fullshield 3.0.0 → 3.1.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (16) hide show
  1. package/CHANGELOG.md +12 -0
  2. package/README.md +12 -6
  3. package/dist/agent.js +45 -45
  4. package/dist/cli/index.js +117 -115
  5. package/dist/compliance.js +1 -1
  6. package/dist/index.d.ts +14 -0
  7. package/dist/index.js +73 -73
  8. package/dist/llm.js +2 -2
  9. package/dist/mcp.js +44 -44
  10. package/dist/supply.js +3 -3
  11. package/models/index.json +1 -1
  12. package/package.json +1 -1
  13. package/templates/action/action.yml +1 -1
  14. package/templates/fullshield-bumps.yml +17 -0
  15. package/templates/github-workflow-action.yml +1 -1
  16. package/templates/github-workflow-diff.yml +15 -0
package/dist/compliance.js CHANGED
@@ -1,2 +1,2 @@
1
- import'crypto';import'fs/promises';import'path';import {builtinModules}from'module';import {AsyncLocalStorage}from'async_hooks';import'fs';import'url';import {execFile}from'child_process';import {promisify}from'util';var l=(t,i)=>()=>(t&&(i=t(t=0)),i);var S=l(()=>{});var g=l(()=>{S();});var c=l(()=>{});var u=l(()=>{});g();c();c();var m={NPM_LOCK:["NPM_SHRINKWRAP","NPM_LOCKVER","NPM_MULTLOCK","NPM_ROOTVER","NPM_NONSEMVER","NPM_NORESOLVED","NPM_RESOLVED_HOST","NPM_RESOLVED_HTTP","NPM_NOINTEGRITY","NPM_WEAKINTEGRITY","NPM_BADINTEGRITY","NPM_LINKDEP","NPM_GITDEP","NPM_ALIAS","NPM_BUNDLED","NPM_PEER","NPM_OPTIONAL","NPM_LOCKPATH","NPM_LOCKOMIT","NPM_DEVPROD"],NPM_MANIFEST:["NPM_FLOAT","NPM_GITSPEC","NPM_FILESPEC","NPM_URLSPEC","NPM_TAGSPEC","NPM_OVERRIDE_VULN","NPM_OVERRIDE_WIDE","NPM_OVERRIDE_ALIAS","NPM_LIFECYCLE","NPM_NPMRC_REG","NPM_NPMRC_SCRIPT","NPM_NPMRC_HOME","NPM_PACKAGEMANAGER","NPM_COREPACK","NPM_ENGINES","NPM_ENGINE_STRICT","NPM_TRUSTED","NPM_PUBLISHCONFIG","NPM_BINSHADOW","NPM_OSCPU"],NPM_REGISTRY:["NPM_REG_INTEGRITY","NPM_REG_TARBALL","NPM_REG_DEPRECATED","NPM_REG_UNPUBLISHED","NPM_REG_NPMUSER","NPM_REG_MAINTAINER","NPM_REG_PROV_ABSENT","NPM_REG_BUILDER","NPM_REG_REPO","NPM_REG_SUBJECT","NPM_REG_TIME","NPM_REG_TRANSITIVE_AGE","NPM_REG_INSTALLSCRIPT","NPM_REG_SIGNATURES","NPM_REG_ENGINES","NPM_REG_DRIFT","NPM_REG_DEPS","NPM_REG_PEER","NPM_REG_BIN","NPM_REG_REPOSITORY"],NPM_TARBALL:["NPM_TARBALL_HASH","NPM_TARBALL_ID","NPM_TARBALL_LIFECYCLE","NPM_TARBALL_NET","NPM_TARBALL_SHELL","NPM_TARBALL_CRED","NPM_TARBALL_OBFUSC","NPM_TARBALL_BIN","NPM_TARBALL_NATIVE","NPM_TARBALL_HOOK","NPM_TARBALL_HIDDEN","NPM_TARBALL_PATH","NPM_TARBALL_SIZE","NPM_TARBALL_LICENSE","NPM_TARBALL_MANIFEST","NPM_TARBALL_INSTALLJS","NPM_TARBALL_TOPLEVEL","NPM_TARBALL_ENV","NPM_TARBALL_DYNAMIC","NPM_TARBALL_GATE"],NPM_SCRIPTS:["NPM_SCRIPT_TRANSITIVE","NPM_SCRIPT_OPTIONAL","NPM_SCRIPT_DEV","NPM_SCRIPT_PREPARE","NPM_SCRIPT_PREPUBLISH","NPM_SCRIPT_CURL","NPM_SCRIPT_BASE64","NPM_SCRIPT_NODEGYP","NPM_SCRIPT_WRITE","NPM_SCRIPT_LOCK","NPM_SCRIPT_GIT","NPM_SCRIPT_TOKEN","NPM_SCRIPT_PUBLISH","NPM_SCRIPT_TRUSTED","NPM_SCRIPT_MISMATCH","NPM_SCRIPT_MULTI","NPM_SCRIPT_BIN","NPM_SCRIPT_SHEBANG","NPM_SCRIPT_COND","NPM_SCRIPT_ROLLUP"],NPM_NAMES:["NPM_SCOPE_TYPO","NPM_HOMOGLYPH","NPM_BIDI","NPM_MIXEDSCRIPT","NPM_SEPARATOR","NPM_REPEAT","NPM_SUFFIX","NPM_SCOPE_NEW","NPM_SCOPE_SYNTAX","NPM_TYPES","NPM_DEPRECATED_REPLACE","NPM_TYPO_TRANSITIVE","NPM_NAME_LENGTH","NPM_NAME_CASE","NPM_NAME_ENCODED","NPM_ALIAS_SQUAT","NPM_SELFNAME","NPM_WORKSPACE_NAME","NPM_POPULAR_LIST","NPM_DISTANCE2"],NPM_GRAPH:["NPM_GRAPH_INSTANCE","NPM_GRAPH_OPTIONAL","NPM_GRAPH_PEER","NPM_GRAPH_ALIAS","NPM_REACH_DYNAMIC","NPM_REACH_EXPORTS","NPM_REACH_CONDITIONS","NPM_REACH_BIN","NPM_REACH_WORKER","NPM_REACH_SUBPATH","NPM_REACH_TRY","NPM_REACH_REEXPORT","NPM_REACH_TYPEONLY","NPM_DUALPACKAGE","NPM_PHANTOM_DEEP"],NPM_ADVISORY:["NPM_OSV_RANGE","NPM_OSV_WITHDRAWN","NPM_OSV_CVSS","NPM_OSV_ALIAS","NPM_OSV_PURL","NPM_FIX_NESTED","NPM_SBOM_PURL","NPM_AUDIT_DIFF"]},ee=new Map;for(let t of Object.keys(m))for(let i of m[t])ee.set(i,t);function n(t,i){return {ruleId:t,owasp:"A06:2021 Vulnerable Components",cwe:i,asvs:"V14.2.1",pci:"PCI DSS 6.3.3"}}var te="DEPS-SHRINKWRAP-001",ie="DEPS-SHRINKWRAP-002",re="DEPS-LOCKVER-001",se="DEPS-MULTLOCK-001",oe="DEPS-ROOTVER-001",ae="DEPS-NONSEMVER-001",ce="DEPS-NORESOLVED-001",de="DEPS-RESOLVED-HOST-001",ue="DEPS-RESOLVED-HTTP-001",fe="DEPS-NOINTEGRITY-001",le="DEPS-WEAKINTEGRITY-001",pe="DEPS-BADINTEGRITY-001",ge="DEPS-LINKDEP-001",me="DEPS-GITDEP-001",he="DEPS-NPMALIAS-001",Se="DEPS-BUNDLED-001",ye="DEPS-PEER-UNDECLARED-001",Pe="DEPS-OPTIONAL-IMPORT-001",Ee="DEPS-LOCKPATH-001",Ie="DEPS-LOCKOMIT-001",ke="DEPS-DEV-PROD-EDGE-001";new Set(builtinModules.flatMap(t=>[t,t.replace(/^node:/,"")]));var y=[n(te,"CWE-829"),n(ie,"CWE-436"),n(re,"CWE-1104"),n(se,"CWE-436"),n(oe,"CWE-436"),n(ae,"CWE-1104"),n(ce,"CWE-829"),n(de,"CWE-494"),n(ue,"CWE-319"),n(fe,"CWE-353"),n(le,"CWE-328"),n(pe,"CWE-353"),n(ge,"CWE-829"),n(me,"CWE-829"),n(he,"CWE-829"),n(Se,"CWE-829"),n(ye,"CWE-829"),n(Pe,"CWE-703"),n(Ee,"CWE-22"),n(Ie,"CWE-829"),n(ke,"CWE-829")];u();c();new AsyncLocalStorage;var Ae="DEPS-FLOAT-001",Ne="DEPS-FLOAT-002",De="DEPS-GITSPEC-001",we="DEPS-FILESPEC-001",ve="DEPS-URLSPEC-001",Te="DEPS-TAGSPEC-001",_e="DEPS-OVERRIDE-VULN-001",Me="DEPS-OVERRIDE-WIDE-001",Le="DEPS-OVERRIDE-ALIAS-001",Oe="CONFIG-LIFECYCLE-001",Fe="DEPS-NPMRC-REG-001",$e="DEPS-NPMRC-SCRIPT-001",xe="DEPS-NPMRC-HOME-001",We="DEPS-PACKAGEMANAGER-001",Ve="DEPS-PACKAGEMANAGER-002",je="DEPS-COREPACK-001",Ge="CONFIG-ENGINES-001",Ue="DEPS-ENGINE-STRICT-001",Be="DEPS-TRUSTED-001",He="DEPS-PUBLISHCONFIG-001",Ke="DEPS-PUBLISHCONFIG-002",Ye="DEPS-BIN-SHADOW-001",qe="DEPS-OSCPU-001";var P=[n(Ae,"CWE-829"),n(Ne,"CWE-829"),n(De,"CWE-829"),n(we,"CWE-829"),n(ve,"CWE-494"),n(Te,"CWE-829"),n(_e,"CWE-1104"),n(Me,"CWE-829"),n(Le,"CWE-829"),n(Oe,"CWE-829"),n(Fe,"CWE-494"),n($e,"CWE-829"),n(xe,"CWE-494"),n(We,"CWE-1104"),n(Ve,"CWE-1104"),n(je,"CWE-353"),n(Ge,"CWE-1104"),n(Ue,"CWE-693"),n(Be,"CWE-829"),n(He,"CWE-494"),n(Ke,"CWE-668"),n(Ye,"CWE-427"),n(qe,"CWE-1104")];u();var ze=[["DEPS-REG-INTEGRITY-001","CWE-353"],["DEPS-REG-TARBALL-001","CWE-494"],["DEPS-REG-DEPRECATED-001","CWE-1104"],["DEPS-REG-UNPUBLISHED-001","CWE-829"],["DEPS-REG-NPMUSER-001","CWE-829"],["DEPS-REG-MAINTAINER-001","CWE-829"],["DEPS-REG-PROV-ABSENT-001","CWE-494"],["DEPS-REG-BUILDER-001","CWE-494"],["DEPS-REG-REPO-001","CWE-829"],["DEPS-REG-SUBJECT-001","CWE-345"],["DEPS-REG-TIME-001","CWE-345"],["DEPS-REG-AGE-001","CWE-1104"],["DEPS-REG-INSTALLSCRIPT-001","CWE-829"],["DEPS-REG-SIGNATURES-001","CWE-345"],["DEPS-REG-ENGINES-001","CWE-1104"],["DEPS-REG-DRIFT-001","CWE-1104"],["DEPS-REG-DEPS-001","CWE-1104"],["DEPS-REG-PEER-001","CWE-829"],["DEPS-REG-BIN-001","CWE-22"],["DEPS-REG-REPOSITORY-001","CWE-829"]],I=ze.map(([t,i])=>n(t,i));var k=n("DEPS-TARBALL-HASH-001","CWE-353"),C=n("DEPS-TARBALL-ID-001","CWE-494"),R=n("DEPS-TARBALL-LIFECYCLE-001","CWE-829"),b=n("DEPS-TARBALL-NET-001","CWE-829"),A=n("DEPS-TARBALL-SHELL-001","CWE-78"),N=n("DEPS-TARBALL-CRED-001","CWE-522"),D=n("DEPS-TARBALL-OBFUSC-001","CWE-506"),w=n("DEPS-TARBALL-BIN-001","CWE-427"),v=n("DEPS-TARBALL-NATIVE-001","CWE-829"),T=n("DEPS-TARBALL-HOOK-001","CWE-829"),_=n("DEPS-TARBALL-HIDDEN-001","CWE-451"),M=n("DEPS-TARBALL-PATH-001","CWE-22"),L=n("DEPS-TARBALL-SIZE-001","CWE-770"),O=n("DEPS-TARBALL-LICENSE-001","CWE-1104"),F=n("DEPS-TARBALL-MANIFEST-001","CWE-494"),$=n("DEPS-TARBALL-INSTALLJS-001","CWE-829"),x=n("DEPS-TARBALL-TOPLEVEL-001","CWE-829"),W=n("DEPS-TARBALL-ENV-001","CWE-200"),V=n("DEPS-TARBALL-DYNAMIC-001","CWE-829"),j=n("DEPS-TARBALL-SKIP-001","CWE-353"),G=[k,C,R,b,A,N,D,w,v,T,_,M,L,O,F,$,x,W,V,j];({[k.ruleId]:{},[C.ruleId]:{},[R.ruleId]:{},[b.ruleId]:{},[A.ruleId]:{},[N.ruleId]:{},[D.ruleId]:{},[w.ruleId]:{},[v.ruleId]:{},[T.ruleId]:{},[_.ruleId]:{},[M.ruleId]:{},[L.ruleId]:{},[O.ruleId]:{},[F.ruleId]:{},[$.ruleId]:{},[x.ruleId]:{},[W.ruleId]:{},[V.ruleId]:{},[j.ruleId]:{}});var Je="DEPS-SCRIPT-TRANSITIVE-001",Xe="DEPS-SCRIPT-OPTIONAL-001",Ze="DEPS-SCRIPT-DEV-001",Qe="DEPS-SCRIPT-PREPARE-001",en="DEPS-SCRIPT-PREPUBLISH-001",nn="DEPS-SCRIPT-CURL-001",tn="DEPS-SCRIPT-BASE64-001",rn="DEPS-SCRIPT-NODEGYP-001",sn="DEPS-SCRIPT-WRITE-001",on="DEPS-SCRIPT-LOCK-001",an="DEPS-SCRIPT-GIT-001",cn="DEPS-SCRIPT-TOKEN-001",dn="DEPS-SCRIPT-PUBLISH-001",un="DEPS-SCRIPT-TRUSTED-001",fn="DEPS-SCRIPT-MISMATCH-001",ln="DEPS-SCRIPT-MULTI-001",pn="DEPS-SCRIPT-BIN-001",gn="DEPS-SCRIPT-SHEBANG-001",mn="DEPS-SCRIPT-COND-001",hn="DEPS-SCRIPT-ROLLUP-001";var B=[n(Je,"CWE-829"),n(Xe,"CWE-829"),n(Ze,"CWE-829"),n(Qe,"CWE-829"),n(en,"CWE-829"),n(nn,"CWE-494"),n(tn,"CWE-95"),n(rn,"CWE-829"),n(sn,"CWE-22"),n(on,"CWE-506"),n(an,"CWE-829"),n(cn,"CWE-522"),n(dn,"CWE-506"),n(un,"CWE-829"),n(fn,"CWE-829"),n(ln,"CWE-829"),n(pn,"CWE-829"),n(gn,"CWE-78"),n(mn,"CWE-829"),n(hn,"CWE-829")];c();u();g();promisify(execFile);u();var H=[{name:"express"},{name:"fastify"},{name:"koa"},{name:"hapi"},{name:"restify"},{name:"next"},{name:"nuxt"},{name:"gatsby"},{name:"react"},{name:"react-dom"},{name:"react-router"},{name:"react-router-dom"},{name:"redux"},{name:"vue"},{name:"vuex"},{name:"vue-router"},{name:"angular"},{name:"rxjs"},{name:"zone.js"},{name:"svelte"},{name:"solid-js"},{name:"preact"},{name:"jquery"},{name:"lodash"},{name:"underscore"},{name:"ramda"},{name:"minimist"},{name:"yargs"},{name:"commander"},{name:"inquirer"},{name:"chalk"},{name:"debug"},{name:"ms"},{name:"semver"},{name:"glob"},{name:"rimraf"},{name:"mkdirp"},{name:"fs-extra"},{name:"path-to-regexp"},{name:"qs"},{name:"body-parser"},{name:"cookie-parser"},{name:"cors"},{name:"helmet"},{name:"morgan"},{name:"compression"},{name:"multer"},{name:"passport"},{name:"jsonwebtoken"},{name:"bcrypt"},{name:"bcryptjs"},{name:"argon2"},{name:"uuid"},{name:"nanoid"},{name:"axios"},{name:"node-fetch"},{name:"got"},{name:"request"},{name:"superagent"},{name:"undici"},{name:"ws"},{name:"socket.io"},{name:"socket.io-client"},{name:"mqtt"},{name:"amqplib"},{name:"ioredis"},{name:"redis"},{name:"mongoose"},{name:"mongodb"},{name:"pg"},{name:"mysql"},{name:"mysql2"},{name:"sqlite3"},{name:"better-sqlite3"},{name:"sequelize"},{name:"typeorm"},{name:"prisma"},{name:"knex"},{name:"dotenv"},{name:"cross-env"},{name:"nodemon"},{name:"pm2"},{name:"concurrently"},{name:"typescript"},{name:"ts-node"},{name:"tsx"},{name:"tsup"},{name:"esbuild"},{name:"swc"},{name:"vite"},{name:"webpack"},{name:"webpack-cli"},{name:"webpack-dev-server"},{name:"rollup"},{name:"parcel"},{name:"turbo"},{name:"nx"},{name:"lerna"},{name:"eslint"},{name:"prettier"},{name:"stylelint"},{name:"husky"},{name:"lint-staged"},{name:"jest"},{name:"vitest"},{name:"mocha"},{name:"chai"},{name:"sinon"},{name:"ava"},{name:"tap"},{name:"supertest"},{name:"cypress"},{name:"playwright"},{name:"puppeteer"},{name:"jsdom"},{name:"happy-dom"},{name:"testing-library"},{name:"@testing-library/react"},{name:"@testing-library/jest-dom"},{name:"babel"},{name:"@babel/core"},{name:"@babel/preset-env"},{name:"@babel/preset-react"},{name:"@babel/preset-typescript"},{name:"@babel/plugin-transform-runtime"},{name:"core-js"},{name:"regenerator-runtime"},{name:"prop-types"},{name:"classnames"},{name:"clsx"},{name:"tailwindcss"},{name:"postcss"},{name:"autoprefixer"},{name:"sass"},{name:"less"},{name:"styled-components"},{name:"emotion"},{name:"@emotion/react"},{name:"@emotion/styled"},{name:"antd"},{name:"@mui/material"},{name:"@chakra-ui/react"},{name:"bootstrap"},{name:"moment"},{name:"dayjs"},{name:"date-fns"},{name:"luxon"},{name:"immutable"},{name:"immer"},{name:"zustand"},{name:"jotai"},{name:"recoil"},{name:"mobx"},{name:"mobx-react"},{name:"graphql"},{name:"apollo-server"},{name:"@apollo/client"},{name:"urql"},{name:"relay-runtime"},{name:"swagger-ui-express"},{name:"openapi-types"},{name:"zod"},{name:"yup"},{name:"joi"},{name:"ajv"},{name:"class-validator"},{name:"class-transformer"},{name:"nestjs"},{name:"@nestjs/core"},{name:"@nestjs/common"},{name:"express-validator"},{name:"express-rate-limit"},{name:"express-session"},{name:"cookie-session"},{name:"connect-redis"},{name:"csurf"},{name:"hpp"},{name:"winston"},{name:"pino"},{name:"bunyan"},{name:"log4js"},{name:"ora"},{name:"cli-table3"},{name:"figlet"},{name:"boxen"},{name:"update-notifier"},{name:"meow"},{name:"arg"},{name:"minimatch"},{name:"micromatch"},{name:"picomatch"},{name:"fast-glob"},{name:"globby"},{name:"ignore"},{name:"slash"},{name:"normalize-path"},{name:"resolve"},{name:"resolve-from"},{name:"import-fresh"},{name:"pkg-dir"},{name:"find-up"},{name:"locate-path"},{name:"p-locate"},{name:"p-limit"},{name:"p-map"},{name:"p-retry"},{name:"p-queue"},{name:"delay"},{name:"pretty-ms"},{name:"humanize-ms"},{name:"bytes"},{name:"pretty-bytes"},{name:"mime"},{name:"mime-types"},{name:"content-type"},{name:"content-disposition"},{name:"etag"},{name:"fresh"},{name:"negotiator"},{name:"accepts"},{name:"type-is"},{name:"raw-body"},{name:"on-finished"},{name:"on-headers"},{name:"finalhandler"},{name:"serve-static"},{name:"send"},{name:"range-parser"},{name:"http-errors"},{name:"statuses"},{name:"depd"},{name:"inherits"},{name:"util-deprecate"},{name:"safe-buffer"},{name:"buffer"},{name:"ieee754"},{name:"base64-js"},{name:"punycode"},{name:"ipaddr.js"},{name:"proxy-addr"},{name:"forwarded"},{name:"parseurl"},{name:"encodeurl"},{name:"escape-html