postquant 0.1.2 → 0.3.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +101 -8
- package/dist/commands/analyze.d.ts +9 -0
- package/dist/commands/analyze.d.ts.map +1 -0
- package/dist/commands/analyze.js +129 -0
- package/dist/commands/analyze.js.map +1 -0
- package/dist/index.js +49 -2
- package/dist/index.js.map +1 -1
- package/dist/output/cbom.d.ts +3 -0
- package/dist/output/cbom.d.ts.map +1 -0
- package/dist/output/cbom.js +235 -0
- package/dist/output/cbom.js.map +1 -0
- package/dist/output/json-code.d.ts +3 -0
- package/dist/output/json-code.d.ts.map +1 -0
- package/dist/output/json-code.js +41 -0
- package/dist/output/json-code.js.map +1 -0
- package/dist/output/sarif.d.ts +3 -0
- package/dist/output/sarif.d.ts.map +1 -0
- package/dist/output/sarif.js +265 -0
- package/dist/output/sarif.js.map +1 -0
- package/dist/output/terminal-code.d.ts +8 -0
- package/dist/output/terminal-code.d.ts.map +1 -0
- package/dist/output/terminal-code.js +155 -0
- package/dist/output/terminal-code.js.map +1 -0
- package/dist/output/terminal.d.ts.map +1 -1
- package/dist/output/terminal.js +14 -2
- package/dist/output/terminal.js.map +1 -1
- package/dist/scanner/code/classifier.d.ts +9 -0
- package/dist/scanner/code/classifier.d.ts.map +1 -0
- package/dist/scanner/code/classifier.js +19 -0
- package/dist/scanner/code/classifier.js.map +1 -0
- package/dist/scanner/code/discovery.d.ts +17 -0
- package/dist/scanner/code/discovery.d.ts.map +1 -0
- package/dist/scanner/code/discovery.js +167 -0
- package/dist/scanner/code/discovery.js.map +1 -0
- package/dist/scanner/code/grader.d.ts +27 -0
- package/dist/scanner/code/grader.d.ts.map +1 -0
- package/dist/scanner/code/grader.js +169 -0
- package/dist/scanner/code/grader.js.map +1 -0
- package/dist/scanner/code/matcher.d.ts +20 -0
- package/dist/scanner/code/matcher.d.ts.map +1 -0
- package/dist/scanner/code/matcher.js +209 -0
- package/dist/scanner/code/matcher.js.map +1 -0
- package/dist/scanner/code/patterns/go.d.ts +3 -0
- package/dist/scanner/code/patterns/go.d.ts.map +1 -0
- package/dist/scanner/code/patterns/go.js +226 -0
- package/dist/scanner/code/patterns/go.js.map +1 -0
- package/dist/scanner/code/patterns/index.d.ts +11 -0
- package/dist/scanner/code/patterns/index.d.ts.map +1 -0
- package/dist/scanner/code/patterns/index.js +20 -0
- package/dist/scanner/code/patterns/index.js.map +1 -0
- package/dist/scanner/code/patterns/java.d.ts +3 -0
- package/dist/scanner/code/patterns/java.d.ts.map +1 -0
- package/dist/scanner/code/patterns/java.js +239 -0
- package/dist/scanner/code/patterns/java.js.map +1 -0
- package/dist/scanner/code/patterns/javascript.d.ts +3 -0
- package/dist/scanner/code/patterns/javascript.d.ts.map +1 -0
- package/dist/scanner/code/patterns/javascript.js +243 -0
- package/dist/scanner/code/patterns/javascript.js.map +1 -0
- package/dist/scanner/code/patterns/python.d.ts +3 -0
- package/dist/scanner/code/patterns/python.d.ts.map +1 -0
- package/dist/scanner/code/patterns/python.js +255 -0
- package/dist/scanner/code/patterns/python.js.map +1 -0
- package/dist/scanner/code/risk-assessor.d.ts +25 -0
- package/dist/scanner/code/risk-assessor.d.ts.map +1 -0
- package/dist/scanner/code/risk-assessor.js +412 -0
- package/dist/scanner/code/risk-assessor.js.map +1 -0
- package/dist/types/index.d.ts +139 -0
- package/dist/types/index.d.ts.map +1 -1
- package/dist/types/index.js +4 -1
- package/dist/types/index.js.map +1 -1
- package/package.json +4 -1
|
@@ -0,0 +1,41 @@
|
|
|
1
|
+
import { readFileSync } from 'node:fs';
|
|
2
|
+
import { fileURLToPath } from 'node:url';
|
|
3
|
+
import { dirname, join } from 'node:path';
|
|
4
|
+
import { isAssessedFinding } from '../types/index.js';
|
|
5
|
+
function getVersion() {
|
|
6
|
+
try {
|
|
7
|
+
const __dirname = dirname(fileURLToPath(import.meta.url));
|
|
8
|
+
const pkg = JSON.parse(readFileSync(join(__dirname, '..', '..', 'package.json'), 'utf-8'));
|
|
9
|
+
return pkg.version;
|
|
10
|
+
}
|
|
11
|
+
catch {
|
|
12
|
+
return '0.1.1';
|
|
13
|
+
}
|
|
14
|
+
}
|
|
15
|
+
export function formatCodeJson(result) {
|
|
16
|
+
const hasAssessment = result.findings.some(f => isAssessedFinding(f));
|
|
17
|
+
const output = {
|
|
18
|
+
version: getVersion(),
|
|
19
|
+
