@paretools/security 0.11.0 → 0.13.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/index.js +5 -6
- package/dist/index.js.map +1 -1
- package/dist/lib/formatters.d.ts +18 -15
- package/dist/lib/formatters.d.ts.map +1 -1
- package/dist/lib/formatters.js +60 -12
- package/dist/lib/formatters.js.map +1 -1
- package/dist/lib/parsers.d.ts +4 -4
- package/dist/lib/parsers.d.ts.map +1 -1
- package/dist/lib/parsers.js.map +1 -1
- package/dist/schemas/index.d.ts +52 -29
- package/dist/schemas/index.d.ts.map +1 -1
- package/dist/schemas/index.js +16 -21
- package/dist/schemas/index.js.map +1 -1
- package/dist/tools/gitleaks.d.ts.map +1 -1
- package/dist/tools/gitleaks.js +3 -3
- package/dist/tools/gitleaks.js.map +1 -1
- package/dist/tools/index.d.ts +3 -2
- package/dist/tools/index.d.ts.map +1 -1
- package/dist/tools/index.js +34 -9
- package/dist/tools/index.js.map +1 -1
- package/dist/tools/semgrep.d.ts.map +1 -1
- package/dist/tools/semgrep.js +3 -3
- package/dist/tools/semgrep.js.map +1 -1
- package/dist/tools/trivy.d.ts.map +1 -1
- package/dist/tools/trivy.js +3 -3
- package/dist/tools/trivy.js.map +1 -1
- package/package.json +4 -4
package/dist/index.js
CHANGED
|
@@ -1,11 +1,10 @@
|
|
|
1
1
|
#!/usr/bin/env node
|
|
2
|
-
import {
|
|
3
|
-
import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
|
|
2
|
+
import { createServer } from "@paretools/shared";
|
|
4
3
|
import { registerAllTools } from "./tools/index.js";
|
|
5
|
-
|
|
4
|
+
await createServer({
|
|
5
|
+
name: "@paretools/security",
|
|
6
|
+
version: "0.1.0",
|
|
6
7
|
instructions: "Structured security scanning operations (trivy, semgrep, gitleaks). Returns typed JSON with vulnerability and finding data.",
|
|
8
|
+
registerTools: registerAllTools,
|
|
7
9
|
});
|
|
8
|
-
registerAllTools(server);
|
|
9
|
-
const transport = new StdioServerTransport();
|
|
10
|
-
await server.connect(transport);
|
|
11
10
|
//# sourceMappingURL=index.js.map
|
package/dist/index.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEpD,MAAM,YAAY,CAAC;IACjB,IAAI,EAAE,qBAAqB;IAC3B,OAAO,EAAE,OAAO;IAChB,YAAY,EACV,6HAA6H;IAC/H,aAAa,EAAE,gBAAgB;CAChC,CAAC,CAAC"}
|
package/dist/lib/formatters.d.ts
CHANGED
|
@@ -1,12 +1,17 @@
|
|
|
1
|
-
import type { TrivyScanResult, SemgrepScanResult, GitleaksScanResult } from "../schemas/index.js";
|
|
1
|
+
import type { TrivyScanResult, TrivyScanResultInternal, SemgrepScanResult, SemgrepScanResultInternal, GitleaksScanResult, GitleaksScanResultInternal } from "../schemas/index.js";
|
|
2
|
+
/** Strips Internal-only fields from Trivy scan result for structuredContent. */
|
|
3
|
+
export declare function schemaTrivyScanMap(data: TrivyScanResultInternal): TrivyScanResult;
|
|
4
|
+
/** Strips Internal-only fields from Semgrep scan result for structuredContent. */
|
|
5
|
+
export declare function schemaSemgrepScanMap(data: SemgrepScanResultInternal): SemgrepScanResult;
|
|
6
|
+
/** Strips Internal-only fields from Gitleaks scan result for structuredContent. */
|
|
7
|
+
export declare function schemaGitleaksScanMap(data: GitleaksScanResultInternal): GitleaksScanResult;
|
|
2
8
|
/** Formats a Trivy scan result into human-readable text. */
|
|
3
|
-
export declare function formatTrivyScan(data:
|
|
4
|
-
/** Compact scan result: summary
|
|
9
|
+
export declare function formatTrivyScan(data: TrivyScanResultInternal): string;
|
|
10
|
+
/** Compact scan result: summary only, no individual vulnerabilities (schema-compatible). */
|
|
5
11
|
export interface TrivyScanCompact {
|
|
6
12
|
[key: string]: unknown;
|
|
7
13
|
target: string;
|
|
8
14
|
scanType: "image" | "fs" | "config";
|
|
9
|
-
totalVulnerabilities: number;
|
|
10
15
|
summary: {
|
|
11
16
|
critical: number;
|
|
12
17
|
high: number;
|
|
@@ -15,30 +20,28 @@ export interface TrivyScanCompact {
|
|
|
15
20
|
unknown: number;
|
|
16
21
|
};
|
|
17
22
|
}
|
|
18
|
-
export declare function compactTrivyScanMap(data:
|
|
23
|
+
export declare function compactTrivyScanMap(data: TrivyScanResultInternal): TrivyScanCompact;
|
|
19
24
|
export declare function formatTrivyScanCompact(data: TrivyScanCompact): string;
|
|
20
25
|
/** Formats a Semgrep scan result into human-readable text. */
|
|
21
|
-
export declare function formatSemgrepScan(data:
|
|
22
|
-
/** Compact scan result: summary
|
|
26
|
+
export declare function formatSemgrepScan(data: SemgrepScanResultInternal): string;
|
|
27
|
+
/** Compact scan result: summary only, no individual findings (schema-compatible). */
|
|
23
28
|
export interface SemgrepScanCompact {
|
|
24
29
|
[key: string]: unknown;
|
|
25
|
-
totalFindings: number;
|
|
26
30
|
summary: {
|
|
27
31
|
error: number;
|
|
28
32
|
warning: number;
|
|
29
33
|
info: number;
|
|
30
34
|
};
|
|
31
|
-
config: string;
|
|
32
35
|
}
|
|
33
|
-
export declare function compactSemgrepScanMap(data:
|
|
36
|
+
export declare function compactSemgrepScanMap(data: SemgrepScanResultInternal): SemgrepScanCompact;
|
|
34
37
|
export declare function formatSemgrepScanCompact(data: SemgrepScanCompact): string;
|
|
35
38
|
/** Formats a Gitleaks scan result into human-readable text. */
|
|
36
|
-
export declare function formatGitleaksScan(data:
|
|
37
|
-
/** Compact scan result:
|
|
39
|
+
export declare function formatGitleaksScan(data: GitleaksScanResultInternal): string;
|
|
40
|
+
/** Compact scan result: empty projection, no findings (schema-compatible).
|
|
41
|
+
* GitleaksScanResultSchema only has `findings`, which compact mode drops. */
|
|
38
42
|
export interface GitleaksScanCompact {
|
|
39
43
|
[key: string]: unknown;
|
|
40
|
-
totalFindings: number;
|
|
41
44
|
}
|
|
42
|
-
export declare function compactGitleaksScanMap(
|
|
43
|
-
export declare function formatGitleaksScanCompact(
|
|
45
|
+
export declare function compactGitleaksScanMap(_data: GitleaksScanResultInternal): GitleaksScanCompact;
|
|
46
|
+
export declare function formatGitleaksScanCompact(_data: GitleaksScanCompact): string;
|
|
44
47
|
//# sourceMappingURL=formatters.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"formatters.d.ts","sourceRoot":"","sources":["../../src/lib/formatters.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,
|
|
1
|
+
{"version":3,"file":"formatters.d.ts","sourceRoot":"","sources":["../../src/lib/formatters.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,eAAe,EACf,uBAAuB,EACvB,iBAAiB,EACjB,yBAAyB,EACzB,kBAAkB,EAClB,0BAA0B,EAC3B,MAAM,qBAAqB,CAAC;AAI7B,gFAAgF;AAChF,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,uBAAuB,GAAG,eAAe,CAcjF;AAED,kFAAkF;AAClF,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,yBAAyB,GAAG,iBAAiB,CAcvF;AAED,mFAAmF;AACnF,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,0BAA0B,GAAG,kBAAkB,CAY1F;AAID,4DAA4D;AAC5D,wBAAgB,eAAe,CAAC,IAAI,EAAE,uBAAuB,GAAG,MAAM,CAwBrE;AAID,4FAA4F;AAC5F,MAAM,WAAW,gBAAgB;IAC/B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,OAAO,GAAG,IAAI,GAAG,QAAQ,CAAC;IACpC,OAAO,EAAE;QACP,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC;QACf,GAAG,EAAE,MAAM,CAAC;QACZ,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;CACH;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,uBAAuB,GAAG,gBAAgB,CAMnF;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,gBAAgB,GAAG,MAAM,CAYrE;AAID,8DAA8D;AAC9D,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,yBAAyB,GAAG,MAAM,CA+BzE;AAID,qFAAqF;AACrF,MAAM,WAAW,kBAAkB;IACjC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;IACvB,OAAO,EAAE;QACP,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;CACH;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,yBAAyB,GAAG,kBAAkB,CAIzF;AAED,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,kBAAkB,GAAG,MAAM,CAOzE;AAID,+DAA+D;AAC/D,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,0BAA0B,GAAG,MAAM,CAuB3E;AAID;6EAC6E;AAC7E,MAAM,WAAW,mBAAmB;IAClC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,0BAA0B,GAAG,mBAAmB,CAE7F;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,mBAAmB,GAAG,MAAM,CAE5E"}
|
package/dist/lib/formatters.js
CHANGED
|
@@ -1,3 +1,50 @@
|
|
|
1
|
+
// -- Schema maps (strip Internal-only fields for structuredContent) -----------
|
|
2
|
+
/** Strips Internal-only fields from Trivy scan result for structuredContent. */
|
|
3
|
+
export function schemaTrivyScanMap(data) {
|
|
4
|
+
return {
|
|
5
|
+
target: data.target,
|
|
6
|
+
scanType: data.scanType,
|
|
7
|
+
vulnerabilities: data.vulnerabilities?.map((v) => ({
|
|
8
|
+
id: v.id,
|
|
9
|
+
severity: v.severity,
|
|
10
|
+
package: v.package,
|
|
11
|
+
installedVersion: v.installedVersion,
|
|
12
|
+
fixedVersion: v.fixedVersion,
|
|
13
|
+
cvssScore: v.cvssScore,
|
|
14
|
+
})),
|
|
15
|
+
summary: data.summary,
|
|
16
|
+
};
|
|
17
|
+
}
|
|
18
|
+
/** Strips Internal-only fields from Semgrep scan result for structuredContent. */
|
|
19
|
+
export function schemaSemgrepScanMap(data) {