"},{name:"setprototypeof"},{name:"object-assign"},{name:"vary"},{name:"methods"},{name:"array-flatten"},{name:"merge-descriptors"},{name:"utils-merge"},{name:"ee-first"},{name:"unpipe"},{name:"destroy"},{name:"toidentifier"},{name:"safer-buffer"},{name:"iconv-lite"},{name:"string_decoder"},{name:"readable-stream"},{name:"through2"},{name:"through"},{name:"pump"},{name:"end-of-stream"},{name:"once"},{name:"wrappy"},{name:"inflight"},{name:"balanced-match"},{name:"brace-expansion"},{name:"concat-map"},{name:"path-is-absolute"},{name:"fs.realpath"},{name:"graceful-fs"},{name:"jsonfile"},{name:"universalify"},{name:"is-stream"},{name:"is-plain-obj"},{name:"is-plain-object"},{name:"kind-of"},{name:"typeof"},{name:"isarray"},{name:"isobject"},{name:"has-flag"},{name:"supports-color"},{name:"ansi-styles"},{name:"color-convert"},{name:"color-name"},{name:"escape-string-regexp"},{name:"has-ansi"},{name:"strip-ansi"},{name:"ansi-regex"},{name:"wrap-ansi"},{name:"cli-cursor"},{name:"restore-cursor"},{name:"onetime"},{name:"mimic-fn"},{name:"signal-exit"},{name:"is-interactive"},{name:"is-unicode-supported"},{name:"log-symbols"},{name:"stdin-discarder"},{name:"string-width"},{name:"eastasianwidth"},{name:"emoji-regex"},{name:"get-east-asian-width"},{name:"widest-line"},{name:"cli-boxes"},{name:"type-fest"},{name:"camelcase"},{name:"decamelize"},{name:"kebab-case"},{name:"snake-case"},{name:"change-case"},{name:"titleize"},{name:"upper-case"},{name:"lower-case"},{name:"dot-prop"},{name:"dot-object"},{name:"object-path"},{name:"deepmerge"},{name:"lodash.merge"},{name:"lodash.get"},{name:"lodash.set"},{name:"lodash.clonedeep"},{name:"lodash.debounce"},{name:"lodash.throttle"},{name:"lodash.isequal"},{name:"lodash.omit"},{name:"lodash.pick"},{name:"clone"},{name:"clone-deep"},{name:"shallow-clone"},{name:"arrify"},{name:"array-union"},{name:"array-uniq"},{name:"uniq"},{name:"unique-string"},{name:"crypto-random-string"},{name:"randombytes"},{name:"randomfill"},{name:"hash.js"},{name:"create-hash"},{name:"create-hmac"},{name:"browserify-sign"},{name:"parse-asn1"},{name:"bn.js"},{name:"elliptic"},{name:"minimalistic-assert"},{name:"brorand"},{name:"hmac-drbg"},{name:"hash-base"},{name:"md5.js"},{name:"ripemd160"},{name:"sha.js"},{name:"cipher-base"},{name:"evp_bytestokey"},{name:"browserify-aes"},{name:"browserify-des"},{name:"browserify-rsa"},{name:"browserify-zlib"},{name:"buffer-xor"},{name:"des.js"},{name:"diffie-hellman"},{name:"miller-rabin"},{name:"public-encrypt"},{name:"random-bytes"},{name:"pbkdf2"},{name:"scrypt-js"},{name:"tweetnacl"},{name:"libsodium"},{name:"noble-hashes"},{name:"jose"},{name:"jwks-rsa"},{name:"passport-jwt"},{name:"passport-local"},{name:"passport-oauth2"},{name:"openid-client"},{name:"oidc-provider"},{name:"express-oauth-server"},{name:"nocache"},{name:"frameguard"},{name:"hsts"},{name:"ienoopen"},{name:"x-xss-protection"},{name:"aws-sdk"},{name:"@aws-sdk/client-s3"},{name:"@aws-sdk/client-sqs"},{name:"@aws-sdk/client-sns"},{name:"@aws-sdk/client-dynamodb"},{name:"@aws-sdk/client-lambda"},{name:"@aws-sdk/client-secrets-manager"},{name:"@google-cloud/storage"},{name:"@google-cloud/pubsub"},{name:"firebase-admin"},{name:"firebase"},{name:"stripe"},{name:"twilio"},{name:"nodemailer"},{name:"sendgrid"},{name:"@sendgrid/mail"},{name:"mailgun.js"},{name:"postmark"},{name:"bull"},{name:"bullmq"},{name:"agenda"},{name:"bee-queue"},{name:"kue"},{name:"cron"},{name:"node-cron"},{name:"node-schedule"},{name:"later"},{name:"rrule"},{name:"sharp"},{name:"jimp"},{name:"gm"},{name:"canvas"},{name:"pdfkit"},{name:"puppeteer-core"},{name:"cheerio"},{name:"linkedom"},{name:"parse5"},{name:"htmlparser2"},{name:"css-select"},{name:"domhandler"},{name:"entities"},{name:"he"},{name:"escape-goat"},{name:"sanitize-html"},{name:"dompurify"},{name:"xss"},{name:"validator"},{name:"validator.js"},{name:"express-mongo-sanitize"},{name:"sqlstring"},{name:"pg-format"},{name:"tedious"},{name:"mssql"},{name:"oracledb"},{name:"snowflake-sdk"},{name:"cassandra-driver"},{name:"neo4j-driver"},{name:"elasticsearch"},{name:"@elastic/elasticsearch"},{name:"meilisearch"},{name:"algoliasearch"},{name:"typesense"},{name:"openai"},{name:"@anthropic-ai/sdk"},{name:"langchain"},{name:"@langchain/core"},{name:"tiktoken"},{name:"gpt-tokenizer"},{name:"zod-to-json-schema"},{name:"json-schema"},{name:"ajv-formats"},{name:"ajv-keywords"},{name:"fast-json-stringify"},{name:"fast-json-stable-stringify"},{name:"json-stable-stringify"},{name:"json5"},{name:"js-yaml"},{name:"yaml"},{name:"toml"},{name:"ini"},{name:"dotenv-expand"},{name:"env-var"},{name:"envalid"},{name:"convict"},{name:"nconf"},{name:"config"},{name:"rc"},{name:"cosmiconfig"},{name:"lilconfig"},{name:"pkg-up"},{name:"read-pkg"},{name:"read-pkg-up"},{name:"normalize-package-data"},{name:"validate-npm-package-name"},{name:"npm-package-arg"},{name:"pacote"},{name:"npm-registry-fetch"},{name:"libnpmpublish"},{name:"npmlog"},{name:"are-we-there-yet"},{name:"gauge"},{name:"wide-align"},{name:"console-control-strings"},{name:"has-unicode"},{name:"delegates"},{name:"aproba"},{name:"set-blocking"},{name:"silent-error"},{name:"bluebird"},{name:"q"},{name:"asap"},{name:"promise"},{name:"native-promise-only"},{name:"es6-promise"},{name:"es6-promisify"},{name:"pify"},{name:"pinkie"},{name:"pinkie-promise"},{name:"thenify"},{name:"any-promise"},{name:"mz"},{name:"co"},{name:"thunkify"},{name:"async"},{name:"async-retry"},{name:"retry"},{name:"backoff"},{name:"exponential-backoff"},{name:"p-timeout"},{name:"p-defer"},{name:"p-lazy"},{name:"p-min-delay"},{name:"p-reflect"},{name:"p-settle"},{name:"p-some"},{name:"p-any"},{name:"p-all"},{name:"p-each-series"},{name:"p-filter"},{name:"p-reduce"},{name:"p-whilst"},{name:"p-do-whilst"},{name:"p-forever"},{name:"p-wait-for"},{name:"p-event"},{name:"p-times"},{name:"p-progress"},{name:"ow"},{name:"is"},{name:"is-what"},{name:"is-number"},{name:"is-string"},{name:"is-array"},{name:"is-object"},{name:"is-function"},{name:"is-promise"},{name:"is-generator-fn"},{name:"is-async-function"},{name:"is-callable"},{name:"is-regex"},{name:"is-date-object"},{name:"is-symbol"},{name:"is-bigint"},{name:"is-boolean-object"},{name:"is-number-object"},{name:"is-weakmap"},{name:"is-weakset"},{name:"is-map"},{name:"is-set"},{name:"is-error"},{name:"is-docker"},{name:"is-wsl"},{name:"is-ci"},{name:"ci-info"},{name:"hosted-git-info"},{name:"normalize-url"},{name:"prepend-http"},{name:"human-signals"},{name:"execa"},{name:"cross-spawn"},{name:"shebang-command"},{name:"shebang-regex"},{name:"which"},{name:"isexe"},{name:"path-key"},{name:"npm-run-path"},{name:"strip-final-newline"},{name:"get-stream"},{name:"merge-stream"},{name:"mimic-response"},{name:"decompress-response"},{name:"clone-response"},{name:"responselike"},{name:"cacheable-request"},{name:"cacheable-lookup"},{name:"http2-wrapper"},{name:"lowercase-keys"},{name:"to-readable-stream"},{name:"duplexer3"},{name:"pumpify"},{name:"duplexify"},{name:"from2"},{name:"flush-write-stream"},{name:"parallel-transform"},{name:"cyclist"},{name:"xtend"},{name:"object.assign"},{name:"object-keys"},{name:"define-properties"},{name:"has-property-descriptors"},{name:"gopd"},{name:"es-define-property"},{name:"es-errors"},{name:"es-object-atoms"},{name:"get-intrinsic"},{name:"has-symbols"},{name:"has-proto"},{name:"function-bind"},{name:"has"},{name:"hasown"},{name:"call-bind"},{name:"set-function-length"},{name:"define-data-property"},{name:"available-typed-arrays"},{name:"for-each"},{name:"is-typed-array"},{name:"which-typed-array"},{name:"typed-array-buffer"},{name:"typed-array-byte-length"},{name:"typed-array-byte-offset"},{name:"typed-array-length"},{name:"possible-typed-array-names"},{name:"is-array-buffer"},{name:"is-shared-array-buffer"},{name:"is-weakref"},{name:"is-finalizationregistry"},{name:"is-generator-function"},{name:"generator-function"},{name:"safe-regex-test"},{name:"regexp.prototype.flags"},{name:"side-channel"},{name:"object-inspect"},{name:"strict-uri-encode"},{name:"query-string"},{name:"querystring"},{name:"querystring-es3"},{name:"split-on-first"},{name:"filter-obj"},{name:"decode-uri-component"},{name:"url-parse"},{name:"requires-port"},{name:"querystringify"},{name:"parse-path"},{name:"parse-url"},{name:"humanize-url"},{name:"file-url"},{name:"data-uri-to-buffer"},{name:"form-data"},{name:"formdata-node"},{name:"formdata-polyfill"},{name:"busboy"},{name:"dicer"},{name:"streamsearch"},{name:"append-field"},{name:"concat-stream"},{name:"buffer-from"},{name:"typedarray"},{name:"process-nextick-args"},{name:"core-util-is"},{name:"bl"},{name:"tar-stream"},{name:"tar"},{name:"tar-fs"},{name:"unzipper"},{name:"yauzl"},{name:"yazl"},{name:"archiver"},{name:"compressing"},{name:"adm-zip"},{name:"jszip"},{name:"node-stream-zip"},{name:"unzip-stream"},{name:"gunzip-maybe"},{name:"peek-stream"},{name:"mississippi"},{name:"cloneable-readable"},{name:"into-stream"},{name:"stream-browserify"},{name:"stream-http"},{name:"https-browserify"},{name:"http-browserify"},{name:"url"},{name:"process"},{name:"timers-browserify"},{name:"tty-browserify"},{name:"vm-browserify"},{name:"console-browserify"},{name:"constants-browserify"},{name:"crypto-browserify"},{name:"domain-browser"},{name:"events"},{name:"os-browserify"},{name:"path-browserify"},{name:"assert"},{name:"util"},{name:"node-libs-browser"},{name:"setimmediate"},{name:"webpack-sources"},{name:"terser-webpack-plugin"},{name:"css-loader"},{name:"style-loader"},{name:"file-loader"},{name:"url-loader"},{name:"raw-loader"},{name:"html-webpack-plugin"},{name:"mini-css-extract-plugin"},{name:"copy-webpack-plugin"},{name:"clean-webpack-plugin"},{name:"webpack-bundle-analyzer"},{name:"webpack-merge"},{name:"webpack-node-externals"},{name:"ts-loader"},{name:"babel-loader"},{name:"sass-loader"},{name:"postcss-loader"},{name:"less-loader"},{name:"source-map-loader"},{name:"thread-loader"},{name:"cache-loader"},{name:"eslint-loader"},{name:"eslint-webpack-plugin"},{name:"fork-ts-checker-webpack-plugin"},{name:"tsconfig-paths-webpack-plugin"},{name:"awesome-typescript-loader"},{name:"vue-loader"},{name:"vue-template-compiler"},{name:"svelte-loader"},{name:"solid-refresh"},{name:"vite-plugin-solid"},{name:"@vitejs/plugin-react"},{name:"@vitejs/plugin-vue"},{name:"rollup-plugin-terser"},{name:"@rollup/plugin-node-resolve"},{name:"@rollup/plugin-commonjs"},{name:"@rollup/plugin-json"},{name:"@rollup/plugin-typescript"},{name:"@rollup/plugin-replace"},{name:"@rollup/plugin-babel"},{name:"rollup-plugin-dts"},{name:"rollup-plugin-esbuild"},{name:"esbuild-register"},{name:"ts-node-dev"},{name:"tsconfig-paths"},{name:"tslib"},{name:"@types/node"},{name:"@types/express"},{name:"@types/react"},{name:"@types/react-dom"},{name:"@types/lodash"},{name:"@types/jest"},{name:"@types/mocha"},{name:"@types/cors"},{name:"@types/compression"},{name:"@types/cookie-parser"},{name:"@types/morgan"},{name:"@types/multer"},{name:"@types/passport"},{name:"@types/jsonwebtoken"},{name:"@types/bcryptjs"},{name:"@types/uuid"},{name:"@types/ws"},{name:"@types/pg"},{name:"@types/nodemailer"},{name:"@types/supertest"},{name:"@types/js-yaml"},{name:"typedoc"},{name:"jsdoc"},{name:"documentation"},{name:"compodoc"},{name:"storybook"},{name:"@storybook/react"},{name:"@storybook/vue3"},{name:"chromatic"},{name:"msw"},{name:"nock"},{name:"testdouble"},{name:"rewire"},{name:"proxyquire"},{name:"mock-fs"},{name:"memfs"},{name:"mockdate"},{name:"timekeeper"},{name:"lolex"},{name:"fake-timers"},{name:"@sinonjs/fake-timers"},{name:"clock-mock"},{name:"jest-extended"},{name:"jest-when"},{name:"jest-mock"},{name:"jest-environment-jsdom"},{name:"jest-environment-node"},{name:"babel-jest"},{name:"ts-jest"},{name:"vite-node"},{name:"tinyspy"},{name:"tinypool"},{name:"chai-as-promised"},{name:"chai-http"},{name:"should"},{name:"expect.js"},{name:"unexpected"},{name:"tape"},{name:"node:test"},{name:"uvu"},{name:"uvu/assert"},{name:"kleur"},{name:"picocolors"},{name:"colorette"},{name:"ansi-colors"},{name:"yoctocolors"},{name:"nanocolors"}];var h=H.map(t=>t.name);var kn="DEPS-SCOPE-TYPO-001",Cn="DEPS-HOMOGLYPH-001",Rn="DEPS-BIDI-001",bn="DEPS-MIXEDSCRIPT-001",An="DEPS-SEPARATOR-001",Nn="DEPS-REPEAT-001",Dn="DEPS-SUFFIX-001",wn="DEPS-SCOPE-NEW-001",vn="DEPS-SCOPE-SYNTAX-001",Tn="DEPS-TYPES-001",_n="DEPS-DEPRECATED-REPLACE-001",Mn="DEPS-TYPO-TRANSITIVE-001",Ln="DEPS-NAME-LENGTH-001",On="DEPS-NAME-CASE-001",Fn="DEPS-NAME-ENCODED-001",$n="DEPS-ALIAS-SQUAT-001",xn="DEPS-SELFNAME-001",Wn="DEPS-WORKSPACE-NAME-001";new Set(h);var K=new Set,Vn=new Set,Y=new Map,q=new Map;for(let t of h){let i=Gn(t),s=q.get(i);s===void 0?q.set(i,[t]):s.push(t);let r=jn(t);if(r===void 0){K.add(t);continue}Vn.add(r.scope),K.add(r.base);let o=Y.get(r.scope)??new Set;o.add(r.base),Y.set(r.scope,o);}var z=[n(kn,"CWE-494"),n(Cn,"CWE-1007"),n(Rn,"CWE-1007"),n(bn,"CWE-1007"),n(An,"CWE-494"),n(Nn,"CWE-494"),n(Dn,"CWE-494"),n(wn,"CWE-1104"),n(vn,"CWE-20"),n(Tn,"CWE-1104"),n(_n,"CWE-1104"),n(Mn,"CWE-494"),n(Ln,"CWE-1284"),n(On,"CWE-178"),n(Fn,"CWE-20"),n($n,"CWE-494"),n(xn,"CWE-694"),n(Wn,"CWE-494")];function jn(t){if(!t.startsWith("@"))return;let i=t.indexOf("/");if(i<=1||t.indexOf("/",i+1)!