@mitre/hdf-mappings 3.6.0 → 3.7.0-rc.1

package/dist/index.d.ts

@@ -34,7 +34,7 @@ type NistCCIMappings = Record<string, string[]>;
  * // Returns: "The organization develops an access control policy..."
  * ```
  */
-declare function getCCIDescription(cciId: string): string | undefined;
+export declare function getCCIDescription(cciId: string): string | undefined;
 /**
  * Get the NIST control mappings for a CCI ID.
  *
@@ -47,7 +47,7 @@ declare function getCCIDescription(cciId: string): string | undefined;
  * // Returns: ['AC-1 a', 'AC-1.1 (i and ii)', 'AC-1 a 1']
  * ```
  */
-declare function getCCINistMappings(cciId: string): string[] | undefined;
+export declare function getCCINistMappings(cciId: string): string[] | undefined;
 /**
  * Get all CCI IDs available in the database.
  *
@@ -59,7 +59,7 @@ declare function getCCINistMappings(cciId: string): string[] | undefined;
  * // Returns: ['CCI-000001', 'CCI-000002', ...]
  * ```
  */
-declare function getAllCCIIds(): string[];
+export declare function getAllCCIIds(): string[];
 /**
  * Check if a CCI ID exists in the database.
  *
@@ -73,7 +73,7 @@ declare function getAllCCIIds(): string[];
  * }
  * ```
  */
-declare function cciExists(cciId: string): boolean;
+export declare function cciExists(cciId: string): boolean;
 /**
  * Get CCI IDs for a NIST control using the curated mapping table.
  * The input is normalized to its base control before lookup.
@@ -87,7 +87,7 @@ declare function cciExists(cciId: string): boolean;
  * // Returns: ['CCI-001310']
  * ```
  */
-declare function getNistCCIMappings(nistControl: string): string[] | undefined;
+export declare function getNistCCIMappings(nistControl: string): string[] | undefined;
 /**
  * Map NIST 800-53 controls to their CCI IDs using the curated mapping table.
  * Results are deduplicated and sorted.
@@ -101,7 +101,33 @@ declare function getNistCCIMappings(nistControl: string): string[] | undefined;
  * // Returns: ['CCI-000213', 'CCI-001310']
  * ```
  */
-declare function nistToCci(nistControls: string[]): string[];
+export declare function nistToCci(nistControls: string[]): string[];
+//#endregion
+//#region src/nist/normalize.d.ts
+/**
+ * NIST SP 800-53 identifier spelling normalization.
+ *
+ * Mirrors NormalizeID in go/nist/exists.go; both are pinned by the shared case
+ * table go/nist/testdata/nist-id-spelling-cases.json.
+ */
+/**
+ * Normalize a NIST SP 800-53 identifier to the description-table spelling:
+ * uppercase family, lowercase statement letters, zero-padded numbers and
+ * space-separated parts.
+ *
+ * @param nistId - An identifier such as 'AC-2', 'AC-2(3)', 'AC-2 (3)', 'AC-02 03', 'AC-1 a 1' or 'ac-2'
+ * @returns The table spelling (e.g. 'AC-02 03'), or undefined if the input is not
+ *   a NIST identifier spelling. A defined result is not proof NIST defines the
+ *   control; use nistExists for that.
+ *
+ * @example
+ * ```typescript
+ * normalizeNistId('AC-2 (3)');  // 'AC-02 03'
+ * normalizeNistId('AC-2(3)(a)'); // 'AC-02 03 a'
+ * normalizeNistId('SV-230221'); // undefined
+ * ```
+ */
+export declare function normalizeNistId(nistId: string): string | undefined;
 //#endregion
 //#region src/nist/crosswalk.d.ts
 /**
@@ -139,7 +165,7 @@ interface NistControlTranslation {
  * no targets. Statement-letter suffixes ("AC-2(j)") survive identity
  * translation and are dropped on redirects.
  */
-declare function translateNistControl(control: string, from: number, to: number): NistControlTranslation;
+export declare function translateNistControl(control: string, from: number, to: number): NistControlTranslation;
 /**
  * Translates a list of control IDs between revisions, flattening redirect
  * targets and deduplicating while preserving first-seen order. Controls with
@@ -147,7 +173,7 @@ declare function translateNistControl(control: string, from: number, to: number)
  * family-level, or unknown) are returned in `unmapped`, in input order, so
  * callers can surface them instead of silently dropping.
  */
-declare function translateNistControls(controls: string[], from: number, to: number): {
+export declare function translateNistControls(controls: string[], from: number, to: number): {
   translated: string[];
   unmapped: NistControlTranslation[];
 };
@@ -155,7 +181,7 @@ declare function translateNistControls(controls: string[], from: number, to: num
  * Number of control IDs in the crosswalk's catalog for the given revision, or
  * 0 for unsupported revisions.
