@mitre/hdf-converters 3.6.0-rc.4 → 3.6.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +11 -9
- package/dist/index.js.map +1 -1
- package/package.json +7 -7
package/dist/index.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","names":[],"sources":["../converters/legacyhdf-to-hdf/typescript/converter.ts","../converters/asff-to-hdf/typescript/converter.ts","../converters/sarif-to-hdf/typescript/converter.ts","../converters/junit-to-hdf/typescript/converter.ts","../converters/xccdf-results-to-hdf/typescript/converter.ts","../converters/ckl-to-hdf/typescript/converter.ts","../converters/cklb-to-hdf/typescript/converter.ts","../converters/hdf-to-ckl/typescript/converter.ts","../converters/hdf-to-cklb/typescript/converter.ts","../converters/kics-to-hdf/typescript/converter.ts","../converters/semgrep-to-hdf/typescript/converter.ts","../converters/snyk-to-hdf/typescript/converter.ts","../converters/grype-to-hdf/typescript/converter.ts","../converters/defectdojo-to-hdf/typescript/converter.ts","../converters/nessus-to-hdf/typescript/converter.ts","../converters/sonarqube-to-hdf/typescript/converter.ts","../converters/aws-config-to-hdf/typescript/converter.ts","../converters/checkov-to-hdf/typescript/converter.ts","../converters/gosec-to-hdf/typescript/converter.ts","../converters/nikto-to-hdf/typescript/converter.ts","../converters/zap-to-hdf/typescript/converter.ts","../converters/cyclonedx-to-hdf/typescript/converter.ts","../converters/hdf-to-csv/typescript/converter.ts","../converters/hdf-to-ecs/typescript/converter.ts","../converters/hdf-to-splunk/typescript/converter.ts","../converters/hdf-to-ocsf/typescript/converter.ts","../converters/hdf-to-asff/typescript/converter.ts","../converters/splunk-to-hdf/typescript/converter.ts","../converters/hdf-to-xml/typescript/converter.ts","../converters/gitlab-to-hdf/typescript/converter.ts","../converters/trivy-to-hdf/typescript/converter.ts","../converters/trufflehog-to-hdf/typescript/converter.ts","../converters/hipcheck-to-hdf/typescript/converter.ts","../converters/burpsuite-to-hdf/typescript/converter.ts","../converters/dbprotect-to-hdf/typescript/converter.ts","../converters/twistlock-to-hdf/typescript/converter.ts","../converters/deptrack-to-hdf/typescript/converter.ts","../converters/jfrog-xray-to-hdf/typescript/converter.ts","../converters/neuvector-to-hdf/typescript/converter.ts","../converters/fortify-to-hdf/typescript/converter.ts","../converters/prisma-to-hdf/typescript/converter.ts","../converters/netsparker-to-hdf/typescript/converter.ts","../converters/scoutsuite-to-hdf/typescript/converter.ts","../converters/conveyor-to-hdf/typescript/converter.ts","../converters/veracode-to-hdf/typescript/converter.ts","../converters/msft-secure-score-to-hdf/typescript/converter.ts","../converters/msft-defender