==-1)return;let s=t.slice(1,i),r=t.slice(i+1);if(!(s.length===0||r.length===0))return {scope:s,base:r}}function Gn(t){return t.replaceAll(".","-").replaceAll("_","-")}c();new Set(builtinModules.flatMap(t=>[t,t.replace(/^node:/,"")]));var Bn="DEPS-GRAPH-OPTIONAL-001",Hn="DEPS-PEER-MISSING-001",Kn="DEPS-GRAPH-ALIAS-001",Yn="DEPS-DUALPACKAGE-001",qn="DEPS-PHANTOM-002",J=[n(Bn,"CWE-829"),n(Hn,"CWE-829"),n(Kn,"CWE-829"),n(Yn,"CWE-829"),n(qn,"CWE-829")];u();var X=[];var Z=[...y,...P,...I,...G,...B,...z,...J,...X];var Q="This is not a certification or audit. FullShield produces an evidence-style mapping only; it does not certify PCI DSS, SOC 2, ISO, or any other standard.",e=(t,i,s,r,o)=>({ruleId:t,owasp:i,cwe:s,asvs:r,pci:o}),zn=[e("SAST-SQLI-001","A03:2021 Injection","CWE-89","V5.3.4","PCI DSS 6.2.4"),e("SAST-NOSQLI-001","A03:2021 Injection","CWE-943","V5.3.4","PCI DSS 6.2.4"),e("SAST-CMDI-001","A03:2021 Injection","CWE-78","V5.3.3","PCI DSS 6.2.4"),e("SAST-PATH-001","A01:2021 Broken Access Control","CWE-22","V12.3.1","PCI DSS 6.2.4"),e("SAST-EVAL-001","A03:2021 Injection","CWE-95","V5.3.3","PCI DSS 6.2.4"),e("SAST-SSRF-001","A10:2021 SSRF","CWE-918","V12.6.1","PCI DSS 6.2.4"),e("SAST-REDIRECT-001","A01:2021 Broken Access Control","CWE-601","V5.1.1","PCI DSS 6.4.2"),e("SAST-PROTO-001","A03:2021 Injection","CWE-1321","V5.3.3","PCI DSS 6.2.4"),e("SAST-XSS-001","A03:2021 Injection","CWE-79","V5.3.3","PCI DSS 6.2.4"),e("SAST-LDAP-001","A03:2021 Injection","CWE-90","V5.3.4","PCI DSS 6.4.2"),e("SAST-CRLF-001","A03:2021 Injection","CWE-113","V5.3.3","PCI DSS 6.2.4"),e("SAST-MAIL-001","A03:2021 Injection","CWE-93","V5.3.3","PCI DSS 6.2.4"),e("SAST-FORMULA-001","A03:2021 Injection","CWE-1236","V5.3.3","PCI DSS 6.2.4"),e("SAST-BROWSER-001","A10:2021 SSRF","CWE-918","V12.6.1","PCI DSS 6.2.4"),e("SAST-DYNIMPORT-001","A08:2021 Software Integrity Failures","CWE-829","V1.5.1","PCI DSS 6.3.2"),e("SAST-REDIS-001","A03:2021 Injection","CWE-94","V5.3.3","PCI DSS 6.2.4"),e("SAST-XPATH-001","A03:2021 Injection","CWE-643","V5.3.3","PCI DSS 6.2.4"),e("SAST-SEARCH-001","A03:2021 Injection","CWE-943","V5.3.3","PCI DSS 6.2.4"),e("SAST-OBJECTKEY-001","A01:2021 Broken Access Control","CWE-22","V5.3.3","PCI DSS 6.2.4"),e("SAST-WORKER-001","A03:2021 Injection","CWE-94","V5.3.3","PCI DSS 6.2.4"),e("DEPS-RSC-001","A06:2021 Vulnerable Components","CWE-502","V1.5.1","PCI DSS 6.3.3"),e("CONFIG-COOLDOWN-001","A06:2021 Vulnerable Components","CWE-829","V1.5.1","PCI DSS 6.3.2"),e("SUPPLY-IMPLANT-001","A08:2021 Software Integrity Failures","CWE-506","V1.5.1","PCI DSS 6.3.2"),e("DEPS-VERINFLATE-001","A06:2021 Vulnerable Components","CWE-427","V1.5.1","PCI DSS 6.3.2"),e("AGENT-UNICODE-001","A03:2021 Injection","CWE-74","V5.3.3","PCI DSS 6.2.4"),e("AGENT-INJECT-001","A03:2021 Injection","CWE-74","V5.3.3","PCI DSS 6.2.4"),e("AGENT-EXFIL-001","A01:2021 Broken Access Control","CWE-200","V8.3.4","PCI DSS 6.5.3"),e("AGENT-SHELL-001","A03:2021 Injection","CWE-74","V5.3.3","PCI DSS 6.2.4"),e("SAST-AGENTSPAWN-001","A03:2021 Injection","CWE-78","V5.3.3","PCI DSS 6.2.4"),e("MCP-006","A03:2021 Injection","CWE-74","V5.3.3","PCI DSS 6.2.4"),e("MCP-007","A03:2021 Injection","CWE-74","V5.3.3","PCI DSS 6.2.4"),e("MCP-008","A04:2021 Insecure Design","CWE-290","V1.2.1","PCI DSS 6.2.4"),e("CONFIG-VITEFS-001","A01:2021 Broken Access Control","CWE-22","V12.3.1","PCI DSS 6.2.4"),e("SAST-HOST-001","A01:2021 Broken Access Control","CWE-644","V5.1.1","PCI DSS 6.2.4"),e("SAST-MARKUP-001","A03:2021 Injection","CWE-79","V5.3.3","PCI DSS 6.2.4"),e("SAST-TRUSTHOST-001","A07:2021 Identification Failures","CWE-346","V3.5.1","PCI DSS 6.2.4"),e("SAST-JWT-001","A07:2021 Identification Failures","CWE-347","V3.5.3","PCI DSS 6.5.10"),e("SAST-CRYPTO-001","A02:2021 Cryptographic Failures","CWE-338","V6.2.1","PCI DSS 3.6 / 4.2"),e("SAST-CIPHER-001","A02:2021 Cryptographic Failures","CWE-327","V6.2.1","PCI DSS 3.6 / 4.2"),e("SAST-CIPHER-002","A02:2021 Cryptographic Failures","CWE-321","V6.2.1","PCI DSS 3.6 / 4.2"),e("SAST-RSA-001","A02:2021 Cryptographic Failures","CWE-326","V6.2.1","PCI DSS 3.6 / 4.2"),e("SAST-JWT-002","A07:2021 Identification Failures","CWE-613","V3.5.3","PCI DSS 6.5.10"),e("SAST-TLS-001","A02:2021 Cryptographic Failures","CWE-295","V9.2.1","PCI DSS 4.2"),e("SAST-TLS-002","A02:2021 Cryptographic Failures","CWE-295","V9.2.1","PCI DSS 4.2"),e("SAST-SSTI-001","A03:2021 Injection","CWE-1336","V5.2.5","PCI DSS 6.2.4"),e("SAST-LOGLEAK-001","A09:2021 Security Logging Failures","CWE-532","V7.1.3","PCI DSS 10.3"),e("SAST-WEBHOOK-001","A07:2021 Identification Failures","CWE-345","V13.2.5","PCI DSS 6.5.10"),e("SAST-SESSION-002","A07:2021 Identification Failures","CWE-384","V3.2.1","PCI DSS 6.5.10"),e("SAST-IDOR-001","A01:2021 Broken Access Control","CWE-639","V4.2.1","PCI DSS 6.2.4"),e("SAST-DOMXSS-001","A03:2021 Injection","CWE-79","V5.3.3","PCI DSS 6.2.4"),e("SAST-REACT-001","A03:2021 Injection","CWE-79","V5.3.3","PCI DSS 6.2.4"),e("SAST-POSTMSG-001","A07:2021 Identification Failures","CWE-346","V13.2.5","PCI DSS 6.2.4"),e("SAST-TOKENSTORE-001","A02:2021 Cryptographic Failures","CWE-922","V8.3.4","PCI DSS 3.5"),e("SAST-NEXT-001","A01:2021 Broken Access Control","CWE-306","V4.1.1","PCI DSS 8.2"),e("CONFIG-NEXT-001","A01:2021 Broken Access Control","CWE-306","V4.1.1","PCI DSS 8.2"),e("CONFIG-NEXT-002","A05:2021 Security Misconfiguration","CWE-942","V14.4.5","PCI DSS 6.4.3"),e("SECRET-NEXTPUB-001","A02:2021 Cryptographic Failures","CWE-798","V6.4.1","PCI DSS 3.2"),e("SAST-AUTH-001","A07:2021 Identification Failures","CWE-306","V4.1.1","PCI DSS 8.2"),e("SECRET-AWS-001","A02:2021 Cryptographic Failures","CWE-798","V6.4.1","PCI DSS 3.2 / 8.3"),e("SECRET-STRIPE-001","A02:2021 Cryptographic Failures","CWE-798","V6.4.1","PCI DSS 3.2"),e("SECRET-GITHUB-001","A02:2021 Cryptographic Failures","CWE-798","V6.4.1","PCI DSS 8.3"),e("SECRET-SLACK-001","A02:2021 Cryptographic Failures","CWE-798","V6.4.1","PCI DSS 8.3"),e("SECRET-GOOGLE-001","A02:2021 Cryptographic Failures","CWE-798","V6.4.1","PCI DSS 8.3"),e("SECRET-AIKEY-001","A02:2021 Cryptographic Failures","CWE-798","V6.4.1","PCI DSS 8.3"),e("SECRET-PRIVKEY-001","A02:2021 Cryptographic Failures","CWE-321","V6.4.1","PCI DSS 3.5 / 4.2"),e("SECRET-DBURL-001","A02:2021 Cryptographic Failures","CWE-798","V6.4.1","PCI DSS 3.2 / 8.3"),e("SECRET-JWT-001","A02:2021 Cryptographic Failures","CWE-798","V6.4.1","PCI DSS 3.5"),e("SECRET-SESSION-001","A02:2021 Cryptographic Failures","CWE-798","V6.4.1","PCI DSS 3.5 / 6.2.4"),e("CONFIG-DIRLIST-001","A05:2021 Security Misconfiguration","CWE-548","V12.1.1","PCI DSS 2.2 / 6.4.3"),e("SECRET-ENVFILE-001","A02:2021 Cryptographic Failures","CWE-312","V8.3.4","PCI DSS 3.2"),e("SECRET-FILE-002","A02:2021 Cryptographic Failures","CWE-798","V6.4.1","PCI DSS 3.2 / 8.3"),e("SECRET-FILE-003","A02:2021 Cryptographic Failures","CWE-798","V6.4.1","PCI DSS 3.2 / 8.3"),e("SECRET-FILE-004","A02:2021 Cryptographic Failures","CWE-798","V6.4.1","PCI DSS 3.2 / 8.3"),e("SECRET-FILE-005","A02:2021 Cryptographic Failures","CWE-312","V8.3.4","PCI DSS 3.2"),e("SECRET-FILE-006","A02:2021 Cryptographic Failures","CWE-798","V6.4.1","PCI DSS 3.2 / 8.3"),e("SECRET-FILE-007","A02:2021 Cryptographic Failures","CWE-321","V6.4.1","PCI DSS 3.5 / 4.2"),e("SECRET-ENTROPY-001","A02:2021 Cryptographic Failures","CWE-798","V6.4.1","PCI DSS 8.3"),e("DEPS-VULN-001","A06:2021 Vulnerable Components","CWE-1104","V14.2.1","PCI DSS 6.3.3"),e("DEPS-VENDORED-001","A06:2021 Vulnerable Components","CWE-1104","V14.2.1","PCI DSS 6.3.3"),e("DEPS-UNFIXED-001","A06:2021 Vulnerable Components","CWE-1104","V14.2.1","PCI DSS 6.3.3"),e("DEPS-MALICIOUS-001","A06:2021 Vulnerable Components","CWE-506","V14.2.1","PCI DSS 6.3.3 / 12.10"),e("DEPS-TYPOSQUAT-001","A06:2021 Vulnerable Components","CWE-494","V14.2.1","PCI DSS 6.3.3"),e("DEPS-NOLOCK-001","A06:2021 Vulnerable Components","CWE-1104","V14.2.1","PCI DSS 6.3.3"),e("DEPS-DEPRECATED-001","A06:2021 Vulnerable Components","CWE-1104","V14.2.1","PCI DSS 6.3.3"),e("CONFIG-HELMET-001","A05:2021 Security Misconfiguration","CWE-693","V14.4.3","PCI DSS 6.4.3"),e("CONFIG-BODYLIMIT-001","A05:2021 Security Misconfiguration","CWE-400","V13.1.1","PCI DSS 6.2.4"),e("CONFIG-CORS-001","A05:2021 Security Misconfiguration","CWE-942","V14.4.5","PCI DSS 6.4.3"),e("CONFIG-CORS-002","A05:2021 Security Misconfiguration","CWE-942","V14.4.5","PCI DSS 6.4.3"),e("CONFIG-RATELIMIT-001","A07:2021 Identification Failures","CWE-307","V2.2.1","PCI DSS 8.3.4"),e("CONFIG-ERRSTACK-001","A04:2021 Insecure Design","CWE-209","V7.4.1","PCI DSS 6.2.4"),e("CONFIG-ELECTRON-001","A05:2021 Security Misconfiguration","CWE-749","V14.1.3","PCI DSS 6.4.3"),e("CONFIG-ELECTRON-002","A01:2021 Broken Access Control","CWE-939","V5.1.1","PCI DSS 6.2.4"),e("CONFIG-ELECTRON-003","A05:2021 Security Misconfiguration","CWE-749","V14.1.3","PCI DSS 6.4.3"),e("CONFIG-INSTALLSCRIPT-001","A06:2021 Vulnerable Components","CWE-829","V14.2.1","PCI DSS 6.3.3"),e("CONFIG-DOCKER-LATEST-001","A05:2021 Security Misconfiguration","CWE-1188","V14.1.3","PCI DSS 2.2"),e("CONFIG-DOCKER-ROOT-001","A05:2021 Security Misconfiguration","CWE-250","V14.1.3","PCI DSS 2.2"),e("CONFIG-DOCKER-ENV-001","A02:2021 Cryptographic Failures","CWE-798","V6.4.1","PCI DSS 3.2"),e("EDGE-CDN-001","A05:2021 Security Misconfiguration","CWE-693","V14.4.3","PCI DSS 1.2 / 6.4"),e("EDGE-CSP-001","A05:2021 Security Misconfiguration","CWE-693","V14.4.3","PCI DSS 6.4.3"),e("EDGE-EXPOSE-001","A05:2021 Security Misconfiguration","CWE-538","V14.4.3","PCI DSS 2.2 / 6.4"),e("EDGE-HSTS-001","A05:2021 Security Misconfiguration","CWE-319","V9.1.1","PCI DSS 4.2"),e("EDGE-REFERRER-001","A05:2021 Security Misconfiguration","CWE-201","V14.4.3","PCI DSS 6.4.3"),e("EDGE-TLS-001","A02:2021 Cryptographic Failures","CWE-319","V9.1.1","PCI DSS 4.2"),e("EDGE-XCTO-001","A05:2021 Security Misconfiguration","CWE-693","V14.4.3","PCI DSS 6.4.3"),e("EDGE-XFO-001","A05:2021 Security Misconfiguration","CWE-1021","V14.4.3","PCI DSS 6.4.3"),e("RASP-SQL-001","A03:2021 Injection","CWE-89","V5.3.4","PCI DSS 6.4.2"),e("RASP-SHELL-001","A03:2021 Injection","CWE-78","V5.3.3","PCI DSS 6.4.2"),e("RASP-PATH-001","A01:2021 Broken Access Control","CWE-22","V12.3.1","PCI DSS 6.4.2"),e("RASP-NOSQL-001","A03:2021 Injection","CWE-943","V5.3.4","PCI DSS 6.4.2"),e("RASP-SSRF-001","A10:2021 SSRF","CWE-918","V12.6.1","PCI DSS 1.3"),e("RASP-PROTO-001","A03:2021 Injection","CWE-1321","V5.3.3","PCI DSS 6.4.2"),e("RASP-SSTI-001","A03:2021 Injection","CWE-94","V5.3.3","PCI DSS 6.4.2"),e("AI-INJECT-001","A03:2021 Injection","CWE-1427","V5.3.3","PCI DSS 6.2.4"),e("LLM-001","A03:2021 Injection","CWE-1426","V5.3.3","PCI DSS 6.2.4"),e("LLM-002","A03:2021 Injection","CWE-94","V5.3.3","PCI DSS 6.2.4"),e("LLM-003","A01:2021 Broken Access Control","CWE-250","V4.1.1","PCI DSS 7.2"),e("LLM-004","A02:2021 Cryptographic Failures","CWE-798","V6.4.1","PCI DSS 3.2"),e("LLM-005","A04:2021 Insecure Design","CWE-770","V13.1.1","PCI DSS 6.2.4"),e("SUPPLY-INSTALLSCRIPT-001","A06:2021 Vulnerable Components","CWE-829","V14.2.1","PCI DSS 6.3.3"),e("SUPPLY-NPMRC-NET-001","A06:2021 Vulnerable Components","CWE-506","V14.2.1","PCI DSS 12.10"),e("SUPPLY-OBFUSCATE-001","A06:2021 Vulnerable Components","CWE-506","V14.2.1","PCI DSS 6.3.3"),e("SUPPLY-BEHAVIOR-001","A06:2021 Vulnerable Components","CWE-829","V14.2.1","PCI DSS 6.3.3"),e("SUPPLY-COOLDOWN-001","A06:2021 Vulnerable Components","CWE-1104","V14.2.1","PCI DSS 6.3.3"),e("SUPPLY-LOCKURL-001","A08:2021 Integrity Failures","CWE-494","V14.2.3","PCI DSS 6.3.3"),e("SUPPLY-LOCKINTEGRITY-001","A08:2021 Integrity Failures","CWE-353","V14.2.3","PCI DSS 6.3.3"),e("SUPPLY-CONFUSION-001","A08:2021 Integrity Failures","CWE-494","V14.2.3","PCI DSS 6.3.3"),e("SUPPLY-PROVENANCE-001","A08:2021 Integrity Failures","CWE-494","V14.2.3","PCI DSS 6.3.3"),e("SUPPLY-PROV-001","A08:2021 Integrity Failures","CWE-494","V14.2.3","PCI DSS 6.3.3"),e("SUPPLY-WORM-001","A06:2021 Vulnerable Components","CWE-506","V14.2.1","PCI DSS 6.3.3 / 12.10"),e("SUPPLY-WORKFLOW-001","A08:2021 Integrity Failures","CWE-829","V14.2.3","PCI DSS 6.3.3"),e("SUPPLY-CHAINC2-001","A06:2021 Vulnerable Components","CWE-506","V14.2.1","PCI DSS 6.3.3"),e("SUPPLY-STEALER-001","A06:2021 Vulnerable Components","CWE-506","V14.2.1","PCI DSS 12.10"),e("SUPPLY-PLATFORMGATE-001","A06:2021 Vulnerable Components","CWE-829","V14.2.1","PCI DSS 6.3.3"),e("SUPPLY-SECHOLDER-001","A06:2021 Vulnerable Components","CWE-506","V14.2.1","PCI DSS 6.3.3"),e("SUPPLY-CAP-001","A06:2021 Vulnerable Components","CWE-829","V14.2.1","PCI DSS 6.3.3"),e("IAC-GHA-UNPINNED-001","A08:2021 Integrity Failures","CWE-494","V14.2.3","PCI DSS 6.3.3"),e("IAC-GHA-PRTARGET-001","A01:2021 Broken Access Control","CWE-269","V4.1.1","PCI DSS 7.2"),e("IAC-GHA-PERMS-001","A01:2021 Broken Access Control","CWE-250","V4.1.1","PCI DSS 7.2"),e("IAC-GHA-SECRETLOG-001","A09:2021 Security Logging Failures","CWE-532","V7.1.1","PCI DSS 3.2 / 10.2"),e("IAC-GHA-INJECT-001","A03:2021 Injection","CWE-94","V5.2.4","PCI DSS 6.2.4"),e("IAC-GHA-PRCHECKOUT-001","A01:2021 Broken Access Control","CWE-829","V4.1.1","PCI DSS 6.2.4"),e("DEPS-LICENSE-001","A06:2021 Vulnerable Components","CWE-1104","V14.2.1","PCI