  */
-declare function nistRosterSize(rev: number): number;
+export declare function nistRosterSize(rev: number): number;
 /**
  * Translates a control list authored against `nativeRev` into `rev`. Identity
  * when the revisions are equal (or either is unsupported). Per token: the
@@ -166,7 +192,7 @@ declare function nistRosterSize(rev: number): number;
  * (tool placeholders like "UM-1") pass through unchanged — they are not ours
  * to drop. Output is deduplicated preserving first-seen order.
  */
-declare function nistControlsAtRevision(controls: string[], nativeRev: number, rev: number): string[];
+export declare function nistControlsAtRevision(controls: string[], nativeRev: number, rev: number): string[];
 //#endregion
 //#region src/nist/types.d.ts
 /**
@@ -175,9 +201,6 @@ declare function nistControlsAtRevision(controls: string[], nativeRev: number, r
 type NISTDescriptions = Record<string, string>;
 //#endregion
 //#region src/nist/index.d.ts
-/**
- * NIST SP 800-53 control description functions
- */
 /**
  * NIST SP 800-53 revision selection.
  *
@@ -188,30 +211,31 @@ type NISTDescriptions = Record<string, string>;
  * the mapping lookups instead of mutating this.
  */
 /** The revision mappings emit when nothing overrides it. */
-declare const DEFAULT_NIST_REVISION = 5;
+export declare const DEFAULT_NIST_REVISION = 5;
 /** Revisions every NIST-emitting mapping table has rows for. */
-declare const SUPPORTED_NIST_REVISIONS: readonly number[];
+export declare const SUPPORTED_NIST_REVISIONS: readonly number[];
 /** Get the module-global default NIST revision. */
-declare function getCurrentNistRevision(): number;
+export declare function getCurrentNistRevision(): number;
 /**
  * Set the module-global default NIST revision. Throws (without mutating state)
  * if the revision has no mapping data.
  */
-declare function setCurrentNistRevision(rev: number): void;
+export declare function setCurrentNistRevision(rev: number): void;
 /** Restore the default revision. Intended for cleanup and tests. */
-declare function resetNistRevision(): void;
+export declare function resetNistRevision(): void;
 /** Report whether strict NIST revision alignment is enabled. */
-declare function isNistStrict(): boolean;
+export declare function isNistStrict(): boolean;
 /**
  * Toggle strict NIST revision alignment. When enabled, revision-divergent
  * mappings treat a rule mapped only at another revision as a hard error rather
  * than a silent omission.
  */
-declare function setNistStrict(strict: boolean): void;
+export declare function setNistStrict(strict: boolean): void;
 /**
  * Get the description for a NIST control ID at the selected revision.
  *
- * @param nistId - The NIST control ID (e.g., 'AC-01', 'AC-01 a', 'AC-02 01')
+ * @param nistId - The NIST control ID, in any spelling normalizeNistId accepts
+ *   ('AC-1', 'AC-01 a', 'AC-2 (1)', 'AC-02 01', ...)
  * @param rev - NIST revision to look up; defaults to the module-global revision
  * @returns The control's Rev-specific description, or undefined if not found at
  *   that revision (e.g. a Rev 5-only SR/PT control at Rev 4, or a Rev 4 control
@@ -220,10 +244,10 @@ declare function setNistStrict(strict: boolean): void;
  * @example
  * ```typescript
  * getNISTDescription('AC-01');    // Rev 5 default -> "Policy and Procedures"
- * getNISTDescription('AC-01', 4); // -> "ACCESS CONTROL POLICY AND PROCEDURES"
+ * getNISTDescription('AC-1', 4);  // -> "ACCESS CONTROL POLICY AND PROCEDURES"
  * ```
  */
-declare function getNISTDescription(nistId: string, rev?: number): string | undefined;
+export declare function getNISTDescription(nistId: string, rev?: number): string | undefined;
 /**
  * Get all NIST control IDs present at the selected revision.
  *
@@ -237,23 +261,24 @@ declare function getNISTDescription(nistId: string, rev?: number): string | unde
  * // Returns: ['AC-01', 'AC-01 a', 'AC-02', ...]
  * ```
  */
-declare function getAllNISTIds(rev?: number): string[];
+export declare function getAllNISTIds(rev?: number): string[];
 /**
  * Check if a NIST control ID exists at the selected revision.
  *
- * @param nistId - The NIST control ID to check
+ * @param nistId - The NIST control ID to check, in any spelling normalizeNistId
+ *   accepts ('AC-2', 'AC-2(3)', 'AC-2 (3)', 'AC-02 03', 'AC-01 a 01', ...)
  * @param rev - NIST revision to check against; defaults to the module-global revision
  * @returns true if the control exists at that revision (e.g. an SR/PT control is
  *   present at Rev 5 but not Rev 4)
  *
  * @example
  * ```typescript
- * if (nistExists('AC-01')) {
- *   console.log('NIST control found');
- * }
+ * nistExists('AC-2 (3)');   // true
+ * nistExists('SR-3', 4);    // false: the SR family is Rev 5-only
+ * nistExists('SV-230221');  // false
  * ```
  */
-declare function nistExists(nistId: string, rev?: number): boolean;
+export declare function nistExists(nistId: string, rev?: number): boolean;
 /**
  * Extract the NIST family from a NIST control ID, if that family exists at the
  * selected revision.
