@mitre/hdf-converters 3.4.1 → 3.4.3

package/README.md

@@ -23,11 +23,13 @@ All converter output conforms to the [HDF JSON Schema](https://mitre.github.io/h
 | CycloneDX (SBOM) | `convertCyclonedxToHdf` | JSON |
 | CycloneDX VEX (→ HDF Amendments) | `convertCyclonedxVexToHdf` | JSON |
 | DBProtect | `convertDbprotectToHdf` | XML |
+| DefectDojo | `convertDefectDojoToHdf` | JSON |
 | Dependency-Track | `convertDeptrackToHdf` | JSON |
 | Fortify | `convertFortifyToHdf` | XML |
 | GitLab Security Report | `convertGitlabToHdf` | JSON |
 | Gosec | `convertGosecToHdf` | JSON |
 | Grype | `convertGrypeToHdf` | JSON |
+| Hipcheck | `convertHipcheckToHdf` | JSON |
 | Ion Channel | `convertIonchannelToHdf` | JSON |
 | JFrog Xray | `convertJfrogXrayToHdf` | JSON |
 | JUnit | `convertJunitToHdf` | XML |

package/dist/index.d.ts

@@ -318,6 +318,9 @@ declare function convertSnykToHdf(input: string, converterVersion?: string): Pro
 //#region converters/grype-to-hdf/typescript/converter.d.ts
 declare function convertGrypeToHdf(input: string, converterVersion?: string): Promise<string>;
 //#endregion
+//#region converters/defectdojo-to-hdf/typescript/converter.d.ts
+declare function convertDefectDojoToHdf(input: string, converterVersion?: string): Promise<string>;
+//#endregion
 //#region converters/nessus-to-hdf/typescript/converter.d.ts
 /**
  * Convert Nessus XML scan results to HDF format
@@ -435,6 +438,15 @@ declare function convertGitlabToHdf(input: string, converterVersion?: string): P
  */
 declare function convertTrufflehogToHdf(input: string, converterVersion?: string): Promise<string>;
 //#endregion
+//#region converters/hipcheck-to-hdf/typescript/converter.d.ts
+/**
+ * Converts a MITRE Hipcheck `hc check --format json` report to HDF Results.
+ *
+ * @param input - Hipcheck JSON report string
+ * @returns HDF JSON string
+ */
+declare function convertHipcheckToHdf(input: string, converterVersion?: string): Promise<string>;
+//#endregion
 //#region converters/burpsuite-to-hdf/typescript/converter.d.ts
 /**
  * Converts BurpSuite Pro XML export to HDF format.
@@ -800,5 +812,5 @@ declare function convertOscalPoamToHdf(input: string): Promise<string>;
  */
 declare function convertOscalSarToHdf(input: string): Promise<string>;
 //#endregion
-export { type HDFV1Results, type HDFV2Results, convertAsffToHdf, convertAwsConfigToHdf, convertBurpsuiteToHdf, convertCheckovToHdf, convertCklToHdf, convertCklbToHdf, convertConveyorToHdf, convertCsafVexToHdf, convertCyclonedxToHdf, convertCyclonedxVexToHdf, convertDbprotectToHdf, convertDeptrackToHdf, convertFortifyToHdf, convertGitlabToHdf, convertGosecToHdf, convertGrypeToHdf, convertHdfToAsff, convertHdfToCkl, convertHdfToCklb, convertHdfToCsafVex, convertHdfToCsv, convertHdfToCyclonedxVex, convertHdfToEcs, convertHdfToOcsf, convertHdfToOpenVex, convertHdfToOscalPoam, convertHdfToOscalSar, convertHdfToSplunk, convertHdfToXccdf, convertHdfToXml, convertIonchannelToHdf, convertJfrogXrayToHdf, convertJunitToHdf, convertMsftDefenderCloudToHdf, convertMsftDefenderDevopsToHdf, convertMsftDefenderEndpointToHdf, convertMsftSecureScoreToHdf, convertNessusToHdf, convertNetsparkerToHdf, convertNeuvectorToHdf, convertNiktoToHdf, convertOpenVexToHdf, convertOscalCatalogToHdf, convertOscalComponentToHdf, convertOscalPoamToHdf, convertOscalProfileToHdf, convertOscalSapToHdf, convertOscalSarToHdf, convertOscalSspToHdf, convertPrismaToHdf, convertSarifToHdf, convertScoutsuiteToHdf, convertSnykToHdf, convertSonarqubeToHdf, convertSplunkToHdf, convertTrufflehogToHdf, convertTwistlockToHdf, convertV1ToV2, convertVeracodeToHdf, convertXccdfResultsToHdf, convertZapToHdf, detectOscalDocumentType, isHDFV1 };
+export { type HDFV1Results, type HDFV2Results, convertAsffToHdf, convertAwsConfigToHdf, convertBurpsuiteToHdf, convertCheckovToHdf, convertCklToHdf, convertCklbToHdf, convertConveyorToHdf, convertCsafVexToHdf, convertCyclonedxToHdf, convertCyclonedxVexToHdf, convertDbprotectToHdf, convertDefectDojoToHdf, convertDeptrackToHdf, convertFortifyToHdf, convertGitlabToHdf, convertGosecToHdf, convertGrypeToHdf, convertHdfToAsff, convertHdfToCkl, convertHdfToCklb, convertHdfToCsafVex, convertHdfToCsv, convertHdfToCyclonedxVex, convertHdfToEcs, convertHdfToOcsf, convertHdfToOpenVex, convertHdfToOscalPoam, convertHdfToOscalSar, convertHdfToSplunk, convertHdfToXccdf, convertHdfToXml, convertHipcheckToHdf, convertIonchannelToHdf, convertJfrogXrayToHdf, convertJunitToHdf, convertMsftDefenderCloudToHdf, convertMsftDefenderDevopsToHdf, convertMsftDefenderEndpointToHdf, convertMsftSecureScoreToHdf, convertNessusToHdf, convertNetsparkerToHdf, convertNeuvectorToHdf, convertNiktoToHdf, convertOpenVexToHdf, convertOscalCatalogToHdf, convertOscalComponentToHdf, convertOscalPoamToHdf, convertOscalProfileToHdf, convertOscalSapToHdf, convertOscalSarToHdf, convertOscalSspToHdf, convertPrismaToHdf, convertSarifToHdf, convertScoutsuiteToHdf, convertSnykToHdf, convertSonarqubeToHdf, convertSplunkToHdf, convertTrufflehogToHdf, convertTwistlockToHdf, convertV1ToV2, convertVeracodeToHdf, convertXccdfResultsToHdf, convertZapToHdf, detectOscalDocumentType, isHDFV1 };
