kastell 2.1.0 → 2.2.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.claude-plugin/marketplace.json +18 -0
- package/.claude-plugin/plugin.json +39 -0
- package/CHANGELOG.md +1266 -1216
- package/LICENSE +201 -201
- package/NOTICE +5 -5
- package/README.md +1 -1
- package/README.tr.md +1 -1
- package/bin/kastell +2 -2
- package/bin/kastell-mcp +5 -5
- package/dist/adapters/coolify.js +92 -92
- package/dist/adapters/dokploy.js +99 -99
- package/dist/adapters/shared.d.ts.map +1 -1
- package/dist/adapters/shared.js +4 -2
- package/dist/adapters/shared.js.map +1 -1
- package/dist/commands/add.d.ts.map +1 -1
- package/dist/commands/add.js +6 -9
- package/dist/commands/add.js.map +1 -1
- package/dist/commands/auth.d.ts.map +1 -1
- package/dist/commands/auth.js +12 -12
- package/dist/commands/auth.js.map +1 -1
- package/dist/commands/doctor.d.ts +1 -0
- package/dist/commands/doctor.d.ts.map +1 -1
- package/dist/commands/doctor.js +23 -8
- package/dist/commands/doctor.js.map +1 -1
- package/dist/commands/evidence.d.ts.map +1 -1
- package/dist/commands/evidence.js +8 -9
- package/dist/commands/evidence.js.map +1 -1
- package/dist/commands/fix.d.ts +1 -0
- package/dist/commands/fix.d.ts.map +1 -1
- package/dist/commands/fix.js +24 -5
- package/dist/commands/fix.js.map +1 -1
- package/dist/commands/init.d.ts.map +1 -1
- package/dist/commands/init.js +4 -7
- package/dist/commands/init.js.map +1 -1
- package/dist/commands/interactive/backup-maintenance.d.ts +8 -0
- package/dist/commands/interactive/backup-maintenance.d.ts.map +1 -0
- package/dist/commands/interactive/backup-maintenance.js +120 -0
- package/dist/commands/interactive/backup-maintenance.js.map +1 -0
- package/dist/commands/interactive/index.d.ts +4 -0
- package/dist/commands/interactive/index.d.ts.map +1 -0
- package/dist/commands/interactive/index.js +94 -0
- package/dist/commands/interactive/index.js.map +1 -0
- package/dist/commands/interactive/menu.d.ts +23 -0
- package/dist/commands/interactive/menu.d.ts.map +1 -0
- package/dist/commands/interactive/menu.js +121 -0
- package/dist/commands/interactive/menu.js.map +1 -0
- package/dist/commands/interactive/monitoring.d.ts +5 -0
- package/dist/commands/interactive/monitoring.d.ts.map +1 -0
- package/dist/commands/interactive/monitoring.js +96 -0
- package/dist/commands/interactive/monitoring.js.map +1 -0
- package/dist/commands/interactive/plugins.d.ts +2 -0
- package/dist/commands/interactive/plugins.d.ts.map +1 -0
- package/dist/commands/interactive/plugins.js +30 -0
- package/dist/commands/interactive/plugins.js.map +1 -0
- package/dist/commands/interactive/security.d.ts +9 -0
- package/dist/commands/interactive/security.d.ts.map +1 -0
- package/dist/commands/interactive/security.js +535 -0
- package/dist/commands/interactive/security.js.map +1 -0
- package/dist/commands/interactive/server-management.d.ts +5 -0
- package/dist/commands/interactive/server-management.d.ts.map +1 -0
- package/dist/commands/interactive/server-management.js +79 -0
- package/dist/commands/interactive/server-management.js.map +1 -0
- package/dist/commands/interactive/shared.d.ts +12 -0
- package/dist/commands/interactive/shared.d.ts.map +1 -0
- package/dist/commands/interactive/shared.js +30 -0
- package/dist/commands/interactive/shared.js.map +1 -0
- package/dist/commands/interactive.d.ts.map +1 -1
- package/dist/commands/interactive.js +29 -0
- package/dist/commands/interactive.js.map +1 -1
- package/dist/commands/lock.js +1 -1
- package/dist/commands/lock.js.map +1 -1
- package/dist/commands/plugin.d.ts +8 -0
- package/dist/commands/plugin.d.ts.map +1 -0
- package/dist/commands/plugin.js +87 -0
- package/dist/commands/plugin.js.map +1 -0
- package/dist/commands/regression.d.ts.map +1 -1
- package/dist/commands/regression.js +1 -2
- package/dist/commands/regression.js.map +1 -1
- package/dist/commands/restart.d.ts.map +1 -1
- package/dist/commands/restart.js +3 -2
- package/dist/commands/restart.js.map +1 -1
- package/dist/commands/schedule.js +2 -2
- package/dist/commands/schedule.js.map +1 -1
- package/dist/core/audit/checkIds.d.ts +516 -0
- package/dist/core/audit/checkIds.d.ts.map +1 -0
- package/dist/core/audit/checkIds.js +515 -0
- package/dist/core/audit/checkIds.js.map +1 -0
- package/dist/core/audit/checks/accounts.d.ts.map +1 -1
- package/dist/core/audit/checks/accounts.js +23 -22
- package/dist/core/audit/checks/accounts.js.map +1 -1
- package/dist/core/audit/checks/auth.d.ts.map +1 -1
- package/dist/core/audit/checks/auth.js +23 -22
- package/dist/core/audit/checks/auth.js.map +1 -1
- package/dist/core/audit/checks/backup.d.ts.map +1 -1
- package/dist/core/audit/checks/backup.js +9 -8
- package/dist/core/audit/checks/backup.js.map +1 -1
- package/dist/core/audit/checks/banners.d.ts.map +1 -1
- package/dist/core/audit/checks/banners.js +7 -6
- package/dist/core/audit/checks/banners.js.map +1 -1
- package/dist/core/audit/checks/boot.d.ts.map +1 -1
- package/dist/core/audit/checks/boot.js +12 -11
- package/dist/core/audit/checks/boot.js.map +1 -1
- package/dist/core/audit/checks/cloudmeta.d.ts.map +1 -1
- package/dist/core/audit/checks/cloudmeta.js +7 -6
- package/dist/core/audit/checks/cloudmeta.js.map +1 -1
- package/dist/core/audit/checks/crypto.d.ts +0 -5
- package/dist/core/audit/checks/crypto.d.ts.map +1 -1
- package/dist/core/audit/checks/crypto.js +20 -19
- package/dist/core/audit/checks/crypto.js.map +1 -1
- package/dist/core/audit/checks/ddos.d.ts.map +1 -1
- package/dist/core/audit/checks/ddos.js +9 -8
- package/dist/core/audit/checks/ddos.js.map +1 -1
- package/dist/core/audit/checks/dns.d.ts.map +1 -1
- package/dist/core/audit/checks/dns.js +9 -8
- package/dist/core/audit/checks/dns.js.map +1 -1
- package/dist/core/audit/checks/docker.d.ts.map +1 -1
- package/dist/core/audit/checks/docker.js +65 -64
- package/dist/core/audit/checks/docker.js.map +1 -1
- package/dist/core/audit/checks/fileintegrity.d.ts.map +1 -1
- package/dist/core/audit/checks/fileintegrity.js +11 -10
- package/dist/core/audit/checks/fileintegrity.js.map +1 -1
- package/dist/core/audit/checks/filesystem.d.ts.map +1 -1
- package/dist/core/audit/checks/filesystem.js +21 -20
- package/dist/core/audit/checks/filesystem.js.map +1 -1
- package/dist/core/audit/checks/firewall.d.ts.map +1 -1
- package/dist/core/audit/checks/firewall.js +18 -17
- package/dist/core/audit/checks/firewall.js.map +1 -1
- package/dist/core/audit/checks/httpHeaders.d.ts.map +1 -1
- package/dist/core/audit/checks/httpHeaders.js +7 -6
- package/dist/core/audit/checks/httpHeaders.js.map +1 -1
- package/dist/core/audit/checks/incidentready.d.ts.map +1 -1
- package/dist/core/audit/checks/incidentready.js +13 -12
- package/dist/core/audit/checks/incidentready.js.map +1 -1
- package/dist/core/audit/checks/kernel.d.ts.map +1 -1
- package/dist/core/audit/checks/kernel.js +32 -31
- package/dist/core/audit/checks/kernel.js.map +1 -1
- package/dist/core/audit/checks/logging.d.ts.map +1 -1
- package/dist/core/audit/checks/logging.js +21 -20
- package/dist/core/audit/checks/logging.js.map +1 -1
- package/dist/core/audit/checks/mac.d.ts.map +1 -1
- package/dist/core/audit/checks/mac.js +11 -10
- package/dist/core/audit/checks/mac.js.map +1 -1
- package/dist/core/audit/checks/malware.d.ts.map +1 -1
- package/dist/core/audit/checks/malware.js +12 -11
- package/dist/core/audit/checks/malware.js.map +1 -1
- package/dist/core/audit/checks/memory.d.ts.map +1 -1
- package/dist/core/audit/checks/memory.js +12 -11
- package/dist/core/audit/checks/memory.js.map +1 -1
- package/dist/core/audit/checks/network.d.ts.map +1 -1
- package/dist/core/audit/checks/network.js +22 -21
- package/dist/core/audit/checks/network.js.map +1 -1
- package/dist/core/audit/checks/nginx.d.ts.map +1 -1
- package/dist/core/audit/checks/nginx.js +17 -16
- package/dist/core/audit/checks/nginx.js.map +1 -1
- package/dist/core/audit/checks/resourcelimits.d.ts.map +1 -1
- package/dist/core/audit/checks/resourcelimits.js +9 -8
- package/dist/core/audit/checks/resourcelimits.js.map +1 -1
- package/dist/core/audit/checks/scheduling.d.ts.map +1 -1
- package/dist/core/audit/checks/scheduling.js +13 -12
- package/dist/core/audit/checks/scheduling.js.map +1 -1
- package/dist/core/audit/checks/secrets.d.ts.map +1 -1
- package/dist/core/audit/checks/secrets.js +16 -15
- package/dist/core/audit/checks/secrets.js.map +1 -1
- package/dist/core/audit/checks/services.d.ts.map +1 -1
- package/dist/core/audit/checks/services.js +26 -25
- package/dist/core/audit/checks/services.js.map +1 -1
- package/dist/core/audit/checks/ssh.d.ts.map +1 -1
- package/dist/core/audit/checks/ssh.js +23 -22
- package/dist/core/audit/checks/ssh.js.map +1 -1
- package/dist/core/audit/checks/supplychain.d.ts.map +1 -1