@@ -272,7 +297,7 @@ declare function nistExists(nistId: string, rev?: number): boolean;
  * // Returns: 'AC'
  * ```
  */
-declare function getNISTFamily(nistId: string, rev?: number): string | undefined;
+export declare function getNISTFamily(nistId: string, rev?: number): string | undefined;
 /**
  * Canonical NIST 800-53 fallback tags for converters when a finding has no
  * CWE or the CWE has no NIST mapping. Categories match heimdall2's global.ts.
@@ -283,13 +308,13 @@ declare function getNISTFamily(nistId: string, rev?: number): string | undefined
  * - CM-8: System Component Inventory
  */
 /** Static analysis and vulnerability scanning tools (SA-11 + RA-5). */
-declare const DEFAULT_STATIC_ANALYSIS_NIST_TAGS: string[];
+export declare const DEFAULT_STATIC_ANALYSIS_NIST_TAGS: string[];
 /** Tools that identify outdated packages or flaws requiring patching (SI-2 + RA-5). */
-declare const DEFAULT_REMEDIATION_NIST_TAGS: string[];
+export declare const DEFAULT_REMEDIATION_NIST_TAGS: string[];
 /** Dependency/inventory management tools (CM-8). */
-declare const DEFAULT_COMPONENT_MANAGEMENT_NIST_TAGS: string[];
+export declare const DEFAULT_COMPONENT_MANAGEMENT_NIST_TAGS: string[];
 /** Configuration-compliance checks with no specific mapping (CM-6: Configuration Settings). */
-declare const DEFAULT_CONFIG_MANAGEMENT_NIST_TAGS: string[];
+export declare const DEFAULT_CONFIG_MANAGEMENT_NIST_TAGS: string[];
 //#endregion
 //#region src/owasp/types.d.ts
 /**
@@ -317,7 +342,7 @@ type OwaspNistMappings = OwaspNistMapping[];
  * // Returns: { 'OWASP-ID': 'A1', 'OWASP Name': 'Injection', 'NIST-ID': 'SI-10', ... }
  * ```
  */
-declare function getOwaspNistMapping(owaspId: string): OwaspNistMapping | undefined;
+export declare function getOwaspNistMapping(owaspId: string): OwaspNistMapping | undefined;
 /**
  * Get the NIST control ID for an OWASP Top 10 ID.
  *
@@ -330,7 +355,7 @@ declare function getOwaspNistMapping(owaspId: string): OwaspNistMapping | undefi
  * // Returns: 'SI-10'
  * ```
  */
-declare function getOwaspNistControl(owaspId: string): string | undefined;
+export declare function getOwaspNistControl(owaspId: string): string | undefined;
 /**
  * Get the OWASP vulnerability name for an OWASP ID.
  *
@@ -343,7 +368,7 @@ declare function getOwaspNistControl(owaspId: string): string | undefined;
  * // Returns: 'Injection'
  * ```
  */
-declare function getOwaspName(owaspId: string): string | undefined;
+export declare function getOwaspName(owaspId: string): string | undefined;
 /**
  * Get all OWASP IDs available in the database.
  *
@@ -355,7 +380,7 @@ declare function getOwaspName(owaspId: string): string | undefined;
  * // Returns: ['A1', 'A2', 'A3', ..., 'A10']
  * ```
  */
-declare function getAllOwaspIds(): string[];
+export declare function getAllOwaspIds(): string[];
 /**
  * Check if an OWASP ID exists in the database.
  *
@@ -369,7 +394,7 @@ declare function getAllOwaspIds(): string[];
  * }
  * ```
  */
-declare function owaspExists(owaspId: string): boolean;
+export declare function owaspExists(owaspId: string): boolean;
 /**
  * Get all OWASP to NIST mappings.