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","names":[],"sources":["../converters/legacyhdf-to-hdf/typescript/converter.ts","../converters/asff-to-hdf/typescript/converter.ts","../converters/sarif-to-hdf/typescript/converter.ts","../converters/junit-to-hdf/typescript/converter.ts","../converters/xccdf-results-to-hdf/typescript/converter.ts","../converters/ckl-to-hdf/typescript/converter.ts","../converters/cklb-to-hdf/typescript/converter.ts","../converters/hdf-to-ckl/typescript/converter.ts","../converters/hdf-to-cklb/typescript/converter.ts","../converters/snyk-to-hdf/typescript/converter.ts","../converters/grype-to-hdf/typescript/converter.ts","../converters/nessus-to-hdf/typescript/converter.ts","../converters/sonarqube-to-hdf/typescript/converter.ts","../converters/aws-config-to-hdf/typescript/converter.ts","../converters/checkov-to-hdf/typescript/converter.ts","../converters/gosec-to-hdf/typescript/converter.ts","../converters/nikto-to-hdf/typescript/converter.ts","../converters/zap-to-hdf/typescript/converter.ts","../converters/cyclonedx-to-hdf/typescript/converter.ts","../converters/hdf-to-csv/typescript/converter.ts","../converters/hdf-to-ecs/typescript/converter.ts","../converters/hdf-to-splunk/typescript/converter.ts","../converters/hdf-to-ocsf/typescript/converter.ts","../converters/hdf-to-asff/typescript/converter.ts","../converters/splunk-to-hdf/typescript/converter.ts","../converters/hdf-to-xml/typescript/converter.ts","../converters/gitlab-to-hdf/typescript/converter.ts","../converters/trufflehog-to-hdf/typescript/converter.ts","../converters/burpsuite-to-hdf/typescript/converter.ts","../converters/dbprotect-to-hdf/typescript/converter.ts","../converters/twistlock-to-hdf/typescript/converter.ts","../converters/deptrack-to-hdf/typescript/converter.ts","../converters/jfrog-xray-to-hdf/typescript/converter.ts","../converters/neuvector-to-hdf/typescript/converter.ts","../converters/fortify-to-hdf/typescript/converter.ts","../converters/prisma-to-hdf/typescript/converter.ts","../converters/netsparker-to-hdf/typescript/converter.ts","../converters/scoutsuite-to-hdf/typescript/converter.ts","../converters/conveyor-to-hdf/typescript/converter.ts","../converters/veracode-to-hdf/typescript/converter.ts","../converters/msft-secure-score-to-hdf/typescript/converter.ts","../converters/msft-defender-devops-to-hdf/typescript/converter.ts","../converters/msft-defender-cloud-to-hdf/typescript/converter.ts","../converters/msft-defender-endpoint-to-hdf/typescript/converter.ts","../converters/hdf-to-xccdf/typescript/converter.ts","../converters/hdf-to-oscal-sar/typescript/converter.ts","../converters/hdf-to-oscal-poam/typescript/converter.ts","../converters/ionchannel-to-hdf/typescript/converter.ts","../converters/openvex-to-hdf/typescript/converter.ts","../converters/csaf-vex-to-hdf/typescript/converter.ts","../converters/cyclonedx-vex-to-hdf/typescript/converter.ts","../converters/hdf-to-csaf-vex/typescript/converter.ts","../converters/hdf-to-openvex/typescript/converter.ts","../converters/hdf-to-cyclonedx-vex/typescript/converter.ts","../converters/oscal-to-hdf/typescript/detect.ts","../converters/oscal-to-hdf/typescript/converter-catalog.ts","../converters/oscal-to-hdf/typescript/converter-profile.ts","../converters/oscal-to-hdf/typescript/converter-component.ts","../converters/oscal-to-hdf/typescript/converter-ssp.ts","../converters/oscal-to-hdf/typescript/converter-sap.ts","../converters/oscal-to-hdf/typescript/converter-poam.ts","../converters/oscal-to-hdf/typescript/converter-sar.ts"],"mappings":";;;;;;;;;;;;UAkBiB;EACf;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;GACC;;UAGc;EACf;EACA;EACA;EACA,eAAe;IAAO;IAAe;;EACrC;EACA;EACA,OAAO;EACP;EACA;IACE;IACA;;EAEF,cAAc;EACd,UAAU;EACV;GACC;;UAGc;EACf;EACA;EACA;GACC;;UAGc;EACf;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;GACC;;UAGc;EACf;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,SAAS;EACT,WAAW;EACX;EACA,UAAU;EACV;EACA;EACA;EACA;GACC;;UAGc;EACf;EACA;EACA;GACC;;UAGc;EACf;EACA,UAAU;EACV,UAAU;EACV;EACA;EACA;GACC;;UAKc;EACf;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;GACC;;UAGc;EACf;EACA;EACA;EACA,eAAe;IAAO;IAAe;;EACrC;EACA;EACA,OAAO;EACP;EACA;IACE;IACA;;EAEF,aAAa;EACb,UAAU;EACV;GACC;;UAGc;EACf;EACA;EACA;GACC;;UAGc;EACf;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;GACC;;UAGc;EACf;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,SAAS;EACT,eAAe;EACf;IACE;IACA;;EAEF,UAAU;EACV;EACA;EACA;EACA;GACC;;UAGc;EACf,WAAW;EACX;EACA;EACA;EACA;IAAS;IAAe;IAAkB;;EAC1C;EACA;EACA;EACA;EACA;EACA,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;iBAqcC,cAAc,QAAQ,eAAe;;;;;;;iBAgErC,QAAQ,gBAAgB,QAAQ;;;;iBC7Q1B,iBAAiB,eAAe,4BAA6B;;;iBClS7D,kBAAkB,eAAe,4BAA6B;;;;;;iBC7E9D,kBAAkB,eAAe,4BAA6B;;;iBCqN9D,yBAAyB,eAAe,4BAA6B;;;;;;;;;;;;iBChSrE,gBAAgB,gBAAgB;;;;;;;;;;;;iBCAhC,iBAAiB,gBAAgB;;;;;;;;;;;;;;;;;iBCGvC,gBAAgB;;;;;;;;;;;;;;;;iBCDhB,iBAAiB;;;;;;;;;;;;iBCyNX,iBAAiB,eAAe,4BAA6B;;;iBCkQ7D,kBAAkB,eAAe,4BAA6B;;;;;;iBC9U9D,mBAAmB,mBAAmB,4BAA6B,QAAQ;;;;;;;;;iBC8D3E,sBAAsB,eAAe,4BAA6B;;;;;;;;;;iBCuBlE,sBAAsB,eAAe,4BAA6B;;;;;;;;;;;iBCjFlE,oBAAoB,eAAe,4BAA6B;;;;;;;;;;;iBCRhE,kBAAkB,eAAe,4BAA6B;;;iBC/D9D,kBAAkB,eAAe,4BAA+B;;;iBC+EhE,gBAAgB,eAAe,4BAA6B;;;;;;;;;iBC8B5D,sBAAsB,eAAe,4BAA6B;;