|
|
20
|
+
return {
|
|
21
|
+
findings: data.findings?.map((f) => ({
|
|
22
|
+
ruleId: f.ruleId,
|
|
23
|
+
path: f.path,
|
|
24
|
+
startLine: f.startLine,
|
|
25
|
+
endLine: f.endLine,
|
|
26
|
+
message: f.message,
|
|
27
|
+
severity: f.severity,
|
|
28
|
+
cwe: f.cwe,
|
|
29
|
+
})),
|
|
30
|
+
errors: data.errors,
|
|
31
|
+
summary: data.summary,
|
|
32
|
+
};
|
|
33
|
+
}
|
|
34
|
+
/** Strips Internal-only fields from Gitleaks scan result for structuredContent. */
|
|
35
|
+
export function schemaGitleaksScanMap(data) {
|
|
36
|
+
return {
|
|
37
|
+
findings: data.findings?.map((f) => ({
|
|
38
|
+
ruleID: f.ruleID,
|
|
39
|
+
match: f.match,
|
|
40
|
+
secret: f.secret,
|
|
41
|
+
file: f.file,
|
|
42
|
+
startLine: f.startLine,
|
|
43
|
+
endLine: f.endLine,
|
|
44
|
+
commit: f.commit,
|
|
45
|
+
})),
|
|
46
|
+
};
|
|
47
|
+
}
|
|
1
48
|
// -- Full formatters ----------------------------------------------------------
|
|
2
49
|
/** Formats a Trivy scan result into human-readable text. */
|
|
3
50
|
export function formatTrivyScan(data) {
|
|
@@ -22,13 +69,17 @@ export function compactTrivyScanMap(data) {
|
|
|
22
69
|
return {
|
|
23
70
|
target: data.target,
|
|
24
71
|
scanType: data.scanType,
|
|
25
|
-
totalVulnerabilities: data.totalVulnerabilities,
|
|
26
72
|
summary: data.summary,
|
|
27
73
|
};
|
|
28
74
|
}
|
|
29
75
|
export function formatTrivyScanCompact(data) {
|
|
76
|
+
const total = data.summary.critical +
|
|
77
|
+
data.summary.high +
|
|
78
|
+
data.summary.medium +
|
|
79
|
+
data.summary.low +
|
|
80
|
+
data.summary.unknown;
|
|
30
81
|
return (`Trivy ${data.scanType} scan: ${data.target} -- ` +
|
|
31
|
-
`${
|
|
82
|
+
`${total} vulnerabilities ` +
|
|
32
83
|
`(${data.summary.critical}C/${data.summary.high}H/${data.summary.medium}M/${data.summary.low}L)`);
|
|
33
84
|
}
|
|
34
85
|
// -- Semgrep formatters -------------------------------------------------------
|
|
@@ -61,14 +112,13 @@ export function formatSemgrepScan(data) {
|
|
|
61
112
|
}
|
|
62
113
|
export function compactSemgrepScanMap(data) {
|
|
63
114
|
return {
|
|
64
|
-
totalFindings: data.totalFindings,
|
|
65
115
|
summary: data.summary,
|
|
66
|
-
config: data.config,
|
|
67
116
|
};
|
|
68
117
|
}
|
|
69
118
|
export function formatSemgrepScanCompact(data) {
|
|
70
|
-
|
|
71
|
-
|
|
119
|
+
const total = data.summary.error + data.summary.warning + data.summary.info;
|
|
120
|
+
return (`Semgrep scan -- ` +
|
|
121
|
+
`${total} findings ` +
|
|
72
122
|
`(${data.summary.error}E/${data.summary.warning}W/${data.summary.info}I)`);
|
|
73
123
|
}
|
|
74
124
|
// -- Gitleaks formatters ------------------------------------------------------
|
|
@@ -92,12 +142,10 @@ export function formatGitleaksScan(data) {
|
|
|
92
142
|
}
|
|
93
143
|
return lines.join("\n");
|
|
94
144
|
}
|
|
95
|
-
export function compactGitleaksScanMap(
|
|
96
|
-
return {
|
|
97
|
-
totalFindings: data.totalFindings,
|
|
98
|
-
};
|
|
145
|
+
export function compactGitleaksScanMap(_data) {
|
|
146
|
+
return {};
|
|
99
147
|
}
|
|
100
|
-
export function formatGitleaksScanCompact(
|
|
101
|
-
return `Gitleaks scan
|
|
148
|
+
export function formatGitleaksScanCompact(_data) {
|
|
149
|
+
return `Gitleaks scan: compact summary`;
|
|
102
150
|
}
|
|
103
151
|
//# sourceMappingURL=formatters.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"formatters.js","sourceRoot":"","sources":["../../src/lib/formatters.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"formatters.js","sourceRoot":"","sources":["../../src/lib/formatters.ts"],"names":[],"mappings":"AASA,gFAAgF;AAEhF,gFAAgF;AAChF,MAAM,UAAU,kBAAkB,CAAC,IAA6B;IAC9D,OAAO;QACL,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACjD,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,gBAAgB,EAAE,CAAC,CAAC,gBAAgB;YACpC,YAAY,EAAE,CAAC,CAAC,YAAY;YAC5B,SAAS,EAAE,CAAC,CAAC,SAAS;SACvB,CAAC,CAAC;QACH,OAAO,EAAE,IAAI,CAAC,OAAO;KACtB,CAAC;AACJ,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,oBAAoB,CAAC,IAA+B;IAClE,OAAO;QACL,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACnC,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,GAAG,EAAE,CAAC,CAAC,GAAG;SACX,CAAC,CAAC;QACH,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,OAAO,EAAE,IAAI,CAAC,OAAO;KACtB,CAAC;AACJ,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,qBAAqB,CAAC,IAAgC;IACpE,OAAO;QACL,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACnC,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,MAAM,EAAE,CAAC,CAAC,MAAM;SACjB,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED,gFAAgF;AAEhF,4DAA4D;AAC5D,MAAM,UAAU,eAAe,CAAC,IAA6B;IAC3D,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,QAAQ,UAAU,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1D,KAAK,CAAC,IAAI,CACR,SAAS,IAAI,CAAC,oBAAoB,oBAAoB;QACpD,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,cAAc,IAAI,CAAC,OAAO,CAAC,IAAI,SAAS;QAChE,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,YAAY,IAAI,CAAC,OAAO,CAAC,GAAG,QAAQ;QAC1D,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,UAAU,CACpC,CAAC;IAEF,IAAI,CAAC,IAAI,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,eAAe,IAAI,EAAE,EAAE,CAAC;YAC3C,MAAM,KAAK,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5D,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,GAAG,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,KAAK,CAAC,IAAI,CACR,MAAM,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,gBAAgB,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,EAAE,CACvF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAkBD,MAAM,UAAU,mBAAmB,CAAC,IAA6B;IAC/D,OAAO;QACL,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,OAAO,EAAE,IAAI,CAAC,OAAO;KACtB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,IAAsB;IAC3D,MAAM,KAAK,GACT,IAAI,CAAC,OAAO,CAAC,QAAQ;QACrB,IAAI,CAAC,OAAO,CAAC,IAAI;QACjB,IAAI,CAAC,OAAO,CAAC,MAAM;QACnB,IAAI,CAAC,OAAO,CAAC,GAAG;QAChB,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;IACvB,OAAO,CACL,SAAS,IAAI,CAAC,QAAQ,UAAU,IAAI,CAAC,MAAM,MAAM;QACjD,GAAG,KAAK,mBAAmB;QAC3B,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,CACjG,CAAC;AACJ,CAAC;AAED,gFAAgF;AAEhF,8DAA8D;AAC9D,MAAM,UAAU,iBAAiB,CAAC,IAA+B;IAC/D,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,KAAK,CAAC,IAAI,CAAC,yBAAyB,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;IACpD,KAAK,CAAC,IAAI,CACR,SAAS,IAAI,CAAC,aAAa,aAAa;QACtC,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,WAAW,IAAI,CAAC,OAAO,CAAC,OAAO,YAAY;QAChE,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,OAAO,CAC9B,CAAC;IAEF,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;YACpC,MAAM,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACtD,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/E,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,OAAO,GAAG,QAAQ,EAAE,CAAC,CAAC;YAC9F,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,EAAE,CAAC,CAAC;QAClD,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;YACpC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9C,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,GAAG,GAAG,CAAC,OAAO,GAAG,IAAI,EAAE,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAcD,MAAM,UAAU,qBAAqB,CAAC,IAA+B;IACnE,OAAO;QACL,OAAO,EAAE,IAAI,CAAC,OAAO;KACtB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,IAAwB;IAC/D,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;IAC5E,OAAO,CACL,kBAAkB;QAClB,GAAG,KAAK,YAAY;QACpB,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC,OAAO,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAC1E,CAAC;AACJ,CAAC;AAED,gFAAgF;AAEhF,+DAA+D;AAC/D,MAAM,UAAU,kBAAkB,CAAC,IAAgC;IACjE,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,KAAK,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;IAC7C,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,aAAa,YAAY,CAAC,CAAC;IACpD,IAAI,IAAI,CAAC,OAAO,EAAE,UAAU,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChF,KAAK,CAAC,IAAI,CACR,gBAAgB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC;aACpD,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,IAAI,KAAK,EAAE,CAAC;aAC1C,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;YACpC,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACpE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,OAAO,GAAG,MAAM,EAAE,CAAC,CAAC;YAC7E,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,eAAe,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAUD,MAAM,UAAU,sBAAsB,CAAC,KAAiC;IACtE,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAA0B;IAClE,OAAO,gCAAgC,CAAC;AAC1C,CAAC"}
|
package/dist/lib/parsers.d.ts
CHANGED
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
import type {
|
|
1
|
+
import type { TrivyScanResultInternal, SemgrepScanResultInternal, GitleaksScanResultInternal } from "../schemas/index.js";
|
|
2
2
|
/**
|
|
3
3
|
* Parses raw Trivy JSON output into a structured TrivyScanResult.