  *
@@ -381,7 +406,7 @@ declare function owaspExists(owaspId: string): boolean;
  * // Returns all 10 OWASP Top 10 mappings
  * ```
  */
-declare function getAllOwaspMappings(): OwaspNistMappings;
+export declare function getAllOwaspMappings(): OwaspNistMappings;
 //#endregion
 //#region src/cwe/types.d.ts
 /**
@@ -398,17 +423,56 @@ type CweNistMappings = CweNistMapping[];
 //#endregion
 //#region src/cwe/index.d.ts
 /** Get the full mapping for a CWE ID at the given NIST revision. */
-declare function getCweNistMapping(cweId: number, rev?: number): CweNistMapping | undefined;
+export declare function getCweNistMapping(cweId: number, rev?: number): CweNistMapping | undefined;
 /** Get the NIST control ID for a CWE ID at the given NIST revision. */
-declare function getCweNistControl(cweId: number, rev?: number): string | undefined;
+export declare function getCweNistControl(cweId: number, rev?: number): string | undefined;
 /** Get the CWE name for a CWE ID at the given NIST revision. */
-declare function getCweName(cweId: number, rev?: number): string | undefined;
+export declare function getCweName(cweId: number, rev?: number): string | undefined;
 /** Get all CWE IDs present at the given NIST revision. */
-declare function getAllCweIds(rev?: number): number[];
+export declare function getAllCweIds(rev?: number): number[];
 /** Check whether a CWE ID exists at the given NIST revision. */
-declare function cweExists(cweId: number, rev?: number): boolean;
+export declare function cweExists(cweId: number, rev?: number): boolean;
 /** Get all CWE to NIST mappings (all revisions). */
-declare function getAllCweMappings(): CweNistMappings;
+export declare function getAllCweMappings(): CweNistMappings;
+//#endregion
+//#region src/checkov/types.d.ts
+/**
+ * TypeScript types for Checkov check ID to CCI/NIST mappings
+ */
+interface CheckovCciNistMapping {
+  cci: string[];
+  nist: string[];
+}
+type CheckovCciNistMappings = Record<string, CheckovCciNistMapping>;
+interface CheckovMappingProvenance {
+  source: {
+    package: string;
+    version: string;
+    path: string;
+    integrity: string;
+  };
+  checkovVersion: string;
+  updated: string;
+  nistRevision: number;
+}
+interface CheckovMappingDataset extends CheckovMappingProvenance {
+  $comment: string[];
+  mappings: CheckovCciNistMappings;
+}
+//#endregion
+//#region src/checkov/index.d.ts
+/**
+ * Get the CCI and NIST controls for a Checkov check ID, with NIST controls
+ * translated to the given revision. CCIs are revision-independent.
+ * @returns copies of both lists, or undefined if the check is unmapped
+ */
+export declare function getCheckovCciNistMapping(checkId: string, rev?: number): CheckovCciNistMapping | undefined;
+/** Check whether a Checkov check ID has a mapping. */
+export declare function checkovCheckExists(checkId: string): boolean;
+/** Get all mapped Checkov check IDs, sorted. */
+export declare function getAllCheckovCheckIds(): string[];
+/** Get the dataset's source package, Checkov version and native NIST revision. */
+export declare function getCheckovMappingProvenance(): CheckovMappingProvenance;
 //#endregion
 //#region src/nessus/types.d.ts
 /**
@@ -428,29 +492,29 @@ type NessusNistMappings = NessusNistMapping[];
  * @param pluginId - The Nessus plugin ID (optional, defaults to "*")
  * @returns The NIST control ID or undefined if not found
  */
-declare function getNessusNistControl(pluginFamily: string, pluginId?: string): string | undefined;
+export declare function getNessusNistControl(pluginFamily: string, pluginId?: string): string | undefined;
 /**
  * Get all mappings for a plugin family
  * @param pluginFamily - The Nessus plugin family
  * @returns Array of mappings for the plugin family
  */
-declare function getNessusPluginFamilyMappings(pluginFamily: string): NessusNistMappings;
+export declare function getNessusPluginFamilyMappings(pluginFamily: string): NessusNistMappings;
 /**
  * Get all plugin families
  * @returns Array of all plugin families
  */
-declare function getAllNessusPluginFamilies(): string[];
+export declare function getAllNessusPluginFamilies(): string[];
 /**
  * Check if a plugin family exists in the mappings
  * @param pluginFamily - The plugin family to check
  * @returns True if the plugin family exists
  */
-declare function nessusPluginFamilyExists(pluginFamily: string): boolean;
+export declare function nessusPluginFamilyExists(pluginFamily: string): boolean;
 /**
  * Get all Nessus to NIST mappings
  * @returns Array of all mappings
  */
-declare function getAllNessusMappings(): NessusNistMappings;
+export declare function getAllNessusMappings(): NessusNistMappings;
 //#endregion
 //#region src/nikto/types.d.ts
 /**
@@ -464,23 +528,23 @@ type NiktoNistMappings = Record<string, string>;
  * @param niktoId - The Nikto test ID (string or number)
  * @returns The NIST control ID or undefined if not found
  */
-declare function getNiktoNistControl(niktoId: string | number): string | undefined;
+export declare function getNiktoNistControl(niktoId: string | number): string | undefined;
 /**
  * Get all Nikto test IDs
  * @returns Array of all Nikto test IDs
  */
-declare function getAllNiktoIds(): string[];
+export declare function getAllNiktoIds(): string[];
 /**
  * Check if a Nikto test ID exists in the mappings
  * @param niktoId - The Nikto test ID to check
  * @returns True if the Nikto test ID exists
  */
-declare function niktoExists(niktoId: string | number): boolean;
+export declare function niktoExists(niktoId: string | number): boolean;
 /**
  * Get all Nikto to NIST mappings
  * @returns Object mapping Nikto test IDs to NIST control IDs
