAAG,CAAC,CAAC;SACf;QACD,MAAM,SAAS,GAAG,EAAE,CAAC;QACrB,SAAS,CAAC,IAAI,CAAC,QAAQ,UAAU,CAAC,aAAa,IAAI,KAAK,EAAE,CAAC,CAAC;QAC5D,SAAS,CAAC,IAAI,CACZ,sBAAsB,CAAA,MAAA,UAAU,CAAC,MAAM,0CAAE,gBAAgB,KAAI,KAAK,EAAE,CACrE,CAAC;QACF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE;YACvB,SAAS,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;SAC/D;QACD,OAAO,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;IAEO,eAAe,CAAC,UAAsB;QAC5C,OAAO;YACL;gBACE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC;gBAChC,KAAK,EAAE,OAAO;aACf;SACF,CAAC;IACJ,CAAC;IAEO,YAAY,CAAC,GAAW;QAC9B,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;QACnD,IAAI,OAAO,KAAK,IAAI,EAAE;YACpB,OAAO,eAAe,CAAC;SACxB;aAAM;YACL,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC;SACnB;IACH,CAAC;IAEO,KAAK,CAAC,WAAW;QACvB,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,OAAO,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAiB,EAAE,EAAE;YACnD,MAAM,OAAO,GAAqB;gBAChC,EAAE,EAAE,KAAK,CAAC,YAAY,IAAI,EAAE;gBAC5B,KAAK,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,aAAa,IAAI,EAAE,CAAC,MACpD,KAAK,CAAC,cACR,EAAE;qBACC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;qBAClB,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC;gBAC/B,IAAI,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI;gBAC/B,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;gBAC7B,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;gBACzB,YAAY,EAAE,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC;gBACzC,IAAI,EAAE,EAAE;gBACR,eAAe,EAAE,EAAC,GAAG,EAAE,KAAK,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC,EAAC;gBACpD,IAAI,EAAE,EAAE;gBACR,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;aAC7B,CAAC;YACF,KAAK,EAAE,CAAC;YACR,OAAO,OAAO,CAAC;QACjB,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,SAAS,CAAC,KAAiB;QACjC,IAAI,gBAAC,CAAC,GAAG,CAAC,KAAK,EAAE,YAAY,CAAC,KAAK,gBAAgB,EAAE;YACnD,OAAO,CAAC,CAAC;SACV;aAAM;YACL,OAAO,GAAG,CAAC;SACZ;IACH,CAAC;IAEM,KAAK,CAAC,KAAK;QAChB,MAAM,GAAG,GAAuB;YAC9B,QAAQ,EAAE;gBACR,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,sBAAoB;gBAC7B,SAAS,EAAE,EAAE;aACd;YACD,OAAO,EAAE,sBAAoB;YAC7B,UAAU,EAAE;gBAEV,QAAQ,EAAE,IAAI;aACf;YACD,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,IAAI;oBACV,OAAO,EAAE,EAAE;oBACX,KAAK,EAAE,IAAI;oBACX,UAAU,EAAE,IAAI;oBAChB,OAAO,EAAE,IAAI;oBACb,OAAO,EAAE,IAAI;oBACb,SAAS,EAAE,IAAI;oBACf,eAAe,EAAE,IAAI;oBACrB,QAAQ,EAAE,EAAE;oBACZ,UAAU,EAAE,EAAE;oBACd,OAAO,EAAE,EAAE;oBACX,MAAM,EAAE,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,MAAM,IAAI,CAAC,WAAW,EAAE;oBAClC,MAAM,EAAE,EAAE;iBACX;aACF;SACF,CAAC;QACF,OAAO,GAAG,CAAC;IACb,CAAC;CACF;AAhbD,0CAgbC"}

package/lib/src/base-converter.d.ts

@@ -1,6 +1,6 @@
 import { ExecJSON } from 'inspecjs';
 export interface ILookupPath {
-    path?: string;
+    path?: string | string[];
     transformer?: (value: any) => unknown;
     arrayTransformer?: (value: unknown[], file: any) => unknown[];
     key?: string;
@@ -16,6 +16,7 @@ export declare type MappedReform<T, U> = {
 };
 export declare function generateHash(data: string, algorithm?: string): string;
 export declare function parseHtml(input: unknown): string;
+export declare function parseXml(xml: string): Record<string, unknown>;
 export declare function impactMapping(mapping: Map<string, number>): (severity: unknown) => number;
 export declare class BaseConverter {
     data: Record<string, unknown>;
@@ -30,6 +31,6 @@ export declare class BaseConverter {
     convertInternal<T>(file: Record<string, unknown>, fields: T): MappedReform<T, ILookupPath>;
     evaluate<T extends object>(file: Record<string, unknown>, v: Array<T> | T): T | Array<T> | MappedReform<T, ILookupPath>;
     handleArray<T extends object>(file: Record<string, unknown>, v: Array<T & ILookupPath>): Array<T>;
-    handlePath(file: Record<string, unknown>, path: string): unknown;
-    hasPath(file: Record<string, unknown>, path: string): boolean;
+    handlePath(file: Record<string, unknown>, path: string | string[]): unknown;
+    hasPath(file: Record<string, unknown>, path: string | string[]): boolean;
 }

package/lib/src/base-converter.js

@@ -22,8 +22,9 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.BaseConverter = exports.impactMapping = exports.parseHtml = exports.generateHash = void 0;