-devops-to-hdf/typescript/converter.ts","../converters/msft-defender-cloud-to-hdf/typescript/converter.ts","../converters/msft-defender-endpoint-to-hdf/typescript/converter.ts","../converters/hdf-to-xccdf/typescript/converter.ts","../converters/hdf-to-oscal-sar/typescript/converter.ts","../converters/hdf-to-oscal-poam/typescript/converter.ts","../converters/ionchannel-to-hdf/typescript/converter.ts","../converters/openvex-to-hdf/typescript/converter.ts","../converters/csaf-vex-to-hdf/typescript/converter.ts","../converters/cyclonedx-vex-to-hdf/typescript/converter.ts","../converters/spdx-vex-to-hdf/typescript/converter.ts","../converters/hdf-to-csaf-vex/typescript/converter.ts","../converters/hdf-to-openvex/typescript/converter.ts","../converters/hdf-to-cyclonedx-vex/typescript/converter.ts","../converters/oscal-to-hdf/typescript/detect.ts","../converters/oscal-to-hdf/typescript/converter-catalog.ts","../converters/oscal-to-hdf/typescript/converter-profile.ts","../converters/oscal-to-hdf/typescript/converter-component.ts","../converters/oscal-to-hdf/typescript/converter-ssp.ts","../converters/oscal-to-hdf/typescript/converter-sap.ts","../converters/oscal-to-hdf/typescript/converter-poam.ts","../converters/oscal-to-hdf/typescript/converter-sar.ts","../shared/typescript/enrichStix.ts","../shared/typescript/stix.ts"],"mappings":";;;;;;;;;;;;UAwBiB;EACf;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;GACC;;UAGc;EACf;EACA;EACA;EACA,eAAe;IAAO;IAAe;;EACrC;EACA;EACA,OAAO;EACP;EACA;IACE;IACA;;EAEF,cAAc;EACd,UAAU;EACV;GACC;;UAGc;EACf;EACA;EACA;GACC;;UAGc;EACf;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;GACC;;UAGc;EACf;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,SAAS;EACT,WAAW;EACX;EACA,UAAU;EACV;EACA;EACA;EACA;GACC;;UAGc;EACf;EACA;EACA;GACC;;UAGc;EACf;EACA,UAAU;EACV,UAAU;EACV;EACA;EACA;GACC;;UAKc;EACf;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;GACC;;UAGc;EACf;EACA;EACA;IAAU;;EACV;EACA;IAAa;IAAe;;EAC5B;EACA;GACC;;UAGc;EACf;EACA;EACA;IAAa;IAAe;;EAC5B;GACC;;UAGc;EACf;EACA;EACA;EACA,eAAe;IAAO;IAAe;;EACrC;EACA;EACA,OAAO;EACP;EACA;IACE;IACA;;EAEF,aAAa;EACb,UAAU;EACV;EACA;EACA;EACA,kBAAkB;EAClB,QAAQ;EACR;EACA,OAAO;IAAO;;GACb;;UAGc;EACf;EACA;EACA;GACC;;UAGc;EACf;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;GACC;;UAGc;EACf;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,SAAS;EACT,eAAe;EACf;IACE;IACA;;EAEF;IACE;IACA;;EAEF;IACE;IACA;;EAEF;IACE;IACA;;EAEF,UAAU;EACV;EACA;EACA;EACA;GACC;;UAGc;EACf,WAAW;EACX;EACA;EACA;EACA;IAAS;IAAe;IAAkB;;EAC1C;EACA;EACA;EACA;EACA;EACA,aAAa;;iBA4uBC,iBAAiB,QAAQ,kBAAkB,4BAA6B;;;;;;;iBAgExE,YAAY,gBAAgB,QAAQ;;;;iBCze9B,iBAAiB,eAAe,4BAA6B;;;iBClZ7D,kBAAkB,eAAe,4BAA6B;;;;;;iBCnE9D,kBAAkB,eAAe,4BAA6B;;;iBC8O9D,yBAAyB,eAAe,4BAA6B;;;;;;;;;;;;iBCzUrE,gBAAgB,gBAAgB;;;;;;;;;;;;iBCAhC,iBAAiB,gBAAgB