;;;;;;iBCjKxE,gBAAgB;;;iBCChB,gBAAgB,eAAe;;;iBCG/B,mBAAmB,eAAe;;;iBCKlC,iBAAiB,eAAe;;;iBCFhC,iBAAiB,eAAe;;;;;;;;;;;;;;iBC8G1B,mBAAmB,eAAe,4BAA6B;;;;;;;;iBCjJrE,gBAAgB;;;iBC+NV,mBAAmB,eAAe,4BAA6B;;;;;;;;;;iBC6B/D,uBAAuB,eAAe,4BAA6B;;;;;;;;;;;;iBC/InE,sBAAsB,eAAe,4BAA6B;;;;;;;;;;;iBC6GlE,sBAAsB,eAAe,4BAA6B;;;;;;;;;;;;iBCoMlE,sBAAsB,eAAe,4BAA6B;;;;;;;;;iBCrLlE,qBAAqB,eAAe,4BAA6B;;;;;;;;;iBCEjE,sBAAsB,eAAe,4BAA6B;;;;;;;;;;;;;;;;;iBC7BlE,sBAAsB,eAAe,4BAA6B;;;;;;;;;;;;;iBCwGlE,oBAAoB,eAAe,4BAA6B;;;;;;;;;;;;;;;;;iBClChE,mBAAmB,eAAe,4BAA6B;;;;;;;;;;iBCsB/D,uBAAuB,eAAe,4BAA6B;;;;;;;;;;iBChFnE,uBAAuB,eAAe,4BAA6B;;;;;;;;;;iBCmDnE,qBAAqB,eAAe,4BAA6B;;;;;;;;;;;;;;;;;;;;;iBC8HjE,qBAAqB,eAAe,4BAA6B;;;;;;;;;;;;iBC9KjE,4BAA4B,eAAe,4BAA6B;;;;;;;;iBC7KxE,+BAA+B,eAAe,4BAA6B;;;;;;;;;iBC4H3E,8BAA8B,eAAe,4BAA6B;;;;;;;;;;iBCoG1E,iCAAiC,eAAe,4BAA6B;;;;;;;;;iBC3PnF,kBAAkB;;;;;;;;;iBCUZ,qBAAqB,gBAAgB;;;;;;;;;;;;;;iBCRrC,sBAAsB,gBAAgB;;;iBCoKtC,uBAAuB,eAAe,4BAA6B;;;iBCxHnE,oBACpB,eACA,4BACC,QAAQ;;;iBCiEW,oBACpB,eACA,4BACC,QAAQ;;;iBC1CW,yBACpB,eACA,4BACC,QAAQ;;;iBCVK,oBAAoB,eAAe;;;iBC9C7B,oBACpB,eACA,2BACC;;;iBC0DmB,yBACpB,eACA,2BACC;;;;;;;;;KC1GS;;;;;;;iBAeI,wBAAwB,gBAAgB;;;;;;;;;iBCClC,yBAAyB,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;iBCYzC,yBACpB,sBACA,uBACC;;;;;;;;;;;;;;iBCtBmB,2BAA2B,gBAAgB;;;;;;;;;;;;;;iBCY3C,qBAAqB,gBAAgB;;;;;;;;;;;;;;iBCKrC,qBAAqB,gBAAgB;;;;;;;;;;;;;;iBCOrC,sBAAsB,gBAAgB;;;;;;;;;;;;;;iBCCtC,qBAAqB,gBAAgB"}
+{"version":3,"file":"index.d.ts","names":[],"sources":["../converters/legacyhdf-to-hdf/typescript/converter.ts","../converters/asff-to-hdf/typescript/converter.ts","../converters/sarif-to-hdf/typescript/converter.ts","../converters/junit-to-hdf/typescript/converter.ts","../converters/xccdf-results-to-hdf/typescript/converter.ts","../converters/ckl-to-hdf/typescript/converter.ts","../converters/cklb-to-hdf/typescript/converter.ts","../converters/hdf-to-ckl/typescript/converter.ts","../converters/hdf-to-cklb/typescript/converter.ts","../converters/snyk-to-hdf/typescript/converter.ts","../converters/grype-to-hdf/typescript/converter.ts","../converters/defectdojo-to-hdf/typescript/converter.ts","../converters/nessus-to-hdf/typescript/converter.ts","../converters/sonarqube-to-hdf/typescript/converter.ts","../converters/aws-config-to-hdf/typescript/converter.ts","../converters/checkov-to-hdf/typescript/converter.ts","../converters/gosec-to-hdf/typescript/converter.ts","../converters/nikto-to-hdf/typescript/converter.ts","../converters/zap-to-hdf/typescript/converter.ts","../converters/cyclonedx-to-hdf/typescript/converter.ts","../converters/hdf-to-csv/typescript/converter.ts","../converters/hdf-to-ecs/typescript/converter.ts","../converters/hdf-to-splunk/typescript/converter.ts","../converters/hdf-to-ocsf/typescript/converter.ts","../converters/hdf-to-asff/typescript/converter.ts","../converters/splunk-to-hdf/typescript/converter.ts","../converters/hdf-to-xml/typescript/converter.ts","../converters/gitlab-to-hdf/typescript/converter.ts","../converters/trufflehog-to-hdf/typescript/converter.ts","../converters/hipcheck-to-hdf/typescript/converter.ts","../converters/burpsuite-to-hdf/typescript/converter.ts","../converters/dbprotect-to-hdf/typescript/converter.ts","../converters/twistlock-to-hdf/typescript/converter.ts","../converters/deptrack-to-hdf/typescript/converter.ts","../converters/jfrog-xray-to-hdf/typescript/converter.ts","../converters/neuvector-to-hdf/typescript/converter.ts","../converters/fortify-to-hdf/typescript/converter.ts","../converters/prisma-to-hdf/typescript/converter.ts","../converters/netsparker-to-hdf/typescript/converter.ts","../converters/scoutsuite-to-hdf/typescript/converter.ts","../converters/conveyor-to-hdf/typescript/converter.ts","../converters/veracode-to-hdf/typescript/converter.ts","../converters/msft-secure-score-to-hdf/typescript/converter.ts","../converters/msft-defender-devops-to-hdf/typescript/converter.ts","../converters/msft-defender-cloud-to-hdf/typescript/converter.ts","../converters/msft-defender-endpoint-to-hdf/typescript/converter.ts","../converters/hdf-to-xccdf/typescript/converter.ts","../converters/hdf-to-oscal-sar/typescript/converter.ts","../converters/hdf-to-oscal-poam/typescript/converter.ts","../converters/ionchannel-to-hdf/typescript/converter.ts","../converters/openvex-to-hdf/typescript/converter.ts","../converters/csaf-vex-to-hdf/typescript/converter.ts","../converters/cyclonedx-vex-to-hdf/typescript/converter.ts","../converters/hdf-to-csaf-vex/typescript/converter.ts","../converters/hdf-to-openvex/typescript/converter.ts","../converters/hdf-to-cyclonedx-vex/typescript/converter.ts","../converters/oscal-to-hdf/typescript/detect.ts","../converters/oscal-to-hdf/typescript/converter-catalog.ts","../converters/oscal-to-hdf/typescript/converter-profile.ts","../converters/oscal-to-hdf/typescript/converter-component.ts","../converters/oscal-to-hdf/typescript/converter-ssp.ts","../converters/oscal-to-hdf/typescript/converter-sap.ts","../converters/oscal-to-hdf/typescript/converter-poam.ts","../converters/oscal-to-hdf/typescript/converter-sar.ts"],"mappings":";;;;;;;;;;;;UAkBiB;EACf;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;GACC;;UAGc;EACf;EACA;EACA;EACA,eAAe;IAAO;IAAe;;EACrC;EACA;EACA,OAAO;EACP;EACA;IACE;IACA;;EAEF,cAAc;EACd,UAAU;EACV;GACC;;UAGc;EACf;EACA;EACA;GACC;;UAGc;EACf;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;GACC;;UAGc;EACf;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,SAAS;EACT,WAAW;EACX;EACA,UAAU;EACV;EACA;EACA;EACA;GACC;;UAGc;EACf;EACA;EACA;GACC;;UAGc;EACf;EACA,UAAU;EACV,UAAU;EACV;EACA;EACA;GACC;;UAKc;EACf;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;GACC;;UAGc;EACf;EACA;EACA;EACA,eAAe;IAAO;IAAe;;EACrC;EACA;EACA,OAAO;EACP;EACA;IACE;IACA;;EAEF,aAAa;EACb,UAAU;EACV;GACC;;UAGc;EACf;EACA;EACA;GACC;;UAGc;EACf;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;GACC;;UAGc;EACf;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,SAAS;EACT,eAAe;EACf;IACE;IACA;;EAEF,UAAU;EACV;EACA;EACA;EACA;GACC;;UAGc;EACf,WAAW;EACX;EACA;EACA;EACA;IAAS;IAAe;IAAkB;;EAC1C;EACA;EACA;EACA;EACA;EACA,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;iBAqcC,cAAc,QAAQ,eAAe;;;;;;;iBAgErC,QAAQ,gBAAgB,QAAQ;;;;iBClO1B,iBAAiB,eAAe,4BAA6B;;;iBC7U7D,kBAAkB,eAAe,4BAA6B;;;;;;iBC7E9D,kBAAkB,eAAe,4BAA6B;;;iBCqN9D,yBAAyB,eAAe,4BAA6B;;;;;;;;;;;;iBChSrE,gBAAgB,gBAAgB;;;;;;;;;;;;iBCAhC,iBAAiB,gBAAgB;;;;;;;;;;;;;;;;;iBCGvC,gBAAgB;;;;;;;;;;;;;;;;iBCDhB,iBAAiB;;;;;;;;;;;;iBCyNX,iBAAiB,eAAe,4BAA6B;;;iBCkQ7D,kBAAkB,eAAe,4BAA6B;;;iBCjP9D,uBAAuB,eAAe,4BAA6B;;;;;;iBC7FnE,mBAAmB,mBAAmB,4BAA6B,QAAQ;;;;;;;;;iBC8D3E,sBAAsB,eAAe,4BAA6B;;;;;;;;;;iBC8DlE,sBAAsB,eAAe,4BAA6B;;;;;;;;;;;iBCxHlE,oBAAoB,eAAe,4BAA6B;;;;;;;;;;;iBCRhE,kBAAkB,eAAe,4BAA6B;;;iBC/D9D,kBAAkB,eAAe,4BAA+B;;;iBC+EhE,gBAAgB,eAAe,4BAA6B;;;;;;;;;iBC8B5D,sBAAsB,eAAe,4BAA6B;;;;;;;;iBCjKxE,gBAAgB;;;iBCChB,gBAAgB,eAAe;;;iBCG/B,mBAAmB,eAAe;;;iBCKlC,iBAAiB,eAAe;;;iBCFhC,iBAAiB,eAAe;;;;;;;;;;;;;;iBC8G1B,mBAAmB,eAAe,4BAA6B;;;;;;;;iBCjJrE,gBAAgB;;;iBC+NV,mBAAmB,eAAe,4BAA6B;;;;;;;;;;iBC6B/D,uBAAuB,eAAe,4BAA6B;;;;;;;;;iBC/DnE,qBAAqB,eAAe,4BAA6B;;;;;;;;;;;;iBChFjE,sBAAsB,eAAe,4BAA6B;;;;;;;;;;;iBC6GlE,sBAAsB,eAAe,4BAA6B;;;;;;;;;;;;iBCoMlE,sBAAsB,eAAe,4BAA6B;;;;;;;;;iBCrLlE,qBAAqB,eAAe,4BAA6B;;;;;;;;;iBCEjE,sBAAsB,eAAe,4BAA6B;;;;;;;;;;;;;;;;;iBC7BlE,sBAAsB,eAAe,4BAA6B;;;;;;;;;;;;;iBCwGlE,oBAAoB,eAAe,4BAA6B;;;;;;;;;;;;;;;;;iBClChE,mBAAmB,eAAe,4BAA6B;;;;;;;;;;iBCsB/D,uBAAuB,eAAe,4BAA6B;;;;;;;;;;iBChFnE,uBAAuB,eAAe,4BAA6B;;;;;;;;;;iBCmDnE,qBAAqB,eAAe,4BAA6B;;;;;;;;;;;;;;;;;;;;;iBC8HjE,qBAAqB,eAAe,4BAA6B;;;;;;;;;;;;iBC9KjE,4BAA4B,eAAe,4BAA6B;;;;;;;;iBC7KxE,+BAA+B,eAAe,4BAA6B;;;;;;;;;iBC4H3E,8BAA8B,eAAe,4BAA6B;;;;;;;;;;iBCoG1E,iCAAiC,eAAe,4BAA6B;;;;;;;;;iBC3PnF,kBAAkB;;;;;;;;;iBCUZ,qBAAqB,gBAAgB;;;;;;;;;;;;;;iBCRrC,sBAAsB,gBAAgB;;;iBCoKtC,uBAAuB,eAAe,4BAA6B;;;iBCxHnE,oBACpB,eACA,4BACC,QAAQ;;;iBCiEW,oBACpB,eACA,4BACC,QAAQ;;;iBC1CW,yBACpB,eACA,4BACC,QAAQ;;;iBCVK,oBAAoB,eAAe;;;iBC9C7B,oBACpB,eACA,2BACC;;;iBC0DmB,yBACpB,eACA,2BACC;;;;;;;;;KC1GS;;;;;;;iBAeI,wBAAwB,gBAAgB;;;;;;;;;iBCClC,yBAAyB,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;iBCYzC,yBACpB,sBACA,uBACC;;;;;;;;;;;;;;iBCtBmB,2BAA2B,gBAAgB;;;;;;;;;;;;;;iBCY3C,qBAAqB,gBAAgB;;;;;;;;;;;;;;iBCKrC,qBAAqB,gBAAgB;;;;;;;;;;;;;;iBCOrC,sBAAsB,gBAAgB;;;;;;;;;;;;;;iBCCtC,qBAAqB,gBAAgB"}

package/dist/index.js

@@ -2,7 +2,7 @@ import { n as detectConverter, t as registerAllFingerprints } from "./register-a
 import { flattenOverlays } from "@mitre/hdf-parsers";
 import { buildCsv, buildXml, cvssScoreToSeverity, formatTimestamp, formatTimestampSeconds, impactToSeverity, normalizeHdfTimestamps, parseCsv, parseJSON, parsePurl, parseTimestamp, parseXml, parseXmlWithArrays, severityToImpact, sha256, stripHtml as stripHTML, trimUtcFraction } from "@mitre/hdf-utilities";
 import { Applicability, AuthorizationStatus, CVSSSeverity, CategorizationLevel, ControlType, Ecosystem, EvidenceType, HashAlgorithm, IdentityType, Justification, MilestoneStatus, OverrideType, PlanType, ResultStatus, TargetType, VerificationMethodEnum, Version, createDescription, createMinimalBaseline, createRequirement, createResult, severityToImpact as severityToImpact$1 } from "@mitre/hdf-schema";
-import { DEFAULT_COMPONENT_MANAGEMENT_NIST_TAGS, DEFAULT_REMEDIATION_NIST_TAGS, DEFAULT_STATIC_ANALYSIS_NIST_TAGS, DEFAULT_STATIC_ANALYSIS_NIST_TAGS as DEFAULT_STATIC_ANALYSIS_NIST_TAGS$1, awsConfigMappedRevisions, getAwsConfigNistControlByIdentifier, getAwsConfigNistControlByName, getAwsConfigNistControlsBySubstring, getCCINistMappings, getCurrentNistRevision, getCweNistControl, getNessusNistControl, getNiktoNistControl, getOwaspNistControl, getScoutsuiteNistControl, isNistStrict, nistToCci } from "@mitre/hdf-mappings";
+import { DEFAULT_COMPONENT_MANAGEMENT_NIST_TAGS, DEFAULT_CONFIG_MANAGEMENT_NIST_TAGS, DEFAULT_REMEDIATION_NIST_TAGS, DEFAULT_STATIC_ANALYSIS_NIST_TAGS, DEFAULT_STATIC_ANALYSIS_NIST_TAGS as DEFAULT_STATIC_ANALYSIS_NIST_TAGS$1, awsConfigMappedRevisions, getAwsConfigNistControlByIdentifier, getAwsConfigNistControlByName, getAwsConfigNistControlsBySubstring, getCCINistMappings, getCurrentNistRevision, getCweNistControl, getHipcheckNistControls, getNessusNistControl, getNiktoNistControl, getOwaspNistControl, getScoutsuiteNistControl, isNistStrict, nistToCci } from "@mitre/hdf-mappings";
 //#region shared/typescript/converterutil.ts
 /**
 * Shared utilities for TypeScript HDF converters.