DSS 6.3.3"),e("IAC-TF-S3PUBLIC-001","A01:2021 Broken Access Control","CWE-284","V12.1.1","PCI DSS 1.3 / 3.2"),e("IAC-TF-SGOPEN-001","A05:2021 Security Misconfiguration","CWE-284","V1.4.1","PCI DSS 1.2 / 1.3"),e("IAC-TF-UNENCRYPTED-001","A02:2021 Cryptographic Failures","CWE-311","V6.2.1","PCI DSS 3.4 / 4.2"),e("IAC-K8S-PRIV-001","A05:2021 Security Misconfiguration","CWE-250","V14.1.3","PCI DSS 2.2"),e("IAC-COMPOSE-PRIV-001","A05:2021 Security Misconfiguration","CWE-250","V14.1.3","PCI DSS 2.2"),e("RASP-EGRESS-001","A10:2021 SSRF","CWE-918","V12.6.1","PCI DSS 1.3"),e("RASP-HONEY-001","A09:2021 Security Logging Failures","CWE-778","V7.1.1","PCI DSS 10.2 / 11.5"),e("RASP-FAIL-OPEN-001","A05:2021 Security Misconfiguration","CWE-755","V14.4.3","PCI DSS 6.4.3"),e("RUNTIME-SQLI-001","A03:2021 Injection","CWE-89","V5.3.4","PCI DSS 6.4.2"),e("RUNTIME-XSS-001","A03:2021 Injection","CWE-79","V5.3.3","PCI DSS 6.4.2"),e("RUNTIME-PATH-001","A01:2021 Broken Access Control","CWE-22","V12.3.1","PCI DSS 6.4.2"),e("RUNTIME-RATELIMIT-001","A07:2021 Identification Failures","CWE-307","V2.2.1","PCI DSS 8.3.4"),e("RUNTIME-BODY-001","A05:2021 Security Misconfiguration","CWE-400","V13.1.1","PCI DSS 6.2.4"),e("RUNTIME-ANOMALY-001","A04:2021 Insecure Design","CWE-754","V14.4.3","PCI DSS 10.2"),e("AI-IDOR-001","A01:2021 Broken Access Control","CWE-639","V4.1.1","PCI DSS 7.2"),e("AI-MASSASSIGN-001","A01:2021 Broken Access Control","CWE-915","V5.1.1","PCI DSS 6.2.4"),e("SAST-REDOS-001","A05:2021 Security Misconfiguration","CWE-1333","V5.1.5","PCI DSS 6.2.4"),e("SAST-DESER-001","A08:2021 Integrity Failures","CWE-502","V5.5.3","PCI DSS 6.2.4"),e("SAST-XXE-001","A05:2021 Security Misconfiguration","CWE-611","V5.5.2","PCI DSS 6.2.4"),e("SAST-UPLOAD-001","A04:2021 Insecure Design","CWE-434","V12.5.1","PCI DSS 6.2.4"),e("SAST-COOKIE-001","A05:2021 Security Misconfiguration","CWE-614/1004","V3.4.2","PCI DSS 6.2.4"),e("SAST-CSRF-001","A01:2021 Broken Access Control","CWE-352","V4.2.2","PCI DSS 6.4.3"),e("SAST-MASSASSIGN-001","A01:2021 Broken Access Control","CWE-915","V5.1.1","PCI DSS 6.2.4"),e("SAST-TIMING-001","A07:2021 Identification Failures","CWE-208","V2.10.3","PCI DSS 8.3"),e("SAST-HASH-001","A02:2021 Cryptographic Failures","CWE-916","V6.2.2","PCI DSS 8.3.1"),e("SAST-GQL-001","A04:2021 Insecure Design","CWE-770/200","V13.1.1","PCI DSS 6.2.4"),e("SAST-SKIP-001","A05:2021 Security Misconfiguration","CWE-693","V1.1.1","PCI DSS 6.2.4"),e("CONFIG-TRUSTPROXY-001","A07:2021 Identification Failures","CWE-290","V2.2.1","PCI DSS 8.3.4"),e("SECRET-BUNDLE-001","A02:2021 Cryptographic Failures","CWE-798","V6.4.1","PCI DSS 3.2 / 8.3"),e("DLP-SECRET-001","A02:2021 Cryptographic Failures","CWE-200","V8.3.4","PCI DSS 3.2 / 8.3"),e("DLP-STACK-001","A04:2021 Insecure Design","CWE-209","V7.4.1","PCI DSS 6.2.4"),e("DLP-INTERNAL-001","A01:2021 Broken Access Control","CWE-200","V8.3.4","PCI DSS 1.3 / 2.2"),e("DLP-CARD-001","A02:2021 Cryptographic Failures","CWE-359","V8.3.4","PCI DSS 3.3 / 3.4"),e("DLP-PII-001","A01:2021 Broken Access Control","CWE-359","V8.3.4","PCI DSS 3.2 / 6.4.2"),e("MCP-001","A02:2021 Cryptographic Failures","CWE-798","V6.4.1","PCI DSS 3.2 / 8.3"),e("MCP-002","A08:2021 Integrity Failures","CWE-494","V14.2.3","PCI DSS 6.3.3"),e("MCP-003","A01:2021 Broken Access Control","CWE-250","V4.1.1","PCI DSS 7.2"),e("MCP-004","A03:2021 Injection","CWE-74","V5.3.3","PCI DSS 6.2.4"),e("MCP-005","A02:2021 Cryptographic Failures","CWE-319","V9.1.1","PCI DSS 4.2"),e("HOST-SSH-001","A06:2021 Vulnerable Components","CWE-364","V14.2.1","PCI DSS 6.3.3"),e("HOST-SSH-002","A05:2021 Security Misconfiguration","CWE-693","V14.4.3","PCI DSS 2.2"),e("HOST-SSH-003","A07:2021 Identification Failures","CWE-307","V7.1.1","PCI DSS 10.2 / 11.5"),e("DEPS-PHANTOM-001","A06:2021 Vulnerable Components","CWE-829","V14.2.1","PCI DSS 6.3.3"),e("DEPS-LOCKMISMATCH-001","A06:2021 Vulnerable Components","CWE-1104","V14.2.1","PCI DSS 6.3.3"),e("CONFIG-BRUTE-001","A07:2021 Identification Failures","CWE-307","V2.2.1","PCI DSS 8.3"),e("CONFIG-COMPOSE-ENVFILE-001","A05:2021 Security Misconfiguration","CWE-526","V14.4.3","PCI DSS 2.2"),e("CONFIG-COMPOSE-HOSTNET-001","A05:2021 Security Misconfiguration","CWE-668","V14.4.3","PCI DSS 1.3 / 2.2"),e("CONFIG-COMPOSE-PORT-001","A05:2021 Security Misconfiguration","CWE-668","V14.4.3","PCI DSS 1.3 / 2.2"),e("CONFIG-COMPOSE-PRIVILEGED-001","A05:2021 Security Misconfiguration","CWE-250","V4.1.1","PCI DSS 7.2"),e("CONFIG-COMPOSE-SOCKET-001","A05:2021 Security Misconfiguration","CWE-250","V4.1.1","PCI DSS 7.2"),e("CONFIG-CORSV2-001","A05:2021 Security Misconfiguration","CWE-942","V14.4.3","PCI DSS 6.2.4"),e("CONFIG-CSRF-001","A01:2021 Broken Access Control","CWE-352","V4.2.2","PCI DSS 6.4.3"),e("CONFIG-DEBUG-ROUTE-001","A05:2021 Security Misconfiguration","CWE-489","V14.3.2","PCI DSS 6.2.4"),e("CONFIG-DOCKER-ARG-001","A05:2021 Security Misconfiguration","CWE-526","V14.4.3","PCI DSS 2.2"),e("CONFIG-DOCKER-ENVFILE-001","A05:2021 Security Misconfiguration","CWE-526","V14.4.3","PCI DSS 2.2"),e("CONFIG-DOCKER-NPM-001","A06:2021 Vulnerable Components","CWE-829","V14.2.1","PCI DSS 6.3.3"),e("CONFIG-DOCKER-ROOT-STAGE-001","A05:2021 Security Misconfiguration","CWE-250","V4.1.1","PCI DSS 2.2"),e("CONFIG-DOCKER-USER-001","A05:2021 Security Misconfiguration","CWE-250","V4.1.1","PCI DSS 2.2"),e("CONFIG-EDGE-HEADER-001","A05:2021 Security Misconfiguration","CWE-693","V14.4.3","PCI DSS 6.2.4"),e("CONFIG-EDGE-PUBLICENV-001","A01:2021 Broken Access Control","CWE-200","V8.3.4","PCI DSS 6.2.4"),e("CONFIG-EDGE-REDIRECT-001","A01:2021 Broken Access Control","CWE-601","V5.1.1","PCI DSS 6.4.2"),e("CONFIG-ENV-MISSING-001","A05:2021 Security Misconfiguration","CWE-1188","V14.4.3","PCI DSS 2.2"),e("CONFIG-ENV-UNREAD-001","A05:2021 Security Misconfiguration","CWE-1188","V14.4.3","PCI DSS 2.2"),e("CONFIG-INSPECT-001","A05:2021 Security Misconfiguration","CWE-489","V14.3.2","PCI DSS 6.2.4"),e("CONFIG-K8S-HOSTPATH-001","A05:2021 Security Misconfiguration","CWE-668","V14.4.3","PCI DSS 2.2"),e("CONFIG-K8S-MEMLIMIT-001","A05:2021 Security Misconfiguration","CWE-770","V13.1.1","PCI DSS 6.2.4"),e("CONFIG-K8S-PRIVILEGED-001","A05:2021 Security Misconfiguration","CWE-250","V4.1.1","PCI DSS 7.2"),e("CONFIG-K8S-ROOT-001","A05:2021 Security Misconfiguration","CWE-250","V4.1.1","PCI DSS 2.2"),e("CONFIG-K8S-SATOKEN-001","A01:2021 Broken Access Control","CWE-250","V4.1.1","PCI DSS 7.2"),e("CONFIG-K8S-SECRET-001","A02:2021 Cryptographic Failures","CWE-798","V6.4.1","PCI DSS 3.2 / 8.3"),e("CONFIG-NODE-EVAL-001","A03:2021 Injection","CWE-95","V5.3.3","PCI DSS 6.2.4"),e("CONFIG-NODE-PARSER-001","A05:2021 Security Misconfiguration","CWE-20","V5.1.1","PCI DSS 6.2.4"),e("CONFIG-PROXY-001","A05:2021 Security Misconfiguration","CWE-441","V14.4.3","PCI DSS 1.3 / 2.2"),e("CONFIG-SAM-AUTH-001","A07:2021 Identification Failures","CWE-306","V4.1.1","PCI DSS 8.2"),e("CONFIG-SAM-IAM-001","A01:2021 Broken Access Control","CWE-250","V4.1.1","PCI DSS 7.2"),e("CONFIG-SAM-SECRET-001","A02:2021 Cryptographic Failures","CWE-798","V6.4.1","PCI DSS 3.2 / 8.3"),e("CONFIG-SESSION-HTTPONLY-001","A05:2021 Security Misconfiguration","CWE-1004","V3.4.2","PCI DSS 6.2.4"),e("CONFIG-SESSION-SAMESITE-001","A05:2021 Security Misconfiguration","CWE-352","V4.2.2","PCI DSS 6.4.3"),e("CONFIG-SESSION-SAVE-001","A07:2021 Identification Failures","CWE-384","V3.2.1","PCI DSS 6.5.10"),e("CONFIG-SESSION-SECRET-001","A02:2021 Cryptographic Failures","CWE-798","V6.4.1","PCI DSS 3.2 / 8.3"),e("CONFIG-SESSION-SECURE-001","A05:2021 Security Misconfiguration","CWE-614","V3.4.2","PCI DSS 4.2"),e("CONFIG-SOURCEMAP-001","A05:2021 Security Misconfiguration","CWE-540","V14.3.2","PCI DSS 6.2.4"),e("CONFIG-SRI-001","A08:2021 Integrity Failures","CWE-353","V14.2.3","PCI DSS 6.3.3"),e("CONFIG-SRI-WEAK-001","A08:2021 Integrity Failures","CWE-353","V14.2.3","PCI DSS 6.3.3"),e("CONFIG-TF-ACL-001","A01:2021 Broken Access Control","CWE-284","V4.1.1","PCI DSS 1.3 / 2.2"),e("CONFIG-TF-CIDR-001","A01:2021 Broken Access Control","CWE-284","V4.1.1","PCI DSS 1.3 / 2.2"),e("CONFIG-TF-USERDATA-001","A02:2021 Cryptographic Failures","CWE-798","V6.4.1","PCI DSS 3.2 / 8.3"),e("CONFIG-UNIT-ROOT-001","A05:2021 Security Misconfiguration","CWE-250","V4.1.1","PCI DSS 2.2"),e("CONFIG-UNIT-SECRET-001","A02:2021 Cryptographic Failures","CWE-798","V6.4.1","PCI DSS 3.2 / 8.3"),e("DEPS-ADVISORY-STALE-001","A06:2021 Vulnerable Components","CWE-1104","V14.2.1","PCI DSS 6.3.3"),e("DEPS-AGE-001","A06:2021 Vulnerable Components","CWE-1104","V14.2.1","PCI DSS 6.3.3"),e("DEPS-BINHOST-001","A06:2021 Vulnerable Components","CWE-829","V14.2.1","PCI DSS 6.3.3"),e("DEPS-CADENCE-001","A06:2021 Vulnerable Components","CWE-1104","V14.2.1","PCI DSS 6.3.3"),e("DEPS-CAP-POLICY-001","A01:2021 Broken Access Control","CWE-250","V4.1.1","PCI DSS 7.2"),e("DEPS-DUP-ADVISORY-001","A06:2021 Vulnerable Components","CWE-1104","V14.2.1","PCI DSS 6.3.3"),e("DEPS-GITPIN-001","A08:2021 Integrity Failures","CWE-829","V14.2.1","PCI DSS 6.3.3"),e("DEPS-MALSIG-001","A08:2021 Integrity Failures","CWE-506","V14.2.3","PCI DSS 6.3.3"),e("DEPS-MANIFEST-MISMATCH-001","A08:2021 Integrity Failures","CWE-829","V14.2.1","PCI DSS 6.3.3"),e("DEPS-MINIFIED-001","A08:2021 Integrity Failures","CWE-829","V14.2.1","PCI DSS 6.3.3"),e("DEPS-PIN-POLICY-001","A06:2021 Vulnerable Components","CWE-829","V14.2.1","PCI DSS 6.3.3"),e("DEPS-PRIVREG-001","A06:2021 Vulnerable Components","CWE-829","V14.2.1","PCI DSS 6.3.3"),e("DEPS-PUBLIC-SCOPE-001","A06:2021 Vulnerable Components","CWE-829","V14.2.1","PCI DSS 6.3.3"),e("DEPS-REPO-MISMATCH-001","A08:2021 Integrity Failures","CWE-829","V14.2.1","PCI DSS 6.3.3"),e("DEPS-REPRO-001","A08:2021 Integrity Failures","CWE-829","V14.2.1","PCI DSS 6.3.3"),e("DEPS-SCRIPT-HOST-001","A08:2021 Integrity Failures","CWE-829","V14.2.1","PCI DSS 6.3.3"),e("DEPS-TIMEGATE-001","A08:2021 Integrity Failures","CWE-829","V14.2.1","PCI DSS 6.3.3"),e("DEPS-UNUSED-SYMBOLS-001","A06:2021 Vulnerable Components","CWE-1104","V14.2.1","PCI DSS 6.3.3"),e("DEPS-URL-IMPORT-001","A08:2021 Integrity Failures","CWE-829","V14.2.1","PCI DSS 6.3.3"),e("SAST-APIKEY-QUERY-001","A01:2021 Broken Access Control","CWE-598","V8.3.4","PCI DSS 3.2 / 8.3"),e("SAST-COPIED-SNIPPET-001","A06:2021 Vulnerable Components","CWE-1104","V14.2.1","PCI DSS 6.3.3"),e("SAST-ENUM-001","A04:2021 Insecure Design","CWE-203","V7.4.1","PCI DSS 6.2.4"),e("SAST-ENV-CLIENT-001","A01:2021 Broken Access Control","CWE-200","V8.3.4","PCI DSS 6.2.4"),e("SAST-ERRSECRET-001","A04:2021 Insecure Design","CWE-209","V7.4.1","PCI DSS 6.2.4"),e("SAST-GQL-AUTHZ-001","A01:2021 Broken Access Control","CWE-285","V4.1.1","PCI DSS 7.2"),e("SAST-GRAPHQL-001","A04:2021 Insecure Design","CWE-770","V13.1.1","PCI DSS 6.2.4"),e("SAST-IDOR-002","A01:2021 Broken Access Control","CWE-639","V4.2.1","PCI DSS 6.2.4"),e("SAST-JWTDEEP-001","A07:2021 Identification Failures","CWE-347","V3.5.3","PCI DSS 6.5.10"),e("SAST-JWTDEEP-002","A07:2021 Identification Failures","CWE-347","V3.5.3","PCI DSS 6.5.10"),e("SAST-JWTDEEP-003","A07:2021 Identification Failures","CWE-347","V3.5.3","PCI DSS 6.5.10"),e("SAST-OAUTH-001","A07:2021 Identification Failures","CWE-287","V3.5.3","PCI DSS 8.2"),e("SAST-PASSWORD-PLAIN-001","A02:2021 Cryptographic Failures","CWE-256","V6.2.1","PCI DSS 8.3"),e("SAST-PASSWORD-WEAK-001","A07:2021 Identification Failures","CWE-521","V2.1.1","PCI DSS 8.3"),e("SAST-RESET-BYTES-001","A02:2021 Cryptographic Failures","CWE-330","V6.2.1","PCI DSS 8.3"),e("SAST-RESET-COMPARE-001","A07:2021 Identification Failures","CWE-208","V2.10.3","PCI DSS 8.3"),e("SAST-RESET-QUERY-001","A01:2021 Broken Access Control","CWE-598","V3.2.1","PCI DSS 8.3"),e("SAST-RESET-STORE-001","A02:2021 Cryptographic Failures","CWE-256","V6.4.1","PCI DSS 8.3"),e("SAST-RESET-UUID-001","A02:2021 Cryptographic Failures","CWE-330","V6.2.1","PCI DSS 8.3"),e("SAST-RESPMASK-001","A04:2021 Insecure Design","CWE-200","V7.4.1","PCI DSS 6.2.4"),e("SAST-TENANT-001","A01:2021 Broken Access Control","CWE-639","V4.2.1","PCI DSS 7.2"),e("SAST-UPLOAD-TYPE-001","A04:2021 Insecure Design","CWE-434","V12.5.1","PCI DSS 6.2.4"),e("SAST-WS-AUTH-001","A07:2021 Identification Failures","CWE-306","V4.1.1","PCI DSS 8.2"),...Z],Jn=new Map(zn.map(t=>[t.ruleId,t]));function Xn(t){return Jn.get(t)}function Vs(t,i="pci"){let s=t.map(r=>{let o=Xn(r.ruleId);return `${r.ruleId} ${r.severity??""} ${r.file??""} ${o?.pci??"unmapped"} ${o?.owasp??""} ${o?.cwe??""}`});return [`FullShield compliance mapping (${i})`,Q,"","ruleId severity file pci owasp cwe",...s,"",Q].join(`
1
