hackmyagent 0.11.12 → 0.11.13

package/dist/output/asff.d.ts

@@ -0,0 +1,37 @@
+/**
+ * AWS Security Finding Format (ASFF) adapter.
+ *
+ * Transforms HMA security findings into ASFF JSON for import
+ * into AWS Security Hub via BatchImportFindings API.
+ *
+ * Usage:
+ *   hackmyagent secure --format asff
+ *   hackmyagent secure --format asff | aws securityhub batch-import-findings --findings file:///dev/stdin
+ *
+ * Reference: https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-findings-format.html
+ */
+export interface SecurityFinding {
+    checkId: string;
+    name: string;
+    severity: string;
+    passed: boolean;
+    fixed?: boolean;
+    message?: string;
+    file?: string;
+    line?: number;
+    recommendation?: string;
+    category?: string;
+}
+/**
+ * Convert HMA findings to AWS Security Finding Format.
+ */
+export declare function toASSF(findings: SecurityFinding[], options?: {
+    awsAccountId?: string;
+    awsRegion?: string;
+    targetDir?: string;
+}): string;
+/**
+ * Split ASFF findings into batches of 100 (AWS API limit).
+ */
+export declare function batchASSF(assfJson: string): string[];
+//# sourceMappingURL=asff.d.ts.map

package/dist/output/asff.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"asff.d.ts","sourceRoot":"","sources":["../../src/output/asff.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAiDD;;GAEG;AACH,wBAAgB,MAAM,CACpB,QAAQ,EAAE,eAAe,EAAE,EAC3B,OAAO,GAAE;IACP,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACf,GACL,MAAM,CAuER;AAED;;GAEG;AACH,wBAAgB,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,CASpD"}

package/dist/output/asff.js

@@ -0,0 +1,111 @@
+"use strict";
+/**
+ * AWS Security Finding Format (ASFF) adapter.
+ *
+ * Transforms HMA security findings into ASFF JSON for import
+ * into AWS Security Hub via BatchImportFindings API.
+ *
+ * Usage:
+ *   hackmyagent secure --format asff
+ *   hackmyagent secure --format asff | aws securityhub batch-import-findings --findings file:///dev/stdin
+ *
+ * Reference: https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-findings-format.html
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.toASSF = toASSF;
+exports.batchASSF = batchASSF;
+const SEVERITY_MAP = {
+    critical: 'CRITICAL',
+    high: 'HIGH',
+    medium: 'MEDIUM',
+    low: 'LOW',
+    informational: 'INFORMATIONAL',
+    info: 'INFORMATIONAL',
+};
+const CATEGORY_TYPE_MAP = {
+    credentials: 'Software and Configuration Checks/Vulnerabilities/CVE',
+    mcp: 'Software and Configuration Checks/Industry and Regulatory Standards',
+    network: 'Software and Configuration Checks/Vulnerabilities/CVE',
+    injection: 'Software and Configuration Checks/Vulnerabilities/CVE',
+    supply_chain: 'Software and Configuration Checks/Vulnerabilities/CVE',
+    governance: 'Software and Configuration Checks/Industry and Regulatory Standards',
+    config: 'Software and Configuration Checks/AWS Security Best Practices',
+};
+/**
+ * Convert HMA findings to AWS Security Finding Format.
+ */
+function toASSF(findings, options = {}) {
+    const accountId = options.awsAccountId || process.env.AWS_ACCOUNT_ID || '000000000000';
+    const region = options.awsRegion || process.env.AWS_REGION || 'us-east-1';
+    const targetDir = options.targetDir || process.cwd();
+    const now = new Date().toISOString();
+    const productArn = `arn:aws:securityhub:${region}:${accountId}:product/${accountId}/default`;
+    // Only include failed (not passed, not fixed) findings
+    const failed = findings.filter(f => !f.passed && !f.fixed);
+    const assfFindings = failed.map(f => {
+        const severity = SEVERITY_MAP[f.severity] || 'INFORMATIONAL';
+        const category = f.category || f.checkId.split('-')[0].toLowerCase();
+        const types = CATEGORY_TYPE_MAP[category]
+            ? [CATEGORY_TYPE_MAP[category]]
+            : ['Software and Configuration Checks'];
+        const title = f.name || f.checkId;
+        const description = (f.message || f.name || f.checkId).slice(0, 1024);
+        const finding = {
+            SchemaVersion: '2018-10-08',
+            Id: `opena2a/hma/${f.checkId}/${Date.now()}`,
+            ProductArn: productArn,
+            GeneratorId: `hackmyagent/${f.checkId}`,
+            AwsAccountId: accountId,
+            Types: types,
+            CreatedAt: now,
+            UpdatedAt: now,
+            Severity: {
+                Label: severity,
+                Original: f.severity,
+            },
+            Title: title.slice(0, 256),
+            Description: description,
+            Resources: [{
+                    Type: 'Other',
+                    Id: f.file || targetDir,
+                }],
+            ProductFields: {
+                'opena2a/checkId': f.checkId,
+                'opena2a/scanner': 'hackmyagent',
+                'opena2a/scannerVersion': '0.11.11',
+            },
+            RecordState: 'ACTIVE',
+            Workflow: { Status: 'NEW' },
+        };
+        if (f.recommendation) {
+            finding.Remediation = {
+                Recommendation: {
+                    Text: f.recommendation.slice(0, 512),
+                    Url: `https://hackmyagent.com/docs/checks/${f.checkId.toLowerCase()}`,
+                },
+            };
+        }
+        if (f.file) {
+            finding.Resources[0].Details = {
+                Other: {
+                    filePath: f.file,
+                    ...(f.line ? { lineNumber: String(f.line) } : {}),
+                },
+            };
+        }
+        return finding;
+    });
+    return JSON.stringify(assfFindings, null, 2);
+}
+/**
+ * Split ASFF findings into batches of 100 (AWS API limit).
+ */
+function batchASSF(assfJson) {
+    const findings = JSON.parse(assfJson);
+    const batches = [];
+    for (let i = 0; i < findings.length; i += 100) {
+        batches.push(JSON.stringify(findings.slice(i, i + 100), null, 2));
+    }
+    return batches;
+}
+//# sourceMappingURL=asff.js.map