|
|
4
4
|
*
|
|
@@ -6,14 +6,14 @@ import type { TrivyScanResult, SemgrepScanResult, GitleaksScanResult } from "../
|
|
|
6
6
|
* a `Target` and `Vulnerabilities` array. We flatten all vulnerabilities
|
|
7
7
|
* across all results into a single list.
|
|
8
8
|
*/
|
|
9
|
-
export declare function parseTrivyJson(jsonStr: string, target: string, scanType: "image" | "fs" | "config"):
|
|
9
|
+
export declare function parseTrivyJson(jsonStr: string, target: string, scanType: "image" | "fs" | "config"): TrivyScanResultInternal;
|
|
10
10
|
/**
|
|
11
11
|
* Parses raw Semgrep JSON output into a structured SemgrepScanResult.
|
|
12
12
|
*
|
|
13
13
|
* Semgrep's JSON output has a `results` array containing findings,
|
|
14
14
|
* each with check_id, path, start/end positions, and extra metadata.
|
|
15
15
|
*/
|
|
16
|
-
export declare function parseSemgrepJson(jsonStr: string, config: string):
|
|
16
|
+
export declare function parseSemgrepJson(jsonStr: string, config: string): SemgrepScanResultInternal;
|
|
17
17
|
/**
|
|
18
18
|
* Parses raw Gitleaks JSON output into a structured GitleaksScanResult.
|
|
19
19
|
*
|
|
@@ -21,5 +21,5 @@ export declare function parseSemgrepJson(jsonStr: string, config: string): Semgr
|
|
|
21
21
|
* RuleID, Description, Match, Secret, File, StartLine, EndLine,
|
|
22
22
|
* Commit, Author, and Date fields.
|
|
23
23
|
*/
|
|
24
|
-
export declare function parseGitleaksJson(jsonStr: string):
|
|
24
|
+
export declare function parseGitleaksJson(jsonStr: string): GitleaksScanResultInternal;
|
|
25
25
|
//# sourceMappingURL=parsers.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"parsers.d.ts","sourceRoot":"","sources":["../../src/lib/parsers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,
|
|
1
|
+
{"version":3,"file":"parsers.d.ts","sourceRoot":"","sources":["../../src/lib/parsers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,uBAAuB,EAGvB,yBAAyB,EAGzB,0BAA0B,EAE3B,MAAM,qBAAqB,CAAC;AAkC7B;;;;;;GAMG;AACH,wBAAgB,cAAc,CAC5B,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,OAAO,GAAG,IAAI,GAAG,QAAQ,GAClC,uBAAuB,CA2DzB;AAiFD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,yBAAyB,CAgD3F;AA2ED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,0BAA0B,CAwC7E"}
|
package/dist/lib/parsers.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"parsers.js","sourceRoot":"","sources":["../../src/lib/parsers.ts"],"names":[],"mappings":"AA2CA;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAC5B,OAAe,EACf,MAAc,EACd,QAAmC;IAEnC,IAAI,MAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAoB,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,MAAM;YACN,QAAQ;YACR,eAAe,EAAE,EAAE;YACnB,OAAO,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE;YAChE,oBAAoB,EAAE,CAAC;SACxB,CAAC;IACJ,CAAC;IAED,MAAM,eAAe,
|
|
1
|
+
{"version":3,"file":"parsers.js","sourceRoot":"","sources":["../../src/lib/parsers.ts"],"names":[],"mappings":"AA2CA;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAC5B,OAAe,EACf,MAAc,EACd,QAAmC;IAEnC,IAAI,MAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAoB,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,MAAM;YACN,QAAQ;YACR,eAAe,EAAE,EAAE;YACnB,OAAO,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE;YAChE,oBAAoB,EAAE,CAAC;SACxB,CAAC;IACJ,CAAC;IAED,MAAM,eAAe,GAAiC,EAAE,CAAC;IAEzD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACpC,iCAAiC;YACjC,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;gBAC3B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;oBACvC,MAAM,SAAS,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC;oBACtC,eAAe,CAAC,IAAI,CAAC;wBACnB,EAAE,EAAE,CAAC,CAAC,eAAe,IAAI,SAAS;wBAClC,QAAQ,EAAE,iBAAiB,CAAC,CAAC,CAAC,QAAQ,CAAC;wBACvC,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,SAAS;wBAC/B,gBAAgB,EAAE,CAAC,CAAC,gBAAgB,IAAI,SAAS;wBACjD,YAAY,EAAE,CAAC,CAAC,YAAY,IAAI,SAAS;wBACzC,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,SAAS;wBAC3B,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBAClD,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,0CAA0C;YAC1C,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;gBAC7B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;oBACzC,eAAe,CAAC,IAAI,CAAC;wBACnB,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,SAAS;wBACrB,QAAQ,EAAE,iBAAiB,CAAC,CAAC,CAAC,QAAQ,CAAC;wBACvC,OAAO,EAAE,CAAC,CAAC,IAAI,IAAI,QAAQ;wBAC3B,gBAAgB,EAAE,KAAK;wBACvB,YAAY,EAAE,SAAS;wBACvB,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,OAAO,IAAI,SAAS;qBACzC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,cAAc,CAAC,eAAe,CAAC,CAAC;IAEhD,OAAO;QACL,MAAM;QACN,QAAQ;QACR,eAAe;QACf,OAAO;QACP,oBAAoB,EAAE,eAAe,CAAC,MAAM;KAC7C,CAAC;AACJ,CAAC;AAED,wEAAwE;AACxE,SAAS,iBAAiB,CAAC,QAA4B;IACrD,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChC,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IACrC,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,mFAAmF;AACnF,SAAS,gBAAgB,CAAC,IAAmB;IAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACvB,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1E,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC9B,CAAC;aAAM,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7E,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7D,CAAC;AAED,uEAAuE;AACvE,SAAS,cAAc,CAAC,eAA6C;IACnE,MAAM,OAAO,GAAyB,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IAC9F,KAAK,MAAM,CAAC,IAAI,eAAe,EAAE,CAAC;QAChC,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC;YACnB,KAAK,UAAU;gBACb,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACnB,MAAM;YACR,KAAK,MAAM;gBACT,OAAO,CAAC,IAAI,EAAE,CAAC;gBACf,MAAM;YACR,KAAK,QAAQ;gBACX,OAAO,CAAC,MAAM,EAAE,CAAC;gBACjB,MAAM;YACR,KAAK,KAAK;gBACR,OAAO,CAAC,GAAG,EAAE,CAAC;gBACd,MAAM;YACR;gBACE,OAAO,CAAC,OAAO,EAAE,CAAC;gBAClB,MAAM;QACV,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAiCD;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAe,EAAE,MAAc;IAC9D,IAAI,MAAyB,CAAC;IAC9B,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAsB,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,aAAa,EAAE,CAAC;YAChB,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE;YAC1C,MAAM;SACP,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAA6B,EAAE,CAAC;IAE9C,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YAC/B,MAAM,GAAG,GAAG,YAAY,CAAC,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;YACjD,QAAQ,CAAC,IAAI,CAAC;gBACZ,MAAM,EAAE,CAAC,CAAC,QAAQ,IAAI,SAAS;gBAC/B,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,SAAS;gBACzB,SAAS,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,IAAI,CAAC;gBAC7B,OAAO,EAAE,CAAC,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC;gBACzB,OAAO,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,IAAI,EAAE;gBAC/B,QAAQ,EAAE,wBAAwB,CAAC,CAAC,CAAC,KAAK,EAAE,QAAQ,CAAC;gBACrD,QAAQ,EAAE,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,IAAI,SAAS;gBAClD,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACxB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IAEhD,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;SACjC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACb,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,uBAAuB;QAC/C,IAAI,EAAE,GAAG,CAAC,IAAI;KACf,CAAC,CAAC;SACF,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAE3C,OAAO;QACL,aAAa,EAAE,QAAQ,CAAC,MAAM;QAC9B,QAAQ;QACR,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxC,OAAO;QACP,MAAM;KACP,CAAC;AACJ,CAAC;AAED,0EAA0E;AAC1E,SAAS,wBAAwB,CAAC,QAA4B;IAC5D,IAAI,CAAC,QAAQ;QAAE,OAAO,MAAM,CAAC;IAC7B,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IACrC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/D,OAAO,KAAK,CAAC;AACf,CAAC;AAED,yDAAyD;AACzD,SAAS,YAAY,CAAC,WAA0C;IAC9D,IAAI,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACpF,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAChD,CAAC;IACD,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,WAAW;aACvB,KAAK,CAAC,QAAQ,CAAC;aACf,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC/B,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAChD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,wEAAwE;AACxE,SAAS,qBAAqB,CAAC,QAAkC;IAC/D,MAAM,OAAO,GAA2B,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAC1E,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC;YACnB,KAAK,OAAO;gBACV,OAAO,CAAC,KAAK,EAAE,CAAC;gBAChB,MAAM;YACR,KAAK,SAAS;gBACZ,OAAO,CAAC,OAAO,EAAE,CAAC;gBAClB,MAAM;YACR,KAAK,MAAM;gBACT,OAAO,CAAC,IAAI,EAAE,CAAC;gBACf,MAAM;YACR;gBACE,iCAAiC;gBACjC,OAAO,CAAC,IAAI,EAAE,CAAC;gBACf,MAAM;QACV,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAkBD;;;;GAIG;AACH,SAAS,YAAY,CAAC,MAAc;IAClC,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACrC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AACvD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,IAAI,MAA6B,CAAC;IAClC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAY,CAAC;QAC3C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,OAAO,EAAE,aAAa,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3E,CAAC;QACD,MAAM,GAAG,GAA4B,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,aAAa,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE,EAAE,CAAC;IAC3E,CAAC;IAED,MAAM,QAAQ,GAA8B,EAAE,CAAC;IAC/C,MAAM,UAAU,GAA2B,EAAE,CAAC;IAE9C,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,IAAI,SAAS,CAAC;QACrC,QAAQ,CAAC,IAAI,CAAC;YACZ,MAAM;YACN,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,EAAE;YAChC,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,EAAE;YACpB,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC;YACpC,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,SAAS;YACzB,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,CAAC;YAC3B,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,CAAC;YACvB,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,EAAE;YACtB,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,EAAE;YACtB,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE;SACnB,CAAC,CAAC;QACH,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IACrD,CAAC;IAED,OAAO;QACL,aAAa,EAAE,QAAQ,CAAC,MAAM;QAC9B,QAAQ;QACR,OAAO,EAAE;YACP,aAAa,EAAE,QAAQ,CAAC,MAAM;YAC9B,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9D;KACF,CAAC;AACJ,CAAC"}
|
package/dist/schemas/index.d.ts
CHANGED
|
@@ -1,12 +1,12 @@
|
|
|
1
1
|
import { z } from "zod";
|
|
2
|
-
/** Zod schema for a single vulnerability entry from Trivy output.