  */
-declare function getAllNiktoMappings(): NiktoNistMappings;
+export declare function getAllNiktoMappings(): NiktoNistMappings;
 //#endregion
 //#region src/scoutsuite/types.d.ts
 /**
@@ -498,29 +562,29 @@ type ScoutsuiteNistMappings = ScoutsuiteNistMapping[];
  * @param rule - The ScoutSuite rule name
  * @returns The mapping object or undefined if not found
  */
-declare function getScoutsuiteNistMapping(rule: string): ScoutsuiteNistMapping | undefined;
+export declare function getScoutsuiteNistMapping(rule: string): ScoutsuiteNistMapping | undefined;
 /**
  * Get the NIST control ID for a ScoutSuite rule
  * @param rule - The ScoutSuite rule name
  * @returns The NIST control ID or undefined if not found
  */
-declare function getScoutsuiteNistControl(rule: string): string | undefined;
+export declare function getScoutsuiteNistControl(rule: string): string | undefined;
 /**
  * Get all ScoutSuite rule names
  * @returns Array of all rule names
  */
-declare function getAllScoutsuiteRules(): string[];
+export declare function getAllScoutsuiteRules(): string[];
 /**
  * Check if a ScoutSuite rule exists in the mappings
  * @param rule - The rule name to check
  * @returns True if the rule exists
  */
-declare function scoutsuiteRuleExists(rule: string): boolean;
+export declare function scoutsuiteRuleExists(rule: string): boolean;
 /**
  * Get all ScoutSuite to NIST mappings
  * @returns Array of all mappings
  */
-declare function getAllScoutsuiteMappings(): ScoutsuiteNistMappings;
+export declare function getAllScoutsuiteMappings(): ScoutsuiteNistMappings;
 //#endregion
 //#region src/awsconfig/types.d.ts
 /**
@@ -559,30 +623,30 @@ type AwsConfigSuppressions = AwsConfigSuppression[];
  * the mapping table — exposed so a consumer can distinguish "removed by
  * review" from "never mapped by the sources".
  */
-declare const awsConfigSuppressions: AwsConfigSuppressions;
+export declare const awsConfigSuppressions: AwsConfigSuppressions;
 /** Get the full mapping for an AWS Config rule by source identifier. */
-declare function getAwsConfigNistMappingByIdentifier(identifier: string, rev?: number): AwsConfigNistMapping | undefined;
+export declare function getAwsConfigNistMappingByIdentifier(identifier: string, rev?: number): AwsConfigNistMapping | undefined;
 /** Get the full mapping for an AWS Config rule by rule name. */
-declare function getAwsConfigNistMappingByName(ruleName: string, rev?: number): AwsConfigNistMapping | undefined;
+export declare function getAwsConfigNistMappingByName(ruleName: string, rev?: number): AwsConfigNistMapping | undefined;
 /** Get the NIST control ID for an AWS Config rule by source identifier. */
-declare function getAwsConfigNistControlByIdentifier(identifier: string, rev?: number): string | undefined;
+export declare function getAwsConfigNistControlByIdentifier(identifier: string, rev?: number): string | undefined;
 /** Get the NIST control ID for an AWS Config rule by rule name. */
-declare function getAwsConfigNistControlByName(ruleName: string, rev?: number): string | undefined;
+export declare function getAwsConfigNistControlByName(ruleName: string, rev?: number): string | undefined;
 /**
  * Resolve NIST controls for a decorated rule name such as Security Hub's
  * "securityhub-<canonical>-<hash>", where an exact lookup fails. Returns the
  * split controls of the canonical rule whose name is contained in the given
  * name; the longest such match wins. Returns [] if none match.
  */
-declare function getAwsConfigNistControlsBySubstring(name: string, rev?: number): string[];
+export declare function getAwsConfigNistControlsBySubstring(name: string, rev?: number): string[];
 /** Get all AWS Config rule source identifiers present at the given revision. */
-declare function getAllAwsConfigIdentifiers(rev?: number): string[];
+export declare function getAllAwsConfigIdentifiers(rev?: number): string[];
 /** Get all AWS Config rule names present at the given revision. */
-declare function getAllAwsConfigRuleNames(rev?: number): string[];
+export declare function getAllAwsConfigRuleNames(rev?: number): string[];
 /** Check if an AWS Config rule exists by source identifier at the given revision. */
-declare function awsConfigIdentifierExists(identifier: string, rev?: number): boolean;
+export declare function awsConfigIdentifierExists(identifier: string, rev?: number): boolean;
 /** Check if an AWS Config rule exists by rule name at the given revision. */
-declare function awsConfigRuleNameExists(ruleName: string, rev?: number): boolean;
+export declare function awsConfigRuleNameExists(ruleName: string, rev?: number): boolean;
 /**
  * Get the supported NIST revisions at which the rule resolves (by source
  * identifier or rule name), sorted ascending. Mirrors the resolution
@@ -590,9 +654,9 @@ declare function awsConfigRuleNameExists(ruleName: string, rev?: number): boolea
  * at that revision would emit NIST tags. Empty means unmapped everywhere — a
  * coverage gap, not a revision mismatch.
  */
-declare function awsConfigMappedRevisions(identifier: string, ruleName: string): number[];
+export declare function awsConfigMappedRevisions(identifier: string, ruleName: string): number[];
 /** Get all AWS Config to NIST mappings (all revisions). */
-declare function getAllAwsConfigMappings(): AwsConfigNistMappings;
+export declare function getAllAwsConfigMappings(): AwsConfigNistMappings;
 //#endregion
 //#region src/hipcheck/types.d.ts
 /**
@@ -612,13 +676,13 @@ type HipcheckNistMappings = HipcheckNistMapping[];
  * Accepts bare ("binary") or publisher-prefixed ("mitre/binary") names.