+ import'crypto';import'fs/promises';import'path';import {builtinModules}from'module';import {AsyncLocalStorage}from'async_hooks';import'fs';import'url';import {execFile}from'child_process';import {promisify}from'util';var l=(t,i)=>()=>(t&&(i=t(t=0)),i);var S=l(()=>{});var g=l(()=>{S();});var c=l(()=>{});var u=l(()=>{});g();c();c();var m={NPM_LOCK:["NPM_SHRINKWRAP","NPM_LOCKVER","NPM_MULTLOCK","NPM_ROOTVER","NPM_NONSEMVER","NPM_NORESOLVED","NPM_RESOLVED_HOST","NPM_RESOLVED_HTTP","NPM_NOINTEGRITY","NPM_WEAKINTEGRITY","NPM_BADINTEGRITY","NPM_LINKDEP","NPM_GITDEP","NPM_ALIAS","NPM_BUNDLED","NPM_PEER","NPM_OPTIONAL","NPM_LOCKPATH","NPM_LOCKOMIT","NPM_DEVPROD"],NPM_MANIFEST:["NPM_FLOAT","NPM_GITSPEC","NPM_FILESPEC","NPM_URLSPEC","NPM_TAGSPEC","NPM_OVERRIDE_VULN","NPM_OVERRIDE_WIDE","NPM_OVERRIDE_ALIAS","NPM_LIFECYCLE","NPM_NPMRC_REG","NPM_NPMRC_SCRIPT","NPM_NPMRC_HOME","NPM_PACKAGEMANAGER","NPM_COREPACK","NPM_ENGINES","NPM_ENGINE_STRICT","NPM_TRUSTED","NPM_PUBLISHCONFIG","NPM_BINSHADOW","NPM_OSCPU"],NPM_REGISTRY:["NPM_REG_INTEGRITY","NPM_REG_TARBALL","NPM_REG_DEPRECATED","NPM_REG_UNPUBLISHED","NPM_REG_NPMUSER","NPM_REG_MAINTAINER","NPM_REG_PROV_ABSENT","NPM_REG_BUILDER","NPM_REG_REPO","NPM_REG_SUBJECT","NPM_REG_TIME","NPM_REG_TRANSITIVE_AGE","NPM_REG_INSTALLSCRIPT","NPM_REG_SIGNATURES","NPM_REG_ENGINES","NPM_REG_DRIFT","NPM_REG_DEPS","NPM_REG_PEER","NPM_REG_BIN","NPM_REG_REPOSITORY"],NPM_TARBALL:["NPM_TARBALL_HASH","NPM_TARBALL_ID","NPM_TARBALL_LIFECYCLE","NPM_TARBALL_NET","NPM_TARBALL_SHELL","NPM_TARBALL_CRED","NPM_TARBALL_OBFUSC","NPM_TARBALL_BIN","NPM_TARBALL_NATIVE","NPM_TARBALL_HOOK","NPM_TARBALL_HIDDEN","NPM_TARBALL_PATH","NPM_TARBALL_SIZE","NPM_TARBALL_LICENSE","NPM_TARBALL_MANIFEST","NPM_TARBALL_INSTALLJS","NPM_TARBALL_TOPLEVEL","NPM_TARBALL_ENV","NPM_TARBALL_DYNAMIC","NPM_TARBALL_GATE"],NPM_SCRIPTS:["NPM_SCRIPT_TRANSITIVE","NPM_SCRIPT_OPTIONAL","NPM_SCRIPT_DEV","NPM_SCRIPT_PREPARE","NPM_SCRIPT_PREPUBLISH","NPM_SCRIPT_CURL","NPM_SCRIPT_BASE64","NPM_SCRIPT_NODEGYP","NPM_SCRIPT_WRITE","NPM_SCRIPT_LOCK","NPM_SCRIPT_GIT","NPM_SCRIPT_TOKEN","NPM_SCRIPT_PUBLISH","NPM_SCRIPT_TRUSTED","NPM_SCRIPT_MISMATCH","NPM_SCRIPT_MULTI","NPM_SCRIPT_BIN","NPM_SCRIPT_SHEBANG","NPM_SCRIPT_COND","NPM_SCRIPT_ROLLUP"],NPM_NAMES:["NPM_SCOPE_TYPO","NPM_HOMOGLYPH","NPM_BIDI","NPM_MIXEDSCRIPT","NPM_SEPARATOR","NPM_REPEAT","NPM_SUFFIX","NPM_SCOPE_NEW","NPM_SCOPE_SYNTAX","NPM_TYPES","NPM_DEPRECATED_REPLACE","NPM_TYPO_TRANSITIVE","NPM_NAME_LENGTH","NPM_NAME_CASE","NPM_NAME_ENCODED","NPM_ALIAS_SQUAT","NPM_SELFNAME","NPM_WORKSPACE_NAME","NPM_POPULAR_LIST","NPM_DISTANCE2"],NPM_GRAPH:["NPM_GRAPH_INSTANCE","NPM_GRAPH_OPTIONAL","NPM_GRAPH_PEER","NPM_GRAPH_ALIAS","NPM_REACH_DYNAMIC","NPM_REACH_EXPORTS","NPM_REACH_CONDITIONS","NPM_REACH_BIN","NPM_REACH_WORKER","NPM_REACH_SUBPATH","NPM_REACH_TRY","NPM_REACH_REEXPORT","NPM_REACH_TYPEONLY","NPM_DUALPACKAGE","NPM_PHANTOM_DEEP"],NPM_ADVISORY:["NPM_OSV_RANGE","NPM_OSV_WITHDRAWN","NPM_OSV_CVSS","NPM_OSV_ALIAS","NPM_OSV_PURL","NPM_FIX_NESTED","NPM_SBOM_PURL","NPM_AUDIT_DIFF"]},ee=new Map;for(let t of Object.keys(m))for(let i of m[t])ee.set(i,t);function n(t,i){return {ruleId:t,owasp:"A06:2021 Vulnerable Components",cwe:i,asvs:"V14.2.1",pci:"PCI DSS 6.3.3"}}var te="DEPS-SHRINKWRAP-001",ie="DEPS-SHRINKWRAP-002",re="DEPS-LOCKVER-001",se="DEPS-MULTLOCK-001",oe="DEPS-ROOTVER-001",ae="DEPS-NONSEMVER-001",ce="DEPS-NORESOLVED-001",de="DEPS-RESOLVED-HOST-001",ue="DEPS-RESOLVED-HTTP-001",fe="DEPS-NOINTEGRITY-001",le="DEPS-WEAKINTEGRITY-001",pe="DEPS-BADINTEGRITY-001",ge="DEPS-LINKDEP-001",me="DEPS-GITDEP-001",he="DEPS-NPMALIAS-001",Se="DEPS-BUNDLED-001",ye="DEPS-PEER-UNDECLARED-001",Pe="DEPS-OPTIONAL-IMPORT-001",Ee="DEPS-LOCKPATH-001",Ie="DEPS-LOCKOMIT-001",ke="DEPS-DEV-PROD-EDGE-001";new Set(builtinModules.flatMap(t=>[t,t.replace(/^node:/,"")]));var y=[n(te,"CWE-829"),n(ie,"CWE-436"),n(re,"CWE-1104"),n(se,"CWE-436"),n(oe,"CWE-436"),n(ae,"CWE-1104"),n(ce,"CWE-829"),n(de,"CWE-494"),n(ue,"CWE-319"),n(fe,"CWE-353"),n(le,"CWE-328"),n(pe,"CWE-353"),n(ge,"CWE-829"),n(me,"CWE-829"),n(he,"CWE-829"),n(Se,"CWE-829"),n(ye,"CWE-829"),n(Pe,"CWE-703"),n(Ee,"CWE-22"),n(Ie,"CWE-829"),n(ke,"CWE-829")];u();c();new AsyncLocalStorage;var Ae="DEPS-FLOAT-001",Ne="DEPS-FLOAT-002",De="DEPS-GITSPEC-001",we="DEPS-FILESPEC-001",ve="DEPS-URLSPEC-001",Te="DEPS-TAGSPEC-001",_e="DEPS-OVERRIDE-VULN-001",Me="DEPS-OVERRIDE-WIDE-001",Le="DEPS-OVERRIDE-ALIAS-001",Oe="CONFIG-LIFECYCLE-001",Fe="DEPS-NPMRC-REG-001",$e="DEPS-NPMRC-SCRIPT-001",xe="DEPS-NPMRC-HOME-001",We="DEPS-PACKAGEMANAGER-001",Ve="DEPS-PACKAGEMANAGER-002",je="DEPS-COREPACK-001",Ge="CONFIG-ENGINES-001",Ue="DEPS-ENGINE-STRICT-001",Be="DEPS-TRUSTED-001",He="DEPS-PUBLISHCONFIG-001",Ke="DEPS-PUBLISHCONFIG-002",Ye="DEPS-BIN-SHADOW-001",qe="DEPS-OSCPU-001";var P=[n(Ae,"CWE-829"),n(Ne,"CWE-829"),n(De,"CWE-829"),n(we,"CWE-829"),n(ve,"CWE-494"),n(Te,"CWE-829"),n(_e,"CWE-1104"),n(Me,"CWE-829"),n(Le,"CWE-829"),n(Oe,"CWE-829"),n(Fe,"CWE-494"),n($e,"CWE-829"),n(xe,"CWE-494"),n(We,"CWE-1104"),n(Ve,"CWE-1104"),n(je,"CWE-353"),n(Ge,"CWE-1104"),n(Ue,"CWE-693"),n(Be,"CWE-829"),n(He,"CWE-494"),n(Ke,"CWE-668"),n(Ye,"CWE-427"),n(qe,"CWE-1104")];u();var ze=[["DEPS-REG-INTEGRITY-001","CWE-353"],["DEPS-REG-TARBALL-001","CWE-494"],["DEPS-REG-DEPRECATED-001","CWE-1104"],["DEPS-REG-UNPUBLISHED-001","CWE-829"],["DEPS-REG-NPMUSER-001","CWE-829"],["DEPS-REG-MAINTAINER-001","CWE-829"],["DEPS-REG-PROV-ABSENT-001","CWE-494"],["DEPS-REG-BUILDER-001","CWE-494"],["DEPS-REG-REPO-001","CWE-829"],["DEPS-REG-SUBJECT-001","CWE-345"],["DEPS-REG-TIME-001","CWE-345"],["DEPS-REG-AGE-001","CWE-1104"],["DEPS-REG-INSTALLSCRIPT-001","CWE-829"],["DEPS-REG-SIGNATURES-001","CWE-345"],["DEPS-REG-ENGINES-001","CWE-1104"],["DEPS-REG-DRIFT-001","CWE-1104"],["DEPS-REG-DEPS-001","CWE-1104"],["DEPS-REG-PEER-001","CWE-829"],["DEPS-REG-BIN-001","CWE-22"],["DEPS-REG-REPOSITORY-001","CWE-829"]],I=ze.map(([t,i])=>n(t,i));var k=n("DEPS-TARBALL-HASH-001","CWE-353"),C=n("DEPS-TARBALL-ID-001","CWE-494"),R=n("DEPS-TARBALL-LIFECYCLE-001","CWE-829"),b=n("DEPS-TARBALL-NET-001","CWE-829"),A=n("DEPS-TARBALL-SHELL-001","CWE-78"),N=n("DEPS-TARBALL-CRED-001","CWE-522"),D=n("DEPS-TARBALL-OBFUSC-001","CWE-506"),w=n("DEPS-TARBALL-BIN-001","CWE-427"),v=n("DEPS-TARBALL-NATIVE-001","CWE-829"),T=n("DEPS-TARBALL-HOOK-001","CWE-829"),_=n("DEPS-TARBALL-HIDDEN-001","CWE-451"),M=n("DEPS-TARBALL-PATH-001","CWE-22"),L=n("DEPS-TARBALL-SIZE-001","CWE-770"),O=n("DEPS-TARBALL-LICENSE-001","CWE-1104"),F=n("DEPS-TARBALL-MANIFEST-001","CWE-494"),$=n("DEPS-TARBALL-INSTALLJS-001","CWE-829"),x=n("DEPS-TARBALL-TOPLEVEL-001","CWE-829"),W=n("DEPS-TARBALL-ENV-001","CWE-200"),V=n("DEPS-TARBALL-DYNAMIC-001","CWE-829"),j=n("DEPS-TARBALL-SKIP-001","CWE-353"),G=[k,C,R,b,A,N,D,w,v,T,_,M,L,O,F,$,x,W,V,j];({[k.ruleId]:{},[C.ruleId]:{},[R.ruleId]:{},[b.ruleId]:{},[A.ruleId]:{},[N.ruleId]:{},[D.ruleId]:{},[w.ruleId]:{},[v.ruleId]:{},[T.ruleId]:{},[_.ruleId]:{},[M.ruleId]:{},[L.ruleId]:{},[O.ruleId]:{},[F.ruleId]:{},[$.ruleId]:{},[x.ruleId]:{},[W.ruleId]:{},[V.ruleId]:{},[j.ruleId]:{}});var Je="DEPS-SCRIPT-TRANSITIVE-001",Xe="DEPS-SCRIPT-OPTIONAL-001",Ze="DEPS-SCRIPT-DEV-001",Qe="DEPS-SCRIPT-PREPARE-001",en="DEPS-SCRIPT-PREPUBLISH-001",nn="DEPS-SCRIPT-CURL-001",tn="DEPS-SCRIPT-BASE64-001",rn="DEPS-SCRIPT-NODEGYP-001",sn="DEPS-SCRIPT-WRITE-001",on="DEPS-SCRIPT-LOCK-001",an="DEPS-SCRIPT-GIT-001",cn="DEPS-SCRIPT-TOKEN-001",dn="DEPS-SCRIPT-PUBLISH-001",un="DEPS-SCRIPT-TRUSTED-001",fn="DEPS-SCRIPT-MISMATCH-001",ln="DEPS-SCRIPT-MULTI-001",pn="DEPS-SCRIPT-BIN-001",gn="DEPS-SCRIPT-SHEBANG-001",mn="DEPS-SCRIPT-COND-001",hn="DEPS-SCRIPT-ROLLUP-001";var B=[n(Je,"CWE-829"),n(Xe,"CWE-829"),n(Ze,"CWE-829"),n(Qe,"CWE-829"),n(en,"CWE-829"),n(nn,"CWE-494"),n(tn,"CWE-95"),n(rn,"CWE-829"),n(sn,"CWE-22"),n(on,"CWE-506"),n(an,"CWE-829"),n(cn,"CWE-522"),n(dn,"CWE-506"),n(un,"CWE-829"),n(fn,"CWE-829"),n(ln,"CWE-829"),n(pn,"CWE-829"),n(gn,"CWE-78"),n(mn,"CWE-829"),n(hn,"CWE-829")];c();u();g();promisify(execFile);u();var H=[{name:"express"},{name:"fastify"},{name:"koa"},{name:"hapi"},{name:"restify"},{name:"next"},{name:"nuxt"},{name:"gatsby"},{name:"react"},{name:"react-dom"},{name:"react-router"},{name:"react-router-dom"},{name:"redux"},{name:"vue"},{name:"vuex"},{name:"vue-router"},{name:"angular"},{name:"rxjs"},{name:"zone.js"},{name:"svelte"},{name:"solid-js"},{name:"preact"},{name:"jquery"},{name:"lodash"},{name:"underscore"},{name:"ramda"},{name:"minimist"},{name:"yargs"},{name:"commander"},{name:"inquirer"},{name:"chalk"},{name:"debug"},{name:"ms"},{name:"semver"},{name:"glob"},{name:"rimraf"},{name:"mkdirp"},{name:"fs-extra"},{name:"path-to-regexp"},{name:"qs"},{name:"body-parser"},{name:"cookie-parser"},{name:"cors"},{name:"helmet"},{name:"morgan"},{name:"compression"},{name:"multer"},{name:"passport"},{name:"jsonwebtoken"},{name:"bcrypt"},{name:"bcryptjs"},{name:"argon2"},{name:"uuid"},{name:"nanoid"},{name:"axios"},{name:"node-fetch"},{name:"got"},{name:"request"},{name:"superagent"},{name:"undici"},{name:"ws"},{name:"socket.io"},{name:"socket.io-client"},{name:"mqtt"},{name:"amqplib"},{name:"ioredis"},{name:"redis"},{name:"mongoose"},{name:"mongodb"},{name:"pg"},{name:"mysql"},{name:"mysql2"},{name:"sqlite3"},{name:"better-sqlite3"},{name:"sequelize"},{name:"typeorm"},{name:"prisma"},{name:"knex"},{name:"dotenv"},{name:"cross-env"},{name:"nodemon"},{name:"pm2"},{name:"concurrently"},{name:"typescript"},{name:"ts-node"},{name:"tsx"},{name:"tsup"},{name:"esbuild"},{name:"swc"},{name:"vite"},{name:"webpack"},{name:"webpack-cli"},{name:"webpack-dev-server"},{name:"rollup"},{name:"parcel"},{name:"turbo"},{name:"nx"},{name:"lerna"},{name:"eslint"},{name:"prettier"},{name:"stylelint"},{name:"husky"},{name:"lint-staged"},{name:"jest"},{name:"vitest"},{name:"mocha"},{name:"chai"},{name:"sinon"},{name:"ava"},{name:"tap"},{name:"supertest"},{name:"cypress"},{name:"playwright"},{name:"puppeteer"},{name:"jsdom"},{name:"happy-dom"},{name:"testing-library"},{name:"@testing-library/react"},{name:"@testing-library/jest-dom"},{name:"babel"},{name:"@babel/core"},{name:"@babel/preset-env"},{name:"@babel/preset-react"},{name:"@babel/preset-typescript"},{name:"@babel/plugin-transform-runtime"},{name:"core-js"},{name:"regenerator-runtime"},{name:"prop-types"},{name:"classnames"},{name:"clsx"},{name:"tailwindcss"},{name:"postcss"},{name:"autoprefixer"},{name:"sass"},{name:"less"},{name:"styled-components"},{name:"emotion"},{name:"@emotion/react"},{name:"@emotion/styled"},{name:"antd"},{name:"@mui/material"},{name:"@chakra-ui/react"},{name:"bootstrap"},{name:"moment"},{name:"dayjs"},{name:"date-fns"},{name:"luxon"},{name:"immutable"},{name:"immer"},{name:"zustand"},{name:"jotai"},{name:"recoil"},{name:"mobx"},{name:"mobx-react"},{name:"graphql"},{name:"apollo-server"},{name:"@apollo/client"},{name:"urql"},{name:"relay-runtime"},{name:"swagger-ui-express"},{name:"openapi-types"},{name:"zod"},{name:"yup"},{name:"joi"},{name:"ajv"},{name:"class-validator"},{name:"class-transformer"},{name:"nestjs"},{name:"@nestjs/core"},{name:"@nestjs/common"},{name:"express-validator"},{name:"express-rate-limit"},{name:"express-session"},{name:"cookie-session"},{name:"connect-redis"},{name:"csurf"},{name:"hpp"},{name:"winston"},{name:"pino"},{name:"bunyan"},{name:"log4js"},{name:"ora"},{name:"cli-table3"},{name:"figlet"},{name:"boxen"},{name:"update-notifier"},{name:"meow"},{name:"arg"},{name:"minimatch"},{name:"micromatch"},{name:"picomatch"},{name:"fast-glob"},{name:"globby"},{name:"ignore"},{name:"slash"},{name:"normalize-path"},{name:"resolve"},{name:"resolve-from"},{name:"import-fresh"},{name:"pkg-dir"},{name:"find-up"},{name:"locate-path"},{name:"p-locate"},{name:"p-limit"},{name:"p-map"},{name:"p-retry"},{name:"p-queue"},{name:"delay"},{name:"pretty-ms"},{name:"humanize-ms"},{name:"bytes"},{name:"pretty-bytes"},{name:"mime"},{name:"mime-types"},{name:"content-type"},{name:"content-disposition"},{name:"etag"},{name:"fresh"},{name:"negotiator"},{name:"accepts"},{name:"type-is"},{name:"raw-body"},{name:"on-finished"},{name:"on-headers"},{name:"finalhandler"},{name:"serve-static"},{name:"send"},{name:"range-parser"},{name:"http-errors"},{name:"statuses"},{name:"depd"},{name:"inherits"},{name:"util-deprecate"},{name:"safe-buffer"},{name:"buffer"},{name:"ieee754"},{name:"base64-js"},{name:"punycode"},{name:"ipaddr.js"},{name:"proxy-addr"},{name:"forwarded"},{name:"parseurl"},{name:"encodeurl"},{name:"escape-html"},{name:"setprototypeof"},{name:"object-assign"},{name:"vary"},{name:"methods"},{name:"array-flatten"},{name:"merge-descriptors"},{name:"utils-merge"},{name:"ee-first"},{name:"unpipe"},{name:"destroy"},{name:"toidentifier"},{name:"safer-buffer"},{name:"iconv-lite"},{name:"string_decoder"},{name:"readable-stream"},{name:"through2"},{name:"through"},{name:"pump"},{name:"end-of-stream"},{name:"once"},{name:"wrappy"},{name:"inflight"},{name:"balanced-match"},{name:"brace-expansion"},{name:"concat-map"},{name:"path-is-absolute"},{name:"fs.realpath"},{name:"graceful-fs"},{name:"jsonfile"},{name:"universalify"},{name:"is-stream"},{name:"is-plain-obj"},{name:"is-plain-object"},{name:"kind-of"},{name:"typeof"},{name:"isarray"},{name:"isobject"},{name:"has-flag"},{name:"supports-color"},{name:"ansi-styles"},{name:"color-convert"},{name:"color-name"},{name:"escape-string-regexp"},{name:"has-ansi"},{name:"strip-ansi"},{name:"ansi-regex"},{name:"wrap-ansi"},{name:"cli-cursor"},{name:"restore-cursor"},{name:"onetime"},{name:"mimic-fn"},{name:"signal-exit"},{name:"is-interactive"},{name:"is-unicode-supported"},{name:"log-symbols"},{name:"stdin-discarder"},{name:"string-width"},{name:"eastasianwidth"},{name:"emoji-regex"},{name:"get-east-asian-width"},{name:"widest-line"},{name:"cli-boxes"},{name:"type-fest"},{name:"camelcase"},{name:"decamelize"},{name:"kebab-case"},{name