- package/dist/core/audit/checks/supplychain.js +13 -12
- package/dist/core/audit/checks/supplychain.js.map +1 -1
- package/dist/core/audit/checks/time.d.ts.map +1 -1
- package/dist/core/audit/checks/time.js +10 -9
- package/dist/core/audit/checks/time.js.map +1 -1
- package/dist/core/audit/checks/tls.d.ts.map +1 -1
- package/dist/core/audit/checks/tls.js +9 -8
- package/dist/core/audit/checks/tls.js.map +1 -1
- package/dist/core/audit/checks/updates.d.ts.map +1 -1
- package/dist/core/audit/checks/updates.js +12 -11
- package/dist/core/audit/checks/updates.js.map +1 -1
- package/dist/core/audit/compliance/categories/index.d.ts +3 -0
- package/dist/core/audit/compliance/categories/index.d.ts.map +1 -0
- package/dist/core/audit/compliance/categories/index.js +737 -0
- package/dist/core/audit/compliance/categories/index.js.map +1 -0
- package/dist/core/audit/compliance/helpers.d.ts +17 -0
- package/dist/core/audit/compliance/helpers.d.ts.map +1 -0
- package/dist/core/audit/compliance/helpers.js +40 -0
- package/dist/core/audit/compliance/helpers.js.map +1 -0
- package/dist/core/audit/compliance/mapper.d.ts +4 -16
- package/dist/core/audit/compliance/mapper.d.ts.map +1 -1
- package/dist/core/audit/compliance/mapper.js +3 -776
- package/dist/core/audit/compliance/mapper.js.map +1 -1
- package/dist/core/audit/fix-history.d.ts +16 -7
- package/dist/core/audit/fix-history.d.ts.map +1 -1
- package/dist/core/audit/fix-history.js +25 -2
- package/dist/core/audit/fix-history.js.map +1 -1
- package/dist/core/audit/fix.d.ts +17 -2
- package/dist/core/audit/fix.d.ts.map +1 -1
- package/dist/core/audit/fix.js +115 -42
- package/dist/core/audit/fix.js.map +1 -1
- package/dist/core/audit/formatters/badge.js +20 -20
- package/dist/core/audit/index.d.ts.map +1 -1
- package/dist/core/audit/index.js +3 -2
- package/dist/core/audit/index.js.map +1 -1
- package/dist/core/audit/snapshot.d.ts.map +1 -1
- package/dist/core/audit/snapshot.js +6 -2
- package/dist/core/audit/snapshot.js.map +1 -1
- package/dist/core/audit/types.d.ts +11 -1
- package/dist/core/audit/types.d.ts.map +1 -1
- package/dist/core/audit/watch.d.ts.map +1 -1
- package/dist/core/audit/watch.js +3 -2
- package/dist/core/audit/watch.js.map +1 -1
- package/dist/core/backup.d.ts.map +1 -1
- package/dist/core/backup.js +10 -5
- package/dist/core/backup.js.map +1 -1
- package/dist/core/bot/handlers.d.ts.map +1 -1
- package/dist/core/bot/handlers.js +2 -17
- package/dist/core/bot/handlers.js.map +1 -1
- package/dist/core/completions.d.ts.map +1 -1
- package/dist/core/completions.js +632 -610
- package/dist/core/completions.js.map +1 -1
- package/dist/core/deploy.d.ts.map +1 -1
- package/dist/core/deploy.js +7 -4
- package/dist/core/deploy.js.map +1 -1
- package/dist/core/doctor-fix.d.ts +1 -1
- package/dist/core/doctor-fix.d.ts.map +1 -1
- package/dist/core/doctor-fix.js +17 -2
- package/dist/core/doctor-fix.js.map +1 -1
- package/dist/core/doctor.d.ts.map +1 -1
- package/dist/core/doctor.js +2 -1
- package/dist/core/doctor.js.map +1 -1
- package/dist/core/firewall.d.ts +0 -1
- package/dist/core/firewall.d.ts.map +1 -1
- package/dist/core/firewall.js +2 -13
- package/dist/core/firewall.js.map +1 -1
- package/dist/core/lock/auth.d.ts +7 -0
- package/dist/core/lock/auth.d.ts.map +1 -0
- package/dist/core/lock/auth.js +59 -0
- package/dist/core/lock/auth.js.map +1 -0
- package/dist/core/lock/docker.d.ts +4 -0
- package/dist/core/lock/docker.d.ts.map +1 -0
- package/dist/core/lock/docker.js +28 -0
- package/dist/core/lock/docker.js.map +1 -0
- package/dist/core/lock/index.d.ts +11 -0
- package/dist/core/lock/index.d.ts.map +1 -0
- package/dist/core/lock/index.js +247 -0
- package/dist/core/lock/index.js.map +1 -0
- package/dist/core/lock/monitoring.d.ts +4 -0
- package/dist/core/lock/monitoring.d.ts.map +1 -0
- package/dist/core/lock/monitoring.js +55 -0
- package/dist/core/lock/monitoring.js.map +1 -0
- package/dist/core/lock/network.d.ts +6 -0
- package/dist/core/lock/network.d.ts.map +1 -0
- package/dist/core/lock/network.js +59 -0
- package/dist/core/lock/network.js.map +1 -0
- package/dist/core/lock/ssh.d.ts +5 -0
- package/dist/core/lock/ssh.d.ts.map +1 -0
- package/dist/core/lock/ssh.js +49 -0
- package/dist/core/lock/ssh.js.map +1 -0
- package/dist/core/lock/system.d.ts +9 -0
- package/dist/core/lock/system.d.ts.map +1 -0
- package/dist/core/lock/system.js +80 -0
- package/dist/core/lock/system.js.map +1 -0
- package/dist/core/lock/types.d.ts +41 -0
- package/dist/core/lock/types.d.ts.map +1 -0
- package/dist/core/lock/types.js +2 -0
- package/dist/core/lock/types.js.map +1 -0
- package/dist/core/maintain.d.ts.map +1 -1
- package/dist/core/maintain.js +3 -1
- package/dist/core/maintain.js.map +1 -1
- package/dist/core/manage.d.ts.map +1 -1
- package/dist/core/manage.js +7 -4
- package/dist/core/manage.js.map +1 -1
- package/dist/core/notify.d.ts.map +1 -1
- package/dist/core/notify.js +2 -1
- package/dist/core/notify.js.map +1 -1
- package/dist/core/notifyStore.d.ts.map +1 -1
- package/dist/core/notifyStore.js +3 -1
- package/dist/core/notifyStore.js.map +1 -1
- package/dist/core/plugin.d.ts +23 -0
- package/dist/core/plugin.d.ts.map +1 -0
- package/dist/core/plugin.js +107 -0
- package/dist/core/plugin.js.map +1 -0
- package/dist/core/provision.d.ts.map +1 -1
- package/dist/core/provision.js +9 -4
- package/dist/core/provision.js.map +1 -1
- package/dist/core/scheduleManager.d.ts +2 -1
- package/dist/core/scheduleManager.d.ts.map +1 -1
- package/dist/core/scheduleManager.js +13 -7
- package/dist/core/scheduleManager.js.map +1 -1
- package/dist/index.js +34 -2
- package/dist/index.js.map +1 -1
- package/dist/mcp/index.js +5 -9
- package/dist/mcp/index.js.map +1 -1
- package/dist/mcp/schemas/audit.d.ts +34 -0
- package/dist/mcp/schemas/audit.d.ts.map +1 -0
- package/dist/mcp/schemas/audit.js +23 -0
- package/dist/mcp/schemas/audit.js.map +1 -0
- package/dist/mcp/schemas/common.d.ts +16 -0
- package/dist/mcp/schemas/common.d.ts.map +1 -0
- package/dist/mcp/schemas/common.js +14 -0
- package/dist/mcp/schemas/common.js.map +1 -0
- package/dist/mcp/schemas/health.d.ts +14 -0
- package/dist/mcp/schemas/health.d.ts.map +1 -0
- package/dist/mcp/schemas/health.js +13 -0
- package/dist/mcp/schemas/health.js.map +1 -0
- package/dist/mcp/schemas/index.d.ts +5 -0
- package/dist/mcp/schemas/index.d.ts.map +1 -0
- package/dist/mcp/schemas/index.js +5 -0
- package/dist/mcp/schemas/index.js.map +1 -0
- package/dist/mcp/schemas/server.d.ts +18 -0
- package/dist/mcp/schemas/server.d.ts.map +1 -0
- package/dist/mcp/schemas/server.js +16 -0
- package/dist/mcp/schemas/server.js.map +1 -0
- package/dist/mcp/server.d.ts.map +1 -1
- package/dist/mcp/server.js +71 -40
- package/dist/mcp/server.js.map +1 -1
- package/dist/mcp/tools/serverAudit.d.ts +63 -1
- package/dist/mcp/tools/serverAudit.d.ts.map +1 -1
- package/dist/mcp/tools/serverAudit.js +63 -6
- package/dist/mcp/tools/serverAudit.js.map +1 -1
- package/dist/mcp/tools/serverBackup.d.ts +100 -2
- package/dist/mcp/tools/serverBackup.d.ts.map +1 -1
- package/dist/mcp/tools/serverBackup.handlers.d.ts.map +1 -1
- package/dist/mcp/tools/serverBackup.handlers.js +9 -0
- package/dist/mcp/tools/serverBackup.handlers.js.map +1 -1
- package/dist/mcp/tools/serverBackup.js +74 -0
- package/dist/mcp/tools/serverBackup.js.map +1 -1
- package/dist/mcp/tools/serverCompare.d.ts +33 -0
- package/dist/mcp/tools/serverCompare.d.ts.map +1 -1
- package/dist/mcp/tools/serverCompare.js +45 -2
- package/dist/mcp/tools/serverCompare.js.map +1 -1
- package/dist/mcp/tools/serverDoctor.d.ts +14 -0
- package/dist/mcp/tools/serverDoctor.d.ts.map +1 -1
- package/dist/mcp/tools/serverDoctor.js +16 -1
- package/dist/mcp/tools/serverDoctor.js.map +1 -1
- package/dist/mcp/tools/serverEvidence.d.ts +13 -0
- package/dist/mcp/tools/serverEvidence.d.ts.map +1 -1
- package/dist/mcp/tools/serverEvidence.js +17 -2
- package/dist/mcp/tools/serverEvidence.js.map +1 -1
- package/dist/mcp/tools/serverExplain.d.ts +17 -0
- package/dist/mcp/tools/serverExplain.d.ts.map +1 -1
- package/dist/mcp/tools/serverExplain.js +33 -1
- package/dist/mcp/tools/serverExplain.js.map +1 -1
- package/dist/mcp/tools/serverFix.d.ts +78 -0
- package/dist/mcp/tools/serverFix.d.ts.map +1 -1
- package/dist/mcp/tools/serverFix.js +87 -0
- package/dist/mcp/tools/serverFix.js.map +1 -1
- package/dist/mcp/tools/serverFleet.d.ts +24 -1
- package/dist/mcp/tools/serverFleet.d.ts.map +1 -1
- package/dist/mcp/tools/serverFleet.js +24 -1
- package/dist/mcp/tools/serverFleet.js.map +1 -1
- package/dist/mcp/tools/serverGuard.d.ts +12 -0
- package/dist/mcp/tools/serverGuard.d.ts.map +1 -1
- package/dist/mcp/tools/serverGuard.js +16 -0
- package/dist/mcp/tools/serverGuard.js.map +1 -1