  * @returns array of control IDs, or [] if the analysis has no mapping
  */
-declare function getHipcheckNistControls(analysis: string): string[];
+export declare function getHipcheckNistControls(analysis: string): string[];
 /** Check whether a Hipcheck analysis name has a NIST mapping. */
-declare function hipcheckAnalysisExists(analysis: string): boolean;
+export declare function hipcheckAnalysisExists(analysis: string): boolean;
 /** Get all mapped Hipcheck analysis names, sorted. */
-declare function getAllHipcheckAnalyses(): string[];
+export declare function getAllHipcheckAnalyses(): string[];
 /** Get all Hipcheck to NIST mappings. */
-declare function getAllHipcheckMappings(): HipcheckNistMappings;
+export declare function getAllHipcheckMappings(): HipcheckNistMappings;
 //#endregion
-export { type AwsConfigNistMapping, type AwsConfigNistMappings, type AwsConfigSuppression, type AwsConfigSuppressions, type CCIItem, type CCIMappings, type CweNistMapping, type CweNistMappings, DEFAULT_COMPONENT_MANAGEMENT_NIST_TAGS, DEFAULT_CONFIG_MANAGEMENT_NIST_TAGS, DEFAULT_NIST_REVISION, DEFAULT_REMEDIATION_NIST_TAGS, DEFAULT_STATIC_ANALYSIS_NIST_TAGS, type HipcheckNistMapping, type HipcheckNistMappings, type NISTDescriptions, type NessusNistMapping, type NessusNistMappings, type NiktoNistMappings, type NistCCIMappings, type NistControlTranslation, type NistCrosswalkRelation, type OwaspNistMapping, type OwaspNistMappings, SUPPORTED_NIST_REVISIONS, type ScoutsuiteNistMapping, type ScoutsuiteNistMappings, awsConfigIdentifierExists, awsConfigMappedRevisions, awsConfigRuleNameExists, awsConfigSuppressions, cciExists, cweExists, getAllAwsConfigIdentifiers, getAllAwsConfigMappings, getAllAwsConfigRuleNames, getAllCCIIds, getAllCweIds, getAllCweMappings, getAllHipcheckAnalyses, getAllHipcheckMappings, getAllNISTIds, getAllNessusMappings, getAllNessusPluginFamilies, getAllNiktoIds, getAllNiktoMappings, getAllOwaspIds, getAllOwaspMappings, getAllScoutsuiteMappings, getAllScoutsuiteRules, getAwsConfigNistControlByIdentifier, getAwsConfigNistControlByName, getAwsConfigNistControlsBySubstring, getAwsConfigNistMappingByIdentifier, getAwsConfigNistMappingByName, getCCIDescription, getCCINistMappings, getCurrentNistRevision, getCweName, getCweNistControl, getCweNistMapping, getHipcheckNistControls, getNISTDescription, getNISTFamily, getNessusNistControl, getNessusPluginFamilyMappings, getNiktoNistControl, getNistCCIMappings, getOwaspName, getOwaspNistControl, getOwaspNistMapping, getScoutsuiteNistControl, getScoutsuiteNistMapping, hipcheckAnalysisExists, isNistStrict, nessusPluginFamilyExists, niktoExists, nistControlsAtRevision, nistExists, nistRosterSize, nistToCci, owaspExists, resetNistRevision, scoutsuiteRuleExists, setCurrentNistRevision, setNistStrict, translateNistControl, translateNistControls };