@@ -973,7 +973,7 @@ function controlId(f) {
 * the shared awsconfig mapping, falling back to the static analysis default
 * bundle (matching the SAF CLI) when no config rule applies.
 */
-function nistTags(group) {
+function nistTags$1(group) {
 	if (group.length > 0 && productOf(group[0]) === "trivy" && trivyCVE(group[0])) return DEFAULT_REMEDIATION_NIST_TAGS$1;
 	const out = [];
 	const seen = /* @__PURE__ */ new Set();
@@ -981,10 +981,15 @@ function nistTags(group) {
 		seen.add(tag);
 		out.push(tag);
 	}
-	return out.length > 0 ? out : DEFAULT_STATIC_ANALYSIS_NIST_TAGS;
+	if (out.length > 0) return out;
+	if (group.length > 0 && isConfigRuleFinding(group[0])) return DEFAULT_CONFIG_MANAGEMENT_NIST_TAGS;
+	return DEFAULT_STATIC_ANALYSIS_NIST_TAGS;
+}
+function isConfigRuleFinding(f) {
+	return f.ProductFields?.["RelatedAWSResources:0/type"] === "AWS::Config::ConfigRule";
 }
 function configRuleNist(f) {
-	if (f.ProductFields?.["RelatedAWSResources:0/type"] !== "AWS::Config::ConfigRule") return [];
+	if (!isConfigRuleFinding(f)) return [];
 	const name = f.ProductFields?.["RelatedAWSResources:0/name"];
 	if (!name) return [];
 	return getAwsConfigNistControlsBySubstring(name);
@@ -1056,13 +1061,30 @@ function vulnerabilitySummary(f) {
 		return parts.join("; ");
 	}).join("\n");
 }
-/** Summarizes the installed vs patched package for a Trivy CVE finding. */
 function trivyMessage(f) {
 	const o = f.Resources?.[0]?.Details?.Other;
-	if (!o || !o["CVE ID"]) return "";
-	const patched = o["Patched Package"];
-	const patchMsg = patched ? `The package has been patched since version(s): ${patched}.` : "There is no patched version of the package.";
-	return `For package ${o["PkgName"]}, the current version that is installed is ${o["Installed Package"]}.  ${patchMsg}`;
+	if (!o) return "";
+	if (o["CVE ID"]) {
+		const patched = o["Patched Package"];
+		const patchMsg = patched ? `The package has been patched since version(s): ${patched}.` : "There is no patched version of the package.";
+		return `For package ${o["PkgName"] ?? ""}, the current version that is installed is ${o["Installed Package"] ?? ""}.  ${patchMsg}`;
+	}
+	if (o["Message"]) {
+		const loc = trivyLocation(o);
+		return loc ? `${o["Message"]} (${loc})` : o["Message"];
+	}
+	if (o["Filename"]) return `Secret detected in ${o["Filename"]}.`;
+	return "";
+}
+function trivyLocation(o) {
+	const file = o["Filename"] ?? "";
+	if (!file) return "";
+	const sl = o["StartLine"];
+	if (!sl || sl === "0") return file;
+	let loc = `${file}:${sl}`;
+	const el = o["EndLine"];
+	if (el && el !== "0" && el !== sl) loc += `-${el}`;
+	return loc;
 }
 function buildRequirement$17(id, group) {
 	const primary = group[0];
@@ -1076,7 +1098,7 @@ function buildRequirement$17(id, group) {
 		label: "fix",
 		data: fix
 	});
-	const nist = nistTags(group);
+	const nist = nistTags$1(group);
 	const tags = nist.length > 0 ? buildNistCciTags(nist, nistToCci(nist)) : {};
 	const results = group.map(buildResult$2);
 	const req = createRequirement(id, primary.Title ?? "", descriptions, impact, results, { tags });
@@ -1235,7 +1257,7 @@ function convertResultGroup(ruleId, rule, sarifResults) {
 	const sourceLocation = firstResult.locations && firstResult.locations.length > 0 ? extractSourceLocation$1(firstResult.locations[0]) : void 0;
 	const results = [];
 	for (const sr of sarifResults) results.push(...convertSarifResultToHDFResults(sr));
-	const descriptions = buildDescriptions$1(description, rule, firstResult);
+	const descriptions = buildDescriptions$2(description, rule, firstResult);
 	const options = { tags: buildTags$3(firstResult, rule, ruleLevel, cweIds, nistControls, cciControls) };
 	if (sourceLocation) options.sourceLocation = sourceLocation;
 	const req = createRequirement(ruleId, title, descriptions, impact, results, options);
@@ -1412,7 +1434,7 @@ function extractBacktrace(codeFlows) {
 	}
 	return backtrace;
 }
-function buildDescriptions$1(defaultDesc, rule, result) {
+function buildDescriptions$2(defaultDesc, rule, result) {
 	const descriptions = [createDescription("default", defaultDesc)];
 	if (rule) {
 		if (rule.fullDescription?.text) descriptions.push(createDescription("rationale", rule.fullDescription.text));
@@ -3004,7 +3026,7 @@ function extractCwe(raw) {
 	const out = raw.filter((c) => CWE_ID_PATTERN.test(c));
 	return out.length === 0 ? void 0 : out;
 }
-function buildEpss$1(entries) {
+function buildEpss$2(entries) {
 	if (!entries || entries.length === 0) return void 0;
 	const e = entries[0];
 	if (!e.date) return void 0;
@@ -3077,7 +3099,7 @@ function convertMatchToRequirement(match, isIgnored) {
 	requirement.affectedPackages = buildAffectedPackages(match);
 	const cwe = extractCwe(vuln.cwe);
 	if (cwe) requirement.cwe = cwe;
-	const epss = buildEpss$1(vuln.epss);
+	const epss = buildEpss$2(vuln.epss);
 	if (epss) requirement.epss = epss;
 	const kev = buildKev(vuln.kev);
 	if (kev) requirement.kev = kev;
@@ -3117,6 +3139,189 @@ async function convertGrypeToHdf(input, converterVersion = "1.0.0") {
 	});
 }
 //#endregion
+//#region converters/defectdojo-to-hdf/typescript/converter.ts
+function deriveStatus(f) {
+	if (f.out_of_scope) return ResultStatus.NotApplicable;
+	if (f.false_p) return ResultStatus.Failed;
+	if (f.risk_accepted) return ResultStatus.Failed;
+	if (f.is_mitigated) return ResultStatus.Passed;
+	if (f.under_review) return ResultStatus.NotReviewed;
+	return ResultStatus.Failed;
+}
+function triageTags(f) {
+	return {
+		"defectdojo/active": f.active ?? false,
+		"defectdojo/verified": f.verified ?? false,
+		"defectdojo/false_p": f.false_p ?? false,
+		"defectdojo/is_mitigated": f.is_mitigated ?? false,
+		"defectdojo/risk_accepted": f.risk_accepted ?? false,
+		"defectdojo/out_of_scope": f.out_of_scope ?? false,
+		"defectdojo/under_review": f.under_review ?? false
+	};
+}
+function riskAcceptanceOwner(ar) {
+	if (ar.owner_email) return {
+		type: IdentityType.Email,
+		identifier: ar.owner_email
+	};
+	if (ar.owner_username) return {
+		type: IdentityType.Username,
+		identifier: ar.owner_username