;;;;;;;;;;;;;;;;;iBCGvC,gBAAgB;;;;;;;;;;;;;;;;iBCDhB,iBAAiB;;;;;;;;;;;;;;iBCsRX,iBACpB,eACA,4BACC;;;;;;;;;;;;;;iBC6NmB,oBACpB,eACA,4BACC;;;;;;;;;;;;iBCjFmB,iBAAiB,eAAe,4BAA6B;;;iBCsD7D,kBAAkB,eAAe,4BAA6B;;;iBCnJ9D,uBAAuB,eAAe,4BAA6B;;;;;;iBC5LnE,mBAAmB,mBAAmB,4BAA6B,QAAQ;;;;;;;;;iBC4G3E,sBAAsB,eAAe,4BAA6B;;;;;;;;;;iBCclE,sBAAsB,eAAe,4BAA6B;;;;;;;;;;;iBCnElE,oBAAoB,eAAe,4BAA6B;;;;;;;;;;;iBCoChE,kBAAkB,eAAe,4BAA6B;;;iBC/J9D,kBAAkB,eAAe,4BAA+B;;;iBCoRhE,gBAAgB,eAAe,4BAA6B;;;;;;;;;iBC2N5D,sBAAsB,eAAe,4BAA6B;;;;;;;;iBChhBxE,gBAAgB;;;iBClBhB,gBAAgB,eAAe;;;iBCE/B,mBAAmB,eAAe;;;iBCIlC,iBAAiB,eAAe;;;
|
|
1
|
+
{"version":3,"file":"index.d.ts","names":[],"sources":["../converters/legacyhdf-to-hdf/typescript/converter.ts","../converters/asff-to-hdf/typescript/converter.ts","../converters/sarif-to-hdf/typescript/converter.ts","../converters/junit-to-hdf/typescript/converter.ts","../converters/xccdf-results-to-hdf/typescript/converter.ts","../converters/ckl-to-hdf/typescript/converter.ts","../converters/cklb-to-hdf/typescript/converter.ts","../converters/hdf-to-ckl/typescript/converter.ts","../converters/hdf-to-cklb/typescript/converter.ts","../converters/kics-to-hdf/typescript/converter.ts","../converters/semgrep-to-hdf/typescript/converter.ts","../converters/snyk-to-hdf/typescript/converter.ts","../converters/grype-to-hdf/typescript/converter.ts","../converters/defectdojo-to-hdf/typescript/converter.ts","../converters/nessus-to-hdf/typescript/converter.ts","../converters/sonarqube-to-hdf/typescript/converter.ts","../converters/aws-config-to-hdf/typescript/converter.ts","../converters/checkov-to-hdf/typescript/converter.ts","../converters/gosec-to-hdf/typescript/converter.ts","../converters/nikto-to-hdf/typescript/converter.ts","../converters/zap-to-hdf/typescript/converter.ts","../converters/cyclonedx-to-hdf/typescript/converter.ts","../converters/hdf-to-csv/typescript/converter.ts","../converters/hdf-to-ecs/typescript/converter.ts","../converters/hdf-to-splunk/typescript/converter.ts","../converters/hdf-to-ocsf/typescript/converter.ts","../converters/hdf-to-asff/typescript/converter.ts","../converters/splunk-to-hdf/typescript/converter.ts","../converters/hdf-to-xml/typescript/converter.ts","../converters/gitlab-to-hdf/typescript/converter.ts","../converters/trivy-to-hdf/typescript/converter.ts","../converters/trufflehog-to-hdf/typescript/converter.ts","../converters/hipcheck-to-hdf/typescript/converter.ts","../converters/burpsuite-to-hdf/typescript/converter.ts","../converters/dbprotect-to-hdf/typescript/converter.ts","../converters/twistlock-to-hdf/typescript/converter.ts","../converters/deptrack-to-hdf/typescript/converter.ts","../converters/jfrog-xray-to-hdf/typescript/converter.ts","../converters/neuvector-to-hdf/typescript/converter.ts","../converters/fortify