- package/dist/mcp/tools/serverInfo.d.ts +77 -1
- package/dist/mcp/tools/serverInfo.d.ts.map +1 -1
- package/dist/mcp/tools/serverInfo.js +77 -4
- package/dist/mcp/tools/serverInfo.js.map +1 -1
- package/dist/mcp/tools/serverLock.d.ts +10 -0
- package/dist/mcp/tools/serverLock.d.ts.map +1 -1
- package/dist/mcp/tools/serverLock.js +15 -3
- package/dist/mcp/tools/serverLock.js.map +1 -1
- package/dist/mcp/tools/serverLogs.d.ts +43 -0
- package/dist/mcp/tools/serverLogs.d.ts.map +1 -1
- package/dist/mcp/tools/serverLogs.js +28 -0
- package/dist/mcp/tools/serverLogs.js.map +1 -1
- package/dist/mcp/tools/serverMaintain.d.ts +47 -0
- package/dist/mcp/tools/serverMaintain.d.ts.map +1 -1
- package/dist/mcp/tools/serverMaintain.js +75 -41
- package/dist/mcp/tools/serverMaintain.js.map +1 -1
- package/dist/mcp/tools/serverManage.d.ts +50 -0
- package/dist/mcp/tools/serverManage.d.ts.map +1 -1
- package/dist/mcp/tools/serverManage.js +49 -0
- package/dist/mcp/tools/serverManage.js.map +1 -1
- package/dist/mcp/tools/serverPlugin.d.ts +30 -0
- package/dist/mcp/tools/serverPlugin.d.ts.map +1 -0
- package/dist/mcp/tools/serverPlugin.js +47 -0
- package/dist/mcp/tools/serverPlugin.js.map +1 -0
- package/dist/mcp/tools/serverProvision.d.ts +22 -0
- package/dist/mcp/tools/serverProvision.d.ts.map +1 -1
- package/dist/mcp/tools/serverProvision.js +22 -2
- package/dist/mcp/tools/serverProvision.js.map +1 -1
- package/dist/mcp/tools/serverSecure.d.ts +120 -0
- package/dist/mcp/tools/serverSecure.d.ts.map +1 -1
- package/dist/mcp/tools/serverSecure.handlers.d.ts.map +1 -1
- package/dist/mcp/tools/serverSecure.handlers.js +39 -98
- package/dist/mcp/tools/serverSecure.handlers.js.map +1 -1
- package/dist/mcp/tools/serverSecure.js +101 -0
- package/dist/mcp/tools/serverSecure.js.map +1 -1
- package/dist/mcp/utils.d.ts +1 -0
- package/dist/mcp/utils.d.ts.map +1 -1
- package/dist/mcp/utils.js +5 -1
- package/dist/mcp/utils.js.map +1 -1
- package/dist/plugin/loader.d.ts +10 -0
- package/dist/plugin/loader.d.ts.map +1 -0
- package/dist/plugin/loader.js +88 -0
- package/dist/plugin/loader.js.map +1 -0
- package/dist/plugin/registry.d.ts +16 -0
- package/dist/plugin/registry.d.ts.map +1 -0
- package/dist/plugin/registry.js +101 -0
- package/dist/plugin/registry.js.map +1 -0
- package/dist/plugin/sdk/constants.d.ts +3 -0
- package/dist/plugin/sdk/constants.d.ts.map +1 -0
- package/dist/plugin/sdk/constants.js +3 -0
- package/dist/plugin/sdk/constants.js.map +1 -0
- package/dist/plugin/sdk/types.d.ts +29 -0
- package/dist/plugin/sdk/types.d.ts.map +1 -0
- package/dist/plugin/sdk/types.js +2 -0
- package/dist/plugin/sdk/types.js.map +1 -0
- package/dist/plugin/validate.d.ts +3 -0
- package/dist/plugin/validate.d.ts.map +1 -0
- package/dist/plugin/validate.js +31 -0
- package/dist/plugin/validate.js.map +1 -0
- package/dist/providers/base.d.ts.map +1 -1
- package/dist/providers/base.js +2 -1
- package/dist/providers/base.js.map +1 -1
- package/dist/providers/linode.d.ts +1 -0
- package/dist/providers/linode.d.ts.map +1 -1
- package/dist/providers/linode.js +4 -0
- package/dist/providers/linode.js.map +1 -1
- package/dist/utils/cloudInit.js +58 -58
- package/dist/utils/config.d.ts +3 -0
- package/dist/utils/config.d.ts.map +1 -1
- package/dist/utils/config.js +11 -6
- package/dist/utils/config.js.map +1 -1
- package/dist/utils/encryption.d.ts.map +1 -1
- package/dist/utils/encryption.js +4 -1
- package/dist/utils/encryption.js.map +1 -1
- package/dist/utils/errorMapper.d.ts.map +1 -1
- package/dist/utils/errorMapper.js +2 -1
- package/dist/utils/errorMapper.js.map +1 -1
- package/dist/utils/errors.d.ts +1 -0
- package/dist/utils/errors.d.ts.map +1 -1
- package/dist/utils/errors.js +3 -0
- package/dist/utils/errors.js.map +1 -1
- package/dist/utils/migration.d.ts.map +1 -1
- package/dist/utils/migration.js +25 -14
- package/dist/utils/migration.js.map +1 -1
- package/dist/utils/paths.d.ts +4 -0
- package/dist/utils/paths.d.ts.map +1 -1
- package/dist/utils/paths.js +4 -0
- package/dist/utils/paths.js.map +1 -1
- package/dist/utils/safeMode.d.ts.map +1 -1
- package/dist/utils/safeMode.js +3 -2
- package/dist/utils/safeMode.js.map +1 -1
- package/dist/utils/secureWrite.d.ts.map +1 -1
- package/dist/utils/secureWrite.js +2 -1
- package/dist/utils/secureWrite.js.map +1 -1
- package/dist/utils/securityLogger.d.ts.map +1 -1
- package/dist/utils/securityLogger.js +7 -3
- package/dist/utils/securityLogger.js.map +1 -1
- package/dist/utils/version.d.ts +4 -0
- package/dist/utils/version.d.ts.map +1 -0
- package/dist/utils/version.js +22 -0
- package/dist/utils/version.js.map +1 -0
- package/dist/utils/yamlConfig.d.ts.map +1 -1
- package/dist/utils/yamlConfig.js +3 -2
- package/dist/utils/yamlConfig.js.map +1 -1
- package/kastell-plugin/.claude-plugin/plugin.json +20 -0
- package/kastell-plugin/.mcp.json +8 -0
- package/kastell-plugin/README.md +113 -0
- package/kastell-plugin/agents/.gitkeep +0 -0
- package/kastell-plugin/agents/kastell-auditor.md +77 -0
- package/kastell-plugin/agents/scripts/bucket_mapper.sh +101 -0
- package/kastell-plugin/agents/scripts/trend_report.sh +91 -0
- package/kastell-plugin/hooks/destroy-block.cjs +31 -0
- package/kastell-plugin/hooks/hooks.json +57 -0
- package/kastell-plugin/hooks/pre-commit-audit-guard.cjs +75 -0
- package/kastell-plugin/hooks/session-audit.cjs +86 -0
- package/kastell-plugin/hooks/session-log.cjs +56 -0
- package/kastell-plugin/hooks/stop-quality-check.cjs +72 -0
- package/kastell-plugin/skills/.gitkeep +0 -0
- package/kastell-plugin/skills/kastell-careful/SKILL.md +64 -0
- package/kastell-plugin/skills/kastell-ops/SKILL.md +139 -0
- package/kastell-plugin/skills/kastell-ops/references/commands.md +45 -0
- package/kastell-plugin/skills/kastell-ops/references/mcp-tools.md +50 -0
- package/kastell-plugin/skills/kastell-ops/references/patterns.md +145 -0
- package/kastell-plugin/skills/kastell-ops/references/pitfalls.md +136 -0
- package/kastell-plugin/skills/kastell-ops/scripts/check_coverage.sh +101 -0
- package/kastell-plugin/skills/kastell-ops/scripts/fleet_report.sh +73 -0
- package/kastell-plugin/skills/kastell-ops/scripts/parse_audit.sh +76 -0
- package/kastell-plugin/skills/kastell-research/SKILL.md +90 -0
- package/kastell-plugin/skills/kastell-scaffold/SKILL.md +104 -0
- package/kastell-plugin/skills/kastell-scaffold/references/template-audit-check.md +150 -0
- package/kastell-plugin/skills/kastell-scaffold/references/template-command.md +80 -0
- package/kastell-plugin/skills/kastell-scaffold/references/template-mcp-tool.md +72 -0
- package/kastell-plugin/skills/kastell-scaffold/references/template-provider.md +67 -0
- package/kastell-plugin/skills/kastell-scaffold/scripts/scaffold.sh +180 -0
- package/kastell-plugin/skills/kastell-scaffold/templates/check-test.ts.tpl +27 -0
- package/kastell-plugin/skills/kastell-scaffold/templates/check.ts.tpl +50 -0
- package/kastell-plugin/skills/kastell-scaffold/templates/command-core.ts.tpl +18 -0
- package/kastell-plugin/skills/kastell-scaffold/templates/command-test.ts.tpl +17 -0
- package/kastell-plugin/skills/kastell-scaffold/templates/command.ts.tpl +25 -0
- package/kastell-plugin/skills/kastell-scaffold/templates/mcp-tool-test.ts.tpl +30 -0
- package/kastell-plugin/skills/kastell-scaffold/templates/mcp-tool.ts.tpl +29 -0
- package/kastell-plugin/skills/kastell-scaffold/templates/provider-test.ts.tpl +34 -0
- package/kastell-plugin/skills/kastell-scaffold/templates/provider.ts.tpl +32 -0
- package/package.json +122 -113
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"supplychain.js","sourceRoot":"","sources":["../../../../src/core/audit/checks/supplychain.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;
|
|
1
|
+