+	};
+	if (ar.owner !== void 0 && ar.owner !== null && `${ar.owner}` !== "") return {
+		type: IdentityType.Simple,
+		identifier: `defectdojo-user-${ar.owner}`
+	};
+	return {
+		type: IdentityType.Simple,
+		identifier: "defectdojo-risk-acceptance-owner"
+	};
+}
+function buildWaiverOverride(ar) {
+	let reason = ar.decision_details || ar.name || "";
+	if (!reason) reason = "Risk accepted in DefectDojo";
+	const appliedAt = (ar.created ? parseTimestamp(ar.created) : null) ?? /* @__PURE__ */ new Date();
+	const oneYearOut = /* @__PURE__ */ new Date();
+	oneYearOut.setTime(appliedAt.getTime());
+	oneYearOut.setFullYear(oneYearOut.getFullYear() + 1);
+	const expiresAt = (ar.expiration_date ? parseTimestamp(ar.expiration_date) : null) ?? oneYearOut;
+	return {
+		type: OverrideType.Waiver,
+		status: ResultStatus.Passed,
+		reason,
+		appliedBy: riskAcceptanceOwner(ar),
+		appliedAt,
+		expiresAt
+	};
+}
+function findingId(f) {
+	return f.unique_id_from_tool || f.vuln_id_from_tool || `DefectDojo-Finding-${f.id}`;
+}
+function cveList(f) {
+	return (f.vulnerability_ids ?? []).map((v) => v.vulnerability_id).filter(Boolean);
+}
+function cvssBand(score) {
+	switch (cvssScoreToSeverity(score)) {
+		case "critical": return CVSSSeverity.Critical;
+		case "high": return CVSSSeverity.High;
+		case "medium": return CVSSSeverity.Medium;
+		case "low": return CVSSSeverity.Low;
+		default: return CVSSSeverity.None;
+	}
+}
+function buildCvss$1(f) {
+	const out = [];
+	const add = (version, vector, score) => {
+		if ((score === void 0 || score === null) && !vector) return;
+		const entry = { version };
+		if (score !== void 0 && score !== null) {
+			entry.baseScore = score;
+			entry.baseSeverity = cvssBand(score);
+		}
+		if (vector) entry.baseVector = vector;
+		out.push(entry);
+	};
+	add(Version.The31, f.cvssv3, f.cvssv3_score);
+	add(Version.The40, f.cvssv4, f.cvssv4_score);
+	return out;
+}
+function buildEpss$1(f) {
+	if (f.epss_score === void 0 || f.epss_score === null || !f.date) return void 0;
+	return {
+		score: f.epss_score,
+		percentile: f.epss_percentile ?? 0,
+		date: f.date
+	};
+}
+function nistTags(f) {
+	return f.cwe && f.cwe > 0 ? mapCWEToNIST([`CWE-${f.cwe}`], DEFAULT_STATIC_ANALYSIS_NIST_TAGS) : DEFAULT_STATIC_ANALYSIS_NIST_TAGS;
+}
+function buildDescriptions$1(f) {
+	const descs = [{
+		label: "default",
+		data: f.description || f.title || "No description provided."
+	}];
+	if (f.mitigation) descs.push({
+		label: "fix",
+		data: f.mitigation
+	});
+	if (f.impact) descs.push({
+		label: "impact",
+		data: f.impact
+	});
+	return descs;
+}
+function codeDesc(f) {
+	const parts = [f.title];
+	if (f.component_name) parts.push(`Component: ${f.component_name}${f.component_version ? "@" + f.component_version : ""}`);
+	if (f.file_path) parts.push(`Location: ${f.file_path}${f.line !== void 0 && f.line !== null ? ":" + f.line : ""}`);
+	const cves = cveList(f);
+	if (cves.length > 0) parts.push(`CVE: ${cves.join(", ")}`);
+	return parts.join(" | ");
+}
+function convertFinding(f) {
+	const nist = nistTags(f);
+	const tags = buildNistCciTags(nist, nistToCci(nist), triageTags(f));
+	const result = {
+		status: deriveStatus(f),
+		codeDesc: codeDesc(f),
+		startTime: (f.date ? parseTimestamp(f.date) : null) ?? /* @__PURE__ */ new Date()
+	};
+	const req = {
+		id: findingId(f),
+		impact: severityToImpact(f.severity),
+		results: [result],
+		tags,
+		descriptions: buildDescriptions$1(f)
+	};
+	const controlType = deriveControlTypeFromTags(nist);
+	if (controlType !== void 0) req.controlType = controlType;
+	const cvss = buildCvss$1(f);
+	if (cvss.length > 0) req.cvss = cvss;
+	const epss = buildEpss$1(f);
+	if (epss) req.epss = epss;
+	if (f.cwe && f.cwe > 0) req.cwe = [`CWE-${f.cwe}`];
+	const firstRisk = f.accepted_risks?.[0];
+	if (f.risk_accepted && firstRisk) {
+		req.statusOverrides = [buildWaiverOverride(firstRisk)];
+		req.effectiveStatus = ResultStatus.Passed;
+		req.disposition = OverrideType.Waiver;
+		tags["defectdojo/decision"] = firstRisk.decision ?? "";
+	}
+	return req;
+}
+function scannerName(f) {
+	return f.related_fields?.test?.test_type?.name || "DefectDojo";
+}
+async function convertDefectDojoToHdf(input, converterVersion = "0.1.0") {
+	validateInputSize(input, "defectdojo");
+	const resultsChecksum = await inputChecksum(input);
+	const parsed = parseJSON(input);
+	const findings = Array.isArray(parsed) ? parsed : parsed.results ?? [];
+	const order = [];
+	const byScanner = /* @__PURE__ */ new Map();
+	for (const f of findings) {
+		const name = scannerName(f);
+		if (!byScanner.has(name)) {
+			order.push(name);
+			byScanner.set(name, []);
+		}
+		byScanner.get(name).push(convertFinding(f));
+	}
+	const baselines = order.map((name) => {
+		const baseline = createMinimalBaseline(`DefectDojo: ${name}`, byScanner.get(name), { resultsChecksum });
+		baseline.title = name;
+		return baseline;
+	});
+	if (baselines.length === 0) baselines.push(createMinimalBaseline("DefectDojo", [buildNoFindingsRequirement("defectdojo-no-findings", "DefectDojo reported zero findings.", /* @__PURE__ */ new Date())], { resultsChecksum }));
+	return buildHdfResults({
+		generatorName: "defectdojo-to-hdf",
+		converterVersion,
+		toolName: "DefectDojo",
+		baselines
+	});
+}
+//#endregion
 //#region converters/nessus-to-hdf/typescript/converter.ts
 const CVE_SOURCE_RE = /^CVE-\d{4}-\d{4,}$/;
 const CWE_PATTERN = /CWE[- ]?(\d+)/gi;
@@ -3844,6 +4049,18 @@ function checkRevisionAlignment(rules) {
 	if (isNistStrict()) throw new Error(`aws-config: ${detail}\nre-run with a matching revision, or disable strict mode to convert with the gaps`);
 	console.warn(`WARNING: ${detail}`);
 }
+function buildFixText(rule) {
+	const r = rule.Remediation;
+	if (!r || !r.TargetId) return "";
+	const trigger = r.Automatic ? "automatically on non-compliance" : "on demand";
+	const doc = r.TargetVersion ? `${r.TargetId} (version ${r.TargetVersion})` : r.TargetId;
+	return `Remediate via ${remediationTargetLabel(r.TargetType)} ${doc}, applied ${trigger}.`;
+}
+function remediationTargetLabel(targetType) {