-to-hdf/typescript/converter.ts","../converters/prisma-to-hdf/typescript/converter.ts","../converters/netsparker-to-hdf/typescript/converter.ts","../converters/scoutsuite-to-hdf/typescript/converter.ts","../converters/conveyor-to-hdf/typescript/converter.ts","../converters/veracode-to-hdf/typescript/converter.ts","../converters/msft-secure-score-to-hdf/typescript/converter.ts","../converters/msft-defender-devops-to-hdf/typescript/converter.ts","../converters/msft-defender-cloud-to-hdf/typescript/converter.ts","../converters/msft-defender-endpoint-to-hdf/typescript/converter.ts","../converters/hdf-to-xccdf/typescript/converter.ts","../converters/hdf-to-oscal-sar/typescript/converter.ts","../converters/hdf-to-oscal-poam/typescript/converter.ts","../converters/ionchannel-to-hdf/typescript/converter.ts","../converters/openvex-to-hdf/typescript/converter.ts","../converters/csaf-vex-to-hdf/typescript/converter.ts","../converters/cyclonedx-vex-to-hdf/typescript/converter.ts","../converters/spdx-vex-to-hdf/typescript/converter.ts","../converters/hdf-to-csaf-vex/typescript/converter.ts","../converters/hdf-to-openvex/typescript/converter.ts","../converters/hdf-to-cyclonedx-vex/typescript/converter.ts","../converters/oscal-to-hdf/typescript/detect.ts","../converters/oscal-to-hdf/typescript/converter-catalog.ts","../converters/oscal-to-hdf/typescript/converter-profile.ts","../converters/oscal-to-hdf/typescript/converter-component.ts","../converters/oscal-to-hdf/typescript/converter-ssp.ts","../converters/oscal-to-hdf/typescript/converter-sap.ts","../converters/oscal-to-hdf/typescript/converter-poam.ts","../converters/oscal-to-hdf/typescript/converter-sar.ts","../shared/typescript/enrichStix.ts","../shared/typescript/stix.ts"],"mappings":";;;;;;;;;;;;UAwBiB;EACf;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;GACC;;UAGc;EACf;EACA;EACA;EACA,eAAe;IAAO;IAAe;;EACrC;EACA;EACA,OAAO;EACP;EACA;IACE;IACA;;EAEF,cAAc;EACd,UAAU;EACV;GACC;;UAGc;EACf;EACA;EACA;GACC;;UAGc;EACf;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;GACC;;UAGc;EACf;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,SAAS;EACT,WAAW;EACX;EACA,UAAU;EACV;EACA;EACA;EACA;GACC;;UAGc;EACf;EACA;EACA;GACC;;UAGc;EACf;EACA,UAAU;EACV,UAAU;EACV;EACA;EACA;GACC;;UAKc;EACf;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;GACC;;UAGc;EACf;EACA;EACA;IAAU;;EACV;EACA;IAAa;IAAe;;EAC5B;EACA;GACC;;UAGc;EACf;EACA;EACA;IAAa;IAAe;;EAC5B;GACC;;UAGc;EACf;EACA;EACA;EACA,eAAe;IAAO;IAAe;;EACrC;EACA;EACA,OAAO;EACP;EACA;IACE;IACA;;EAEF,aAAa;EACb,UAAU;EACV;EACA;EACA;EACA,kBAAkB;EAClB,QAAQ;EACR;EACA,OAAO;IAAO;;GACb;;UAGc;EACf;EACA;EACA;GACC;;UAGc;EACf;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;GACC;;UAGc;EACf;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,SAAS;EACT,eAAe;EACf;IACE;IACA;;EAEF;IACE;IACA;;