{"version":3,"file":"supplychain.js","sourceRoot":"","sources":["../../../../src/core/audit/checks/supplychain.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAa3C,MAAM,aAAa,GAA0B;IAC3C;QACE,EAAE,EAAE,SAAS,CAAC,WAAW,CAAC,sBAAsB;QAChD,IAAI,EAAE,4BAA4B;QAClC,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,CAAC,MAAM,EAAE,EAAE;YAChB,iEAAiE;YACjE,6DAA6D;YAC7D,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;YACrD,MAAM,gBAAgB,GAAG,SAAS,KAAK,IAAI,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;YACpE,IAAI,gBAAgB,EAAE,CAAC;gBACrB,OAAO;oBACL,MAAM,EAAE,KAAK;oBACb,YAAY,EAAE,qCAAqC,SAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;iBACvF,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,yCAAyC,EAAE,CAAC;QACnF,CAAC;QACD,aAAa,EAAE,6CAA6C;QAC5D,UAAU,EACR,gMAAgM;QAClM,aAAa,EAAE,SAAS;QACxB,OAAO,EACL,uOAAuO;KAC1O;IACD;QACE,EAAE,EAAE,SAAS,CAAC,WAAW,CAAC,uBAAuB;QACjD,IAAI,EAAE,8BAA8B;QACpC,QAAQ,EAAE,SAAS;QACnB,KAAK,EAAE,CAAC,MAAM,EAAE,EAAE;YAChB,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;YACpD,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YAC1C,IAAI,WAAW,EAAE,CAAC;gBAChB,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,yDAAyD,EAAE,CAAC;YACnG,CAAC;YACD,IAAI,MAAM,EAAE,CAAC;gBACX,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,sDAAsD,EAAE,CAAC;YACjG,CAAC;YACD,mDAAmD;YACnD,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC/C,OAAO;gBACL,MAAM,EAAE,WAAW;gBACnB,YAAY,EAAE,WAAW;oBACvB,CAAC,CAAC,0CAA0C;oBAC5C,CAAC,CAAC,6CAA6C;aAClD,CAAC;QACJ,CAAC;QACD,aAAa,EAAE,kDAAkD;QACjE,UAAU,EACR,oJAAoJ;QACtJ,aAAa,EAAE,SAAS;QACxB,OAAO,EACL,8NAA8N;KACjO;IACD;QACE,EAAE,EAAE,SAAS,CAAC,WAAW,CAAC,2BAA2B;QACrD,IAAI,EAAE,oCAAoC;QAC1C,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,CAAC,MAAM,EAAE,EAAE;YAChB,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC;YAC3D,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC;YACzD,IAAI,UAAU,EAAE,CAAC;gBACf,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,kDAAkD,EAAE,CAAC;YAC5F,CAAC;YACD,IAAI,WAAW,EAAE,CAAC;gBAChB,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,+DAA+D,EAAE,CAAC;YAC1G,CAAC;YACD,kEAAkE;YAClE,MAAM,gBAAgB,GAAG,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;YACvD,OAAO;gBACL,MAAM,EAAE,gBAAgB;gBACxB,YAAY,EAAE,gBAAgB;oBAC5B,CAAC,CAAC,2DAA2D;oBAC7D,CAAC,CAAC,6CAA6C;aAClD,CAAC;QACJ,CAAC;QACD,aAAa,EAAE,2DAA2D;QAC1E,UAAU,EACR,iKAAiK;QACnK,aAAa,EAAE,SAAS;QACxB,OAAO,EACL,gOAAgO;KACnO;IACD;QACE,EAAE,EAAE,SAAS,CAAC,WAAW,CAAC,yBAAyB;QACnD,IAAI,EAAE,+BAA+B;QACrC,QAAQ,EAAE,SAAS;QACnB,KAAK,EAAE,CAAC,MAAM,EAAE,EAAE;YAChB,sEAAsE;YACtE,+DAA+D;YAC/D,MAAM,oBAAoB,GAAG,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACpI,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;YACrD,IAAI,SAAS,EAAE,CAAC;gBACd,gDAAgD;gBAChD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,wCAAwC,EAAE,CAAC;YAClF,CAAC;YACD,IAAI,oBAAoB,EAAE,CAAC;gBACzB,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,uDAAuD,EAAE,CAAC;YAClG,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,yCAAyC,EAAE,CAAC;QACnF,CAAC;QACD,aAAa,EAAE,4DAA4D;QAC3E,UAAU,EACR,yQAAyQ;QAC3Q,aAAa,EAAE,SAAS;QACxB,OAAO,EACL,6PAA6P;KAChQ;IACD;QACE,EAAE,EAAE,SAAS,CAAC,WAAW,CAAC,mBAAmB;QAC7C,IAAI,EAAE,mCAAmC;QACzC,QAAQ,EAAE,SAAS;QACnB,KAAK,EAAE,CAAC,MAAM,EAAE,EAAE;YAChB,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAC;YAC3D,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC;YAC3D,IAAI,SAAS,EAAE,CAAC;gBACd,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,wCAAwC,EAAE,CAAC;YAClF,CAAC;YACD,IAAI,WAAW,EAAE,CAAC;gBAChB,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,gDAAgD,EAAE,CAAC;YAC3F,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,2CAA2C,EAAE,CAAC;QACrF,CAAC;QACD,aAAa,EAAE,uDAAuD;QACtE,UAAU,EACR,6LAA6L;QAC/L,aAAa,EAAE,SAAS;QACxB,OAAO,EACL,gOAAgO;KACnO;IACD;QACE,EAAE,EAAE,SAAS,CAAC,WAAW,CAAC,oBAAoB;QAC9C,IAAI,EAAE,wCAAwC;QAC9C,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,CAAC,MAAM,EAAE,EAAE;YAChB,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;YAClD,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;YACtD,IAAI,QAAQ,EAAE,CAAC;gBACb,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,2CAA2C,EAAE,CAAC;YACrF,CAAC;YACD,IAAI,UAAU,EAAE,CAAC;gBACf,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,8CAA8C,EAAE,CAAC;YACzF,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,uCAAuC,EAAE,CAAC;QACjF,CAAC;QACD,aAAa,EAAE,4DAA4D;QAC3E,UAAU,EACR,mLAAmL;QACrL,aAAa,EAAE,SAAS;QACxB,OAAO,EACL,gNAAgN;KACnN;IACD;QACE,EAAE,EAAE,SAAS,CAAC,WAAW,CAAC,wBAAwB;QAClD,IAAI,EAAE,iCAAiC;QACvC,QAAQ,EAAE,SAAS;QACnB,KAAK,EAAE,CAAC,MAAM,EAAE,EAAE;YAChB,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC;YAC1D,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC;YACtD,IAAI,QAAQ,EAAE,CAAC;gBACb,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,0DAA0D,EAAE,CAAC;YACpG,CAAC;YACD,IAAI,SAAS,EAAE,CAAC;gBACd,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,oEAAoE,EAAE,CAAC;YAC/G,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,mDAAmD,EAAE,CAAC;QAC7F,CAAC;QACD,aAAa,EAAE,sEAAsE;QACrF,UAAU,EACR,8IAA8I;QAChJ,aAAa,EAAE,SAAS;QACxB,OAAO,EACL,qNAAqN;KACxN;IACD;QACE,EAAE,EAAE,SAAS,CAAC,WAAW,CAAC,uBAAuB;QACjD,IAAI,EAAE,qCAAqC;QAC3C,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,CAAC,MAAM,EAAE,EAAE;YAChB,sDAAsD;YACtD,MAAM,OAAO,GAAG,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;YAC7F,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAClF,IAAI,SAAS,EAAE,CAAC;gBACd,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,4DAA4D,EAAE,CAAC;YACvG,CAAC;YACD,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,uCAAuC,EAAE,CAAC;YACjF,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,iCAAiC,EAAE,CAAC;QAC3E,CAAC;QACD,aAAa,EAAE,gEAAgE;QAC/E,UAAU,EACR,8CAA8C;QAChD,aAAa,EAAE,MAAM;QACrB,OAAO,EACL,wPAAwP;KAC3P;IACD;QACE,EAAE,EAAE,SAAS,CAAC,WAAW,CAAC,wBAAwB;QAClD,IAAI,EAAE,oEAAoE;QAC1E,QAAQ,EAAE,SAAS;QACnB,KAAK,EAAE,CAAC,MAAM,EAAE,EAAE;YAChB,0CAA0C;YAC1C,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5B,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,6CAA6C,EAAE,CAAC;YACvF,CAAC;YACD,iDAAiD;YACjD,MAAM,WAAW,GAAG,kCAAkC,CAAC,IAAI,CAAC,MAAM,CAAC;gBACjE,uCAAuC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACvD,OAAO;gBACL,MAAM,EAAE,CAAC,WAAW;gBACpB,YAAY,EAAE,WAAW;oBACvB,CAAC,CAAC,kEAAkE;oBACpE,CAAC,CAAC,qEAAqE;aAC1E,CAAC;QACJ,CAAC;QACD,aAAa,EAAE,gFAAgF;QAC/F,UAAU,EAAE,kFAAkF;QAC9F,aAAa,EAAE,SAAS;QACxB,OAAO,EACL,4GAA4G;KAC/G;IACD;QACE,EAAE,EAAE,SAAS,CAAC,WAAW,CAAC,uBAAuB;QACjD,IAAI,EAAE,8CAA8C;QACpD,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,CAAC,MAAM,EAAE,EAAE;YAChB,yDAAyD;YACzD,MAAM,WAAW,GAAG,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACnD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,KAAK,MAAM,IAAI,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;YAChE,OAAO;gBACL,MAAM,EAAE,WAAW,IAAI,CAAC,MAAM;gBAC9B,YAAY,EAAE,WAAW;oBACvB,CAAC,CAAC,gDAAgD;oBAClD,CAAC,CAAC,6CAA6C;aAClD,CAAC;QACJ,CAAC;QACD,aAAa,EAAE,2DAA2D;QAC1E,UAAU,EAAE,uHAAuH;QACnI,aAAa,EAAE,SAAS;QACxB,OAAO,EACL,8FAA8F;KACjG;IACD;QACE,EAAE,EAAE,SAAS,CAAC,WAAW,CAAC,2BAA2B;QACrD,IAAI,EAAE,sCAAsC;QAC5C,QAAQ,EAAE,SAAS;QACnB,KAAK,EAAE,CAAC,MAAM,EAAE,EAAE;YAChB,6EAA6E;YAC7E,MAAM,iBAAiB,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAClF,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACnC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,iDAAiD,EAAE,CAAC;YAC5F,CAAC;YACD,MAAM,KAAK,GAAG,QAAQ,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;YACnF,OAAO;gBACL,MAAM,EAAE,KAAK,IAAI,CAAC;gBAClB,YAAY,EAAE,GAAG,KAAK,qDAAqD;aAC5E,CAAC;QACJ,CAAC;QACD,aAAa,EAAE,gFAAgF;QAC/F,UAAU,EAAE,4EAA4E;QACxF,aAAa,EAAE,MAAM;QACrB,OAAO,EACL,4FAA4F;KAC/F;IACD;QACE,EAAE,EAAE,SAAS,CAAC,WAAW,CAAC,wBAAwB;QAClD,IAAI,EAAE,0CAA0C;QAChD,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,CAAC,MAAM,EAAE,EAAE;YAChB,+CAA+C;YAC/C,MAAM,WAAW,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAChF,OAAO;gBACL,MAAM,EAAE,WAAW;gBACnB,YAAY,EAAE,WAAW,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,0BAA0B;aAChF,CAAC;QACJ,CAAC;QACD,aAAa,EAAE,oCAAoC;QACnD,UAAU,EAAE,qBAAqB;QACjC,aAAa,EAAE,MAAM;QACrB,OAAO,EACL,uHAAuH;KAC1H;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,sBAAsB,GAAgB,CACjD,aAAqB,EACrB,SAAiB,EACH,EAAE;IAChB,MAAM,IAAI,GACR,CAAC,aAAa;QACd,aAAa,CAAC,IAAI,EAAE,KAAK,KAAK;QAC9B,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;IAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC;IAEzC,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QAC/B,IAAI,IAAI,EAAE,CAAC;YACT,OAAO;gBACL,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,QAAQ,EAAE,cAAc;gBACxB,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,MAAM,EAAE,KAAK;gBACb,YAAY,EAAE,qBAAqB;gBACnC,aAAa,EAAE,GAAG,CAAC,aAAa;gBAChC,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,aAAa,EAAE,GAAG,CAAC,aAAa;gBAChC,OAAO,EAAE,GAAG,CAAC,OAAO;aACrB,CAAC;QACJ,CAAC;QACD,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACnD,OAAO;YACL,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,QAAQ,EAAE,cAAc;YACxB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,MAAM;YACN,YAAY;YACZ,aAAa,EAAE,GAAG,CAAC,aAAa;YAChC,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,aAAa,EAAE,GAAG,CAAC,aAAa;YAChC,OAAO,EAAE,GAAG,CAAC,OAAO;SACrB,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"time.d.ts","sourceRoot":"","sources":["../../../../src/core/audit/checks/time.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAa,WAAW,EAAoB,MAAM,aAAa,CAAC;AAqN5E,eAAO,MAAM,eAAe,EAAE,
|
|
1
|
+
{"version":3,"file":"time.d.ts","sourceRoot":"","sources":["../../../../src/core/audit/checks/time.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAa,WAAW,EAAoB,MAAM,aAAa,CAAC;AAqN5E,eAAO,MAAM,eAAe,EAAE,WAuC7B,CAAC"}
|
|
@@ -2,9 +2,10 @@
|
|
|
2
2
|
* Time synchronization security check parser.
|
|
3
3
|
* Checks NTP service, clock sync, timezone, and hardware clock.