|
|
2
|
+
/** Zod schema for a single vulnerability entry from Trivy output.
|
|
3
|
+
* Moved to formatter: title (display-only). */
|
|
3
4
|
export declare const TrivyVulnerabilitySchema: z.ZodObject<{
|
|
4
5
|
id: z.ZodString;
|
|
5
6
|
severity: z.ZodString;
|
|
6
7
|
package: z.ZodString;
|
|
7
8
|
installedVersion: z.ZodString;
|
|
8
9
|
fixedVersion: z.ZodOptional<z.ZodString>;
|
|
9
|
-
title: z.ZodOptional<z.ZodString>;
|
|
10
10
|
cvssScore: z.ZodOptional<z.ZodNumber>;
|
|
11
11
|
}, z.core.$strip>;
|
|
12
12
|
export type TrivyVulnerability = z.infer<typeof TrivyVulnerabilitySchema>;
|
|
@@ -19,7 +19,8 @@ export declare const TrivySeveritySummarySchema: z.ZodObject<{
|
|
|
19
19
|
unknown: z.ZodNumber;
|
|
20
20
|
}, z.core.$strip>;
|
|
21
21
|
export type TrivySeveritySummary = z.infer<typeof TrivySeveritySummarySchema>;
|
|
22
|
-
/** Zod schema for the structured Trivy scan result.
|
|
22
|
+
/** Zod schema for the structured Trivy scan result.
|
|
23
|
+
* Removed derivable: totalVulnerabilities (= vulnerabilities.length). */
|
|
23
24
|
export declare const TrivyScanResultSchema: z.ZodObject<{
|
|
24
25
|
target: z.ZodString;
|
|
25
26
|
scanType: z.ZodEnum<{
|
|
@@ -33,7 +34,6 @@ export declare const TrivyScanResultSchema: z.ZodObject<{
|
|
|
33
34
|
package: z.ZodString;
|
|
34
35
|
installedVersion: z.ZodString;
|
|
35
36
|
fixedVersion: z.ZodOptional<z.ZodString>;
|
|
36
|
-
title: z.ZodOptional<z.ZodString>;
|
|
37
37
|
cvssScore: z.ZodOptional<z.ZodNumber>;
|
|
38
38
|
}, z.core.$strip>>>;
|
|
39
39
|
summary: z.ZodObject<{
|
|
@@ -43,10 +43,19 @@ export declare const TrivyScanResultSchema: z.ZodObject<{
|
|
|
43
43
|
low: z.ZodNumber;
|
|
44
44
|
unknown: z.ZodNumber;
|
|
45
45
|
}, z.core.$strip>;
|
|
46
|
-
totalVulnerabilities: z.ZodNumber;
|
|
47
46
|
}, z.core.$strip>;
|
|
48
47
|
export type TrivyScanResult = z.infer<typeof TrivyScanResultSchema>;
|
|
49
|
-
/**
|
|
48
|
+
/** Internal type with display-only fields for formatters. */
|
|
49
|
+
export type TrivyVulnerabilityInternal = TrivyVulnerability & {
|
|
50
|
+
title?: string;
|
|
51
|
+
};
|
|
52
|
+
/** Internal type with display-only fields for formatters. */
|
|
53
|
+
export type TrivyScanResultInternal = Omit<TrivyScanResult, "vulnerabilities"> & {
|
|
54
|
+
vulnerabilities?: TrivyVulnerabilityInternal[];
|
|
55
|
+
totalVulnerabilities: number;
|
|
56
|
+
};
|
|
57
|
+
/** Zod schema for a single Semgrep finding.
|
|
58
|
+
* Moved to formatter: category (display-only). */
|
|
50
59
|
export declare const SemgrepFindingSchema: z.ZodObject<{
|
|
51
60
|
ruleId: z.ZodString;
|
|
52
61
|
path: z.ZodString;
|
|
@@ -54,7 +63,6 @@ export declare const SemgrepFindingSchema: z.ZodObject<{
|
|
|
54
63
|
endLine: z.ZodNumber;
|
|
55
64
|
message: z.ZodString;
|
|
56
65
|
severity: z.ZodString;
|
|
57
|
-
category: z.ZodOptional<z.ZodString>;
|
|
58
66
|
cwe: z.ZodOptional<z.ZodArray<z.ZodString>>;
|
|
59
67
|
}, z.core.$strip>;
|
|
60
68
|
export type SemgrepFinding = z.infer<typeof SemgrepFindingSchema>;
|
|
@@ -65,9 +73,10 @@ export declare const SemgrepSeveritySummarySchema: z.ZodObject<{
|
|
|
65
73
|
info: z.ZodNumber;
|
|
66
74
|
}, z.core.$strip>;
|
|
67
75
|
export type SemgrepSeveritySummary = z.infer<typeof SemgrepSeveritySummarySchema>;
|
|
68
|
-
/** Zod schema for the structured Semgrep scan result.
|
|
76
|
+
/** Zod schema for the structured Semgrep scan result.
|
|
77
|
+
* Removed derivable: totalFindings (= findings.length).
|
|
78
|
+
* Moved to formatter: config (echo-back / display-only). */
|
|
69
79
|
export declare const SemgrepScanResultSchema: z.ZodObject<{
|
|
70
|
-
totalFindings: z.ZodNumber;
|
|
71
80
|
findings: z.ZodOptional<z.ZodArray<z.ZodObject<{
|
|
72
81
|
ruleId: z.ZodString;
|
|
73
82
|
path: z.ZodString;
|
|
@@ -75,7 +84,6 @@ export declare const SemgrepScanResultSchema: z.ZodObject<{
|
|
|
75
84
|
endLine: z.ZodNumber;
|
|
76
85
|
message: z.ZodString;
|
|
77
86
|
severity: z.ZodString;
|
|
78
|
-
category: z.ZodOptional<z.ZodString>;
|
|
79
87
|
cwe: z.ZodOptional<z.ZodArray<z.ZodString>>;
|
|
80
88
|
}, z.core.$strip>>>;
|
|
81
89
|
errors: z.ZodOptional<z.ZodArray<z.ZodObject<{
|
|
@@ -88,48 +96,63 @@ export declare const SemgrepScanResultSchema: z.ZodObject<{
|
|
|
88
96
|
warning: z.ZodNumber;
|
|
89
97
|
info: z.ZodNumber;
|
|
90
98
|
}, z.core.$strip>;
|
|
91
|
-
config: z.ZodString;
|
|
92
99
|
}, z.core.$strip>;
|
|
93
100
|
export type SemgrepScanResult = z.infer<typeof SemgrepScanResultSchema>;
|
|
94
|
-
/**
|
|
101
|
+
/** Internal type with display-only fields for formatters. */
|
|
102
|
+
export type SemgrepFindingInternal = SemgrepFinding & {
|
|
103
|
+
category?: string;
|
|
104
|
+
};
|
|
105
|
+
/** Internal type with display-only fields for formatters. */
|
|
106
|
+
export type SemgrepScanResultInternal = Omit<SemgrepScanResult, "findings"> & {
|
|
107
|
+
findings?: SemgrepFindingInternal[];
|
|
108
|
+
totalFindings: number;
|
|
109
|
+
config: string;
|
|
110
|
+
};
|
|
111
|
+
/** Zod schema for a single Gitleaks finding.
|
|
112
|
+
* Moved to formatter: description, author, date (display-only). */
|
|
95
113
|
export declare const GitleaksFindingSchema: z.ZodObject<{
|
|
96
114
|
ruleID: z.ZodString;
|
|
97
|
-
description: z.ZodString;
|
|
98
115
|
match: z.ZodString;
|
|
99
116
|
secret: z.ZodString;
|
|
100
117
|
file: z.ZodString;
|
|
101
118
|
startLine: z.ZodNumber;
|
|
102
119
|
endLine: z.ZodNumber;
|
|
103
120
|
commit: z.ZodString;
|
|
104
|
-
author: z.ZodString;
|
|
105
|
-
date: z.ZodString;
|
|
106
121
|
}, z.core.$strip>;
|
|
107
122
|
export type GitleaksFinding = z.infer<typeof GitleaksFindingSchema>;
|
|
108
|
-
/** Zod schema for Gitleaks summary.
|
|
109
|
-
|
|
110
|
-
|
|
111
|
-
ruleCounts: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodNumber>>;
|
|
112
|
-
}, z.core.$strip>;
|
|
123
|
+
/** Zod schema for Gitleaks summary.
|
|
124
|
+
* Removed derivable: totalFindings (= findings.length), ruleCounts (derivable from findings). */
|
|
125
|
+
export declare const GitleaksSummarySchema: z.ZodObject<{}, z.core.$strip>;
|
|
113
126
|
export type GitleaksSummary = z.infer<typeof GitleaksSummarySchema>;
|
|
114
|
-
/** Zod schema for the structured Gitleaks scan result.
|
|
127
|
+
/** Zod schema for the structured Gitleaks scan result.