EAEF;IACE;IACA;;EAEF;IACE;IACA;;EAEF,UAAU;EACV;EACA;EACA;EACA;GACC;;UAGc;EACf,WAAW;EACX;EACA;EACA;EACA;IAAS;IAAe;IAAkB;;EAC1C;EACA;EACA;EACA;EACA;EACA,aAAa;;iBA4uBC,iBAAiB,QAAQ,kBAAkB,4BAA6B;;;;;;;iBAgExE,YAAY,gBAAgB,QAAQ;;;;iBCze9B,iBAAiB,eAAe,4BAA6B;;;iBClZ7D,kBAAkB,eAAe,4BAA6B;;;;;;iBCnE9D,kBAAkB,eAAe,4BAA6B;;;iBC8O9D,yBAAyB,eAAe,4BAA6B;;;;;;;;;;;;iBCzUrE,gBAAgB,gBAAgB;;;;;;;;;;;;iBCAhC,iBAAiB,gBAAgB;;;;;;;;;;;;;;;;;iBCGvC,gBAAgB;;;;;;;;;;;;;;;;iBCDhB,iBAAiB;;;;;;;;;;;;;;iBCsRX,iBACpB,eACA,4BACC;;;;;;;;;;;;;;iBC6NmB,oBACpB,eACA,4BACC;;;;;;;;;;;;iBCjFmB,iBAAiB,eAAe,4BAA6B;;;iBCsD7D,kBAAkB,eAAe,4BAA6B;;;iBCnJ9D,uBAAuB,eAAe,4BAA6B;;;;;;iBC5LnE,mBAAmB,mBAAmB,4BAA6B,QAAQ;;;;;;;;;iBC4G3E,sBAAsB,eAAe,4BAA6B;;;;;;;;;;iBCclE,sBAAsB,eAAe,4BAA6B;;;;;;;;;;;iBCnElE,oBAAoB,eAAe,4BAA6B;;;;;;;;;;;iBCoChE,kBAAkB,eAAe,4BAA6B;;;iBC/J9D,kBAAkB,eAAe,4BAA+B;;;iBCoRhE,gBAAgB,eAAe,4BAA6B;;;;;;;;;iBC2N5D,sBAAsB,eAAe,4BAA6B;;;;;;;;iBChhBxE,gBAAgB;;;iBClBhB,gBAAgB,eAAe;;;iBCE/B,mBAAmB,eAAe;;;iBCIlC,iBAAiB,eAAe;;;iBCChC,iBAAiB,eAAe;;;;;;;;;;;;;;iBC4G1B,mBAAmB,eAAe,4BAA6B;;;;;;;;;iBCErE,gBAAgB;;;iBCkIV,mBAAmB,eAAe,4BAA6B;;;;;;;;iBCvJ/D,kBAAkB,eAAe,4BAA6B;;;;;;;;;;iBCkJ9D,uBAAuB,eAAe,4BAA6B;;;;;;;;;iBCnFnE,qBAAqB,eAAe,4BAA6B;;;;;;;;;;;;iBCDjE,sBAAsB,eAAe,4BAA6B;;;;;;;;;;;iBCsIlE,sBAAsB,eAAe,4BAA6B;;;;;;;;;;;;iBCuFlE,sBAAsB,eAAe,4BAA6B;;;;;;;;;iBCZlE,qBAAqB,eAAe,4BAA6B;;;;;;;;;iBChCjE,sBAAsB,eAAe,4BAA6B;;;;;;;;;;;;;;;;;iBCyFlE,sBAAsB,eAAe,4BAA6B;;;;;;;;;;;;;iBC8BlE,oBAAoB,eAAe,4BAA6B;;;;;;;;;;;;;;;;;iBC7HhE,mBAAmB,eAAe,4BAA6B;;;;;;;;;;iBCyG/D,uBAAuB,eAAe,4BAA6B;;;;;;;;;;iBC9MnE,uBAAuB,eAAe,4BAA6B;;;;;;;;;;iBCoFnE,qBAAqB,eAAe,4BAA6B;;;;;;;;;;;;;;;;;;;;;iBC0QjE,qBAAqB,eAAe,4BAA6B;;;;;;;;;;;;iBC3TjE,4BAA4B,eAAe,4BAA6B;;;;;;;;iBCnPxE,+BAA+B,eAAe,4BAA6B;;;;;;;;;iBCqH3E,8BAA8B,eAAe,4BAA6B;;;;;;;;;;iBCgQ1E,iCAAiC,eAAe,4BAA6B;;;;;;;;;iBC9YnF,kBAAkB;;;;;;;;;;;;;;;iBCUZ,qBAAqB,gBAAgB;;;;;;;;;;;;;;iBCDrC,sBAAsB,gBAAgB;;;iBCgStC,uBAAuB,eAAe,4BAA6B;;;iBC9PnE,oBACpB,eACA,4BACC,QAAQ;;;iBCiEW,oBACpB,eACA,4BACC,QAAQ;;;iBC1CW,yBACpB,eACA,4BACC,QAAQ;;;iBCHW,oBACpB,eACA,4BACC,QAAQ;;;iBCLK,oBAAoB,eAAe;;;iBC3C7B,oBACpB,eACA,2BACC;;;iBC+EmB,yBACpB,eACA,2BACC;;;;;;;;;KCxIS;;;;;;;iBAeI,wBAAwB,gBAAgB;;;;;;;;;iBCClC,yBAAyB,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;iBCYzC,yBACpB,sBACA,uBACC;;;;;;;;;;;;;;iBCtBmB,2BAA2B,gBAAgB;;;;;;;;;;;;;;iBCY3C,qBAAqB,gBAAgB;;;;;;;;;;;;;;iBCKrC,qBAAqB,gBAAgB;;;;;;;;;;;;;;iBCErC,sBAAsB,gBAAgB;;;;;;;;;;;;;;iBCStC,qBAAqB,gBAAgB;;;;UClC1C;;EAEf;;EAEA,OAAO;;EAEP;;;EAGA;;;;;;;;;;;;;;;;iBAwBc,WAAW,sBAAsB,qBAAqB,OAAO;;;KC1CjE,aAAa;UAER;EACf;EACA;EACA,SAAS;;;iBAIK,gBAAgB,gBAAgB;;iBA2BhC,iBAAiB"}
|
package/dist/index.js
CHANGED
|
@@ -8502,6 +8502,7 @@ function floatMetric(f) {
|
|
|
8502
8502
|
* byte-identical with the Go implementation via canonicalize + stringifyLine.