package/dist/output/asff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"asff.js","sourceRoot":"","sources":["../../src/output/asff.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;AAiEH,wBA8EC;AAKD,8BASC;AAlHD,MAAM,YAAY,GAA2B;IAC3C,QAAQ,EAAE,UAAU;IACpB,IAAI,EAAE,MAAM;IACZ,MAAM,EAAE,QAAQ;IAChB,GAAG,EAAE,KAAK;IACV,aAAa,EAAE,eAAe;IAC9B,IAAI,EAAE,eAAe;CACtB,CAAC;AAEF,MAAM,iBAAiB,GAA2B;IAChD,WAAW,EAAE,uDAAuD;IACpE,GAAG,EAAE,qEAAqE;IAC1E,OAAO,EAAE,uDAAuD;IAChE,SAAS,EAAE,uDAAuD;IAClE,YAAY,EAAE,uDAAuD;IACrE,UAAU,EAAE,qEAAqE;IACjF,MAAM,EAAE,+DAA+D;CACxE,CAAC;AAEF;;GAEG;AACH,SAAgB,MAAM,CACpB,QAA2B,EAC3B,UAII,EAAE;IAEN,MAAM,SAAS,GAAG,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,cAAc,CAAC;IACvF,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,WAAW,CAAC;IAC1E,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACrD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAErC,MAAM,UAAU,GAAG,uBAAuB,MAAM,IAAI,SAAS,YAAY,SAAS,UAAU,CAAC;IAE7F,uDAAuD;IACvD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAE3D,MAAM,YAAY,GAAiB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;QAChD,MAAM,QAAQ,GAAG,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,eAAe,CAAC;QAC7D,MAAM,QAAQ,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QACrE,MAAM,KAAK,GAAG,iBAAiB,CAAC,QAAQ,CAAC;YACvC,CAAC,CAAC,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;YAC/B,CAAC,CAAC,CAAC,mCAAmC,CAAC,CAAC;QAE1C,MAAM,KAAK,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,OAAO,CAAC;QAClC,MAAM,WAAW,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QAEtE,MAAM,OAAO,GAAe;YAC1B,aAAa,EAAE,YAAY;YAC3B,EAAE,EAAE,eAAe,CAAC,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE;YAC5C,UAAU,EAAE,UAAU;YACtB,WAAW,EAAE,eAAe,CAAC,CAAC,OAAO,EAAE;YACvC,YAAY,EAAE,SAAS;YACvB,KAAK,EAAE,KAAK;YACZ,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;YACd,QAAQ,EAAE;gBACR,KAAK,EAAE,QAAQ;gBACf,QAAQ,EAAE,CAAC,CAAC,QAAQ;aACrB;YACD,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;YAC1B,WAAW,EAAE,WAAW;YACxB,SAAS,EAAE,CAAC;oBACV,IAAI,EAAE,OAAO;oBACb,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,SAAS;iBACxB,CAAC;YACF,aAAa,EAAE;gBACb,iBAAiB,EAAE,CAAC,CAAC,OAAO;gBAC5B,iBAAiB,EAAE,aAAa;gBAChC,wBAAwB,EAAE,SAAS;aACpC;YACD,WAAW,EAAE,QAAQ;YACrB,QAAQ,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;SAC5B,CAAC;QAEF,IAAI,CAAC,CAAC,cAAc,EAAE,CAAC;YACrB,OAAO,CAAC,WAAW,GAAG;gBACpB,cAAc,EAAE;oBACd,IAAI,EAAE,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;oBACpC,GAAG,EAAE,uCAAuC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE;iBACtE;aACF,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;YACX,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG;gBAC7B,KAAK,EAAE;oBACL,QAAQ,EAAE,CAAC,CAAC,IAAI;oBAChB,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAClD;aACF,CAAC;QACJ,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC,CAAC;IAEH,OAAO,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED;;GAEG;AACH,SAAgB,SAAS,CAAC,QAAgB;IACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,GAAG,EAAE,CAAC;QAC9C,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACpE,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "hackmyagent",
-  "version": "0.11.12",
+  "version": "0.11.13",
   "description": "Find it. Break it. Fix it. The hacker's toolkit for AI agents.",
   "bin": {
     "hackmyagent": "dist/cli.js"