|
|
4
4
|
*/
|
|
5
|
+
import { CHECK_IDS } from "../checkIds.js";
|
|
5
6
|
const TIME_CHECKS = [
|
|
6
7
|
{
|
|
7
|
-
id:
|
|
8
|
+
id: CHECK_IDS.TIME.TIME_NTP_ACTIVE,
|
|
8
9
|
name: "NTP Service Running",
|
|
9
10
|
severity: "warning",
|
|
10
11
|
check: (output) => {
|
|
@@ -22,7 +23,7 @@ const TIME_CHECKS = [
|
|
|
22
23
|
explain: "Time synchronization is critical for TLS certificate validation, log correlation, and security audit accuracy.",
|
|
23
24
|
},
|
|
24
25
|
{
|
|
25
|
-
id:
|
|
26
|
+
id: CHECK_IDS.TIME.TIME_SYNCHRONIZED,
|
|
26
27
|
name: "Clock NTP Synchronized",
|
|
27
28
|
severity: "warning",
|
|
28
29
|
check: (output) => {
|
|
@@ -39,7 +40,7 @@ const TIME_CHECKS = [
|
|
|
39
40
|
explain: "An unsynchronized clock causes TLS failures, incorrect log timestamps, and authentication token expiry issues.",
|
|
40
41
|
},
|
|
41
42
|
{
|
|
42
|
-
id:
|
|
43
|
+
id: CHECK_IDS.TIME.TIME_TIMEZONE_SET,
|
|
43
44
|
name: "Timezone Configured",
|
|
44
45
|
severity: "info",
|
|
45
46
|
check: (output) => {
|
|
@@ -58,7 +59,7 @@ const TIME_CHECKS = [
|
|
|
58
59
|
explain: "A configured timezone ensures consistent log timestamps across the infrastructure for incident correlation.",
|
|
59
60
|
},
|
|
60
61
|
{
|
|
61
|
-
id:
|
|
62
|
+
id: CHECK_IDS.TIME.TIME_HWCLOCK_SYNC,
|
|
62
63
|
name: "Hardware Clock Readable",
|
|
63
64
|
severity: "info",
|
|
64
65
|
check: (output) => {
|
|
@@ -77,7 +78,7 @@ const TIME_CHECKS = [
|
|
|
77
78
|
explain: "Hardware clock synchronization ensures the system maintains correct time across reboots.",
|
|
78
79
|
},
|
|
79
80
|
{
|
|
80
|
-
id:
|
|
81
|
+
id: CHECK_IDS.TIME.TIME_CHRONY_SOURCES,
|
|
81
82
|
name: "NTP Source Configured",
|
|
82
83
|
severity: "info",
|
|
83
84
|
check: (output) => {
|
|
@@ -98,7 +99,7 @@ const TIME_CHECKS = [
|
|
|
98
99
|
explain: "A configured NTP source ensures the server synchronizes time from trusted upstream servers.",
|
|
99
100
|
},
|
|
100
101
|
{
|
|
101
|
-
id:
|
|
102
|
+
id: CHECK_IDS.TIME.TIME_DRIFT_CHECK,
|
|
102
103
|
name: "Clock Drift Within Range",
|
|
103
104
|
severity: "warning",
|
|
104
105
|
check: (output) => {
|
|
@@ -128,7 +129,7 @@ const TIME_CHECKS = [
|
|
|
128
129
|
explain: "Excessive clock drift causes Kerberos authentication failures, TLS errors, and unreliable security event timestamps.",
|
|
129
130
|
},
|
|
130
131
|
{
|
|
131
|
-
id:
|
|
132
|
+
id: CHECK_IDS.TIME.TIME_NTP_PEERS_CONFIGURED,
|
|
132
133
|
name: "Multiple NTP Sources Configured",
|
|
133
134
|
severity: "info",
|
|
134
135
|
check: (output) => {
|
|
@@ -149,7 +150,7 @@ const TIME_CHECKS = [
|
|
|
149
150
|
explain: "Multiple NTP sources provide redundancy and protect against time manipulation from a single compromised server.",
|
|
150
151
|
},
|
|
151
152
|
{
|
|
152
|
-
id:
|
|
153
|
+
id: CHECK_IDS.TIME.TIME_NO_DRIFT,
|
|
153
154
|
name: "System Clock Synchronized",
|
|
154
155
|
severity: "warning",
|
|
155
156
|
check: (output) => {
|
|
@@ -168,7 +169,7 @@ const TIME_CHECKS = [
|
|
|
168
169
|
explain: "Clock drift causes TLS certificate validation failures, log correlation errors, and authentication token expiry issues.",
|
|
169
170
|
},
|
|
170
171
|
{
|
|
171
|
-
id:
|
|
172
|
+
id: CHECK_IDS.TIME.TIME_NTP_SYNCHRONIZED,
|
|
172
173
|
name: "NTP Synchronized via timedatectl show",
|
|
173
174
|
severity: "warning",
|
|
174
175
|
check: (output) => {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"time.js","sourceRoot":"","sources":["../../../../src/core/audit/checks/time.ts"],"names":[],"mappings":"AAAA;;;GAGG;
|
|
1
|
+
{"version":3,"file":"time.js","sourceRoot":"","sources":["../../../../src/core/audit/checks/time.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAa3C,MAAM,WAAW,GAAmB;IAClC;QACE,EAAE,EAAE,SAAS,CAAC,IAAI,CAAC,eAAe;QAClC,IAAI,EAAE,qBAAqB;QAC3B,QAAQ,EAAE,SAAS;QACnB,KAAK,EAAE,CAAC,MAAM,EAAE,EAAE;YAChB,MAAM,MAAM,GACV,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC;gBAC1B,CAAC,uCAAuC,CAAC,IAAI,CAAC,MAAM,CAAC;oBACnD,wBAAwB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;YAC3C,OAAO;gBACL,MAAM,EAAE,MAAM;gBACd,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,yBAAyB;aAC5E,CAAC;QACJ,CAAC;QACD,aAAa,EAAE,6CAA6C;QAC5D,UAAU,EAAE,sEAAsE;QAClF,aAAa,EAAE,SAAS;QACxB,OAAO,EACL,gHAAgH;KACnH;IACD;QACE,EAAE,EAAE,SAAS,CAAC,IAAI,CAAC,iBAAiB;QACpC,IAAI,EAAE,wBAAwB;QAC9B,QAAQ,EAAE,SAAS;QACnB,KAAK,EAAE,CAAC,MAAM,EAAE,EAAE;YAChB,MAAM,MAAM,GACV,0BAA0B,CAAC,IAAI,CAAC,MAAM,CAAC;gBACvC,mCAAmC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACnD,OAAO;gBACL,MAAM,EAAE,MAAM;gBACd,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,+BAA+B;aACrF,CAAC;QACJ,CAAC;QACD,aAAa,EAAE,uBAAuB;QACtC,UAAU,EAAE,iEAAiE;QAC7E,aAAa,EAAE,SAAS;QACxB,OAAO,EACL,gHAAgH;KACnH;IACD;QACE,EAAE,EAAE,SAAS,CAAC,IAAI,CAAC,iBAAiB;QACpC,IAAI,EAAE,qBAAqB;QAC3B,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,CAAC,MAAM,EAAE,EAAE;YAChB,MAAM,KAAK,GACT,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC;gBAC1B,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC;gBACrB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;gBACnB,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC3B,OAAO;gBACL,MAAM,EAAE,KAAK;gBACb,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,yBAAyB;aAC3E,CAAC;QACJ,CAAC;QACD,aAAa,EAAE,qCAAqC;QACpD,UAAU,EAAE,8BAA8B;QAC1C,aAAa,EAAE,MAAM;QACrB,OAAO,EACL,6GAA6G;KAChH;IACD;QACE,EAAE,EAAE,SAAS,CAAC,IAAI,CAAC,iBAAiB;QACpC,IAAI,EAAE,yBAAyB;QAC/B,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,CAAC,MAAM,EAAE,EAAE;YAChB,4CAA4C;YAC5C,MAAM,YAAY,GAChB,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACzE,OAAO;gBACL,MAAM,EAAE,YAAY;gBACpB,YAAY,EAAE,YAAY;oBACxB,CAAC,CAAC,4BAA4B;oBAC9B,CAAC,CAAC,+CAA+C;aACpD,CAAC;QACJ,CAAC;QACD,aAAa,EAAE,mCAAmC;QAClD,UAAU,EAAE,2DAA2D;QACvE,aAAa,EAAE,MAAM;QACrB,OAAO,EACL,0FAA0F;KAC7F;IACD;QACE,EAAE,EAAE,SAAS,CAAC,IAAI,CAAC,mBAAmB;QACtC,IAAI,EAAE,uBAAuB;QAC7B,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,CAAC,MAAM,EAAE,EAAE;YAChB,MAAM,SAAS,GACb,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC;gBAC5B,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC;gBAC3B,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC;gBAC3B,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC5B,OAAO;gBACL,MAAM,EAAE,SAAS;gBACjB,YAAY,EAAE,SAAS;oBACrB,CAAC,CAAC,0BAA0B;oBAC5B,CAAC,CAAC,kCAAkC;aACvC,CAAC;QACJ,CAAC;QACD,aAAa,EAAE,iDAAiD;QAChE,UAAU,EAAE,0FAA0F;QACtG,aAAa,EAAE,SAAS;QACxB,OAAO,EACL,6FAA6F;KAChG;IACD;QACE,EAAE,EAAE,SAAS,CAAC,IAAI,CAAC,gBAAgB;QACnC,IAAI,EAAE,0BAA0B;QAChC,QAAQ,EAAE,SAAS;QACnB,KAAK,EAAE,CAAC,MAAM,EAAE,EAAE;YAChB,8DAA8D;YAC9D,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;YACzE,IAAI,UAAU,EAAE,CAAC;gBACf,MAAM,KAAK,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;gBACxC,MAAM,MAAM,GAAG,KAAK,GAAG,GAAG,CAAC;gBAC3B,OAAO;oBACL,MAAM;oBACN,YAAY,EAAE,gBAAgB,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU;iBACzD,CAAC;YACJ,CAAC;YACD,oEAAoE;YACpE,MAAM,MAAM,GAAG,0BAA0B,CAAC,IAAI,CAAC,MAAM,CAAC;gBACpD,mCAAmC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACnD,OAAO;gBACL,MAAM,EAAE,MAAM;gBACd,YAAY,EAAE,MAAM;oBAClB,CAAC,CAAC,0DAA0D;oBAC5D,CAAC,CAAC,4CAA4C;aACjD,CAAC;QACJ,CAAC;QACD,aAAa,EAAE,gCAAgC;QAC/C,UAAU,EAAE,oDAAoD;QAChE,aAAa,EAAE,MAAM;QACrB,OAAO,EACL,sHAAsH;KACzH;IACD;QACE,EAAE,EAAE,SAAS,CAAC,IAAI,CAAC,yBAAyB;QAC5C,IAAI,EAAE,iCAAiC;QACvC,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,CAAC,MAAM,EAAE,EAAE;YAChB,2DAA2D;YAC3D,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YAC/E,MAAM,eAAe,GAAG,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACrD,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,IAAI,CAAC,IAAI,eAAe,CAAC;YAC7D,OAAO;gBACL,MAAM,EAAE,QAAQ;gBAChB,YAAY,EAAE,QAAQ;oBACpB,CAAC,CAAC,yBAAyB,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,wBAAwB,GAAG;oBACnH,CAAC,CAAC,iCAAiC;aACtC,CAAC;QACJ,CAAC;QACD,aAAa,EAAE,uDAAuD;QACtE,UAAU,EAAE,0EAA0E;QACtF,aAAa,EAAE,SAAS;QACxB,OAAO,EACL,iHAAiH;KACpH;IACD;QACE,EAAE,EAAE,SAAS,CAAC,IAAI,CAAC,aAAa;QAChC,IAAI,EAAE,2BAA2B;QACjC,QAAQ,EAAE,SAAS;QACnB,KAAK,EAAE,CAAC,MAAM,EAAE,EAAE;YAChB,MAAM,MAAM,GACV,mCAAmC,CAAC,IAAI,CAAC,MAAM,CAAC;gBAChD,0BAA0B,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC1C,OAAO;gBACL,MAAM,EAAE,MAAM;gBACd,YAAY,EAAE,MAAM;oBAClB,CAAC,CAAC,8BAA8B;oBAChC,CAAC,CAAC,4CAA4C;aACjD,CAAC;QACJ,CAAC;QACD,aAAa,EAAE,oDAAoD;QACnE,UAAU,EAAE,iEAAiE;QAC7E,aAAa,EAAE,SAAS;QACxB,OAAO,EACL,yHAAyH;KAC5H;IACD;QACE,EAAE,EAAE,SAAS,CAAC,IAAI,CAAC,qBAAqB;QACxC,IAAI,EAAE,uCAAuC;QAC7C,QAAQ,EAAE,SAAS;QACnB,KAAK,EAAE,CAAC,MAAM,EAAE,EAAE;YAChB,uDAAuD;YACvD,MAAM,MAAM,GAAG,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACnD,OAAO;gBACL,MAAM,EAAE,MAAM;gBACd,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,wCAAwC,CAAC,CAAC,CAAC,+BAA+B;aAClG,CAAC;QACJ,CAAC;QACD,aAAa,EAAE,8CAA8C;QAC7D,UAAU,EAAE,0BAA0B;QACtC,aAAa,EAAE,MAAM;QACrB,OAAO,EACL,8HAA8H;KACjI;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAgB,CAC1C,aAAqB,EACrB,SAAiB,EACH,EAAE;IAChB,MAAM,IAAI,GACR,CAAC,aAAa;QACd,aAAa,CAAC,IAAI,EAAE,KAAK,KAAK;QAC9B,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;IAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC;IAEzC,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QAC7B,IAAI,IAAI,EAAE,CAAC;YACT,OAAO;gBACL,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,QAAQ,EAAE,MAAM;gBAChB,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,MAAM,EAAE,KAAK;gBACb,YAAY,EAAE,qBAAqB;gBACnC,aAAa,EAAE,GAAG,CAAC,aAAa;gBAChC,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,aAAa,EAAE,GAAG,CAAC,aAAa;gBAChC,OAAO,EAAE,GAAG,CAAC,OAAO;aACrB,CAAC;QACJ,CAAC;QACD,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACnD,OAAO;YACL,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,QAAQ,EAAE,MAAM;YAChB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,MAAM;YACN,YAAY;YACZ,aAAa,EAAE,GAAG,CAAC,aAAa;YAChC,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,aAAa,EAAE,GAAG,CAAC,aAAa;YAChC,OAAO,EAAE,GAAG,CAAC,OAAO;SACrB,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"tls.d.ts","sourceRoot":"","sources":["../../../../src/core/audit/checks/tls.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAa,WAAW,EAAoB,MAAM,aAAa,CAAC;AA6M5E,eAAO,MAAM,cAAc,EAAE,
|
|
1
|
+
{"version":3,"file":"tls.d.ts","sourceRoot":"","sources":["../../../../src/core/audit/checks/tls.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAa,WAAW,EAAoB,MAAM,aAAa,CAAC;AA6M5E,eAAO,MAAM,cAAc,EAAE,WA6B5B,CAAC"}
|
|
@@ -3,10 +3,11 @@
|
|
|
3
3
|
* Parses Nginx TLS configuration output into 8 security checks.