|
|
128
|
+
* Removed derivable: totalFindings (= findings.length). */
|
|
115
129
|
export declare const GitleaksScanResultSchema: z.ZodObject<{
|
|
116
|
-
totalFindings: z.ZodNumber;
|
|
117
130
|
findings: z.ZodOptional<z.ZodArray<z.ZodObject<{
|
|
118
131
|
ruleID: z.ZodString;
|
|
119
|
-
description: z.ZodString;
|
|
120
132
|
match: z.ZodString;
|
|
121
133
|
secret: z.ZodString;
|
|
122
134
|
file: z.ZodString;
|
|
123
135
|
startLine: z.ZodNumber;
|
|
124
136
|
endLine: z.ZodNumber;
|
|
125
137
|
commit: z.ZodString;
|
|
126
|
-
author: z.ZodString;
|
|
127
|
-
date: z.ZodString;
|
|
128
138
|
}, z.core.$strip>>>;
|
|
129
|
-
summary: z.ZodOptional<z.ZodObject<{
|
|
130
|
-
totalFindings: z.ZodNumber;
|
|
131
|
-
ruleCounts: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodNumber>>;
|
|
132
|
-
}, z.core.$strip>>;
|
|
133
139
|
}, z.core.$strip>;
|
|
134
140
|
export type GitleaksScanResult = z.infer<typeof GitleaksScanResultSchema>;
|
|
141
|
+
/** Internal type with display-only fields for formatters. */
|
|
142
|
+
export type GitleaksFindingInternal = GitleaksFinding & {
|
|
143
|
+
description: string;
|
|
144
|
+
author: string;
|
|
145
|
+
date: string;
|
|
146
|
+
};
|
|
147
|
+
/** Internal type with display-only fields for formatters. */
|
|
148
|
+
export interface GitleaksSummaryInternal {
|
|
149
|
+
totalFindings: number;
|
|
150
|
+
ruleCounts?: Record<string, number>;
|
|
151
|
+
}
|
|
152
|
+
/** Internal type with display-only fields for formatters. */
|
|
153
|
+
export type GitleaksScanResultInternal = Omit<GitleaksScanResult, "findings"> & {
|
|
154
|
+
findings?: GitleaksFindingInternal[];
|
|
155
|
+
totalFindings: number;
|
|
156
|
+
summary?: GitleaksSummaryInternal;
|
|
157
|
+
};
|
|
135
158
|
//# sourceMappingURL=index.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/schemas/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/schemas/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;+CAC+C;AAC/C,eAAO,MAAM,wBAAwB;;;;;;;iBAOnC,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,8CAA8C;AAC9C,eAAO,MAAM,0BAA0B;;;;;;iBAMrC,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E;yEACyE;AACzE,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;iBAKhC,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,6DAA6D;AAC7D,MAAM,MAAM,0BAA0B,GAAG,kBAAkB,GAAG;IAC5D,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,6DAA6D;AAC7D,MAAM,MAAM,uBAAuB,GAAG,IAAI,CAAC,eAAe,EAAE,iBAAiB,CAAC,GAAG;IAC/E,eAAe,CAAC,EAAE,0BAA0B,EAAE,CAAC;IAC/C,oBAAoB,EAAE,MAAM,CAAC;CAC9B,CAAC;AAIF;kDACkD;AAClD,eAAO,MAAM,oBAAoB;;;;;;;;iBAQ/B,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,sDAAsD;AACtD,eAAO,MAAM,4BAA4B;;;;iBAIvC,CAAC;AAEH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF;;4DAE4D;AAC5D,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;iBAYlC,CAAC;AAEH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE,6DAA6D;AAC7D,MAAM,MAAM,sBAAsB,GAAG,cAAc,GAAG;IACpD,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,6DAA6D;AAC7D,MAAM,MAAM,yBAAyB,GAAG,IAAI,CAAC,iBAAiB,EAAE,UAAU,CAAC,GAAG;IAC5E,QAAQ,CAAC,EAAE,sBAAsB,EAAE,CAAC;IACpC,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAIF;mEACmE;AACnE,eAAO,MAAM,qBAAqB;;;;;;;;iBAQhC,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE;iGACiG;AACjG,eAAO,MAAM,qBAAqB,gCAAe,CAAC;AAElD,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE;2DAC2D;AAC3D,eAAO,MAAM,wBAAwB;;;;;;;;;;iBAEnC,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,6DAA6D;AAC7D,MAAM,MAAM,uBAAuB,GAAG,eAAe,GAAG;IACtD,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,6DAA6D;AAC7D,MAAM,WAAW,uBAAuB;IACtC,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACrC;AAED,6DAA6D;AAC7D,MAAM,MAAM,0BAA0B,GAAG,IAAI,CAAC,kBAAkB,EAAE,UAAU,CAAC,GAAG;IAC9E,QAAQ,CAAC,EAAE,uBAAuB,EAAE,CAAC;IACrC,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,uBAAuB,CAAC;CACnC,CAAC"}
|
package/dist/schemas/index.js
CHANGED
|
@@ -1,12 +1,12 @@
|
|
|
1
1
|
import { z } from "zod";
|
|
2
|
-
/** Zod schema for a single vulnerability entry from Trivy output.
|
|
2
|
+
/** Zod schema for a single vulnerability entry from Trivy output.
|
|
3
|
+
* Moved to formatter: title (display-only). */
|
|
3
4
|
export const TrivyVulnerabilitySchema = z.object({
|
|
4
5
|
id: z.string(),
|
|
5
6
|
severity: z.string(),
|
|
6
7
|
package: z.string(),
|
|
7
8
|
installedVersion: z.string(),
|
|
8
9
|
fixedVersion: z.string().optional(),
|
|
9
|
-
title: z.string().optional(),
|
|
10
10
|
cvssScore: z.number().optional(),
|
|
11
11
|
});
|
|
12
12
|
/** Zod schema for severity summary counts. */
|
|
@@ -17,16 +17,17 @@ export const TrivySeveritySummarySchema = z.object({
|
|
|
17
17
|
low: z.number(),
|
|
18
18
|
unknown: z.number(),
|
|
19
19
|
});
|
|
20
|
-
/** Zod schema for the structured Trivy scan result.
|
|
20
|
+
/** Zod schema for the structured Trivy scan result.
|
|
21
|
+
* Removed derivable: totalVulnerabilities (= vulnerabilities.length). */
|
|
21
22
|
export const TrivyScanResultSchema = z.object({
|
|
22
23
|
target: z.string(),
|
|
23
24
|
scanType: z.enum(["image", "fs", "config"]),
|
|
24
25
|
vulnerabilities: z.array(TrivyVulnerabilitySchema).optional(),
|
|
25
26
|
summary: TrivySeveritySummarySchema,
|
|
26
|
-
totalVulnerabilities: z.number(),
|
|
27
27
|
});
|
|
28
28
|
// -- Semgrep schemas ----------------------------------------------------------
|
|
29
|
-
/** Zod schema for a single Semgrep finding.
|
|
29
|
+
/** Zod schema for a single Semgrep finding.
|
|
30
|
+
* Moved to formatter: category (display-only). */
|
|
30
31
|
export const SemgrepFindingSchema = z.object({
|
|
31
32
|
ruleId: z.string(),
|
|
32
33
|
path: z.string(),
|
|
@@ -34,7 +35,6 @@ export const SemgrepFindingSchema = z.object({
|
|
|
34
35
|
endLine: z.number(),
|
|
35
36
|
message: z.string(),
|
|
36
37
|
severity: z.string(),
|
|
37
|
-
category: z.string().optional(),
|
|
38
38
|
cwe: z.array(z.string()).optional(),
|
|
39
39
|
});
|
|
40
40
|
/** Zod schema for Semgrep severity summary counts. */
|
|
@@ -43,9 +43,10 @@ export const SemgrepSeveritySummarySchema = z.object({
|
|
|
43
43
|
warning: z.number(),
|
|
44
44
|
info: z.number(),
|
|
45
45
|
});
|
|
46
|
-
/** Zod schema for the structured Semgrep scan result.
|
|
46
|
+
/** Zod schema for the structured Semgrep scan result.
|
|
47
|
+
* Removed derivable: totalFindings (= findings.length).
|
|
48
|
+
* Moved to formatter: config (echo-back / display-only). */
|
|
47
49
|
export const SemgrepScanResultSchema = z.object({
|
|
48
|
-
totalFindings: z.number(),
|
|
49
50
|
findings: z.array(SemgrepFindingSchema).optional(),
|
|
50
51
|
errors: z
|
|
51
52
|
.array(z.object({
|
|
@@ -55,31 +56,25 @@ export const SemgrepScanResultSchema = z.object({
|
|
|
55
56
|
}))
|
|
56
57
|
.optional(),
|
|
57
58
|
summary: SemgrepSeveritySummarySchema,
|
|
58
|
-
config: z.string(),
|
|
59
59
|
});
|
|
60
60
|
// -- Gitleaks schemas ---------------------------------------------------------
|
|
61
|
-
/** Zod schema for a single Gitleaks finding.
|
|
61
|
+
/** Zod schema for a single Gitleaks finding.
|
|
62
|
+
* Moved to formatter: description, author, date (display-only). */
|
|
62
63
|
export const GitleaksFindingSchema = z.object({
|
|
63
64
|
ruleID: z.string(),
|
|
64
|
-
description: z.string(),
|
|
65
65
|
match: z.string(),
|
|
66
66
|
secret: z.string(),
|
|
67
67
|
file: z.string(),
|
|
68
68
|
startLine: z.number(),
|
|
69
69
|
endLine: z.number(),
|
|
70
70
|
commit: z.string(),
|
|
71
|
-
author: z.string(),
|
|
72
|
-
date: z.string(),
|
|
73
71
|
});
|
|
74
|
-
/** Zod schema for Gitleaks summary.
|
|
75
|
-
|
|
76
|
-
|
|
77
|
-
|
|
78
|
-
|
|
79
|
-
/** Zod schema for the structured Gitleaks scan result. */
|
|
72
|
+
/** Zod schema for Gitleaks summary.
|
|
73
|
+
* Removed derivable: totalFindings (= findings.length), ruleCounts (derivable from findings). */
|
|
74
|
+
export const GitleaksSummarySchema = z.object({});
|
|
75
|
+
/** Zod schema for the structured Gitleaks scan result.
