@sentriflow/cli 0.1.8 → 0.1.9

package/dist/index.js

@@ -10727,16 +10727,18 @@ function generateSarif(results, filePath, rules, options = {}, ipSummary) {
         kinds: ["superset"]
       }));
     }
-    if (secMeta?.cvssScore !== void 0 || secMeta?.cvssVector || secMeta?.tags) {
+    const hasCvss = secMeta?.cvssScore !== void 0 || secMeta?.cvssVector;
+    const hasTags = rule.metadata.tags && rule.metadata.tags.length > 0;
+    if (hasCvss || hasTags) {
       base.properties = {};
-      if (secMeta.cvssScore !== void 0) {
+      if (secMeta?.cvssScore !== void 0) {
         base.properties["security-severity"] = String(secMeta.cvssScore);
       }
-      if (secMeta.cvssVector) {
+      if (secMeta?.cvssVector) {
         base.properties["cvss-vector"] = secMeta.cvssVector;
       }
-      if (secMeta.tags && secMeta.tags.length > 0) {
-        base.properties.tags = secMeta.tags;
+      if (hasTags) {
+        base.properties.tags = rule.metadata.tags.map((t) => t.label);
       }
     }
     return base;
@@ -10752,7 +10754,7 @@ function generateSarif(results, filePath, rules, options = {}, ipSummary) {
         tool: {
           driver: {
             name: "Sentriflow",
-            version: "0.1.8",
+            version: "0.1.9",
             informationUri: "https://github.com/sentriflow/sentriflow",
             rules: sarifRules,
             // SEC-007: Include CWE taxonomy when rules reference it
@@ -10874,16 +10876,18 @@ function generateMultiFileSarif(fileResults, rules, options = {}) {
         kinds: ["superset"]
       }));
     }
-    if (secMeta?.cvssScore !== void 0 || secMeta?.cvssVector || secMeta?.tags) {
+    const hasCvss = secMeta?.cvssScore !== void 0 || secMeta?.cvssVector;
+    const hasTags = rule.metadata.tags && rule.metadata.tags.length > 0;
+    if (hasCvss || hasTags) {
       base.properties = {};
-      if (secMeta.cvssScore !== void 0) {
+      if (secMeta?.cvssScore !== void 0) {
         base.properties["security-severity"] = String(secMeta.cvssScore);
       }
-      if (secMeta.cvssVector) {
+      if (secMeta?.cvssVector) {
         base.properties["cvss-vector"] = secMeta.cvssVector;
       }
-      if (secMeta.tags && secMeta.tags.length > 0) {
-        base.properties.tags = secMeta.tags;
+      if (hasTags) {
+        base.properties.tags = rule.metadata.tags.map((t) => t.label);
       }
     }
     return base;
@@ -10906,7 +10910,7 @@ function generateMultiFileSarif(fileResults, rules, options = {}) {
         tool: {
           driver: {
             name: "Sentriflow",
-            version: "0.1.8",
+            version: "0.1.9",
             informationUri: "https://github.com/sentriflow/sentriflow",
             rules: sarifRules,
             // SEC-007: Include CWE taxonomy when rules reference it
@@ -13484,9 +13488,12 @@ var cisco_json_rules_default = {
         description: "Trunk ports should disable DTP (Dynamic Trunking Protocol)",
         remediation: "Add 'switchport nonegotiate' to disable DTP on trunk ports",
         security: {
-          cwe: ["CWE-319"],
-          tags: ["vlan-hopping", "network-security"]
-        }
+          cwe: ["CWE-319"]
+        },
+        tags: [
+          { type: "security", label: "vlan-hopping" },
+          { type: "security", label: "network-security" }
+        ]
       },
       check: {
         type: "and",
@@ -13527,9 +13534,12 @@ var cisco_json_rules_default = {
         description: "VTY lines should have access-class configured for SSH access control",
         remediation: "Add 'access-class <acl> in' to restrict VTY access",
         security: {
-          cwe: ["CWE-284"],
-          tags: ["access-control", "remote-access"]
-        }
+          cwe: ["CWE-284"]
+        },
+        tags: [
+          { type: "security", label: "access-control" },
+          { type: "security", label: "remote-access" }
+        ]
       },
       check: {
         type: "child_not_exists",
@@ -13611,9 +13621,12 @@ var juniper_json_rules_default = {
         description: "SSH should be configured for version 2 only",
         remediation: "Configure 'set system services ssh protocol-version v2'",
         security: {
-          cwe: ["CWE-327"],
-          tags: ["ssh", "encryption"]
-        }
+          cwe: ["CWE-327"]
+        },
+        tags: [
+          { type: "security", label: "ssh" },
+          { type: "security", label: "encryption" }
+        ]
       },
       check: {
         type: "and",
@@ -13644,9 +13657,12 @@ var juniper_json_rules_default = {
         description: "Telnet service should be disabled",
         remediation: "Remove 'set system services telnet' or add 'delete system services telnet'",
         security: {
-          cwe: ["CWE-319"],
-          tags: ["telnet", "cleartext"]
-        }
+          cwe: ["CWE-319"]
+        },
+        tags: [
+          { type: "security", label: "telnet" },
+          { type: "security", label: "cleartext" }
+        ]
       },
       check: {
         type: "helper",
@@ -14857,7 +14873,7 @@ function isStdinRequested(files) {
 
 // index.ts
 var program = new Command();
-program.name("sentriflow").description("SentriFlow Network Configuration Validator").version("0.1.8").argument("[files...]", "Path(s) to configuration file(s) (supports multiple files)").option("--ast", "Output the AST instead of rule results").option("-f, --format <format>", "Output format (json, sarif)", "json").option("-q, --quiet", "Only output failures (suppress passed results)").option("-c, --config <path>", "Path to config file (default: auto-detect)").option("--no-config", "Ignore config file").option("-r, --rules <path>", "Additional rules file to load (legacy)").option("-p, --rule-pack <path>", "Rule pack file to load").option(
+program.name("sentriflow").description("SentriFlow Network Configuration Validator").version("0.1.9").argument("[files...]", "Path(s) to configuration file(s) (supports multiple files)").option("--ast", "Output the AST instead of rule results").option("-f, --format <format>", "Output format (json, sarif)", "json").option("-q, --quiet", "Only output failures (suppress passed results)").option("-c, --config <path>", "Path to config file (default: auto-detect)").option("--no-config", "Ignore config file").option("-r, --rules <path>", "Additional rules file to load (legacy)").option("-p, --rule-pack <path>", "Rule pack file to load").option(
   "--encrypted-pack <path...>",
   "SEC-012: Path(s) to encrypted rule pack(s) (.grpx), can specify multiple"
 ).option(

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sentriflow/cli",
-  "version": "0.1.8",
+  "version": "0.1.9",
   "description": "SentriFlow CLI - Network configuration linter and validator",
   "license": "Apache-2.0",
   "main": "dist/index.js",