|
|
8503
8503
|
*/
|
|
8504
8504
|
const ASFF_SCHEMA_VERSION = "2018-10-08";
|
|
8505
|
+
const CONVERTER_NAME = "hdf-to-asff";
|
|
8505
8506
|
const PLACEHOLDER_REGION = "us-east-1";
|
|
8506
8507
|
const PLACEHOLDER_ACCOUNT_ID = "000000000000";
|
|
8507
8508
|
const DEFAULT_PARTITION = "aws";
|
|
@@ -8509,7 +8510,7 @@ const MAX_TITLE = 256;
|
|
|
8509
8510
|
const MAX_DESCRIPTION = 1024;
|
|
8510
8511
|
const EPOCH_SENTINEL = "1970-01-01T00:00:00Z";
|
|
8511
8512
|
function convertHdfToAsff(input, converterVersion = "0.1.0") {
|
|
8512
|
-
const name =
|
|
8513
|
+
const name = CONVERTER_NAME;
|
|
8513
8514
|
validateInputSize$1(input, name);
|
|
8514
8515
|
const doc = parseHdf(input);
|
|
8515
8516
|
const baselines = asArr(doc.baselines);
|
|
@@ -8555,12 +8556,11 @@ function recoverAccountID(doc) {
|
|
|
8555
8556
|
return PLACEHOLDER_ACCOUNT_ID;
|
|
8556
8557
|
}
|
|
8557
8558
|
function buildFinding(req, ctx) {
|
|
8558
|
-
const controlID = getStr(req, "id");
|
|
8559
|
+
const controlID = firstNonEmpty(getStr(req, "id"), getStr(req, "title"), CONVERTER_NAME);
|
|
8559
8560
|
const st = statusOf(req);
|
|
8560
8561
|
const title = getStr(req, "title") || controlID;
|
|
8561
8562
|
const desc = defaultDescription(req) || title;
|
|
8562
|
-
const
|
|
8563
|
-
const hasCVSS = cvssList !== void 0 && cvssList.length > 0;
|
|
8563
|
+
const vulns = vulnerabilities(req);
|
|
8564
8564
|
const ts = canonicalTime(firstResultStartTime(req, ctx.docTimestamp));
|
|
8565
8565
|
const id = findingID(ctx.accountID, ctx.baselineName, controlID);
|
|
8566
8566
|
const finding = {
|
|
@@ -8573,7 +8573,7 @@ function buildFinding(req, ctx) {
|
|
|
8573
8573
|
UpdatedAt: ts,
|
|
8574
8574
|
Title: truncate(title, MAX_TITLE),
|
|
8575
8575
|
Description: truncate(desc, MAX_DESCRIPTION),
|
|
8576
|
-
Types: asffTypes(
|
|
8576
|
+
Types: asffTypes(vulns.length > 0),
|
|
8577
8577
|
Severity: severity(req),
|
|
8578
8578
|
Resources: resources(ctx.component, id),
|
|
8579
8579
|
RecordState: "ACTIVE",
|
|
@@ -8584,7 +8584,6 @@ function buildFinding(req, ctx) {
|
|
|
8584
8584
|
if (Object.keys(pf).length > 0) finding.ProductFields = pf;
|
|
8585
8585
|
const rem = remediation(req);
|
|
8586
8586
|
if (rem) finding.Remediation = rem;
|
|
8587
|
-
const vulns = vulnerabilities(req);
|
|
8588
8587
|
const refs = allRefURLs(req);
|
|
8589
8588
|
if (refs.length > 0) if (vulns.length > 0) vulns[0].ReferenceUrls = refs;
|
|
8590
8589
|
else finding.SourceUrl = refs[0];
|
|
@@ -8641,9 +8640,12 @@ function vulnerabilities(req) {
|
|
|
8641
8640
|
if (c.baseScore !== void 0 && c.baseScore !== null) cvssEntry.BaseScore = c.baseScore;
|
|
8642
8641
|
setIf(cvssEntry, "BaseVector", getStr(c, "baseVector"));
|
|
8643
8642
|
setIf(cvssEntry, "Source", getStr(c, "source"));
|
|
8644
|
-
const
|
|
8645
|
-
|
|
8646
|
-
out.push(
|
|
8643
|
+
const id = getStr(c, "source");
|
|
8644
|
+
if (id === "") continue;
|
|
8645
|
+
out.push({
|
|
8646
|
+
Cvss: [cvssEntry],
|
|
8647
|
+
Id: id
|
|
8648
|
+
});
|
|
8647
8649
|
}
|
|
8648
8650
|
return out;
|
|
8649
8651
|
}
|