|
|
76
|
+
* Removed derivable: totalFindings (= findings.length). */
|
|
80
77
|
export const GitleaksScanResultSchema = z.object({
|
|
81
|
-
totalFindings: z.number(),
|
|
82
78
|
findings: z.array(GitleaksFindingSchema).optional(),
|
|
83
|
-
summary: GitleaksSummarySchema.optional(),
|
|
84
79
|
});
|
|
85
80
|
//# sourceMappingURL=index.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/schemas/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/schemas/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;+CAC+C;AAC/C,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE;IAC5B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAIH,8CAA8C;AAC9C,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;IACf,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;CACpB,CAAC,CAAC;AAIH;yEACyE;AACzE,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC3C,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,QAAQ,EAAE;IAC7D,OAAO,EAAE,0BAA0B;CACpC,CAAC,CAAC;AAeH,gFAAgF;AAEhF;kDACkD;AAClD,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CACpC,CAAC,CAAC;AAIH,sDAAsD;AACtD,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;CACjB,CAAC,CAAC;AAIH;;4DAE4D;AAC5D,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,QAAQ,EAAE;IAClD,MAAM,EAAE,CAAC;SACN,KAAK,CACJ,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC3B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;QACnB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC5B,CAAC,CACH;SACA,QAAQ,EAAE;IACb,OAAO,EAAE,4BAA4B;CACtC,CAAC,CAAC;AAgBH,gFAAgF;AAEhF;mEACmE;AACnE,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;CACnB,CAAC,CAAC;AAIH;iGACiG;AACjG,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAIlD;2DAC2D;AAC3D,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,QAAQ,EAAE;CACpD,CAAC,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"gitleaks.d.ts","sourceRoot":"","sources":["../../src/tools/gitleaks.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;
|
|
1
|
+
{"version":3,"file":"gitleaks.d.ts","sourceRoot":"","sources":["../../src/tools/gitleaks.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAqBzE,6DAA6D;AAC7D,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,SAAS,QAkKrD"}
|
package/dist/tools/gitleaks.js
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
import { z } from "zod";
|
|
2
|
-
import {
|
|
2
|
+
import { strippedCompactDualOutput, run, INPUT_LIMITS, assertAllowedRoot, assertNoFlagInjection, assertValidLogOpts, repoPathInput, compactInput, configInput, } from "@paretools/shared";
|
|
3
3
|
import { parseGitleaksJson } from "../lib/parsers.js";
|
|
4
|
-
import { formatGitleaksScan, compactGitleaksScanMap, formatGitleaksScanCompact, } from "../lib/formatters.js";
|
|
4
|
+
import { formatGitleaksScan, schemaGitleaksScanMap, compactGitleaksScanMap, formatGitleaksScanCompact, } from "../lib/formatters.js";
|
|
5
5
|
import { GitleaksScanResultSchema } from "../schemas/index.js";
|
|
6
6
|
/** Registers the `gitleaks` tool on the given MCP server. */
|
|
7
7
|
export function registerGitleaksTool(server) {
|
|
@@ -116,7 +116,7 @@ export function registerGitleaksTool(server) {
|
|
|
116
116
|
const result = await run("gitleaks", args, { cwd, timeout: 300_000 });
|
|
117
117
|
const data = parseGitleaksJson(result.stdout);
|
|
118
118
|
const rawOutput = (result.stdout + "\n" + result.stderr).trim();
|
|
119
|
-
return
|
|
119
|
+
return strippedCompactDualOutput(data, rawOutput, formatGitleaksScan, schemaGitleaksScanMap, compactGitleaksScanMap, formatGitleaksScanCompact, compact === false);
|
|
120
120
|
});
|
|
121
121
|
}
|
|
122
122
|
//# sourceMappingURL=gitleaks.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"gitleaks.js","sourceRoot":"","sources":["../../src/tools/gitleaks.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,
|
|
1
|
+
{"version":3,"file":"gitleaks.js","sourceRoot":"","sources":["../../src/tools/gitleaks.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,yBAAyB,EACzB,GAAG,EACH,YAAY,EACZ,iBAAiB,EACjB,qBAAqB,EACrB,kBAAkB,EAClB,aAAa,EACb,YAAY,EACZ,WAAW,GACZ,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,sBAAsB,EACtB,yBAAyB,GAC1B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAE/D,6DAA6D;AAC7D,MAAM,UAAU,oBAAoB,CAAC,MAAiB;IACpD,MAAM,CAAC,YAAY,CACjB,UAAU,EACV;QACE,KAAK,EAAE,2BAA2B;QAClC,WAAW,EACT,uHAAuH;QACzH,WAAW,EAAE;YACX,IAAI,EAAE,aAAa;YACnB,MAAM,EAAE,CAAC;iBACN,OAAO,EAAE;iBACT,QAAQ,EAAE;iBACV,OAAO,CAAC,IAAI,CAAC;iBACb,QAAQ,CACP,qGAAqG,CACtG;YACH,MAAM,EAAE,WAAW,CAAC,8CAA8C,CAAC;YACnE,YAAY,EAAE,CAAC;iBACZ,MAAM,EAAE;iBACR,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC;iBAC1B,QAAQ,EAAE;iBACV,QAAQ,CAAC,qEAAqE,CAAC;YAClF,OAAO,EAAE,CAAC;iBACP,MAAM,EAAE;iBACR,GAAG,CAAC,YAAY,CAAC,UAAU,CAAC;iBAC5B,QAAQ,EAAE;iBACV,QAAQ,CACP,2GAA2G,CAC5G;YACH,UAAU,EAAE,CAAC;iBACV,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAAC;iBACpD,GAAG,CAAC,YAAY,CAAC,SAAS,CAAC;iBAC3B,QAAQ,EAAE;iBACV,OAAO,CAAC,EAAE,CAAC;iBACX,QAAQ,CAAC,uEAAuE,CAAC;YACpF,KAAK,EAAE,CAAC;iBACL,OAAO,EAAE;iBACT,QAAQ,EAAE;iBACV,OAAO,CAAC,KAAK,CAAC;iBACd,QAAQ,CACP,qFAAqF,CACtF;YACH,OAAO,EAAE,CAAC;iBACP,OAAO,EAAE;iBACT,QAAQ,EAAE;iBACV,OAAO,CAAC,KAAK,CAAC;iBACd,QAAQ,CAAC,qCAAqC,CAAC;YAClD,cAAc,EAAE,CAAC;iBACd,OAAO,EAAE;iBACT,QAAQ,EAAE;iBACV,QAAQ,CAAC,uDAAuD,CAAC;YACpE,kBAAkB,EAAE,CAAC;iBAClB,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,iEAAiE,CAAC;YAC9E,QAAQ,EAAE,CAAC;iBACR,MAAM,EAAE;iBACR,GAAG,CAAC,YAAY,CAAC,gBAAgB,CAAC;iBAClC,QAAQ,EAAE;iBACV,QAAQ,CACP,oFAAoF,CACrF;YACH,QAAQ,EAAE,CAAC;iBACR,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,oDAAoD,CAAC;YACjE,OAAO,EAAE,YAAY;SACtB;QACD,YAAY,EAAE,wBAAwB;KACvC,EACD,KAAK,EAAE,EACL,IAAI,EACJ,MAAM,EACN,MAAM,EACN,YAAY,EACZ,OAAO,EACP,UAAU,EACV,KAAK,EACL,OAAO,EACP,cAAc,EACd,kBAAkB,EAClB,QAAQ,EACR,QAAQ,EACR,OAAO,GACR,EAAE,EAAE;QACH,IAAI,MAAM;YAAE,qBAAqB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACpD,IAAI,YAAY;YAAE,qBAAqB,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;QACtE,IAAI,OAAO;YAAE,kBAAkB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACpD,IAAI,QAAQ;YAAE,qBAAqB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC1D,KAAK,MAAM,CAAC,IAAI,UAAU,IAAI,EAAE,EAAE,CAAC;YACjC,qBAAqB,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;QACzC,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAClC,iBAAiB,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QAEnC,MAAM,IAAI,GAAa,CAAC,QAAQ,EAAE,iBAAiB,EAAE,MAAM,EAAE,eAAe,EAAE,aAAa,CAAC,CAAC;QAE7F,kDAAkD;QAClD,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;YACrB,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACxB,CAAC;QAED,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAChC,CAAC;QAED,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,YAAY,CAAC,CAAC;QAC7C,CAAC;QAED,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QACnC,CAAC;QAED,KAAK,MAAM,CAAC,IAAI,UAAU,IAAI,EAAE,EAAE,CAAC;YACjC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC;QAChC,CAAC;QAED,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACxB,CAAC;QAED,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACzB,CAAC;QAED,IAAI,cAAc,EAAE,CAAC;YACnB,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACjC,CAAC;QAED,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;YACrC,IAAI,CAAC,IAAI,CAAC,wBAAwB,EAAE,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC;QAClE,CAAC;QAED,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;QACrC,CAAC;QAED,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC7C,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QAE3B,+EAA+E;QAC/E,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QAEtE,MAAM,IAAI,GAAG,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC9C,MAAM,SAAS,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAEhE,OAAO,yBAAyB,CAC9B,IAAI,EACJ,SAAS,EACT,kBAAkB,EAClB,qBAAqB,EACrB,sBAAsB,EACtB,yBAAyB,EACzB,OAAO,KAAK,KAAK,CAClB,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC"}
|
package/dist/tools/index.d.ts
CHANGED
|
@@ -1,4 +1,5 @@
|
|
|
1
1
|
import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
|
|
2
|
-
|
|
3
|
-
|
|
2
|
+
import { type LazyToolManager } from "@paretools/shared";
|
|
3
|
+
/** Registers all Security tools on the given MCP server, filtered by policy. */
|
|
4
|
+
export declare function registerAllTools(server: McpServer, lazyManager?: LazyToolManager): void;
|
|
4
5
|
//# sourceMappingURL=index.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,EAIL,KAAK,eAAe,EACrB,MAAM,mBAAmB,CAAC;AA8B3B,gFAAgF;AAChF,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,SAAS,EAAE,WAAW,CAAC,EAAE,eAAe,QAiBhF"}
|
package/dist/tools/index.js
CHANGED
|
@@ -1,15 +1,40 @@
|
|
|
1
|
-
import { shouldRegisterTool } from "@paretools/shared";
|
|
1
|
+
import { shouldRegisterTool, isCoreToolForServer, registerDiscoverTool, } from "@paretools/shared";
|
|
2
2
|