+exports.BaseConverter = exports.impactMapping = exports.parseXml = exports.parseHtml = exports.generateHash = void 0;
 const crypto_1 = require("crypto");
+const fast_xml_parser_1 = __importDefault(require("fast-xml-parser"));
 const htmlparser = __importStar(require("htmlparser2"));
 const lodash_1 = __importDefault(require("lodash"));
 function generateHash(data, algorithm = 'sha256') {
@@ -45,6 +46,15 @@ function parseHtml(input) {
     return textData.join('');
 }
 exports.parseHtml = parseHtml;
+function parseXml(xml) {
+    const options = {
+        attributeNamePrefix: '',
+        textNodeName: 'text',
+        ignoreAttributes: false
+    };
+    return fast_xml_parser_1.default.parse(xml, options);
+}
+exports.parseXml = parseXml;
 function impactMapping(mapping) {
     return (severity) => {
         if (typeof severity === 'string' || typeof severity === 'number') {
@@ -145,89 +155,116 @@ class BaseConverter {
         if (v.length === 0) {
             return [];
         }
-        if (v[0].path === undefined) {
-            const arrayTransformer = (_a = v[0].arrayTransformer) === null || _a === void 0 ? void 0 : _a.bind(this);
-            v = v.map((element) => {
-                return lodash_1.default.omit(element, ['arrayTransformer']);
-            });
-            let output = [];
-            v.forEach((element) => {
-                output.push(this.evaluate(file, element));
-            });
-            if (arrayTransformer !== undefined) {
-                if (Array.isArray(arrayTransformer)) {
-                    output = arrayTransformer[0].apply(arrayTransformer[1], [
-                        v,
-                        this.data
-                    ]);
-                }
-                else {
-                    output = arrayTransformer.apply(null, [output, this.data]);
+        const resultingData = [];
+        for (const lookupPath of v) {
+            if (lookupPath.path === undefined) {
+                const arrayTransformer = (_a = lookupPath.arrayTransformer) === null || _a === void 0 ? void 0 : _a.bind(this);
+                v = v.map((element) => {
+                    return lodash_1.default.omit(element, ['arrayTransformer']);
+                });
+                let output = [];
+                v.forEach((element) => {
+                    output.push(this.evaluate(file, element));
+                });
+                if (arrayTransformer !== undefined) {
+                    if (Array.isArray(arrayTransformer)) {
+                        output = arrayTransformer[0].apply(arrayTransformer[1], [
+                            v,
+                            this.data
+                        ]);
+                    }
+                    else {
+                        output = arrayTransformer.apply(null, [output, this.data]);
+                    }
                 }
+                resultingData.push(...output);
             }
-            return output;
-        }
-        else {
-            const path = v[0].path;
-            const key = v[0].key;
-            const arrayTransformer = (_b = v[0].arrayTransformer) === null || _b === void 0 ? void 0 : _b.bind(this);
-            const transformer = (_c = v[0].transformer) === null || _c === void 0 ? void 0 : _c.bind(this);
-            if (this.hasPath(file, path)) {
-                const pathVal = this.handlePath(file, path);
-                if (Array.isArray(pathVal)) {
-                    v = pathVal.map((element) => {
-                        return lodash_1.default.omit(this.convertInternal(element, v[0]), [
-                            'path',
-                            'transformer',
-                            'arrayTransformer',
-                            'key'
-                        ]);
-                    });
-                    if (arrayTransformer !== undefined) {
-                        if (Array.isArray(arrayTransformer)) {
-                            v = arrayTransformer[0].apply(arrayTransformer[1], [
-                                v,
-                                this.data
+            else {
+                const path = lookupPath.path;
+                const key = lookupPath.key;
+                const arrayTransformer = (_b = lookupPath.arrayTransformer) === null || _b === void 0 ? void 0 : _b.bind(this);