+	if (targetType === "SSM_DOCUMENT") return "SSM Automation document";
+	if (!targetType) return "automation document";
+	return `${targetType} document`;
+}
 function buildCheckText(rule) {
 	const parts = [`ARN: ${rule.ConfigRuleArn || "N/A"}`, `Source Identifier: ${rule.Source.SourceIdentifier || "N/A"}`];
 	if (rule.InputParameters && rule.InputParameters !== "{}") {
@@ -3881,7 +4098,7 @@ function buildResult(r) {
 * returned zero in-scope resources. The HDF schema requires `results` to have
 * minItems >= 1; this honestly signals to auditors that the rule's check ran
 * but had no scope in this account/region rather than vacuously claiming
-* "passed". See issue #80 bug 2.
+* "passed".
 */
 function buildNotApplicableResult(rule) {
 	const codeDesc = `AWS Config rule ${rule.ConfigRuleName} evaluated zero in-scope resources in this account/region.`;
@@ -3891,8 +4108,9 @@ function buildNotApplicableResult(rule) {
 	});
 }
 function buildRequirement$15(rule) {
-	const nist = buildNistTags$3(rule.Source.SourceIdentifier, rule.ConfigRuleName);
-	const tags = nist.length > 0 ? { nist } : {};
+	const rawNist = buildNistTags$3(rule.Source.SourceIdentifier, rule.ConfigRuleName);
+	const nist = rawNist.length > 0 ? rawNist : DEFAULT_CONFIG_MANAGEMENT_NIST_TAGS;
+	const tags = { nist };
 	const descriptions = [{
 		label: "default",
 		data: rule.Description
@@ -3900,6 +4118,11 @@ function buildRequirement$15(rule) {
 		label: "check",
 		data: buildCheckText(rule)
 	}];
+	const fix = buildFixText(rule);
+	if (fix) descriptions.push({
+		label: "fix",
+		data: fix
+	});
 	const title = `${getAccountId(rule.ConfigRuleArn)} - ${rule.ConfigRuleName}`;
 	const results = rule.EvaluationResults.length > 0 ? rule.EvaluationResults.map(buildResult) : [buildNotApplicableResult(rule)];
 	const req = createRequirement(rule.ConfigRuleId, title, descriptions, .5, results, {
@@ -6814,9 +7037,8 @@ function buildRequirement$12(reqID, findings) {
 * @returns HDF JSON string
 */
 async function convertTrufflehogToHdf(input, converterVersion = "1.0.0") {
-	if (!input || input.trim().length === 0) throw new Error("trufflehog: empty input");
 	validateInputSize(input, "trufflehog");
-	const findings = parseFindings(input);
+	const findings = !input || input.trim().length === 0 ? [] : parseFindings(input);
 	const resultsChecksum = await inputChecksum(input);
 	const limitedFindings = limitArrayWithWarning(findings, "finding");
 	const groups = groupFindings(limitedFindings);
@@ -6849,6 +7071,140 @@ async function convertTrufflehogToHdf(input, converterVersion = "1.0.0") {
 	return serializeHdf(hdf);
 }
 //#endregion
+//#region converters/hipcheck-to-hdf/typescript/converter.ts
+/** "owner/name" when both are present, else whichever is non-empty (never a
+* bare "owner/" or "/name"). */
+function repoIdent(r) {
+	const owner = r.repo_owner ?? "";
+	const name = r.repo_name ?? "";
+	if (owner && name) return `${owner}/${name}`;
+	return name || owner;
+}
+/** Build NIST/CCI tags for an analysis name via the hipcheck mapping. */
+function analysisTags(name) {
+	const nist = getHipcheckNistControls(name);
+	if (nist.length === 0) return {
+		tags: buildNistCciTags([], []),
+		nist: []
+	};
+	return {
+		tags: buildNistCciTags(nist, nistToCci(nist)),
+		nist
+	};
+}
+function applyClassification(req, nist) {
+	const controlType = deriveControlTypeFromTags(nist);
+	if (controlType !== void 0) req.controlType = controlType;
+	req.verificationMethod = VerificationMethodEnum.Automated;
+}
+function buildAnalysisRequirement(a, status, startTime) {
+	const { tags, nist } = analysisTags(a.name);
+	const message = a.message ?? "";
+	const descriptions = [{
+		label: "default",
+		data: message
+	}];
+	if (a.policy_expr) descriptions.push({
+		label: "check",
+		data: a.policy_expr
+	});
+	let resultMessage = message;
+	if (a.concerns && a.concerns.length > 0) resultMessage = `${message}\nConcerns:\n- ${a.concerns.join("\n- ")}`;
+	const result = {
+		status,
+		codeDesc: a.policy_expr ?? "",
+		message: resultMessage,
+		startTime
+	};
+	const req = createRequirement(a.name, a.name, descriptions, .5, [result], { tags });
+	applyClassification(req, nist);
+	return req;
+}
+function buildErroredRequirement(e, startTime) {
+	const { tags, nist } = analysisTags(e.name);
+	const msg = flattenError(e.error);
+	const result = {
+		status: ResultStatus.Error,
+		codeDesc: "",
+		message: msg,
+		startTime
+	};
+	const req = createRequirement(e.name, e.name, [{
+		label: "default",
+		data: msg
+	}], .5, [result], { tags });
+	applyClassification(req, nist);
+	return req;
+}
+/** Render Hipcheck's recursive error chain as "msg: source: ...". */
+function flattenError(e) {
+	const parts = [];
+	for (let cur = e; cur; cur = cur.source) if (cur.msg) parts.push(cur.msg);
+	return parts.length > 0 ? parts.join(": ") : "unknown error";
+}
+/** Render a risk score without trailing zeros (0.42, 0.33, 0), matching Go. */
+function formatScore(f) {
+	return String(f);
+}
+/** Render the overall recommendation as baseline summary prose. */
+function buildSummary$1(rec) {
+	const base = `Hipcheck recommendation: ${rec.kind ?? ""} (risk score ${formatScore(rec.risk_score ?? 0)}, policy '${rec.risk_policy ?? ""}').`;
+	if ((rec.kind ?? "").toLowerCase() !== "investigate") return base;
+	const suffix = investigateReason(rec.reason);
+	return suffix ? `${base} ${suffix}` : base;
+}
+/** Decode the polymorphic `reason` into a sentence, or "". */
+function investigateReason(reason) {
+	if (reason === null || reason === void 0) return "";
+	if (typeof reason === "string") {
+		if (reason === "Policy") return "Investigation triggered because the risk score exceeded the policy threshold.";
+		return `Investigation reason: ${reason}.`;
+	}
+	if (typeof reason === "object") {
+		const failed = reason.FailedAnalyses;
+		if (Array.isArray(failed) && failed.length > 0) return `Investigation forced by failed analyses: ${failed.join(", ")}.`;
+	}
+	return "";
+}
+/**
+* Converts a MITRE Hipcheck `hc check --format json` report to HDF Results.