import { registerTrivyTool } from "./trivy.js";
|
|
3
3
|
import { registerSemgrepTool } from "./semgrep.js";
|
|
4
4
|
import { registerGitleaksTool } from "./gitleaks.js";
|
|
5
|
-
|
|
6
|
-
|
|
5
|
+
const TOOL_DEFS = [
|
|
6
|
+
{
|
|
7
|
+
name: "trivy",
|
|
8
|
+
description: "Runs Trivy vulnerability/misconfiguration scanner on container images, filesystems, or IaC configs. Returns structured vulnerability data with severity summary.",
|
|
9
|
+
register: registerTrivyTool,
|
|
10
|
+
},
|
|
11
|
+
{
|
|
12
|
+
name: "semgrep",
|
|
13
|
+
description: "Runs Semgrep static analysis with structured rules and findings. Returns structured finding data with severity summary.",
|
|
14
|
+
register: registerSemgrepTool,
|
|
15
|
+
},
|
|
16
|
+
{
|
|
17
|
+
name: "gitleaks",
|
|
18
|
+
description: "Runs Gitleaks to detect hardcoded secrets in git repositories. Returns structured finding data with redacted secrets.",
|
|
19
|
+
register: registerGitleaksTool,
|
|
20
|
+
},
|
|
21
|
+
];
|
|
22
|
+
/** Registers all Security tools on the given MCP server, filtered by policy. */
|
|
23
|
+
export function registerAllTools(server, lazyManager) {
|
|
7
24
|
const s = (name) => shouldRegisterTool("security", name);
|
|
8
|
-
|
|
9
|
-
|
|
10
|
-
|
|
11
|
-
|
|
12
|
-
|
|
13
|
-
|
|
25
|
+
const isCore = (name) => isCoreToolForServer("security", name);
|
|
26
|
+
for (const def of TOOL_DEFS) {
|
|
27
|
+
if (!s(def.name))
|
|
28
|
+
continue;
|
|
29
|
+
if (lazyManager && !isCore(def.name)) {
|
|
30
|
+
lazyManager.registerLazy(def);
|
|
31
|
+
}
|
|
32
|
+
else {
|
|
33
|
+
def.register(server);
|
|
34
|
+
}
|
|
35
|
+
}
|
|
36
|
+
if (lazyManager && lazyManager.hasDeferredTools()) {
|
|
37
|
+
registerDiscoverTool(server, lazyManager, "security");
|
|
38
|
+
}
|
|
14
39
|
}
|
|
15
40
|
//# sourceMappingURL=index.js.map
|
package/dist/tools/index.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AACA,OAAO,
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AACA,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,oBAAoB,GAErB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAErD,MAAM,SAAS,GAIV;IACH;QACE,IAAI,EAAE,OAAO;QACb,WAAW,EACT,kKAAkK;QACpK,QAAQ,EAAE,iBAAiB;KAC5B;IACD;QACE,IAAI,EAAE,SAAS;QACf,WAAW,EACT,yHAAyH;QAC3H,QAAQ,EAAE,mBAAmB;KAC9B;IACD;QACE,IAAI,EAAE,UAAU;QAChB,WAAW,EACT,uHAAuH;QACzH,QAAQ,EAAE,oBAAoB;KAC/B;CACF,CAAC;AAEF,gFAAgF;AAChF,MAAM,UAAU,gBAAgB,CAAC,MAAiB,EAAE,WAA6B;IAC/E,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,kBAAkB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IACjE,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,mBAAmB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IAEvE,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;QAC5B,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QAE3B,IAAI,WAAW,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACrC,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QAChC,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IAED,IAAI,WAAW,IAAI,WAAW,CAAC,gBAAgB,EAAE,EAAE,CAAC;QAClD,oBAAoB,CAAC,MAAM,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;IACxD,CAAC;AACH,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"semgrep.d.ts","sourceRoot":"","sources":["../../src/tools/semgrep.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;
|
|
1
|
+
{"version":3,"file":"semgrep.d.ts","sourceRoot":"","sources":["../../src/tools/semgrep.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAmBzE,4DAA4D;AAC5D,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,SAAS,QAkLpD"}
|
package/dist/tools/semgrep.js
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
import { z } from "zod";
|
|
2
|
-
import {
|
|
2
|
+
import { strippedCompactDualOutput, run, INPUT_LIMITS, assertNoFlagInjection, assertAllowedRoot, cwdPathInput, compactInput, } from "@paretools/shared";
|
|
3
3
|
import { parseSemgrepJson } from "../lib/parsers.js";
|
|
4
|
-
import { formatSemgrepScan, compactSemgrepScanMap, formatSemgrepScanCompact, } from "../lib/formatters.js";
|
|
4
|
+
import { formatSemgrepScan, schemaSemgrepScanMap, compactSemgrepScanMap, formatSemgrepScanCompact, } from "../lib/formatters.js";
|
|
5
5
|
import { SemgrepScanResultSchema } from "../schemas/index.js";
|
|
6
6
|
/** Registers the `semgrep` tool on the given MCP server. */
|
|
7
7
|
export function registerSemgrepTool(server) {
|
|
@@ -131,7 +131,7 @@ export function registerSemgrepTool(server) {
|
|
|
131
131
|
const configDisplay = configs.join(",");
|
|
132
132
|
const data = parseSemgrepJson(result.stdout, configDisplay);
|
|
133
133
|
const rawOutput = (result.stdout + "\n" + result.stderr).trim();
|
|
134
|
-
return
|
|
134
|
+
return strippedCompactDualOutput(data, rawOutput, formatSemgrepScan, schemaSemgrepScanMap, compactSemgrepScanMap, formatSemgrepScanCompact, compact === false);
|
|
135
135
|
});
|
|
136
136
|
}
|
|
137
137
|
//# sourceMappingURL=semgrep.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"semgrep.js","sourceRoot":"","sources":["../../src/tools/semgrep.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,
|
|
1
|
+
{"version":3,"file":"semgrep.js","sourceRoot":"","sources":["../../src/tools/semgrep.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,yBAAyB,EACzB,GAAG,EACH,YAAY,EACZ,qBAAqB,EACrB,iBAAiB,EACjB,YAAY,EACZ,YAAY,GACb,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAE9D,4DAA4D;AAC5D,MAAM,UAAU,mBAAmB,CAAC,MAAiB;IACnD,MAAM,CAAC,YAAY,CACjB,SAAS,EACT;QACE,KAAK,EAAE,yBAAyB;QAChC,WAAW,EACT,yHAAyH;QAC3H,WAAW,EAAE;YACX,QAAQ,EAAE,CAAC;iBACR,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;iBAC5C,GAAG,CAAC,YAAY,CAAC,SAAS,CAAC;iBAC3B,QAAQ,EAAE;iBACV,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC;iBACd,QAAQ,CAAC,iDAAiD,CAAC;YAC9D,MAAM,EAAE,CAAC;iBACN,KAAK,CAAC;gBACL,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,gBAAgB,CAAC;gBAC7C,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,SAAS,CAAC;aACnF,CAAC;iBACD,QAAQ,EAAE;iBACV,OAAO,CAAC,MAAM,CAAC;iBACf,QAAQ,CACP,6JAA6J,CAC9J;YACH,QAAQ,EAAE,CAAC;iBACR,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;iBAClC,QAAQ,EAAE;iBACV,QAAQ,CAAC,0CAA0C,CAAC;YACvD,OAAO,EAAE,CAAC;iBACP,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;iBAC5C,GAAG,CAAC,YAAY,CAAC,SAAS,CAAC;iBAC3B,QAAQ,EAAE;iBACV,OAAO,CAAC,EAAE,CAAC;iBACX,QAAQ,CAAC,oDAAoD,CAAC;YACjE,OAAO,EAAE,CAAC;iBACP,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;iBAC5C,GAAG,CAAC,YAAY,CAAC,SAAS,CAAC;iBAC3B,QAAQ,EAAE;iBACV,OAAO,CAAC,EAAE,CAAC;iBACX,QAAQ,CAAC,kDAAkD,CAAC;YAC/D,WAAW,EAAE,CAAC;iBACX,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAAC;iBACpD,GAAG,CAAC,YAAY,CAAC,SAAS,CAAC;iBAC3B,QAAQ,EAAE;iBACV,OAAO,CAAC,EAAE,CAAC;iBACX,QAAQ,CAAC,kEAAkE,CAAC;YAC/E,cAAc,EAAE,CAAC;iBACd,MAAM,EAAE;iBACR,GAAG,CAAC,YAAY,CAAC,gBAAgB,CAAC;iBAClC,QAAQ,EAAE;iBACV,QAAQ,CACP,+EAA+E,CAChF;YACH,cAAc,EAAE,CAAC;iBACd,OAAO,EAAE;iBACT,QAAQ,EAAE;iBACV,QAAQ,CAAC,yEAAyE,CAAC;YACtF,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iDAAiD,CAAC;YAC3F,MAAM,EAAE,CAAC;iBACN,OAAO,EAAE;iBACT,QAAQ,EAAE;iBACV,QAAQ,CAAC,0DAA0D,CAAC;YACvE,cAAc,EAAE,CAAC;iBACd,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,4EAA4E,CAAC;YACzF,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+CAA+C,CAAC;YACrF,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,YAAY;SACtB;QACD,YAAY,EAAE,uBAAuB;KACtC,EACD,KAAK,EAAE,EACL,QAAQ,EACR,MAAM,EACN,QAAQ,EACR,OAAO,EACP,OAAO,EACP,WAAW,EACX,cAAc,EACd,cAAc,EACd,OAAO,EACP,MAAM,EACN,cAAc,EACd,IAAI,EACJ,IAAI,EACJ,OAAO,GACR,EAAE,EAAE;QACH,MAAM,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAClC,iBAAiB,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QAEnC,4BAA4B;QAC5B,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAEhF,yCAAyC;QACzC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,qBAAqB,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;QACrC,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,qBAAqB,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;QACvC,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,OAAO,IAAI,EAAE,EAAE,CAAC;YAC9B,qBAAqB,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QACtC,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,OAAO,IAAI,EAAE,EAAE,CAAC;YAC9B,qBAAqB,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QACtC,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,WAAW,IAAI,EAAE,EAAE,CAAC;YAClC,qBAAqB,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;QAC1C,CAAC;QACD,IAAI,cAAc;YAAE,qBAAqB,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;QAE5E,MAAM,IAAI,GAAa,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;QAErD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QAC3B,CAAC;QAED,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;QACpC,CAAC;QAED,KAAK,MAAM,CAAC,IAAI,OAAO,IAAI,EAAE,EAAE,CAAC;YAC9B,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