:"snake-case"},{name:"change-case"},{name:"titleize"},{name:"upper-case"},{name:"lower-case"},{name:"dot-prop"},{name:"dot-object"},{name:"object-path"},{name:"deepmerge"},{name:"lodash.merge"},{name:"lodash.get"},{name:"lodash.set"},{name:"lodash.clonedeep"},{name:"lodash.debounce"},{name:"lodash.throttle"},{name:"lodash.isequal"},{name:"lodash.omit"},{name:"lodash.pick"},{name:"clone"},{name:"clone-deep"},{name:"shallow-clone"},{name:"arrify"},{name:"array-union"},{name:"array-uniq"},{name:"uniq"},{name:"unique-string"},{name:"crypto-random-string"},{name:"randombytes"},{name:"randomfill"},{name:"hash.js"},{name:"create-hash"},{name:"create-hmac"},{name:"browserify-sign"},{name:"parse-asn1"},{name:"bn.js"},{name:"elliptic"},{name:"minimalistic-assert"},{name:"brorand"},{name:"hmac-drbg"},{name:"hash-base"},{name:"md5.js"},{name:"ripemd160"},{name:"sha.js"},{name:"cipher-base"},{name:"evp_bytestokey"},{name:"browserify-aes"},{name:"browserify-des"},{name:"browserify-rsa"},{name:"browserify-zlib"},{name:"buffer-xor"},{name:"des.js"},{name:"diffie-hellman"},{name:"miller-rabin"},{name:"public-encrypt"},{name:"random-bytes"},{name:"pbkdf2"},{name:"scrypt-js"},{name:"tweetnacl"},{name:"libsodium"},{name:"noble-hashes"},{name:"jose"},{name:"jwks-rsa"},{name:"passport-jwt"},{name:"passport-local"},{name:"passport-oauth2"},{name:"openid-client"},{name:"oidc-provider"},{name:"express-oauth-server"},{name:"nocache"},{name:"frameguard"},{name:"hsts"},{name:"ienoopen"},{name:"x-xss-protection"},{name:"aws-sdk"},{name:"@aws-sdk/client-s3"},{name:"@aws-sdk/client-sqs"},{name:"@aws-sdk/client-sns"},{name:"@aws-sdk/client-dynamodb"},{name:"@aws-sdk/client-lambda"},{name:"@aws-sdk/client-secrets-manager"},{name:"@google-cloud/storage"},{name:"@google-cloud/pubsub"},{name:"firebase-admin"},{name:"firebase"},{name:"stripe"},{name:"twilio"},{name:"nodemailer"},{name:"sendgrid"},{name:"@sendgrid/mail"},{name:"mailgun.js"},{name:"postmark"},{name:"bull"},{name:"bullmq"},{name:"agenda"},{name:"bee-queue"},{name:"kue"},{name:"cron"},{name:"node-cron"},{name:"node-schedule"},{name:"later"},{name:"rrule"},{name:"sharp"},{name:"jimp"},{name:"gm"},{name:"canvas"},{name:"pdfkit"},{name:"puppeteer-core"},{name:"cheerio"},{name:"linkedom"},{name:"parse5"},{name:"htmlparser2"},{name:"css-select"},{name:"domhandler"},{name:"entities"},{name:"he"},{name:"escape-goat"},{name:"sanitize-html"},{name:"dompurify"},{name:"xss"},{name:"validator"},{name:"validator.js"},{name:"express-mongo-sanitize"},{name:"sqlstring"},{name:"pg-format"},{name:"tedious"},{name:"mssql"},{name:"oracledb"},{name:"snowflake-sdk"},{name:"cassandra-driver"},{name:"neo4j-driver"},{name:"elasticsearch"},{name:"@elastic/elasticsearch"},{name:"meilisearch"},{name:"algoliasearch"},{name:"typesense"},{name:"openai"},{name:"@anthropic-ai/sdk"},{name:"langchain"},{name:"@langchain/core"},{name:"tiktoken"},{name:"gpt-tokenizer"},{name:"zod-to-json-schema"},{name:"json-schema"},{name:"ajv-formats"},{name:"ajv-keywords"},{name:"fast-json-stringify"},{name:"fast-json-stable-stringify"},{name:"json-stable-stringify"},{name:"json5"},{name:"js-yaml"},{name:"yaml"},{name:"toml"},{name:"ini"},{name:"dotenv-expand"},{name:"env-var"},{name:"envalid"},{name:"convict"},{name:"nconf"},{name:"config"},{name:"rc"},{name:"cosmiconfig"},{name:"lilconfig"},{name:"pkg-up"},{name:"read-pkg"},{name:"read-pkg-up"},{name:"normalize-package-data"},{name:"validate-npm-package-name"},{name:"npm-package-arg"},{name:"pacote"},{name:"npm-registry-fetch"},{name:"libnpmpublish"},{name:"npmlog"},{name:"are-we-there-yet"},{name:"gauge"},{name:"wide-align"},{name:"console-control-strings"},{name:"has-unicode"},{name:"delegates"},{name:"aproba"},{name:"set-blocking"},{name:"silent-error"},{name:"bluebird"},{name:"q"},{name:"asap"},{name:"promise"},{name:"native-promise-only"},{name:"es6-promise"},{name:"es6-promisify"},{name:"pify"},{name:"pinkie"},{name:"pinkie-promise"},{name:"thenify"},{name:"any-promise"},{name:"mz"},{name:"co"},{name:"thunkify"},{name:"async"},{name:"async-retry"},{name:"retry"},{name:"backoff"},{name:"exponential-backoff"},{name:"p-timeout"},{name:"p-defer"},{name:"p-lazy"},{name:"p-min-delay"},{name:"p-reflect"},{name:"p-settle"},{name:"p-some"},{name:"p-any"},{name:"p-all"},{name:"p-each-series"},{name:"p-filter"},{name:"p-reduce"},{name:"p-whilst"},{name:"p-do-whilst"},{name:"p-forever"},{name:"p-wait-for"},{name:"p-event"},{name:"p-times"},{name:"p-progress"},{name:"ow"},{name:"is"},{name:"is-what"},{name:"is-number"},{name:"is-string"},{name:"is-array"},{name:"is-object"},{name:"is-function"},{name:"is-promise"},{name:"is-generator-fn"},{name:"is-async-function"},{name:"is-callable"},{name:"is-regex"},{name:"is-date-object"},{name:"is-symbol"},{name:"is-bigint"},{name:"is-boolean-object"},{name:"is-number-object"},{name:"is-weakmap"},{name:"is-weakset"},{name:"is-map"},{name:"is-set"},{name:"is-error"},{name:"is-docker"},{name:"is-wsl"},{name:"is-ci"},{name:"ci-info"},{name:"hosted-git-info"},{name:"normalize-url"},{name:"prepend-http"},{name:"human-signals"},{name:"execa"},{name:"cross-spawn"},{name:"shebang-command"},{name:"shebang-regex"},{name:"which"},{name:"isexe"},{name:"path-key"},{name:"npm-run-path"},{name:"strip-final-newline"},{name:"get-stream"},{name:"merge-stream"},{name:"mimic-response"},{name:"decompress-response"},{name:"clone-response"},{name:"responselike"},{name:"cacheable-request"},{name:"cacheable-lookup"},{name:"http2-wrapper"},{name:"lowercase-keys"},{name:"to-readable-stream"},{name:"duplexer3"},{name:"pumpify"},{name:"duplexify"},{name:"from2"},{name:"flush-write-stream"},{name:"parallel-transform"},{name:"cyclist"},{name:"xtend"},{name:"object.assign"},{name:"object-keys"},{name:"define-properties"},{name:"has-property-descriptors"},{name:"gopd"},{name:"es-define-property"},{name:"es-errors"},{name:"es-object-atoms"},{name:"get-intrinsic"},{name:"has-symbols"},{name:"has-proto"},{name:"function-bind"},{name:"has"},{name:"hasown"},{name:"call-bind"},{name:"set-function-length"},{name:"define-data-property"},{name:"available-typed-arrays"},{name:"for-each"},{name:"is-typed-array"},{name:"which-typed-array"},{name:"typed-array-buffer"},{name:"typed-array-byte-length"},{name:"typed-array-byte-offset"},{name:"typed-array-length"},{name:"possible-typed-array-names"},{name:"is-array-buffer"},{name:"is-shared-array-buffer"},{name:"is-weakref"},{name:"is-finalizationregistry"},{name:"is-generator-function"},{name:"generator-function"},{name:"safe-regex-test"},{name:"regexp.prototype.flags"},{name:"side-channel"},{name:"object-inspect"},{name:"strict-uri-encode"},{name:"query-string"},{name:"querystring"},{name:"querystring-es3"},{name:"split-on-first"},{name:"filter-obj"},{name:"decode-uri-component"},{name:"url-parse"},{name:"requires-port"},{name:"querystringify"},{name:"parse-path"},{name:"parse-url"},{name:"humanize-url"},{name:"file-url"},{name:"data-uri-to-buffer"},{name:"form-data"},{name:"formdata-node"},{name:"formdata-polyfill"},{name:"busboy"},{name:"dicer"},{name:"streamsearch"},{name:"append-field"},{name:"concat-stream"},{name:"buffer-from"},{name:"typedarray"},{name:"process-nextick-args"},{name:"core-util-is"},{name:"bl"},{name:"tar-stream"},{name:"tar"},{name:"tar-fs"},{name:"unzipper"},{name:"yauzl"},{name:"yazl"},{name:"archiver"},{name:"compressing"},{name:"adm-zip"},{name:"jszip"},{name:"node-stream-zip"},{name:"unzip-stream"},{name:"gunzip-maybe"},{name:"peek-stream"},{name:"mississippi"},{name:"cloneable-readable"},{name:"into-stream"},{name:"stream-browserify"},{name:"stream-http"},{name:"https-browserify"},{name:"http-browserify"},{name:"url"},{name:"process"},{name:"timers-browserify"},{name:"tty-browserify"},{name:"vm-browserify"},{name:"console-browserify"},{name:"constants-browserify"},{name:"crypto-browserify"},{name:"domain-browser"},{name:"events"},{name:"os-browserify"},{name:"path-browserify"},{name:"assert"},{name:"util"},{name:"node-libs-browser"},{name:"setimmediate"},{name:"webpack-sources"},{name:"terser-webpack-plugin"},{name:"css-loader"},{name:"style-loader"},{name:"file-loader"},{name:"url-loader"},{name:"raw-loader"},{name:"html-webpack-plugin"},{name:"mini-css-extract-plugin"},{name:"copy-webpack-plugin"},{name:"clean-webpack-plugin"},{name:"webpack-bundle-analyzer"},{name:"webpack-merge"},{name:"webpack-node-externals"},{name:"ts-loader"},{name:"babel-loader"},{name:"sass-loader"},{name:"postcss-loader"},{name:"less-loader"},{name:"source-map-loader"},{name:"thread-loader"},{name:"cache-loader"},{name:"eslint-loader"},{name:"eslint-webpack-plugin"},{name:"fork-ts-checker-webpack-plugin"},{name:"tsconfig-paths-webpack-plugin"},{name:"awesome-typescript-loader"},{name:"vue-loader"},{name:"vue-template-compiler"},{name:"svelte-loader"},{name:"solid-refresh"},{name:"vite-plugin-solid"},{name:"@vitejs/plugin-react"},{name:"@vitejs/plugin-vue"},{name:"rollup-plugin-terser"},{name:"@rollup/plugin-node-resolve"},{name:"@rollup/plugin-commonjs"},{name:"@rollup/plugin-json"},{name:"@rollup/plugin-typescript"},{name:"@rollup/plugin-replace"},{name:"@rollup/plugin-babel"},{name:"rollup-plugin-dts"},{name:"rollup-plugin-esbuild"},{name:"esbuild-register"},{name:"ts-node-dev"},{name:"tsconfig-paths"},{name:"tslib"},{name:"@types/node"},{name:"@types/express"},{name:"@types/react"},{name:"@types/react-dom"},{name:"@types/lodash"},{name:"@types/jest"},{name:"@types/mocha"},{name:"@types/cors"},{name:"@types/compression"},{name:"@types/cookie-parser"},{name:"@types/morgan"},{name:"@types/multer"},{name:"@types/passport"},{name:"@types/jsonwebtoken"},{name:"@types/bcryptjs"},{name:"@types/uuid"},{name:"@types/ws"},{name:"@types/pg"},{name:"@types/nodemailer"},{name:"@types/supertest"},{name:"@types/js-yaml"},{name:"typedoc"},{name:"jsdoc"},{name:"documentation"},{name:"compodoc"},{name:"storybook"},{name:"@storybook/react"},{name:"@storybook/vue3"},{name:"chromatic"},{name:"msw"},{name:"nock"},{name:"testdouble"},{name:"rewire"},{name:"proxyquire"},{name:"mock-fs"},{name:"memfs"},{name:"mockdate"},{name:"timekeeper"},{name:"lolex"},{name:"fake-timers"},{name:"@sinonjs/fake-timers"},{name:"clock-mock"},{name:"jest-extended"},{name:"jest-when"},{name:"jest-mock"},{name:"jest-environment-jsdom"},{name:"jest-environment-node"},{name:"babel-jest"},{name:"ts-jest"},{name:"vite-node"},{name:"tinyspy"},{name:"tinypool"},{name:"chai-as-promised"},{name:"chai-http"},{name:"should"},{name:"expect.js"},{name:"unexpected"},{name:"tape"},{name:"node:test"},{name:"uvu"},{name:"uvu/assert"},{name:"kleur"},{name:"picocolors"},{name:"colorette"},{name:"ansi-colors"},{name:"yoctocolors"},{name:"nanocolors"}];var h=H.map(t=>t.name);var kn="DEPS-SCOPE-TYPO-001",Cn="DEPS-HOMOGLYPH-001",Rn="DEPS-BIDI-001",bn="DEPS-MIXEDSCRIPT-001",An="DEPS-SEPARATOR-001",Nn="DEPS-REPEAT-001",Dn="DEPS-SUFFIX-001",wn="DEPS-SCOPE-NEW-001",vn="DEPS-SCOPE-SYNTAX-001",Tn="DEPS-TYPES-001",_n="DEPS-DEPRECATED-REPLACE-001",Mn="DEPS-TYPO-TRANSITIVE-001",Ln="DEPS-NAME-LENGTH-001",On="DEPS-NAME-CASE-001",Fn="DEPS-NAME-ENCODED-001",$n="DEPS-ALIAS-SQUAT-001",xn="DEPS-SELFNAME-001",Wn="DEPS-WORKSPACE-NAME-001";new Set(h);var K=new Set,Vn=new Set,Y=new Map,q=new Map;for(let t of h){let i=Gn(t),s=q.get(i);s===void 0?q.set(i,[t]):s.push(t);let r=jn(t);if(r===void 0){K.add(t);continue}Vn.add(r.scope),K.add(r.base);let o=Y.get(r.scope)??new Set;o.add(r.base),Y.set(r.scope,o);}var z=[n(kn,"CWE-494"),n(Cn,"CWE-1007"),n(Rn,"CWE-1007"),n(bn,"CWE-1007"),n(An,"CWE-494"),n(Nn,"CWE-494"),n(Dn,"CWE-494"),n(wn,"CWE-1104"),n(vn,"CWE-20"),n(Tn,"CWE-1104"),n(_n,"CWE-1104"),n(Mn,"CWE-494"),n(Ln,"CWE-1284"),n(On,"CWE-178"),n(Fn,"CWE-20"),n($n,"CWE-494"),n(xn,"CWE-694"),n(Wn,"CWE-494")];function jn(t){if(!t.startsWith("@"))return;let i=t.indexOf("/");if(i<=1||t.indexOf("/",i+1)!==-1)return;let s=t.slice(1,i),r=t.slice(i+1);if(!