+export type { AwsConfigNistMapping, AwsConfigNistMappings, AwsConfigSuppression, AwsConfigSuppressions, CCIItem, CCIMappings, CheckovCciNistMapping, CheckovCciNistMappings, CheckovMappingDataset, CheckovMappingProvenance, CweNistMapping, CweNistMappings, HipcheckNistMapping, HipcheckNistMappings, NISTDescriptions, NessusNistMapping, NessusNistMappings, NiktoNistMappings, NistCCIMappings, NistControlTranslation, NistCrosswalkRelation, OwaspNistMapping, OwaspNistMappings, ScoutsuiteNistMapping, ScoutsuiteNistMappings };
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","names":[],"sources":["../src/cci/types.ts","../src/cci/index.ts","../src/nist/crosswalk.ts","../src/nist/types.ts","../src/nist/index.ts","../src/owasp/types.ts","../src/owasp/index.ts","../src/cwe/types.ts","../src/cwe/index.ts","../src/nessus/types.ts","../src/nessus/index.ts","../src/nikto/types.ts","../src/nikto/index.ts","../src/scoutsuite/types.ts","../src/scoutsuite/index.ts","../src/awsconfig/types.ts","../src/awsconfig/index.ts","../src/hipcheck/types.ts","../src/hipcheck/index.ts"],"mappings":";;;;UAGiB;;EAEf;;EAEA;;;;;KAMU,cAAc,eAAe;;;;;KAM7B,kBAAkB;;;;;;;;;;;;;;;;;;iBCUd,kBAAkB;;;;;;;;;;;;;iBAqBlB,mBAAmB;;;;;;;;;;;;iBAqBnB;;;;;;;;;;;;;;iBAiBA,UAAU;;;;;;;;;;;;;;iBA8BV,mBAAmB;;;;;;;;;;;;;;iBAqBnB,UAAU;;;;;;;;;;;;;;;;;KC1Hd;UASK;EACf;EACA;EACA,UAAU;;;;;EAKV;;EAEA;;;;;;;;;;iBA4Dc,qBACd,iBACA,cACA,aACC;;;;;;;;iBA8Ba,sBACd,oBACA,cACA;EACG;EAAsB,UAAU;;;;;;iBAwBrB,eAAe;;;;;;;;;;;iBAoBf,uBACd,oBACA,mBACA;;;;;;KClLU,mBAAmB;;;;;;;;;;;;;;;;cCyBlB;;cAWA;;iBAKG;;;;;iBAQA,uBAAuB;;iBAUvB;;iBAOA;;;;;;iBASA,cAAc;;;;;;;;;;;;;;;;iBAmBd,mBACd,gBACA;;;;;;;;;;;;;;iBAsBc,cAAc;;;;;;;;;;;;;;;;iBAmBd,WAAW,gBAAgB;;;;;;;;;;;;;;;;;;;iBA0B3B,cACd,gBACA;;;;;;;;;;;cAiCW;;cAGA;;cAGA;;cAGA;;;;;;UC9MI;EACf;EACA;EACA;EACA;EACA;;KAGU,oBAAoB;;;;;;;;;;;;;;;iBCoBhB,oBAAoB,kBAAkB;;;;;;;;;;;;;iBAoBtC,oBAAoB;;;;;;;;;;;;;iBAiBpB,aAAa;;;;;;;;;;;;iBAgBb;;;;;;;;;;;;;;iBAiBA,YAAY;;;;;;;;;;;;iBAmBZ,uBAAuB;;;;;;UCrHtB;EACf;EACA;EACA;EACA;EACA;;KAGU,kBAAkB;;;;iBCiBd,kBACd,eACA,eACC;;iBAKa,kBAAkB,eAAe;;iBAKjC,WAAW,eAAe;;iBAK1B,aAAa;;iBAKb,UAAU,eAAe;;iBAKzB,qBAAqB;;;;;;UCrDpB;EACf;EACA;EACA;;KAGU,qBAAqB;;;;;;;;;iBCajB,qBACd,sBACA;;;;;;iBAwBc,8BACd,uBACC;;;;;iBAQa;;;;;;iBAUA,yBAAyB;;;;;iBAQzB,wBAAwB;;;;;;KCzE5B,oBAAoB;;;;;;;;iBCkBhB,oBAAoB;;;;;iBAUpB;;;;;;iBASA,YAAY;;;;;iBASZ,uBAAuB;;;;;;UC9CtB;EACf;EACA;;KAGU,yBAAyB;;;;;;;;iBCgBrB,yBAAyB,eAAe;;;;;;iBASxC,yBAAyB;;;;;iBASzB;;;;;;iBASA,qBAAqB;;;;;iBAQrB,4BAA4B;;;;;;UCxD3B;EACf;EACA;EACA;EACA;;;;;;EAMA;;KAGU,wBAAwB;;;;;;;;UASnB;EACf;EACA;EACA;;KAGU,wBAAwB;;;;;;;;cCbvB,uBAA2C;;iBAsBxC,oCACd,oBACA,eACC;;iBAKa,8BACd,kBACA,eACC;;iBAKa,oCACd,oBACA;;iBAMc,8BACd,kBACA;;;;;;;iBAWc,oCACd,cACA;;iBAoBc,2BAA2B;;iBAK3B,yBAAyB;;iBAKzB,0BAA0B,oBAAoB;;iBAK9C,wBAAwB,kBAAkB;;;;;;;;iBAW1C,yBAAyB,oBAAoB;;iBAa7C,2BAA2B;;;;;;UCvI1B;EACf;EACA;EACA;EACA;;KAGU,uBAAuB;;;;;;;;iBC2BnB,wBAAwB;;iBAWxB,uBAAuB;;iBAKvB;;iBAKA,0BAA0B"}