|
|
4
4
|
* If Nginx is not installed, returns info-level skipped checks (score-neutral).
|
|
5
5
|
*/
|
|
6
|
+
import { CHECK_IDS } from "../checkIds.js";
|
|
6
7
|
import { makeSkippedChecks } from "./shared/skipChecks.js";
|
|
7
8
|
const TLS_CHECKS = [
|
|
8
9
|
{
|
|
9
|
-
id:
|
|
10
|
+
id: CHECK_IDS.TLS.TLS_MIN_VERSION,
|
|
10
11
|
name: "TLS Minimum Version 1.2",
|
|
11
12
|
severity: "critical",
|
|
12
13
|
check: (output) => {
|
|
@@ -30,7 +31,7 @@ const TLS_CHECKS = [
|
|
|
30
31
|
explain: "TLS 1.0 and 1.1 are deprecated (RFC 8996). PCI-DSS 4.2.1 requires TLS 1.2 minimum. TLS 1.0 is vulnerable to POODLE and BEAST attacks. Enforcing TLSv1.2+ eliminates these protocol-level vulnerabilities.",
|
|
31
32
|
},
|
|
32
33
|
{
|
|
33
|
-
id:
|
|
34
|
+
id: CHECK_IDS.TLS.TLS_WEAK_CIPHERS,
|
|
34
35
|
name: "No Weak TLS Ciphers Configured",
|
|
35
36
|
severity: "critical",
|
|
36
37
|
check: (output) => {
|
|
@@ -54,7 +55,7 @@ const TLS_CHECKS = [
|
|
|
54
55
|
explain: "Weak ciphers like RC4 (RFC 7465), DES, 3DES (Sweet32), and EXPORT-grade ciphers are cryptographically broken. They can be exploited via BEAST, POODLE, SWEET32, and CRIME attacks to decrypt TLS traffic. Only ECDHE/DHE with AES-GCM or ChaCha20 ciphers should be allowed.",
|
|
55
56
|
},
|
|
56
57
|
{
|
|
57
|
-
id:
|
|
58
|
+
id: CHECK_IDS.TLS.TLS_HSTS,
|
|
58
59
|
name: "HTTP Strict Transport Security Enabled",
|
|
59
60
|
severity: "warning",
|
|
60
61
|
check: (output) => {
|
|
@@ -73,7 +74,7 @@ const TLS_CHECKS = [
|
|
|
73
74
|
explain: "HTTP Strict Transport Security (HSTS) prevents protocol downgrade attacks by instructing browsers to only connect via HTTPS. Without HSTS, attackers can perform SSL stripping attacks that silently downgrade HTTPS connections to HTTP, exposing credentials and session tokens.",
|
|
74
75
|
},
|
|
75
76
|
{
|
|
76
|
-
id:
|
|
77
|
+
id: CHECK_IDS.TLS.TLS_OCSP,
|
|
77
78
|
name: "OCSP Stapling Enabled",
|
|
78
79
|
severity: "warning",
|
|
79
80
|
check: (output) => {
|
|
@@ -91,7 +92,7 @@ const TLS_CHECKS = [
|
|
|
91
92
|
explain: "OCSP stapling allows Nginx to provide certificate revocation status during the TLS handshake, eliminating the need for clients to contact the CA directly. This improves connection speed and privacy, and ensures clients know immediately if a certificate has been revoked.",
|
|
92
93
|
},
|
|
93
94
|
{
|
|
94
|
-
id:
|
|
95
|
+
id: CHECK_IDS.TLS.TLS_CERT_EXPIRY,
|
|
95
96
|
name: "TLS Certificate Valid for >= 30 Days",
|
|
96
97
|
severity: "warning",
|
|
97
98
|
check: (output) => {
|
|
@@ -112,7 +113,7 @@ const TLS_CHECKS = [
|
|
|
112
113
|
explain: "Expired TLS certificates cause browser warnings and connection failures, breaking all HTTPS traffic immediately. Certificates expiring within 30 days should be renewed proactively to avoid service disruption. Let's Encrypt auto-renewal with certbot or acme.sh handles this automatically.",
|
|
113
114
|
},
|
|
114
115
|
{
|
|
115
|
-
id:
|
|
116
|
+
id: CHECK_IDS.TLS.TLS_DH_PARAM,
|
|
116
117
|
name: "DH Parameters >= 2048 Bits",
|
|
117
118
|
severity: "warning",
|
|
118
119
|
check: (output) => {
|
|
@@ -135,7 +136,7 @@ const TLS_CHECKS = [
|
|
|
135
136
|
explain: "Weak Diffie-Hellman parameters (1024-bit) are vulnerable to the Logjam attack (CVE-2015-4000), enabling a man-in-the-middle attacker to downgrade TLS connections and decrypt them. PCI-DSS 4.2.1 requires DH parameters of at least 2048 bits for all TLS connections.",
|
|
136
137
|
},
|
|
137
138
|
{
|
|
138
|
-
id:
|
|
139
|
+
id: CHECK_IDS.TLS.TLS_COMPRESSION,
|
|
139
140
|
name: "TLS Compression Disabled",
|
|
140
141
|
severity: "warning",
|
|
141
142
|
check: (output) => {
|
|
@@ -154,7 +155,7 @@ const TLS_CHECKS = [
|
|
|
154
155
|
explain: "TLS compression is vulnerable to the CRIME attack (CVE-2012-4929) which allows an attacker to recover secret HTTP headers (including session cookies and CSRF tokens) from encrypted TLS traffic using a chosen-plaintext attack. Nginx has disabled it by default since version 1.3.2.",
|
|
155
156
|
},
|
|
156
157
|
{
|
|
157
|
-
id:
|
|
158
|
+
id: CHECK_IDS.TLS.TLS_CERT_CHAIN,
|
|
158
159
|
name: "TLS Certificate Chain Complete",
|
|
159
160
|
severity: "warning",
|
|
160
161
|
check: (output) => {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"tls.js","sourceRoot":"","sources":["../../../../src/core/audit/checks/tls.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;
|
|
1
|
+
{"version":3,"file":"tls.js","sourceRoot":"","sources":["../../../../src/core/audit/checks/tls.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAa3D,MAAM,UAAU,GAAkB;IAChC;QACE,EAAE,EAAE,SAAS,CAAC,GAAG,CAAC,eAAe;QACjC,IAAI,EAAE,yBAAyB;QAC/B,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,CAAC,MAAM,EAAE,EAAE;YAChB,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,2BAA2B,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC1E,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,yCAAyC,EAAE,CAAC;YACpF,CAAC;YACD,MAAM,OAAO,GAAG,6BAA6B,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACjE,MAAM,SAAS,GAAG,cAAc,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACpD,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,yBAAyB,YAAY,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC;YACzF,CAAC;YACD,IAAI,SAAS,EAAE,CAAC;gBACd,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,cAAc,YAAY,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC;YAC7E,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,0CAA0C,EAAE,CAAC;QACrF,CAAC;QACD,aAAa,EAAE,qDAAqD;QACpE,UAAU,EACR,gHAAgH;QAClH,aAAa,EAAE,SAAS;QACxB,OAAO,EACL,2MAA2M;KAC9M;IACD;QACE,EAAE,EAAE,SAAS,CAAC,GAAG,CAAC,gBAAgB;QAClC,IAAI,EAAE,gCAAgC;QACtC,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,CAAC,MAAM,EAAE,EAAE;YAChB,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,yBAAyB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACtE,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,uCAAuC,EAAE,CAAC;YAClF,CAAC;YACD,gFAAgF;YAChF,wFAAwF;YACxF,MAAM,WAAW,GAAG,2DAA2D,CAAC;YAChF,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YAC1D,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAClF,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzB,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,uBAAuB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACxF,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,YAAY,UAAU,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC;QACzE,CAAC;QACD,aAAa,EAAE,mFAAmF;QAClG,UAAU,EACR,8NAA8N;QAChO,aAAa,EAAE,SAAS;QACxB,OAAO,EACL,8QAA8Q;KACjR;IACD;QACE,EAAE,EAAE,SAAS,CAAC,GAAG,CAAC,QAAQ;QAC1B,IAAI,EAAE,wCAAwC;QAC9C,QAAQ,EAAE,SAAS;QACnB,KAAK,EAAE,CAAC,MAAM,EAAE,EAAE;YAChB,IAAI,MAAM,CAAC,QAAQ,CAAC,2BAA2B,CAAC,EAAE,CAAC;gBACjD,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;gBACzD,IAAI,WAAW,IAAI,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,QAAQ,EAAE,CAAC;oBAC3D,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,yBAAyB,WAAW,CAAC,CAAC,CAAC,qBAAqB,EAAE,CAAC;gBACvG,CAAC;gBACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,iCAAiC,EAAE,CAAC;YAC3E,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,iDAAiD,EAAE,CAAC;QAC5F,CAAC;QACD,aAAa,EAAE,sEAAsE;QACrF,UAAU,EACR,iIAAiI;QACnI,aAAa,EAAE,SAAS;QACxB,OAAO,EACL,oRAAoR;KACvR;IACD;QACE,EAAE,EAAE,SAAS,CAAC,GAAG,CAAC,QAAQ;QAC1B,IAAI,EAAE,uBAAuB;QAC7B,QAAQ,EAAE,SAAS;QACnB,KAAK,EAAE,CAAC,MAAM,EAAE,EAAE;YAChB,IAAI,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBACtC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,0BAA0B,EAAE,CAAC;YACpE,CAAC;YACD,IAAI,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBACvC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,sCAAsC,EAAE,CAAC;YACjF,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,uCAAuC,EAAE,CAAC;QAClF,CAAC;QACD,aAAa,EAAE,qDAAqD;QACpE,UAAU,EACR,2IAA2I;QAC7I,aAAa,EAAE,SAAS;QACxB,OAAO,EACL,gRAAgR;KACnR;IACD;QACE,EAAE,EAAE,SAAS,CAAC,GAAG,CAAC,eAAe;QACjC,IAAI,EAAE,sCAAsC;QAC5C,QAAQ,EAAE,SAAS;QACnB,KAAK,EAAE,CAAC,MAAM,EAAE,EAAE;YAChB,IAAI,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;gBACzC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,6CAA6C,EAAE,CAAC;YACvF,CAAC;YACD,IAAI,MAAM,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC;gBAC1C,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,oCAAoC,EAAE,CAAC;YAC/E,CAAC;YACD,IAAI,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBACtC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,gDAAgD,EAAE,CAAC;YAC3F,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,4CAA4C,EAAE,CAAC;QACvF,CAAC;QACD,aAAa,EAAE,kCAAkC;QACjD,UAAU,EACR,qGAAqG;QACvG,aAAa,EAAE,SAAS;QACxB,OAAO,EACL,iSAAiS;KACpS;IACD;QACE,EAAE,EAAE,SAAS,CAAC,GAAG,CAAC,YAAY;QAC9B,IAAI,EAAE,4BAA4B;QAClC,QAAQ,EAAE,SAAS;QACnB,KAAK,EAAE,CAAC,MAAM,EAAE,EAAE;YAChB,IAAI,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;gBACnC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,oEAAoE,EAAE,CAAC;YAC/G,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;YAChE,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,iDAAiD,EAAE,CAAC;YAC5F,CAAC;YACD,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACpC,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC;gBACjB,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,kBAAkB,IAAI,OAAO,EAAE,CAAC;YACvE,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,2BAA2B,IAAI,sBAAsB,EAAE,CAAC;QAChG,CAAC;QACD,aAAa,EAAE,uDAAuD;QACtE,UAAU,EACR,sMAAsM;QACxM,aAAa,EAAE,SAAS;QACxB,OAAO,EACL,yQAAyQ;KAC5Q;IACD;QACE,EAAE,EAAE,SAAS,CAAC,GAAG,CAAC,eAAe;QACjC,IAAI,EAAE,0BAA0B;QAChC,QAAQ,EAAE,SAAS;QACnB,KAAK,EAAE,CAAC,MAAM,EAAE,EAAE;YAChB,IAAI,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBACzC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,6DAA6D,EAAE,CAAC;YACxG,CAAC;YACD,8DAA8D;YAC9D,IAAI,wBAAwB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC1C,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,wCAAwC,EAAE,CAAC;YAClF,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,gEAAgE,EAAE,CAAC;QAC1G,CAAC;QACD,aAAa,EAAE,kEAAkE;QACjF,UAAU,EACR,sGAAsG;QACxG,aAAa,EAAE,SAAS;QACxB,OAAO,EACL,yRAAyR;KAC5R;IACD;QACE,EAAE,EAAE,SAAS,CAAC,GAAG,CAAC,cAAc;QAChC,IAAI,EAAE,gCAAgC;QACtC,QAAQ,EAAE,SAAS;QACnB,KAAK,EAAE,CAAC,MAAM,EAAE,EAAE;YAChB,IAAI,MAAM,CAAC,QAAQ,CAAC,0BAA0B,CAAC,EAAE,CAAC;gBAChD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,6CAA6C,EAAE,CAAC;YACxF,CAAC;YACD,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5B,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,yCAAyC,EAAE,CAAC;YACnF,CAAC;YACD,IAAI,MAAM,CAAC,QAAQ,CAAC,wCAAwC,CAAC,EAAE,CAAC;gBAC9D,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,iEAAiE,EAAE,CAAC;YAC5G,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,yDAAyD,EAAE,CAAC;QACpG,CAAC;QACD,aAAa,EAAE,4DAA4D;QAC3E,UAAU,EACR,8SAA8S;QAChT,aAAa,EAAE,SAAS;QACxB,OAAO,EACL,8SAA8S;KACjT;CACF,CAAC;AAEF,MAAM,QAAQ,GAAG,eAAe,CAAC;AAEjC,MAAM,CAAC,MAAM,cAAc,GAAgB,CACzC,aAAqB,EACrB,SAAiB,EACH,EAAE;IAChB,MAAM,SAAS,GACb,CAAC,aAAa;QACd,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE;QAC3B,aAAa,CAAC,IAAI,EAAE,KAAK,KAAK;QAC9B,aAAa,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC;IAEhD,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,iBAAiB,CAAC,UAAU,EAAE,QAAQ,EAAE,qBAAqB,CAAC,CAAC;IACxE,CAAC;IAED,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QAC5B,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QAC1D,OAAO;YACL,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,QAAQ,EAAE,QAAQ;YAClB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,MAAM;YACN,YAAY;YACZ,aAAa,EAAE,GAAG,CAAC,aAAa;YAChC,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,aAAa,EAAE,GAAG,CAAC,aAAa;YAChC,OAAO,EAAE,GAAG,CAAC,OAAO;SACrB,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"updates.d.ts","sourceRoot":"","sources":["../../../../src/core/audit/checks/updates.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAc,WAAW,EAAE,MAAM,aAAa,CAAC;
|
|
1
|
+
{"version":3,"file":"updates.d.ts","sourceRoot":"","sources":["../../../../src/core/audit/checks/updates.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAc,WAAW,EAAE,MAAM,aAAa,CAAC;AAG3D,eAAO,MAAM,kBAAkB,EAAE,WA+OhC,CAAC"}
|
|
@@ -2,6 +2,7 @@
|
|
|
2
2
|
* System Updates check parser.
|
|
3
3
|
* Parses apt/unattended-upgrades output into 4 security checks with semantic IDs.
|
|
4
4
|
*/
|
|
5
|
+
import { CHECK_IDS } from "../checkIds.js";
|
|
5
6
|
export const parseUpdatesChecks = (sectionOutput, _platform) => {
|
|
6
7
|
const isNA = !sectionOutput || sectionOutput.trim() === "N/A" || sectionOutput.trim() === "";
|
|
7
8
|
const lines = isNA ? [] : sectionOutput.split("\n").map((l) => l.trim()).filter(Boolean);
|
|
@@ -21,7 +22,7 @@ export const parseUpdatesChecks = (sectionOutput, _platform) => {
|
|
|
21
22
|
const securityCount = parseInt(securityCountStr, 10);
|
|
22
23
|
const hasSecurityUpdates = !isNaN(securityCount) && securityCount > 0;
|
|
23
24
|
const upd01 = {
|
|
24
|
-
id:
|
|
25
|
+
id: CHECK_IDS.UPDATES.UPD_SECURITY_PATCHES,
|
|
25
26
|
category: "Updates",
|
|
26
27
|
name: "Security Updates Pending",
|
|
27
28
|
severity: "critical",
|
|
@@ -39,7 +40,7 @@ export const parseUpdatesChecks = (sectionOutput, _platform) => {
|
|
|
39
40
|
// UPD-02: Unattended upgrades installed
|
|
40
41
|
const unattendedInstalled = unattendedLine.includes("unattended-upgrades");
|
|
41
42
|
const upd02 = {
|
|
42
|
-
id:
|
|
43
|
+
id: CHECK_IDS.UPDATES.UPD_AUTO_UPDATES,
|
|
43
44
|
category: "Updates",
|
|
44
45
|
name: "Automatic Security Updates",
|
|
45
46
|
severity: "warning",
|
|
@@ -60,7 +61,7 @@ export const parseUpdatesChecks = (sectionOutput, _platform) => {
|
|
|
60
61
|
const sevenDays = 7 * 24 * 60 * 60;
|
|
61
62
|
const isFresh = !isNaN(aptTimestamp) && (nowEpoch - aptTimestamp) < sevenDays;
|
|
62
63
|
const upd03 = {
|
|
63
|
-
id:
|
|
64
|
+
id: CHECK_IDS.UPDATES.UPD_CACHE_FRESH,
|
|
64
65
|
category: "Updates",
|
|
65
66
|
name: "Package Cache Fresh",
|
|
66
67
|
severity: "info",
|
|
@@ -79,7 +80,7 @@ export const parseUpdatesChecks = (sectionOutput, _platform) => {
|
|
|
79
80
|
const rebootRequired = rebootLine.includes("REBOOT_REQUIRED");
|
|
80
81
|
const noReboot = rebootLine.includes("NO_REBOOT");
|
|
81
82
|
const upd04 = {
|
|
82
|
-
id:
|
|
83
|
+
id: CHECK_IDS.UPDATES.UPD_REBOOT_REQUIRED,
|
|
83
84
|
category: "Updates",
|
|
84
85
|
name: "System Reboot Required",
|
|
85
86
|
severity: "warning",
|
|
@@ -109,7 +110,7 @@ export const parseUpdatesChecks = (sectionOutput, _platform) => {
|
|
|
109
110
|
const latestTimestamp = allTimestamps.length > 0 ? allTimestamps.reduce((a, b) => (b > a ? b : a)) : NaN;
|
|
110
111
|
const isUpgradeRecent = !isNaN(latestTimestamp) && (Math.floor(Date.now() / 1000) - latestTimestamp) < thirtyDays;
|
|
111
112
|
const upd05 = {
|
|
112
|
-
id:
|
|
113
|
+
id: CHECK_IDS.UPDATES.UPD_LAST_UPGRADE_RECENT,
|
|
113
114
|
category: "Updates",
|
|
114
115
|
name: "Last Package Activity Recent",
|
|
115
116
|
severity: "warning",
|
|
@@ -128,7 +129,7 @@ export const parseUpdatesChecks = (sectionOutput, _platform) => {
|
|
|
128
129
|
const cveToolLine = lines.find((l) => l.includes("trivy") || l.includes("grype") || l === "NONE") ?? "N/A";
|
|
129
130
|
const hasCveTool = cveToolLine !== "NONE" && cveToolLine !== "N/A" && cveToolLine.trim() !== "";
|
|
130
131
|
const upd06 = {
|
|
131
|
-
id:
|
|
132
|
+
id: CHECK_IDS.UPDATES.UPD_CVE_SCANNER_PRESENT,
|
|
132
133
|
category: "Updates",
|
|
133
134
|
name: "CVE Scanner Installed",
|
|
134
135
|
severity: "info",
|
|
@@ -144,7 +145,7 @@ export const parseUpdatesChecks = (sectionOutput, _platform) => {
|
|
|
144
145
|
const dpkgPartialCount = dpkgAuditLine !== undefined && dpkgAuditLine !== null ? parseInt(dpkgAuditLine, 10) : NaN;
|
|
145
146
|
const noDpkgPartial = !isNaN(dpkgPartialCount) && dpkgPartialCount === 0;
|
|
146
147
|
const upd07 = {
|
|
147
|
-
id:
|
|
148
|
+
id: CHECK_IDS.UPDATES.UPD_DPKG_NO_PARTIAL,
|
|
148
149
|
category: "Updates",
|
|
149
150
|
name: "No Partial Packages",
|
|
150
151
|
severity: "warning",
|
|
@@ -159,7 +160,7 @@ export const parseUpdatesChecks = (sectionOutput, _platform) => {
|
|
|
159
160
|
const kernelVersion = lines.find((l) => /^\d+\.\d+\./.test(l)) ?? "";
|
|
160
161
|
const hasKernelInfo = kernelVersion.length > 0;
|
|
161
162
|
const upd08 = {
|
|
162
|
-
id:
|
|
163
|
+
id: CHECK_IDS.UPDATES.UPD_KERNEL_CURRENT,
|
|
163
164
|
category: "Updates",
|
|
164
165
|
name: "Kernel Version Detected",
|
|
165
166
|
severity: "info",
|
|
@@ -174,7 +175,7 @@ export const parseUpdatesChecks = (sectionOutput, _platform) => {
|
|
|
174
175
|
const autoUpgradesContent = lines.find((l) => l.includes("APT::Periodic") || l.includes("Unattended-Upgrade")) ?? "";
|
|
175
176
|
const isUnattendedEnabled = /APT::Periodic::Unattended-Upgrade\s+"1"/.test(sectionOutput);
|
|
176
177
|
const upd09 = {
|
|
177
|
-
id:
|
|
178
|
+
id: CHECK_IDS.UPDATES.UPD_UNATTENDED_ENABLED,
|
|
178
179
|
category: "Updates",
|
|
179
180
|
name: "Unattended Upgrades Enabled",
|
|
180
181
|
severity: "warning",
|
|
@@ -190,7 +191,7 @@ export const parseUpdatesChecks = (sectionOutput, _platform) => {
|
|
|
190
191
|
// UPD-10: APT repos use HTTPS (informational)
|
|
191
192
|
const hasHttpRepos = !isNA && /http:\/\//.test(sectionOutput) && !/apt list|upgradable/.test(sectionOutput);
|
|
192
193
|
const upd10 = {