(s.length===0||r.length===0))return {scope:s,base:r}}function Gn(t){return t.replaceAll(".","-").replaceAll("_","-")}c();new Set(builtinModules.flatMap(t=>[t,t.replace(/^node:/,"")]));var Bn="DEPS-GRAPH-OPTIONAL-001",Hn="DEPS-PEER-MISSING-001",Kn="DEPS-GRAPH-ALIAS-001",Yn="DEPS-DUALPACKAGE-001",qn="DEPS-PHANTOM-002",J=[n(Bn,"CWE-829"),n(Hn,"CWE-829"),n(Kn,"CWE-829"),n(Yn,"CWE-829"),n(qn,"CWE-829")];u();var X=[];var Z=[...y,...P,...I,...G,...B,...z,...J,...X];var Q="This is not a certification or audit. FullShield produces an evidence-style mapping only; it does not certify PCI DSS, SOC 2, ISO, or any other standard.",e=(t,i,s,r,o)=>({ruleId:t,owasp:i,cwe:s,asvs:r,pci:o}),zn=[e("SAST-SQLI-001","A03:2021 Injection","CWE-89","V5.3.4","PCI DSS 6.2.4"),e("SAST-NOSQLI-001","A03:2021 Injection","CWE-943","V5.3.4","PCI DSS 6.2.4"),e("SAST-CMDI-001","A03:2021 Injection","CWE-78","V5.3.3","PCI DSS 6.2.4"),e("SAST-PATH-001","A01:2021 Broken Access Control","CWE-22","V12.3.1","PCI DSS 6.2.4"),e("SAST-EVAL-001","A03:2021 Injection","CWE-95","V5.3.3","PCI DSS 6.2.4"),e("SAST-SSRF-001","A10:2021 SSRF","CWE-918","V12.6.1","PCI DSS 6.2.4"),e("SAST-REDIRECT-001","A01:2021 Broken Access Control","CWE-601","V5.1.1","PCI DSS 6.4.2"),e("SAST-PROTO-001","A03:2021 Injection","CWE-1321","V5.3.3","PCI DSS 6.2.4"),e("SAST-XSS-001","A03:2021 Injection","CWE-79","V5.3.3","PCI DSS 6.2.4"),e("SAST-LDAP-001","A03:2021 Injection","CWE-90","V5.3.4","PCI DSS 6.4.2"),e("SAST-CRLF-001","A03:2021 Injection","CWE-113","V5.3.3","PCI DSS 6.2.4"),e("SAST-MAIL-001","A03:2021 Injection","CWE-93","V5.3.3","PCI DSS 6.2.4"),e("SAST-FORMULA-001","A03:2021 Injection","CWE-1236","V5.3.3","PCI DSS 6.2.4"),e("SAST-BROWSER-001","A10:2021 SSRF","CWE-918","V12.6.1","PCI DSS 6.2.4"),e("SAST-DYNIMPORT-001","A08:2021 Software Integrity Failures","CWE-829","V1.5.1","PCI DSS 6.3.2"),e("SAST-REDIS-001","A03:2021 Injection","CWE-94","V5.3.3","PCI DSS 6.2.4"),e("SAST-XPATH-001","A03:2021 Injection","CWE-643","V5.3.3","PCI DSS 6.2.4"),e("SAST-SEARCH-001","A03:2021 Injection","CWE-943","V5.3.3","PCI DSS 6.2.4"),e("SAST-OBJECTKEY-001","A01:2021 Broken Access Control","CWE-22","V5.3.3","PCI DSS 6.2.4"),e("SAST-WORKER-001","A03:2021 Injection","CWE-94","V5.3.3","PCI DSS 6.2.4"),e("DEPS-RSC-001","A06:2021 Vulnerable Components","CWE-502","V1.5.1","PCI DSS 6.3.3"),e("CONFIG-COOLDOWN-001","A06:2021 Vulnerable Components","CWE-829","V1.5.1","PCI DSS 6.3.2"),e("SUPPLY-IMPLANT-001","A08:2021 Software Integrity Failures","CWE-506","V1.5.1","PCI DSS 6.3.2"),e("DEPS-VERINFLATE-001","A06:2021 Vulnerable Components","CWE-427","V1.5.1","PCI DSS 6.3.2"),e("AGENT-UNICODE-001","A03:2021 Injection","CWE-74","V5.3.3","PCI DSS 6.2.4"),e("AGENT-INJECT-001","A03:2021 Injection","CWE-74","V5.3.3","PCI DSS 6.2.4"),e("AGENT-EXFIL-001","A01:2021 Broken Access Control","CWE-200","V8.3.4","PCI DSS 6.5.3"),e("AGENT-SHELL-001","A03:2021 Injection","CWE-74","V5.3.3","PCI DSS 6.2.4"),e("SAST-AGENTSPAWN-001","A03:2021 Injection","CWE-78","V5.3.3","PCI DSS 6.2.4"),e("MCP-006","A03:2021 Injection","CWE-74","V5.3.3","PCI DSS 6.2.4"),e("MCP-007","A03:2021 Injection","CWE-74","V5.3.3","PCI DSS 6.2.4"),e("MCP-008","A04:2021 Insecure Design","CWE-290","V1.2.1","PCI DSS 6.2.4"),e("CONFIG-VITEFS-001","A01:2021 Broken Access Control","CWE-22","V12.3.1","PCI DSS 6.2.4"),e("SAST-HOST-001","A01:2021 Broken Access Control","CWE-644","V5.1.1","PCI DSS 6.2.4"),e("SAST-MARKUP-001","A03:2021 Injection","CWE-79","V5.3.3","PCI DSS 6.2.4"),e("SAST-TRUSTHOST-001","A07:2021 Identification Failures","CWE-346","V3.5.1","PCI DSS 6.2.4"),e("SAST-JWT-001","A07:2021 Identification Failures","CWE-347","V3.5.3","PCI DSS 6.5.10"),e("SAST-CRYPTO-001","A02:2021 Cryptographic Failures","CWE-338","V6.2.1","PCI DSS 3.6 / 4.2"),e("SAST-CIPHER-001","A02:2021 Cryptographic Failures","CWE-327","V6.2.1","PCI DSS 3.6 / 4.2"),e("SAST-CIPHER-002","A02:2021 Cryptographic Failures","CWE-321","V6.2.1","PCI DSS 3.6 / 4.2"),e("SAST-RSA-001","A02:2021 Cryptographic Failures","CWE-326","V6.2.1","PCI DSS 3.6 / 4.2"),e("SAST-JWT-002","A07:2021 Identification Failures","CWE-613","V3.5.3","PCI DSS 6.5.10"),e("SAST-TLS-001","A02:2021 Cryptographic Failures","CWE-295","V9.2.1","PCI DSS 4.2"),e("SAST-TLS-002","A02:2021 Cryptographic Failures","CWE-295","V9.2.1","PCI DSS 4.2"),e("SAST-SSTI-001","A03:2021 Injection","CWE-1336","V5.2.5","PCI DSS 6.2.4"),e("SAST-LOGLEAK-001","A09:2021 Security Logging Failures","CWE-532","V7.1.3","PCI DSS 10.3"),e("SAST-WEBHOOK-001","A07:2021 Identification Failures","CWE-345","V13.2.5","PCI DSS 6.5.10"),e("SAST-SESSION-002","A07:2021 Identification Failures","CWE-384","V3.2.1","PCI DSS 6.5.10"),e("SAST-IDOR-001","A01:2021 Broken Access Control","CWE-639","V4.2.1","PCI DSS 6.2.4"),e("SAST-DOMXSS-001","A03:2021 Injection","CWE-79","V5.3.3","PCI DSS 6.2.4"),e("SAST-REACT-001","A03:2021 Injection","CWE-79","V5.3.3","PCI DSS 6.2.4"),e("SAST-POSTMSG-001","A07:2021 Identification Failures","CWE-346","V13.2.5","PCI DSS 6.2.4"),e("SAST-TOKENSTORE-001","A02:2021 Cryptographic Failures","CWE-922","V8.3.4","PCI DSS 3.5"),e("SAST-NEXT-001","A01:2021 Broken Access Control","CWE-306","V4.1.1","PCI DSS 8.2"),e("CONFIG-NEXT-001","A01:2021 Broken Access Control","CWE-306","V4.1.1","PCI DSS 8.2"),e("CONFIG-NEXT-002","A05:2021 Security Misconfiguration","CWE-942","V14.4.5","PCI DSS 6.4.3"),e("SECRET-NEXTPUB-001","A02:2021 Cryptographic Failures","CWE-798","V6.4.1","PCI DSS 3.2"),e("SAST-AUTH-001","A07:2021 Identification Failures","CWE-306","V4.1.1","PCI DSS 8.2"),e("SECRET-AWS-001","A02:2021 Cryptographic Failures","CWE-798","V6.4.1","PCI DSS 3.2 / 8.3"),e("SECRET-STRIPE-001","A02:2021 Cryptographic Failures","CWE-798","V6.4.1","PCI DSS 3.2"),e("SECRET-GITHUB-001","A02:2021 Cryptographic Failures","CWE-798","V6.4.1","PCI DSS 8.3"),e("SECRET-SLACK-001","A02:2021 Cryptographic Failures","CWE-798","V6.4.1","PCI DSS 8.3"),e("SECRET-GOOGLE-001","A02:2021 Cryptographic Failures","CWE-798","V6.4.1","PCI DSS 8.3"),e("SECRET-AIKEY-001","A02:2021 Cryptographic Failures","CWE-798","V6.4.1","PCI DSS 8.3"),e("SECRET-PRIVKEY-001","A02:2021 Cryptographic Failures","CWE-321","V6.4.1","PCI DSS 3.5 / 4.2"),e("SECRET-DBURL-001","A02:2021 Cryptographic Failures","CWE-798","V6.4.1","PCI DSS 3.2 / 8.3"),e("SECRET-JWT-001","A02:2021 Cryptographic Failures","CWE-798","V6.4.1","PCI DSS 3.5"),e("SECRET-SESSION-001","A02:2021 Cryptographic Failures","CWE-798","V6.4.1","PCI DSS 3.5 / 6.2.4"),e("CONFIG-DIRLIST-001","A05:2021 Security Misconfiguration","CWE-548","V12.1.1","PCI DSS 2.2 / 6.4.3"),e("SECRET-ENVFILE-001","A02:2021 Cryptographic Failures","CWE-312","V8.3.4","PCI DSS 3.2"),e("SECRET-FILE-002","A02:2021 Cryptographic Failures","CWE-798","V6.4.1","PCI DSS 3.2 / 8.3"),e("SECRET-FILE-003","A02:2021 Cryptographic Failures","CWE-798","V6.4.1","PCI DSS 3.2 / 8.3"),e("SECRET-FILE-004","A02:2021 Cryptographic Failures","CWE-798","V6.4.1","PCI DSS 3.2 / 8.3"),e("SECRET-FILE-005","A02:2021 Cryptographic Failures","CWE-312","V8.3.4","PCI DSS 3.2"),e("SECRET-FILE-006","A02:2021 Cryptographic Failures","CWE-798","V6.4.1","PCI DSS 3.2 / 8.3"),e("SECRET-FILE-007","A02:2021 Cryptographic Failures","CWE-321","V6.4.1","PCI DSS 3.5 / 4.2"),e("SECRET-ENTROPY-001","A02:2021 Cryptographic Failures","CWE-798","V6.4.1","PCI DSS 8.3"),e("DEPS-VULN-001","A06:2021 Vulnerable Components","CWE-1104","V14.2.1","PCI DSS 6.3.3"),e("DEPS-VENDORED-001","A06:2021 Vulnerable Components","CWE-1104","V14.2.1","PCI DSS 6.3.3"),e("DEPS-UNFIXED-001","A06:2021 Vulnerable Components","CWE-1104","V14.2.1","PCI DSS 6.3.3"),e("DEPS-MALICIOUS-001","A06:2021 Vulnerable Components","CWE-506","V14.2.1","PCI DSS 6.3.3 / 12.10"),e("DEPS-TYPOSQUAT-001","A06:2021 Vulnerable Components","CWE-494","V14.2.1","PCI DSS 6.3.3"),e("DEPS-NOLOCK-001","A06:2021 Vulnerable Components","CWE-1104","V14.2.1","PCI DSS 6.3.3"),e("DEPS-DEPRECATED-001","A06:2021 Vulnerable Components","CWE-1104","V14.2.1","PCI DSS 6.3.3"),e("CONFIG-HELMET-001","A05:2021 Security Misconfiguration","CWE-693","V14.4.3","PCI DSS 6.4.3"),e("CONFIG-BODYLIMIT-001","A05:2021 Security Misconfiguration","CWE-400","V13.1.1","PCI DSS 6.2.4"),e("CONFIG-CORS-001","A05:2021 Security Misconfiguration","CWE-942","V14.4.5","PCI DSS 6.4.3"),e("CONFIG-CORS-002","A05:2021 Security Misconfiguration","CWE-942","V14.4.5","PCI DSS 6.4.3"),e("CONFIG-RATELIMIT-001","A07:2021 Identification Failures","CWE-307","V2.2.1","PCI DSS 8.3.4"),e("CONFIG-ERRSTACK-001","A04:2021 Insecure Design","CWE-209","V7.4.1","PCI DSS 6.2.4"),e("CONFIG-ELECTRON-001","A05:2021 Security Misconfiguration","CWE-749","V14.1.3","PCI DSS 6.4.3"),e("CONFIG-ELECTRON-002","A01:2021 Broken Access Control","CWE-939","V5.1.1","PCI DSS 6.2.4"),e("CONFIG-ELECTRON-003","A05:2021 Security Misconfiguration","CWE-749","V14.1.3","PCI DSS 6.4.3"),e("CONFIG-INSTALLSCRIPT-001","A06:2021 Vulnerable Components","CWE-829","V14.2.1","PCI DSS 6.3.3"),e("CONFIG-DOCKER-LATEST-001","A05:2021 Security Misconfiguration","CWE-1188","V14.1.3","PCI DSS 2.2"),e("CONFIG-DOCKER-ROOT-001","A05:2021 Security Misconfiguration","CWE-250","V14.1.3","PCI DSS 2.2"),e("CONFIG-DOCKER-ENV-001","A02:2021 Cryptographic Failures","CWE-798","V6.4.1","PCI DSS 3.2"),e("EDGE-CDN-001","A05:2021 Security Misconfiguration","CWE-693","V14.4.3","PCI DSS 1.2 / 6.4"),e("EDGE-CSP-001","A05:2021 Security Misconfiguration","CWE-693","V14.4.3","PCI DSS 6.4.3"),e("EDGE-EXPOSE-001","A05:2021 Security Misconfiguration","CWE-538","V14.4.3","PCI DSS 2.2 / 6.4"),e("EDGE-HSTS-001","A05:2021 Security Misconfiguration","CWE-319","V9.1.1","PCI DSS 4.2"),e("EDGE-REFERRER-001","A05:2021 Security Misconfiguration","CWE-201","V14.4.3","PCI DSS 6.4.3"),e("EDGE-TLS-001","A02:2021 Cryptographic Failures","CWE-319","V9.1.1","PCI DSS 4.2"),e("EDGE-XCTO-001","A05:2021 Security Misconfiguration","CWE-693","V14.4.3","PCI DSS 6.4.3"),e("EDGE-XFO-001","A05:2021 Security Misconfiguration","CWE-1021","V14.4.3","PCI DSS 6.4.3"),e("RASP-SQL-001","A03:2021 Injection","CWE-89","V5.3.4","PCI DSS 6.4.2"),e("RASP-SHELL-001","A03:2021 Injection","CWE-78","V5.3.3","PCI DSS 6.4.2"),e("RASP-PATH-001","A01:2021 Broken Access Control","CWE-22","V12.3.1","PCI DSS 6.4.2"),e("RASP-NOSQL-001","A03:2021 Injection","CWE-943","V5.3.4","PCI DSS 6.4.2"),e("RASP-SSRF-001","A10:2021 SSRF","CWE-918","V12.6.1","PCI DSS 1.3"),e("RASP-PROTO-001","A03:2021 Injection","CWE-1321","V5.3.3","PCI DSS 6.4.2"),e("RASP-SSTI-001","A03:2021 Injection","CWE-94","V5.3.3","PCI DSS 6.4.2"),e("AI-INJECT-001","A03:2021 Injection","CWE-1427","V5.3.3","PCI DSS 6.2.4"),e("LLM-001","A03:2021 Injection","CWE-1426","V5.3.3","PCI DSS 6.2.4"),e("LLM-002","A03:2021 Injection","CWE-94","V5.3.3","PCI DSS 6.2.4"),e("LLM-003","A01:2021 Broken Access Control","CWE-250","V4.1.1","PCI DSS 7.2"),e("LLM-004","A02:2021 Cryptographic Failures","CWE-798","V6.4.1","PCI DSS 3.2"),e("LLM-005","A04:2021 Insecure Design","CWE-770","V13.1.1","PCI DSS 6.2.4"),e("SUPPLY-INSTALLSCRIPT-001","A06:2021 Vulnerable Components","CWE-829","V14.2.1","PCI DSS 6.3.3"),e("SUPPLY-NPMRC-NET-001","A06:2021 Vulnerable Components","CWE-506","V14.2.1","PCI DSS 12.10"),e("SUPPLY-OBFUSCATE-001","A06:2021 Vulnerable Components","CWE-506","V14.2.1","PCI DSS 6.3.3"),e("SUPPLY-BEHAVIOR-001","A06:2021 Vulnerable Components","CWE-829","V14.2.1","PCI DSS 6.3.3"),e("SUPPLY-COOLDOWN-001","A06:2021 Vulnerable Components","CWE-1104","V14.2.1","PCI DSS 6.3.3"),e("SUPPLY-LOCKURL-001","A08:2021 Integrity Failures","CWE-494","V14.2.3","PCI DSS 6.3.3"),e("SUPPLY-LOCKINTEGRITY-001","A08:2021 Integrity Failures","CWE-353","V14.2.3","PCI DSS 6.3.3"),e("SUPPLY-CONFUSION-001","A08:2021 Integrity Failures","CWE-494","V14.2.3","PCI DSS 6.3.3"),e("SUPPLY-PROVENANCE-001","A08:2021 Integrity Failures","CWE-494","V14.2.3","PCI DSS 6.3.3"),e("SUPPLY-PROV-001","A08:2021 Integrity Failures","CWE-494","V14.2.3","PCI DSS 6.3.3"),e("SUPPLY-WORM-001","A06:2021 Vulnerable Components","CWE-506","V14.2.1","PCI DSS 6.3.3 / 12.10"),e("SUPPLY-WORKFLOW-001","A08:2021 Integrity Failures","CWE-829","V14.2.3","PCI DSS 6.3.3"),e("SUPPLY-CHAINC2-001","A06:2021 Vulnerable Components","CWE-506","V14.2.1","PCI DSS 6.3.3"),e("SUPPLY-STEALER-001","A06:2021 Vulnerable Components","CWE-506","V14.2.1","PCI DSS 12.10"),e("SUPPLY-PLATFORMGATE-001","A06:2021 Vulnerable Components","CWE-829","V14.2.1","PCI DSS 6.3.3"),e("SUPPLY-SECHOLDER-001","A06:2021 Vulnerable Components","CWE-506","V14.2.1","PCI DSS 6.3.3"),e("SUPPLY-CAP-001","A06:2021 Vulnerable Components","CWE-829","V14.2.1","PCI DSS 6.3.3"),e("IAC-GHA-UNPINNED-001","A08:2021 Integrity Failures","CWE-494","V14.2.3","PCI DSS 6.3.3"),e("IAC-GHA-PRTARGET-001","A01:2021 Broken Access Control","CWE-269","V4.1.1","PCI DSS 7.2"),e("IAC-GHA-PERMS-001","A01:2021 Broken Access Control","CWE-250","V4.1.1","PCI DSS 7.2"),e("IAC-GHA-SECRETLOG-001","A09:2021 Security Logging Failures","CWE-532","V7.1.1","PCI DSS 3.2 / 10.2"),e("IAC-GHA-INJECT-001","A03:2021 Injection","CWE-94","V5.2.4","PCI DSS 6.2.4"),e("IAC-GHA-PRCHECKOUT-001","A01:2021 Broken Access Control","CWE-829","V4.1.1","PCI DSS 6.2.4"),e("DEPS-LICENSE-001","A06:2021 Vulnerable Components","CWE-1104","V14.2.1","PCI DSS 6.3.3"),e("DEPS-LICENSE-002","A06:2021 Vulnerable Components","CWE-1104","V14.2.1","PCI DSS 6.3.3"),e("DEPS-ORG-ADV-001","A06:2021 Vulnerable Components","CWE-1104","V14.2.1","PCI DSS 6.3.3"),e("IAC-TF-S3PUBLIC-001","A01:2021 Broken Access Control","CWE-284","V12.1.1","PCI DSS 1.3 / 3.2"),e("IAC-TF-SGOPEN-001","A05:2021 Security Misconfiguration","CWE-284","V1.4.1","PCI DSS 1.2 / 1.3"),e("IAC-TF-UNENCRYPTED-001","A02:2021 Cryptographic Failures","CWE-311","V6.2.1","PCI DSS 3.4 / 4.2"),e("IAC-K8S-PRIV-001","A05:2021 Security Misconfiguration","CWE-250","V14.1.3","PCI DSS 2.2"),e("IAC-COMPOSE-PRIV-001","A05:2021 Security Misconfiguration","CWE-250","V14.1.3","PCI DSS 2.2"),e("RASP-EGRESS-001","A10:2021 SSRF","CWE-918","V12.6.1","PCI DSS 1.3"),e("RASP-HONEY-001","A09:2021 Security Logging Failures","CWE-778","V7.1.1","PCI DSS 10.2 / 11.5"),e("RASP-FAIL-OPEN-001","A05:2021 Security Misconfiguration","CWE-755","V14.4.3","PCI DSS 6.4.3"),e("RUNTIME-SQLI-001","A03:2021 Injection","CWE-89","V5.3.4","PCI DSS 6.4.2"),e("RUNTIME-XSS-001","A03:2021 Injection","CWE-79","V5.3.3","PCI DSS 6.4.2"),e("RUNTIME-PATH-001","A01:2021 Broken Access Control","CWE-22","V12.3.1","PCI DSS 6.4.2"),e("RUNTIME-RATELIMIT-001","A07:2021 Identification Failures","CWE-307","V2.2.1","PCI DSS 8.3.4"),e("RUNTIME-BODY-001","A05:2021 Security Misconfiguration","CWE-400","V13.1.1","PCI