+*
+* @param input - Hipcheck JSON report string
+* @returns HDF JSON string
+*/
+async function convertHipcheckToHdf(input, converterVersion = "1.0.0") {
+	validateInputSize(input, "hipcheck");
+	if (!input || input.trim().length === 0) throw new Error("hipcheck: empty input");
+	const report = parseJSON(input);
+	if (!report.hipcheck_version && !report.repo_name) throw new Error("hipcheck: input does not look like a Hipcheck report");
+	const startTime = (report.analyzed_at ? parseTimestamp(report.analyzed_at) : void 0) ?? /* @__PURE__ */ new Date();
+	const requirements = [];
+	for (const a of report.passing ?? []) requirements.push(buildAnalysisRequirement(a, ResultStatus.Passed, startTime));
+	for (const a of report.failing ?? []) requirements.push(buildAnalysisRequirement(a, ResultStatus.Failed, startTime));
+	for (const e of report.errored ?? []) requirements.push(buildErroredRequirement(e, startTime));
+	if (requirements.length === 0) requirements.push(buildNoFindingsRequirement("hipcheck-no-findings", `Hipcheck analyzed ${repoIdent(report)} and reported zero analyses.`, startTime));
+	const summary = buildSummary$1(report.recommendation ?? {});
+	const baseline = createMinimalBaseline("Hipcheck Scan", requirements, {
+		title: `Hipcheck analysis of ${repoIdent(report)} @ ${report.repo_head ?? ""}`,
+		summary,
+		resultsChecksum: await inputChecksum(input)
+	});
+	const ident = repoIdent(report);
+	return buildHdfResults({
+		generatorName: "hipcheck-to-hdf",
+		converterVersion,
+		toolName: "Hipcheck",
+		toolFormat: "JSON",
+		toolVersion: report.hipcheck_version,
+		baselines: [baseline],
+		components: ident ? [{
+			name: ident,
+			type: TargetType.Repository
+		}] : void 0,
+		timestamp: /* @__PURE__ */ new Date()
+	});
+}
+//#endregion
 //#region converters/burpsuite-to-hdf/typescript/converter.ts
 const IMPACT_MAPPING$5 = {
 	"high": .7,
@@ -12715,6 +13071,6 @@ function substituteParams(text, overrides) {
 	return result;
 }
 //#endregion
-export { convertAsffToHdf, convertAwsConfigToHdf, convertBurpsuiteToHdf, convertCheckovToHdf, convertCklToHdf, convertCklbToHdf, convertConveyorToHdf, convertCsafVexToHdf, convertCyclonedxToHdf, convertCyclonedxVexToHdf, convertDbprotectToHdf, convertDeptrackToHdf, convertFortifyToHdf, convertGitlabToHdf, convertGosecToHdf, convertGrypeToHdf, convertHdfToAsff, convertHdfToCkl, convertHdfToCklb, convertHdfToCsafVex, convertHdfToCsv, convertHdfToCyclonedxVex, convertHdfToEcs, convertHdfToOcsf, convertHdfToOpenVex, convertHdfToOscalPoam, convertHdfToOscalSar, convertHdfToSplunk, convertHdfToXccdf, convertHdfToXml, convertIonchannelToHdf, convertJfrogXrayToHdf, convertJunitToHdf, convertMsftDefenderCloudToHdf, convertMsftDefenderDevopsToHdf, convertMsftDefenderEndpointToHdf, convertMsftSecureScoreToHdf, convertNessusToHdf, convertNetsparkerToHdf, convertNeuvectorToHdf, convertNiktoToHdf, convertOpenVexToHdf, convertOscalCatalogToHdf, convertOscalComponentToHdf, convertOscalPoamToHdf, convertOscalProfileToHdf, convertOscalSapToHdf, convertOscalSarToHdf, convertOscalSspToHdf, convertPrismaToHdf, convertSarifToHdf, convertScoutsuiteToHdf, convertSnykToHdf, convertSonarqubeToHdf, convertSplunkToHdf, convertTrufflehogToHdf, convertTwistlockToHdf, convertV1ToV2, convertVeracodeToHdf, convertXccdfResultsToHdf, convertZapToHdf, detectOscalDocumentType, isHDFV1 };
+export { convertAsffToHdf, convertAwsConfigToHdf, convertBurpsuiteToHdf, convertCheckovToHdf, convertCklToHdf, convertCklbToHdf, convertConveyorToHdf, convertCsafVexToHdf, convertCyclonedxToHdf, convertCyclonedxVexToHdf, convertDbprotectToHdf, convertDefectDojoToHdf, convertDeptrackToHdf, convertFortifyToHdf, convertGitlabToHdf, convertGosecToHdf, convertGrypeToHdf, convertHdfToAsff, convertHdfToCkl, convertHdfToCklb, convertHdfToCsafVex, convertHdfToCsv, convertHdfToCyclonedxVex, convertHdfToEcs, convertHdfToOcsf, convertHdfToOpenVex, convertHdfToOscalPoam, convertHdfToOscalSar, convertHdfToSplunk, convertHdfToXccdf, convertHdfToXml, convertHipcheckToHdf, convertIonchannelToHdf, convertJfrogXrayToHdf, convertJunitToHdf, convertMsftDefenderCloudToHdf, convertMsftDefenderDevopsToHdf, convertMsftDefenderEndpointToHdf, convertMsftSecureScoreToHdf, convertNessusToHdf, convertNetsparkerToHdf, convertNeuvectorToHdf, convertNiktoToHdf, convertOpenVexToHdf, convertOscalCatalogToHdf, convertOscalComponentToHdf, convertOscalPoamToHdf, convertOscalProfileToHdf, convertOscalSapToHdf, convertOscalSarToHdf, convertOscalSspToHdf, convertPrismaToHdf, convertSarifToHdf, convertScoutsuiteToHdf, convertSnykToHdf, convertSonarqubeToHdf, convertSplunkToHdf, convertTrufflehogToHdf, convertTwistlockToHdf, convertV1ToV2, convertVeracodeToHdf, convertXccdfResultsToHdf, convertZapToHdf, detectOscalDocumentType, isHDFV1 };
 
 //# sourceMappingURL=index.js.map