QAC5B,CAAC;QAED,KAAK,MAAM,CAAC,IAAI,OAAO,IAAI,EAAE,EAAE,CAAC;YAC9B,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QAC5B,CAAC;QAED,KAAK,MAAM,CAAC,IAAI,WAAW,IAAI,EAAE,EAAE,CAAC;YAClC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC;QACjC,CAAC;QAED,IAAI,cAAc,EAAE,CAAC;YACnB,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,cAAc,CAAC,CAAC;QACjD,CAAC;QAED,IAAI,cAAc,EAAE,CAAC;YACnB,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACjC,CAAC;QAED,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACzB,CAAC;QAED,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACxB,CAAC;QAED,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;YACjC,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC;QAC1D,CAAC;QAED,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACpC,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;QAEvB,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QAErE,mEAAmE;QACnE,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,gBAAgB,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QAC5D,MAAM,SAAS,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAEhE,OAAO,yBAAyB,CAC9B,IAAI,EACJ,SAAS,EACT,iBAAiB,EACjB,oBAAoB,EACpB,qBAAqB,EACrB,wBAAwB,EACxB,OAAO,KAAK,KAAK,CAClB,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"trivy.d.ts","sourceRoot":"","sources":["../../src/tools/trivy.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;
|
|
1
|
+
{"version":3,"file":"trivy.d.ts","sourceRoot":"","sources":["../../src/tools/trivy.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAmBzE,0DAA0D;AAC1D,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,SAAS,QA6KlD"}
|
package/dist/tools/trivy.js
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
import { z } from "zod";
|
|
2
|
-
import {
|
|
2
|
+
import { strippedCompactDualOutput, run, INPUT_LIMITS, assertAllowedRoot, assertNoFlagInjection, cwdPathInput, compactInput, } from "@paretools/shared";
|
|
3
3
|
import { parseTrivyJson } from "../lib/parsers.js";
|
|
4
|
-
import { formatTrivyScan, compactTrivyScanMap, formatTrivyScanCompact } from "../lib/formatters.js";
|
|
4
|
+
import { formatTrivyScan, schemaTrivyScanMap, compactTrivyScanMap, formatTrivyScanCompact, } from "../lib/formatters.js";
|
|
5
5
|
import { TrivyScanResultSchema } from "../schemas/index.js";
|
|
6
6
|
/** Registers the `trivy` tool on the given MCP server. */
|
|
7
7
|
export function registerTrivyTool(server) {
|
|
@@ -133,7 +133,7 @@ export function registerTrivyTool(server) {
|
|
|
133
133
|
const result = await run("trivy", args, { cwd, timeout: 300_000 });
|
|
134
134
|
const data = parseTrivyJson(result.stdout, target, scanType);
|
|
135
135
|
const rawOutput = (result.stdout + "\n" + result.stderr).trim();
|
|
136
|
-
return
|
|
136
|
+
return strippedCompactDualOutput(data, rawOutput, formatTrivyScan, schemaTrivyScanMap, compactTrivyScanMap, formatTrivyScanCompact, compact === false);
|
|
137
137
|
});
|
|
138
138
|
}
|
|
139
139
|
//# sourceMappingURL=trivy.js.map
|
package/dist/tools/trivy.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"trivy.js","sourceRoot":"","sources":["../../src/tools/trivy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,
|
|
1
|
+
{"version":3,"file":"trivy.js","sourceRoot":"","sources":["../../src/tools/trivy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,yBAAyB,EACzB,GAAG,EACH,YAAY,EACZ,iBAAiB,EACjB,qBAAqB,EACrB,YAAY,EACZ,YAAY,GACb,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EACL,eAAe,EACf,kBAAkB,EAClB,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAE5D,0DAA0D;AAC1D,MAAM,UAAU,iBAAiB,CAAC,MAAiB;IACjD,MAAM,CAAC,YAAY,CACjB,OAAO,EACP;QACE,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EACT,kKAAkK;QACpK,WAAW,EAAE;YACX,MAAM,EAAE,CAAC;iBACN,MAAM,EAAE;iBACR,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC;iBAC1B,QAAQ,CAAC,iEAAiE,CAAC;YAC9E,QAAQ,EAAE,CAAC;iBACR,IAAI,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;iBAC/B,QAAQ,EAAE;iBACV,OAAO,CAAC,OAAO,CAAC;iBAChB,QAAQ,CAAC,WAAW,CAAC;YACxB,QAAQ,EAAE,CAAC;iBACR,KAAK,CAAC;gBACL,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;gBACxD,CAAC;qBACE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;qBAC/D,GAAG,CAAC,YAAY,CAAC,SAAS,CAAC;aAC/B,CAAC;iBACD,QAAQ,EAAE;iBACV,QAAQ,CAAC,yCAAyC,CAAC;YACtD,QAAQ,EAAE,CAAC;iBACR,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;iBACzD,GAAG,CAAC,YAAY,CAAC,SAAS,CAAC;iBAC3B,QAAQ,EAAE;iBACV,OAAO,CAAC,EAAE,CAAC;iBACX,QAAQ,CAAC,sCAAsC,CAAC;YACnD,QAAQ,EAAE,CAAC;iBACR,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;iBAChC,GAAG,CAAC,YAAY,CAAC,SAAS,CAAC;iBAC3B,QAAQ,EAAE;iBACV,OAAO,CAAC,EAAE,CAAC;iBACX,QAAQ,CAAC,2CAA2C,CAAC;YACxD,QAAQ,EAAE,CAAC;iBACR,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;iBAC5C,GAAG,CAAC,YAAY,CAAC,SAAS,CAAC;iBAC3B,QAAQ,EAAE;iBACV,OAAO,CAAC,EAAE,CAAC;iBACX,QAAQ,CAAC,mDAAmD,CAAC;YAChE,SAAS,EAAE,CAAC;iBACT,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;iBAC5C,GAAG,CAAC,YAAY,CAAC,SAAS,CAAC;iBAC3B,QAAQ,EAAE;iBACV,OAAO,CAAC,EAAE,CAAC;iBACX,QAAQ,CAAC,8CAA8C,CAAC;YAC3D,QAAQ,EAAE,CAAC;iBACR,MAAM,EAAE;iBACR,GAAG,CAAC,YAAY,CAAC,gBAAgB,CAAC;iBAClC,QAAQ,EAAE;iBACV,QAAQ,CAAC,0EAA0E,CAAC;YACvF,UAAU,EAAE,CAAC;iBACV,MAAM,EAAE;iBACR,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC;iBAC1B,QAAQ,EAAE;iBACV,QAAQ,CAAC,iDAAiD,CAAC;YAC9D,aAAa,EAAE,CAAC;iBACb,OAAO,EAAE;iBACT,QAAQ,EAAE;iBACV,OAAO,CAAC,KAAK,CAAC;iBACd,QAAQ,CAAC,4CAA4C,CAAC;YACzD,QAAQ,EAAE,CAAC;iBACR,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,wDAAwD,CAAC;YACrE,YAAY,EAAE,CAAC;iBACZ,OAAO,EAAE;iBACT,QAAQ,EAAE;iBACV,QAAQ,CAAC,wEAAwE,CAAC;YACrF,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,YAAY;SACtB;QACD,YAAY,EAAE,qBAAqB;KACpC,EACD,KAAK,EAAE,EACL,MAAM,EACN,QAAQ,EACR,QAAQ,EACR,QAAQ,EACR,QAAQ,EACR,QAAQ,EACR,SAAS,EACT,QAAQ,EACR,UAAU,EACV,aAAa,EACb,QAAQ,EACR,YAAY,EACZ,IAAI,EACJ,OAAO,GACR,EAAE,EAAE;QACH,qBAAqB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACxC,IAAI,QAAQ;YAAE,qBAAqB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC1D,IAAI,UAAU;YAAE,qBAAqB,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QAChE,KAAK,MAAM,CAAC,IAAI,QAAQ,IAAI,EAAE,EAAE,CAAC;YAC/B,qBAAqB,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;QACvC,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,SAAS,IAAI,EAAE,EAAE,CAAC;YAChC,qBAAqB,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;QACxC,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAClC,iBAAiB,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QAEnC,MAAM,IAAI,GAAa,CAAC,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QAEjE,+CAA+C;QAC/C,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;YAC5E,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;QACvC,CAAC;QAED,6BAA6B;QAC7B,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9C,CAAC;QAED,wCAAwC;QACxC,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/C,CAAC;QAED,mBAAmB;QACnB,KAAK,MAAM,CAAC,IAAI,QAAQ,IAAI,EAAE,EAAE,CAAC;YAC/B,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;QAC9B,CAAC;QAED,aAAa;QACb,KAAK,MAAM,CAAC,IAAI,SAAS,IAAI,EAAE,EAAE,CAAC;YAChC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC;QAC/B,CAAC;QAED,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;QACpC,CAAC;QAED,IAAI,UAAU,EAAE,CAAC;YACf,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;QACxC,CAAC;QAED,IAAI,aAAa,EAAE,CAAC;YAClB,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAChC,CAAC;QAED,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC7C,CAAC;QAED,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAChC,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAElB,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QAEnE,MAAM,IAAI,GAAG,cAAc,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC7D,MAAM,SAAS,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAEhE,OAAO,yBAAyB,CAC9B,IAAI,EACJ,SAAS,EACT,eAAe,EACf,kBAAkB,EAClB,mBAAmB,EACnB,sBAAsB,EACtB,OAAO,KAAK,KAAK,CAClB,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC"}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@paretools/security",
|
|
3
|
-
"version": "0.
|
|
3
|
+
"version": "0.13.0",
|
|
4
4
|
"mcpName": "io.github.Dave-London/pare-security",
|
|
5
5
|
"description": "MCP server for security scanning (Trivy, Semgrep, Gitleaks) with structured, token-efficient output",
|
|
6
6
|
"license": "MIT",
|
|
@@ -58,12 +58,12 @@
|
|
|
58
58
|
"dist"
|
|
59
59
|
],
|
|
60
60
|
"dependencies": {
|
|
61
|
-
"@modelcontextprotocol/sdk": "^1.
|
|
61
|
+
"@modelcontextprotocol/sdk": "^1.27.0",
|
|
62
62
|
"zod": "^4.3.6",
|
|
63
|
-
"@paretools/shared": "0.
|
|
63
|
+
"@paretools/shared": "0.13.0"
|
|
64
64
|
},
|
|
65
65
|
"devDependencies": {
|
|
66
|
-
"@types/node": "^25.
|
|
66
|
+
"@types/node": "^25.3.0",
|
|
67
67
|
"typescript": "^5.7.0",
|
|
68
68
|
"vitest": "^4.0.18",
|
|
69
69
|
"@paretools/tsconfig": "0.0.0"
|