DSS 6.2.4"),e("RUNTIME-ANOMALY-001","A04:2021 Insecure Design","CWE-754","V14.4.3","PCI DSS 10.2"),e("AI-IDOR-001","A01:2021 Broken Access Control","CWE-639","V4.1.1","PCI DSS 7.2"),e("AI-MASSASSIGN-001","A01:2021 Broken Access Control","CWE-915","V5.1.1","PCI DSS 6.2.4"),e("SAST-REDOS-001","A05:2021 Security Misconfiguration","CWE-1333","V5.1.5","PCI DSS 6.2.4"),e("SAST-DESER-001","A08:2021 Integrity Failures","CWE-502","V5.5.3","PCI DSS 6.2.4"),e("SAST-XXE-001","A05:2021 Security Misconfiguration","CWE-611","V5.5.2","PCI DSS 6.2.4"),e("SAST-UPLOAD-001","A04:2021 Insecure Design","CWE-434","V12.5.1","PCI DSS 6.2.4"),e("SAST-COOKIE-001","A05:2021 Security Misconfiguration","CWE-614/1004","V3.4.2","PCI DSS 6.2.4"),e("SAST-CSRF-001","A01:2021 Broken Access Control","CWE-352","V4.2.2","PCI DSS 6.4.3"),e("SAST-MASSASSIGN-001","A01:2021 Broken Access Control","CWE-915","V5.1.1","PCI DSS 6.2.4"),e("SAST-TIMING-001","A07:2021 Identification Failures","CWE-208","V2.10.3","PCI DSS 8.3"),e("SAST-HASH-001","A02:2021 Cryptographic Failures","CWE-916","V6.2.2","PCI DSS 8.3.1"),e("SAST-GQL-001","A04:2021 Insecure Design","CWE-770/200","V13.1.1","PCI DSS 6.2.4"),e("SAST-SKIP-001","A05:2021 Security Misconfiguration","CWE-693","V1.1.1","PCI DSS 6.2.4"),e("CONFIG-TRUSTPROXY-001","A07:2021 Identification Failures","CWE-290","V2.2.1","PCI DSS 8.3.4"),e("SECRET-BUNDLE-001","A02:2021 Cryptographic Failures","CWE-798","V6.4.1","PCI DSS 3.2 / 8.3"),e("DLP-SECRET-001","A02:2021 Cryptographic Failures","CWE-200","V8.3.4","PCI DSS 3.2 / 8.3"),e("DLP-STACK-001","A04:2021 Insecure Design","CWE-209","V7.4.1","PCI DSS 6.2.4"),e("DLP-INTERNAL-001","A01:2021 Broken Access Control","CWE-200","V8.3.4","PCI DSS 1.3 / 2.2"),e("DLP-CARD-001","A02:2021 Cryptographic Failures","CWE-359","V8.3.4","PCI DSS 3.3 / 3.4"),e("DLP-PII-001","A01:2021 Broken Access Control","CWE-359","V8.3.4","PCI DSS 3.2 / 6.4.2"),e("MCP-001","A02:2021 Cryptographic Failures","CWE-798","V6.4.1","PCI DSS 3.2 / 8.3"),e("MCP-002","A08:2021 Integrity Failures","CWE-494","V14.2.3","PCI DSS 6.3.3"),e("MCP-003","A01:2021 Broken Access Control","CWE-250","V4.1.1","PCI DSS 7.2"),e("MCP-004","A03:2021 Injection","CWE-74","V5.3.3","PCI DSS 6.2.4"),e("MCP-005","A02:2021 Cryptographic Failures","CWE-319","V9.1.1","PCI DSS 4.2"),e("HOST-SSH-001","A06:2021 Vulnerable Components","CWE-364","V14.2.1","PCI DSS 6.3.3"),e("HOST-SSH-002","A05:2021 Security Misconfiguration","CWE-693","V14.4.3","PCI DSS 2.2"),e("HOST-SSH-003","A07:2021 Identification Failures","CWE-307","V7.1.1","PCI DSS 10.2 / 11.5"),e("DEPS-PHANTOM-001","A06:2021 Vulnerable Components","CWE-829","V14.2.1","PCI DSS 6.3.3"),e("DEPS-LOCKMISMATCH-001","A06:2021 Vulnerable Components","CWE-1104","V14.2.1","PCI DSS 6.3.3"),e("CONFIG-BRUTE-001","A07:2021 Identification Failures","CWE-307","V2.2.1","PCI DSS 8.3"),e("CONFIG-COMPOSE-ENVFILE-001","A05:2021 Security Misconfiguration","CWE-526","V14.4.3","PCI DSS 2.2"),e("CONFIG-COMPOSE-HOSTNET-001","A05:2021 Security Misconfiguration","CWE-668","V14.4.3","PCI DSS 1.3 / 2.2"),e("CONFIG-COMPOSE-PORT-001","A05:2021 Security Misconfiguration","CWE-668","V14.4.3","PCI DSS 1.3 / 2.2"),e("CONFIG-COMPOSE-PRIVILEGED-001","A05:2021 Security Misconfiguration","CWE-250","V4.1.1","PCI DSS 7.2"),e("CONFIG-COMPOSE-SOCKET-001","A05:2021 Security Misconfiguration","CWE-250","V4.1.1","PCI DSS 7.2"),e("CONFIG-CORSV2-001","A05:2021 Security Misconfiguration","CWE-942","V14.4.3","PCI DSS 6.2.4"),e("CONFIG-CSRF-001","A01:2021 Broken Access Control","CWE-352","V4.2.2","PCI DSS 6.4.3"),e("CONFIG-DEBUG-ROUTE-001","A05:2021 Security Misconfiguration","CWE-489","V14.3.2","PCI DSS 6.2.4"),e("CONFIG-DOCKER-ARG-001","A05:2021 Security Misconfiguration","CWE-526","V14.4.3","PCI DSS 2.2"),e("CONFIG-DOCKER-ENVFILE-001","A05:2021 Security Misconfiguration","CWE-526","V14.4.3","PCI DSS 2.2"),e("CONFIG-DOCKER-NPM-001","A06:2021 Vulnerable Components","CWE-829","V14.2.1","PCI DSS 6.3.3"),e("CONFIG-DOCKER-ROOT-STAGE-001","A05:2021 Security Misconfiguration","CWE-250","V4.1.1","PCI DSS 2.2"),e("CONFIG-DOCKER-USER-001","A05:2021 Security Misconfiguration","CWE-250","V4.1.1","PCI DSS 2.2"),e("CONFIG-EDGE-HEADER-001","A05:2021 Security Misconfiguration","CWE-693","V14.4.3","PCI DSS 6.2.4"),e("CONFIG-EDGE-PUBLICENV-001","A01:2021 Broken Access Control","CWE-200","V8.3.4","PCI DSS 6.2.4"),e("CONFIG-EDGE-REDIRECT-001","A01:2021 Broken Access Control","CWE-601","V5.1.1","PCI DSS 6.4.2"),e("CONFIG-ENV-MISSING-001","A05:2021 Security Misconfiguration","CWE-1188","V14.4.3","PCI DSS 2.2"),e("CONFIG-ENV-UNREAD-001","A05:2021 Security Misconfiguration","CWE-1188","V14.4.3","PCI DSS 2.2"),e("CONFIG-INSPECT-001","A05:2021 Security Misconfiguration","CWE-489","V14.3.2","PCI DSS 6.2.4"),e("CONFIG-K8S-HOSTPATH-001","A05:2021 Security Misconfiguration","CWE-668","V14.4.3","PCI DSS 2.2"),e("CONFIG-K8S-MEMLIMIT-001","A05:2021 Security Misconfiguration","CWE-770","V13.1.1","PCI DSS 6.2.4"),e("CONFIG-K8S-PRIVILEGED-001","A05:2021 Security Misconfiguration","CWE-250","V4.1.1","PCI DSS 7.2"),e("CONFIG-K8S-ROOT-001","A05:2021 Security Misconfiguration","CWE-250","V4.1.1","PCI DSS 2.2"),e("CONFIG-K8S-SATOKEN-001","A01:2021 Broken Access Control","CWE-250","V4.1.1","PCI DSS 7.2"),e("CONFIG-K8S-SECRET-001","A02:2021 Cryptographic Failures","CWE-798","V6.4.1","PCI DSS 3.2 / 8.3"),e("CONFIG-NODE-EVAL-001","A03:2021 Injection","CWE-95","V5.3.3","PCI DSS 6.2.4"),e("CONFIG-NODE-PARSER-001","A05:2021 Security Misconfiguration","CWE-20","V5.1.1","PCI DSS 6.2.4"),e("CONFIG-PROXY-001","A05:2021 Security Misconfiguration","CWE-441","V14.4.3","PCI DSS 1.3 / 2.2"),e("CONFIG-SAM-AUTH-001","A07:2021 Identification Failures","CWE-306","V4.1.1","PCI DSS 8.2"),e("CONFIG-SAM-IAM-001","A01:2021 Broken Access Control","CWE-250","V4.1.1","PCI DSS 7.2"),e("CONFIG-SAM-SECRET-001","A02:2021 Cryptographic Failures","CWE-798","V6.4.1","PCI DSS 3.2 / 8.3"),e("CONFIG-SESSION-HTTPONLY-001","A05:2021 Security Misconfiguration","CWE-1004","V3.4.2","PCI DSS 6.2.4"),e("CONFIG-SESSION-SAMESITE-001","A05:2021 Security Misconfiguration","CWE-352","V4.2.2","PCI DSS 6.4.3"),e("CONFIG-SESSION-SAVE-001","A07:2021 Identification Failures","CWE-384","V3.2.1","PCI DSS 6.5.10"),e("CONFIG-SESSION-SECRET-001","A02:2021 Cryptographic Failures","CWE-798","V6.4.1","PCI DSS 3.2 / 8.3"),e("CONFIG-SESSION-SECURE-001","A05:2021 Security Misconfiguration","CWE-614","V3.4.2","PCI DSS 4.2"),e("CONFIG-SOURCEMAP-001","A05:2021 Security Misconfiguration","CWE-540","V14.3.2","PCI DSS 6.2.4"),e("CONFIG-SRI-001","A08:2021 Integrity Failures","CWE-353","V14.2.3","PCI DSS 6.3.3"),e("CONFIG-SRI-WEAK-001","A08:2021 Integrity Failures","CWE-353","V14.2.3","PCI DSS 6.3.3"),e("CONFIG-TF-ACL-001","A01:2021 Broken Access Control","CWE-284","V4.1.1","PCI DSS 1.3 / 2.2"),e("CONFIG-TF-CIDR-001","A01:2021 Broken Access Control","CWE-284","V4.1.1","PCI DSS 1.3 / 2.2"),e("CONFIG-TF-USERDATA-001","A02:2021 Cryptographic Failures","CWE-798","V6.4.1","PCI DSS 3.2 / 8.3"),e("CONFIG-UNIT-ROOT-001","A05:2021 Security Misconfiguration","CWE-250","V4.1.1","PCI DSS 2.2"),e("CONFIG-UNIT-SECRET-001","A02:2021 Cryptographic Failures","CWE-798","V6.4.1","PCI DSS 3.2 / 8.3"),e("DEPS-ADVISORY-STALE-001","A06:2021 Vulnerable Components","CWE-1104","V14.2.1","PCI DSS 6.3.3"),e("DEPS-AGE-001","A06:2021 Vulnerable Components","CWE-1104","V14.2.1","PCI DSS 6.3.3"),e("DEPS-BINHOST-001","A06:2021 Vulnerable Components","CWE-829","V14.2.1","PCI DSS 6.3.3"),e("DEPS-CADENCE-001","A06:2021 Vulnerable Components","CWE-1104","V14.2.1","PCI DSS 6.3.3"),e("DEPS-CAP-POLICY-001","A01:2021 Broken Access Control","CWE-250","V4.1.1","PCI DSS 7.2"),e("DEPS-DUP-ADVISORY-001","A06:2021 Vulnerable Components","CWE-1104","V14.2.1","PCI DSS 6.3.3"),e("DEPS-GITPIN-001","A08:2021 Integrity Failures","CWE-829","V14.2.1","PCI DSS 6.3.3"),e("DEPS-MALSIG-001","A08:2021 Integrity Failures","CWE-506","V14.2.3","PCI DSS 6.3.3"),e("DEPS-MANIFEST-MISMATCH-001","A08:2021 Integrity Failures","CWE-829","V14.2.1","PCI DSS 6.3.3"),e("DEPS-MINIFIED-001","A08:2021 Integrity Failures","CWE-829","V14.2.1","PCI DSS 6.3.3"),e("DEPS-PIN-POLICY-001","A06:2021 Vulnerable Components","CWE-829","V14.2.1","PCI DSS 6.3.3"),e("DEPS-PRIVREG-001","A06:2021 Vulnerable Components","CWE-829","V14.2.1","PCI DSS 6.3.3"),e("DEPS-PUBLIC-SCOPE-001","A06:2021 Vulnerable Components","CWE-829","V14.2.1","PCI DSS 6.3.3"),e("DEPS-REPO-MISMATCH-001","A08:2021 Integrity Failures","CWE-829","V14.2.1","PCI DSS 6.3.3"),e("DEPS-REPRO-001","A08:2021 Integrity Failures","CWE-829","V14.2.1","PCI DSS 6.3.3"),e("DEPS-SCRIPT-HOST-001","A08:2021 Integrity Failures","CWE-829","V14.2.1","PCI DSS 6.3.3"),e("DEPS-TIMEGATE-001","A08:2021 Integrity Failures","CWE-829","V14.2.1","PCI DSS 6.3.3"),e("DEPS-UNUSED-SYMBOLS-001","A06:2021 Vulnerable Components","CWE-1104","V14.2.1","PCI DSS 6.3.3"),e("DEPS-URL-IMPORT-001","A08:2021 Integrity Failures","CWE-829","V14.2.1","PCI DSS 6.3.3"),e("SAST-APIKEY-QUERY-001","A01:2021 Broken Access Control","CWE-598","V8.3.4","PCI DSS 3.2 / 8.3"),e("SAST-COPIED-SNIPPET-001","A06:2021 Vulnerable Components","CWE-1104","V14.2.1","PCI DSS 6.3.3"),e("SAST-ENUM-001","A04:2021 Insecure Design","CWE-203","V7.4.1","PCI DSS 6.2.4"),e("SAST-ENV-CLIENT-001","A01:2021 Broken Access Control","CWE-200","V8.3.4","PCI DSS 6.2.4"),e("SAST-ERRSECRET-001","A04:2021 Insecure Design","CWE-209","V7.4.1","PCI DSS 6.2.4"),e("SAST-GQL-AUTHZ-001","A01:2021 Broken Access Control","CWE-285","V4.1.1","PCI DSS 7.2"),e("SAST-GRAPHQL-001","A04:2021 Insecure Design","CWE-770","V13.1.1","PCI DSS 6.2.4"),e("SAST-IDOR-002","A01:2021 Broken Access Control","CWE-639","V4.2.1","PCI DSS 6.2.4"),e("SAST-JWTDEEP-001","A07:2021 Identification Failures","CWE-347","V3.5.3","PCI DSS 6.5.10"),e("SAST-JWTDEEP-002","A07:2021 Identification Failures","CWE-347","V3.5.3","PCI DSS 6.5.10"),e("SAST-JWTDEEP-003","A07:2021 Identification Failures","CWE-347","V3.5.3","PCI DSS 6.5.10"),e("SAST-OAUTH-001","A07:2021 Identification Failures","CWE-287","V3.5.3","PCI DSS 8.2"),e("SAST-PASSWORD-PLAIN-001","A02:2021 Cryptographic Failures","CWE-256","V6.2.1","PCI DSS 8.3"),e("SAST-PASSWORD-WEAK-001","A07:2021 Identification Failures","CWE-521","V2.1.1","PCI DSS 8.3"),e("SAST-RESET-BYTES-001","A02:2021 Cryptographic Failures","CWE-330","V6.2.1","PCI DSS 8.3"),e("SAST-RESET-COMPARE-001","A07:2021 Identification Failures","CWE-208","V2.10.3","PCI DSS 8.3"),e("SAST-RESET-QUERY-001","A01:2021 Broken Access Control","CWE-598","V3.2.1","PCI DSS 8.3"),e("SAST-RESET-STORE-001","A02:2021 Cryptographic Failures","CWE-256","V6.4.1","PCI DSS 8.3"),e("SAST-RESET-UUID-001","A02:2021 Cryptographic Failures","CWE-330","V6.2.1","PCI DSS 8.3"),e("SAST-RESPMASK-001","A04:2021 Insecure Design","CWE-200","V7.4.1","PCI DSS 6.2.4"),e("SAST-TENANT-001","A01:2021 Broken Access Control","CWE-639","V4.2.1","PCI DSS 7.2"),e("SAST-UPLOAD-TYPE-001","A04:2021 Insecure Design","CWE-434","V12.5.1","PCI DSS 6.2.4"),e("SAST-WS-AUTH-001","A07:2021 Identification Failures","CWE-306","V4.1.1","PCI DSS 8.2"),...Z],Jn=new Map(zn.map(t=>[t.ruleId,t]));function Xn(t){return Jn.get(t)}function Vs(t,i="pci"){let s=t.map(r=>{let o=Xn(r.ruleId);return `${r.ruleId} ${r.severity??""} ${r.file??""} ${o?.pci??"unmapped"} ${o?.owasp??""} ${o?.cwe??""}`});return [`FullShield compliance mapping (${i})`,Q,"","ruleId severity file pci owasp cwe",...s,"",Q].join(`
2
2
  `)}function js(t){let i=new Set,s=/\b((?:SAST|SECRET|DEPS|CONFIG|EDGE|AI|LLM|SUPPLY|IAC|RASP|RUNTIME|DLP|MCP|HOST|AGENT)(?:-[A-Z0-9]+)*-\d{3})\b/g;for(let r of t){let o;for(;(o=s.exec(r))!==null;)i.add(o[1]??"");}return [...i].sort()}export{Q as COMPLIANCE_DISCLAIMER,zn as RULE_MAP,js as collectRuleIdsFromSources,Xn as mappingFor,Vs as renderCompliance};
package/dist/index.d.ts CHANGED
@@ -86,6 +86,12 @@ interface Finding {
86
86
  verification?: 'live' | 'revoked' | 'unknown';
87
87
  /** 0–100. Present only with FULLSHIELD_EXPERIMENTAL_PRIORITY=1. Severity is never changed. */
88
88
  priority?: number;
89
+ /** Local EPSS score. Present only with FULLSHIELD_EXPERIMENTAL_EPSS_LOCAL=1. Not a live feed. */
90
+ epss?: number;
91
+ /** Local KEV flag from the same file. Not a CISA download. */
92
+ kev?: boolean;
93
+ /** Deterministic score from epss, kev, reachability, and severity. Same flag as `epss`. */
94
+ epssPriority?: number;
89
95
  /** Why `priority` was chosen. Same flag as `priority`. */
90
96
  priorityFactors?: Array<{
91
97
  name: string;
@@ -149,6 +155,14 @@ interface DepsConfig {
149
155
  cacheDir?: string;
150
156
  /** Present only when FULLSHIELD_EXPERIMENTAL_CAPABILITIES=1. */
151
157
  capabilityPolicy?: CapabilityPolicy;
158
+ /** Present only when FULLSHIELD_EXPERIMENTAL_LICENSE_POLICY=1. */
159
+ licenseDeny?: string[];
160
+ /** Present only when FULLSHIELD_EXPERIMENTAL_LICENSE_POLICY=1. */
161
+ licenseAllow?: string[];
162
+ /** Present only when FULLSHIELD_EXPERIMENTAL_PRIVATE_REG=1. Stored, never fetched. */
163
+ registry?: string;
164
+ /** Present only when FULLSHIELD_EXPERIMENTAL_EPSS_LOCAL=1. Local file only. */
165
+ epssFile?: string;
152
166
  }
153
167
  interface AiConfig {
154
168
  /** Off by default. Also enabled by `--ai`. */