+{"version":3,"file":"index.d.ts","names":[],"sources":["../src/cci/types.ts","../src/cci/index.ts","../src/nist/normalize.ts","../src/nist/crosswalk.ts","../src/nist/types.ts","../src/nist/index.ts","../src/owasp/types.ts","../src/owasp/index.ts","../src/cwe/types.ts","../src/cwe/index.ts","../src/checkov/types.ts","../src/checkov/index.ts","../src/nessus/types.ts","../src/nessus/index.ts","../src/nikto/types.ts","../src/nikto/index.ts","../src/scoutsuite/types.ts","../src/scoutsuite/index.ts","../src/awsconfig/types.ts","../src/awsconfig/index.ts","../src/hipcheck/types.ts","../src/hipcheck/index.ts"],"mappings":";;;;UAGiB;;EAEf;;EAEA;;;;;KAMU,cAAc,eAAe;;;;;KAM7B,kBAAkB;;;;;;;;;;;;;;;;;;wBCUd,kBAAkB;;;;;;;;;;;;;wBAqBlB,mBAAmB;;;;;;;;;;;;wBAqBnB;;;;;;;;;;;;;;wBAiBA,UAAU;;;;;;;;;;;;;;wBA8BV,mBAAmB;;;;;;;;;;;;;;wBAqBnB,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;wBC1GV,gBAAgB;;;;;;;;;;;;;;;;;KChBpB;UASK;EACf;EACA;EACA,UAAU;;;;;EAKV;;EAEA;;;;;;;;;;wBA4Dc,qBACd,iBACA,cACA,aACC;;;;;;;;wBA8Ba,sBACd,oBACA,cACA;EACG;EAAsB,UAAU;;;;;;wBAwBrB,eAAe;;;;;;;;;;;wBAoBf,uBACd,oBACA,mBACA;;;;;;KClLU,mBAAmB;;;;;;;;;;;;;qBC6BlB;;qBAWA;;wBAKG;;;;;wBAQA,uBAAuB;;wBAUvB;;wBAOA;;;;;;wBASA,cAAc;;;;;;;;;;;;;;;;;wBAoBd,mBACd,gBACA;;;;;;;;;;;;;;wBAmBc,cAAc;;;;;;;;;;;;;;;;;wBAoBd,WAAW,gBAAgB;;;;;;;;;;;;;;;;;;;wBAuB3B,cACd,gBACA;;;;;;;;;;;qBAiCW;;qBAGA;;qBAGA;;qBAGA;;;;;;UC9MI;EACf;EACA;EACA;EACA;EACA;;KAGU,oBAAoB;;;;;;;;;;;;;;;wBCoBhB,oBAAoB,kBAAkB;;;;;;;;;;;;;wBAoBtC,oBAAoB;;;;;;;;;;;;;wBAiBpB,aAAa;;;;;;;;;;;;wBAgBb;;;;;;;;;;;;;;wBAiBA,YAAY;;;;;;;;;;;;wBAmBZ,uBAAuB;;;;;;UCrHtB;EACf;EACA;EACA;EACA;EACA;;KAGU,kBAAkB;;;;wBCiBd,kBACd,eACA,eACC;;wBAKa,kBAAkB,eAAe;;wBAKjC,WAAW,eAAe;;wBAK1B,aAAa;;wBAKb,UAAU,eAAe;;wBAKzB,qBAAqB;;;;;;UCrDpB;EACf;EACA;;KAGU,yBAAyB,eAAe;UAEnC;EACf;IACE;IACA;IACA;IACA;;EAEF;EACA;EACA;;UAGe,8BAA8B;EAC7C;EACA,UAAU;;;;;;;;;wBCJI,yBACd,iBACA,eACC;;wBAUa,mBAAmB;;wBAKnB;;wBAKA,+BAA+B;;;;;;UCxC9B;EACf;EACA;EACA;;KAGU,qBAAqB;;;;;;;;;wBCajB,qBACd,sBACA;;;;;;wBAwBc,8BACd,uBACC;;;;;wBAQa;;;;;;wBAUA,yBAAyB;;;;;wBAQzB,wBAAwB;;;;;;KCzE5B,oBAAoB;;;;;;;;wBCkBhB,oBAAoB;;;;;wBAUpB;;;;;;wBASA,YAAY;;;;;wBASZ,uBAAuB;;;;;;UC9CtB;EACf;EACA;;KAGU,yBAAyB;;;;;;;;wBCgBrB,yBAAyB,eAAe;;;;;;wBASxC,yBAAyB;;;;;wBASzB;;;;;;wBASA,qBAAqB;;;;;wBAQrB,4BAA4B;;;;;;UCxD3B;EACf;EACA;EACA;EACA;;;;;;EAMA;;KAGU,wBAAwB;;;;;;;;UASnB;EACf;EACA;EACA;;KAGU,wBAAwB;;;;;;;;qBCbvB,uBAA2C;;wBAsBxC,oCACd,oBACA,eACC;;wBAKa,8BACd,kBACA,eACC;;wBAKa,oCACd,oBACA;;wBAMc,8BACd,kBACA;;;;;;;wBAWc,oCACd,cACA;;wBAoBc,2BAA2B;;wBAK3B,yBAAyB;;wBAKzB,0BAA0B,oBAAoB;;wBAK9C,wBAAwB,kBAAkB;;;;;;;;wBAW1C,yBAAyB,oBAAoB;;wBAa7C,2BAA2B;;;;;;UCvI1B;EACf;EACA;EACA;EACA;;KAGU,uBAAuB;;;;;;;;wBC2BnB,wBAAwB;;wBAWxB,uBAAuB;;wBAKvB;;wBAKA,0BAA0B"}