+                const transformer = (_c = lookupPath.transformer) === null || _c === void 0 ? void 0 : _c.bind(this);
+                if (this.hasPath(file, path)) {
+                    const pathVal = this.handlePath(file, path);
+                    if (Array.isArray(pathVal)) {
+                        v = pathVal.map((element) => {
+                            return lodash_1.default.omit(this.convertInternal(element, lookupPath), [
+                                'path',
+                                'transformer',
+                                'arrayTransformer',
+                                'key'
                             ]);
+                        });
+                        if (arrayTransformer !== undefined) {
+                            if (Array.isArray(arrayTransformer)) {
+                                v = arrayTransformer[0].apply(arrayTransformer[1], [
+                                    v,
+                                    this.data
+                                ]);
+                            }
+                            else {
+                                v = arrayTransformer.apply(null, [v, this.data]);
+                            }
                         }
-                        else {
-                            v = arrayTransformer.apply(null, [v, this.data]);
+                        if (key !== undefined) {
+                            v = collapseDuplicates(v, key, this.collapseResults);
                         }
-                    }
-                    if (key !== undefined) {
-                        v = collapseDuplicates(v, key, this.collapseResults);
-                    }
-                    return v;
-                }
-                else {
-                    if (transformer !== undefined) {
-                        return [transformer(this.handlePath(file, path))];
+                        resultingData.push(...v);
                     }
                     else {
-                        return [this.handlePath(file, path)];
+                        if (transformer !== undefined) {
+                            resultingData.push(transformer(this.handlePath(file, path)));
+                        }
+                        else {
+                            resultingData.push(this.handlePath(file, path));
+                        }
                     }
                 }
             }
-            else {
-                return [];
-            }
         }
+        const uniqueResults = [];
+        resultingData.forEach((result) => {
+            if (!uniqueResults.some((uniqueResult) => lodash_1.default.isEqual(result, uniqueResult))) {
+                uniqueResults.push(result);
+            }
+        });
+        return uniqueResults;
     }
     handlePath(file, path) {
-        if (path.startsWith('$.')) {
-            return lodash_1.default.get(this.data, path.slice(2)) || '';
+        let pathArray;
+        if (typeof path === 'string') {
+            pathArray = [path];
+        }
+        else {
+            pathArray = path;
+        }
+        const index = lodash_1.default.findIndex(pathArray, (p) => this.hasPath(file, p));
+        if (index === -1) {
+            return '';
+        }
+        else if (pathArray[index].startsWith('$.')) {
+            return lodash_1.default.get(this.data, pathArray[index].slice(2)) || '';
         }
         else {
-            return lodash_1.default.get(file, path) || '';
+            return lodash_1.default.get(file, pathArray[index]) || '';
         }
     }
     hasPath(file, path) {
-        if (path.startsWith('$.')) {
-            return lodash_1.default.has(this.data, path.slice(2));
+        let pathArray;
+        if (typeof path === 'string') {
+            pathArray = [path];
         }
         else {
-            return lodash_1.default.has(file, path);
+            pathArray = path;
         }
+        return lodash_1.default.some(pathArray, (p) => {
+            if (p.startsWith('$.')) {
+                return lodash_1.default.has(this.data, p.slice(2));
+            }
+            else {
+                return lodash_1.default.has(file, p);
+            }
+        });
     }
 }
 exports.BaseConverter = BaseConverter;