|
|
193
|
-
id:
|
|
194
|
+
id: CHECK_IDS.UPDATES.UPD_APT_HTTPS,
|
|
194
195
|
category: "Updates",
|
|
195
196
|
name: "APT Sources Use HTTPS",
|
|
196
197
|
severity: "info",
|
|
@@ -206,7 +207,7 @@ export const parseUpdatesChecks = (sectionOutput, _platform) => {
|
|
|
206
207
|
const securityRepoLine = lines.find((l) => l.includes("security") && (l.includes("deb ") || l.includes("https://") || l.includes("http://"))) ?? "";
|
|
207
208
|
const hasSecurityRepo = securityRepoLine.length > 0;
|
|
208
209
|
const upd11 = {
|
|
209
|
-
id:
|
|
210
|
+
id: CHECK_IDS.UPDATES.UPD_SECURITY_REPO_PRIORITY,
|
|
210
211
|
category: "Updates",
|
|
211
212
|
name: "Security Repository Configured",
|
|
212
213
|
severity: "info",
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"updates.js","sourceRoot":"","sources":["../../../../src/core/audit/checks/updates.ts"],"names":[],"mappings":"AAAA;;;GAGG;
|
|
1
|
+
{"version":3,"file":"updates.js","sourceRoot":"","sources":["../../../../src/core/audit/checks/updates.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAE3C,MAAM,CAAC,MAAM,kBAAkB,GAAgB,CAAC,aAAqB,EAAE,SAAiB,EAAgB,EAAE;IACxG,MAAM,IAAI,GAAG,CAAC,aAAa,IAAI,aAAa,CAAC,IAAI,EAAE,KAAK,KAAK,IAAI,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;IAC7F,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAEzF,8EAA8E;IAC9E,gDAAgD;IAChD,sDAAsD;IACtD,qCAAqC;IACrC,uCAAuC;IAEvC,0DAA0D;IAC1D,mEAAmE;IACnE,MAAM,gBAAgB,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC;IACzE,MAAM,cAAc,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC,IAAI,KAAK,CAAC;IACrF,0DAA0D;IAC1D,MAAM,eAAe,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC;IACxE,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,iBAAiB,IAAI,CAAC,KAAK,WAAW,CAAC,IAAI,KAAK,CAAC;IAE5F,mCAAmC;IACnC,MAAM,aAAa,GAAG,QAAQ,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;IACrD,MAAM,kBAAkB,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,aAAa,GAAG,CAAC,CAAC;IACtE,MAAM,KAAK,GAAe;QACxB,EAAE,EAAE,SAAS,CAAC,OAAO,CAAC,oBAAoB;QAC1C,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,0BAA0B;QAChC,QAAQ,EAAE,UAAU;QACpB,MAAM,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,aAAa,KAAK,CAAC;QACpD,YAAY,EAAE,IAAI,IAAI,KAAK,CAAC,aAAa,CAAC;YACxC,CAAC,CAAC,qBAAqB;YACvB,CAAC,CAAC,kBAAkB;gBAClB,CAAC,CAAC,GAAG,aAAa,6BAA6B;gBAC/C,CAAC,CAAC,6BAA6B;QACnC,aAAa,EAAE,oBAAoB;QACnC,UAAU,EAAE,8BAA8B;QAC1C,aAAa,EAAE,MAAM;QACrB,OAAO,EAAE,iEAAiE;KAC3E,CAAC;IAEF,wCAAwC;IACxC,MAAM,mBAAmB,GAAG,cAAc,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC;IAC3E,MAAM,KAAK,GAAe;QACxB,EAAE,EAAE,SAAS,CAAC,OAAO,CAAC,gBAAgB;QACtC,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,4BAA4B;QAClC,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,mBAAmB;QAC3B,YAAY,EAAE,IAAI;YAChB,CAAC,CAAC,qBAAqB;YACvB,CAAC,CAAC,mBAAmB;gBACnB,CAAC,CAAC,+BAA+B;gBACjC,CAAC,CAAC,mCAAmC;QACzC,aAAa,EAAE,+BAA+B;QAC9C,UAAU,EAAE,kFAAkF;QAC9F,aAAa,EAAE,MAAM;QACrB,OAAO,EAAE,0EAA0E;KACpF,CAAC;IAEF,8CAA8C;IAC9C,MAAM,YAAY,GAAG,QAAQ,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;IACnC,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,GAAG,YAAY,CAAC,GAAG,SAAS,CAAC;IAC9E,MAAM,KAAK,GAAe;QACxB,EAAE,EAAE,SAAS,CAAC,OAAO,CAAC,eAAe;QACrC,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,qBAAqB;QAC3B,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,OAAO;QACf,YAAY,EAAE,IAAI,IAAI,KAAK,CAAC,YAAY,CAAC;YACvC,CAAC,CAAC,qBAAqB;YACvB,CAAC,CAAC,OAAO;gBACP,CAAC,CAAC,iCAAiC;gBACnC,CAAC,CAAC,6BAA6B;QACnC,aAAa,EAAE,iCAAiC;QAChD,UAAU,EAAE,YAAY;QACxB,aAAa,EAAE,MAAM;QACrB,OAAO,EAAE,0DAA0D;KACpE,CAAC;IAEF,0BAA0B;IAC1B,MAAM,cAAc,GAAG,UAAU,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAClD,MAAM,KAAK,GAAe;QACxB,EAAE,EAAE,SAAS,CAAC,OAAO,CAAC,mBAAmB;QACzC,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,wBAAwB;QAC9B,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,QAAQ;QAChB,YAAY,EAAE,IAAI;YAChB,CAAC,CAAC,qBAAqB;YACvB,CAAC,CAAC,cAAc;gBACd,CAAC,CAAC,iBAAiB;gBACnB,CAAC,CAAC,QAAQ;oBACR,CAAC,CAAC,oBAAoB;oBACtB,CAAC,CAAC,qBAAqB;QAC7B,aAAa,EAAE,oBAAoB;QACnC,UAAU,EAAE,QAAQ;QACpB,aAAa,EAAE,SAAS;QACxB,OAAO,EAAE,0EAA0E;KACpF,CAAC;IAGF,sDAAsD;IACtD,iEAAiE;IACjE,iDAAiD;IACjD,4DAA4D;IAC5D,kCAAkC;IAClC,mDAAmD;IACnD,uEAAuE;IAEvE,4CAA4C;IAC5C,MAAM,UAAU,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;IACrC,MAAM,aAAa,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAC3F,MAAM,eAAe,GAAG,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACzG,MAAM,eAAe,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,eAAe,CAAC,GAAG,UAAU,CAAC;IAClH,MAAM,KAAK,GAAe;QACxB,EAAE,EAAE,SAAS,CAAC,OAAO,CAAC,uBAAuB;QAC7C,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,8BAA8B;QACpC,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,eAAe;QACvB,YAAY,EAAE,IAAI,IAAI,KAAK,CAAC,eAAe,CAAC;YAC1C,CAAC,CAAC,qBAAqB;YACvB,CAAC,CAAC,eAAe;gBACf,CAAC,CAAC,sCAAsC;gBACxC,CAAC,CAAC,qCAAqC;QAC3C,aAAa,EAAE,iCAAiC;QAChD,UAAU,EAAE,8BAA8B;QAC1C,aAAa,EAAE,MAAM;QACrB,OAAO,EAAE,6FAA6F;KACvG,CAAC;IAEF,iDAAiD;IACjD,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC;IAC3G,MAAM,UAAU,GAAG,WAAW,KAAK,MAAM,IAAI,WAAW,KAAK,KAAK,IAAI,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;IAChG,MAAM,KAAK,GAAe;QACxB,EAAE,EAAE,SAAS,CAAC,OAAO,CAAC,uBAAuB;QAC7C,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,uBAAuB;QAC7B,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,UAAU;QAClB,YAAY,EAAE,UAAU,CAAC,CAAC,CAAC,sBAAsB,WAAW,EAAE,CAAC,CAAC,CAAC,sBAAsB;QACvF,aAAa,EAAE,0BAA0B;QACzC,UAAU,EAAE,qHAAqH;QACjI,aAAa,EAAE,MAAM;QACrB,OAAO,EAAE,2FAA2F;KACrG,CAAC;IAEF,qCAAqC;IACrC,MAAM,aAAa,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,gBAAgB,CAAC,CAAC;IACrG,MAAM,gBAAgB,GAAG,aAAa,KAAK,SAAS,IAAI,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACnH,MAAM,aAAa,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,gBAAgB,KAAK,CAAC,CAAC;IACzE,MAAM,KAAK,GAAe;QACxB,EAAE,EAAE,SAAS,CAAC,OAAO,CAAC,mBAAmB;QACzC,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,qBAAqB;QAC3B,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,aAAa;QACrB,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,GAAG,gBAAgB,iCAAiC;QACjG,aAAa,EAAE,gCAAgC;QAC/C,UAAU,EAAE,uCAAuC;QACnD,aAAa,EAAE,MAAM;QACrB,OAAO,EAAE,gHAAgH;KAC1H,CAAC;IAEF,yDAAyD;IACzD,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACrE,MAAM,aAAa,GAAG,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAe;QACxB,EAAE,EAAE,SAAS,CAAC,OAAO,CAAC,kBAAkB;QACxC,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,yBAAyB;QAC/B,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,aAAa;QACrB,YAAY,EAAE,aAAa,CAAC,CAAC,CAAC,WAAW,aAAa,EAAE,CAAC,CAAC,CAAC,oCAAoC;QAC/F,aAAa,EAAE,2BAA2B;QAC1C,UAAU,EAAE,UAAU;QACtB,aAAa,EAAE,MAAM;QACrB,OAAO,EAAE,iGAAiG;KAC3G,CAAC;IAEF,oEAAoE;IACpE,MAAM,mBAAmB,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC,IAAI,EAAE,CAAC;IACrH,MAAM,mBAAmB,GAAG,yCAAyC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC1F,MAAM,KAAK,GAAe;QACxB,EAAE,EAAE,SAAS,CAAC,OAAO,CAAC,sBAAsB;QAC5C,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,6BAA6B;QACnC,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,mBAAmB;QAC3B,YAAY,EAAE,mBAAmB;YAC/B,CAAC,CAAC,6CAA6C;YAC/C,CAAC,CAAC,mBAAmB,IAAI,gCAAgC;QAC3D,aAAa,EAAE,uCAAuC;QACtD,UAAU,EAAE,4CAA4C;QACxD,aAAa,EAAE,MAAM;QACrB,OAAO,EAAE,4GAA4G;KACtH,CAAC;IAEF,8CAA8C;IAC9C,MAAM,YAAY,GAAG,CAAC,IAAI,IAAI,WAAW,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC5G,MAAM,KAAK,GAAe;QACxB,EAAE,EAAE,SAAS,CAAC,OAAO,CAAC,aAAa;QACnC,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,uBAAuB;QAC7B,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,CAAC,IAAI,IAAI,CAAC,YAAY;QAC9B,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,kDAAkD;QAC1I,aAAa,EAAE,8BAA8B;QAC7C,UAAU,EAAE,6DAA6D;QACzE,aAAa,EAAE,SAAS;QACxB,OAAO,EAAE,mFAAmF;KAC7F,CAAC;IAEF,wDAAwD;IACxD,6EAA6E;IAC7E,MAAM,gBAAgB,GAAG,KAAK,CAAC,IAAI,CACjC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CACzG,IAAI,EAAE,CAAC;IACR,MAAM,eAAe,GAAG,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC;IACpD,MAAM,KAAK,GAAe;QACxB,EAAE,EAAE,SAAS,CAAC,OAAO,CAAC,0BAA0B;QAChD,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,gCAAgC;QACtC,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,eAAe;QACvB,YAAY,EAAE,IAAI;YAChB,CAAC,CAAC,qBAAqB;YACvB,CAAC,CAAC,eAAe;gBACf,CAAC,CAAC,0CAA0C;gBAC5C,CAAC,CAAC,uDAAuD;QAC7D,aAAa,EAAE,6DAA6D;QAC5E,UAAU,EAAE,sEAAsE;QAClF,aAAa,EAAE,SAAS;QACxB,OAAO,EACL,gIAAgI;KACnI,CAAC;IAEF,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;AACvF,CAAC,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/core/audit/compliance/categories/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAIpD,eAAO,MAAM,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,EAAE,CAuvB1D,CAAC"}
|