timestamp: new Date().toISOString(),
|
|
20
|
+
scanRoot: result.scanRoot,
|
|
21
|
+
grade: result.grade,
|
|
22
|
+
baseGrade: result.baseGrade,
|
|
23
|
+
modifier: result.modifier,
|
|
24
|
+
findings: result.findings,
|
|
25
|
+
summary: result.summary,
|
|
26
|
+
migrationNotes: result.migrationNotes,
|
|
27
|
+
fileBreakdown: result.fileBreakdown,
|
|
28
|
+
};
|
|
29
|
+
if (hasAssessment) {
|
|
30
|
+
const adjCounts = { critical: 0, high: 0, medium: 0, low: 0, informational: 0, total: 0 };
|
|
31
|
+
for (const f of result.findings) {
|
|
32
|
+
if (isAssessedFinding(f)) {
|
|
33
|
+
adjCounts[f.riskContext.adjustedRisk]++;
|
|
34
|
+
adjCounts.total++;
|
|
35
|
+
}
|
|
36
|
+
}
|
|
37
|
+
output.adjustedSummary = adjCounts;
|
|
38
|
+
}
|
|
39
|
+
return JSON.stringify(output, null, 2);
|
|
40
|
+
}
|
|
41
|
+
//# sourceMappingURL=json-code.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"json-code.js","sourceRoot":"","sources":["../../src/output/json-code.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAEtD,SAAS,UAAU;IACjB,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CACpB,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC,EAAE,OAAO,CAAC,CACnE,CAAC;QACF,OAAO,GAAG,CAAC,OAAO,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAwB;IACrD,MAAM,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC;IAEtE,MAAM,MAAM,GAA4B;QACtC,OAAO,EAAE,UAAU,EAAE;QACrB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,aAAa,EAAE,MAAM,CAAC,aAAa;KACpC,CAAC;IAEF,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,SAAS,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QAC1F,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YAChC,IAAI,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzB,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,YAAY,CAAC,EAAE,CAAC;gBACxC,SAAS,CAAC,KAAK,EAAE,CAAC;YACpB,CAAC;QACH,CAAC;QACD,MAAM,CAAC,eAAe,GAAG,SAAS,CAAC;IACrC,CAAC;IAED,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AACzC,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"sarif.d.ts","sourceRoot":"","sources":["../../src/output/sarif.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,gBAAgB,EAAyE,MAAM,mBAAmB,CAAC;AA8NjI,wBAAgB,WAAW,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAwE5D"}
|
|
@@ -0,0 +1,265 @@
|
|
|
1
|
+
import { readFileSync } from 'node:fs';
|
|
2
|
+
import { fileURLToPath } from 'node:url';
|
|
3
|
+
import { dirname, join } from 'node:path';
|
|
4
|
+
import { isAssessedFinding } from '../types/index.js';
|
|
5
|
+
function getVersion() {
|
|
6
|
+
try {
|
|
7
|
+
const __dirname = dirname(fileURLToPath(import.meta.url));
|
|
8
|
+
const pkg = JSON.parse(readFileSync(join(__dirname, '..', '..', 'package.json'), 'utf-8'));
|
|
9
|
+
return pkg.version;
|
|
10
|
+
}
|
|
11
|
+
catch {
|
|
12
|
+
return '0.1.1';
|
|
13
|
+
}
|
|
14
|
+
}
|
|
15
|
+
const RULES = [
|
|
16
|
+
{
|
|
17
|
+
id: 'PQ001',
|
|
18
|
+
name: 'QuantumVulnerableRSA',
|
|
19
|
+
shortDescription: { text: 'RSA key generation detected' },
|
|
20
|
+
fullDescription: {
|
|
21
|
+
text: "RSA is vulnerable to Shor's algorithm on a quantum computer. Migrate to ML-DSA (FIPS 204) for signatures or ML-KEM (FIPS 203) for key encapsulation.",
|
|
22
|
+
},
|
|
23
|
+
helpUri: 'https://postquant.dev/docs/findings/rsa',
|
|
24
|
+
defaultConfiguration: { level: 'error' },
|
|
25
|
+
properties: { tags: ['security', 'quantum', 'cryptography', 'pqc'], cwe: 'CWE-327' },
|
|
26
|
+
relationships: [{ target: { id: 'CWE-327', toolComponent: { name: 'CWE' } } }],
|
|
27
|
+
},
|
|
28
|
+
{
|
|
29
|
+
id: 'PQ002',
|
|
30
|
+
name: 'QuantumVulnerableECDSA',
|
|
31
|
+
shortDescription: { text: 'ECDSA key generation or signing detected' },
|
|
32
|
+
fullDescription: {
|
|
33
|
+
text: "ECDSA is vulnerable to Shor's algorithm. Migrate to ML-DSA (FIPS 204).",
|
|
34
|
+
},
|
|
35
|
+
helpUri: 'https://postquant.dev/docs/findings/ecdsa',
|
|
36
|
+
defaultConfiguration: { level: 'error' },
|
|
37
|
+
properties: { tags: ['security', 'quantum', 'cryptography', 'pqc'], cwe: 'CWE-327' },
|
|
38
|
+
relationships: [{ target: { id: 'CWE-327', toolComponent: { name: 'CWE' } } }],
|
|
39
|
+
},
|
|
40
|
+
{
|
|
41
|
+
id: 'PQ003',
|
|
42
|
+
name: 'QuantumVulnerableECDH',
|
|
43
|
+
shortDescription: { text: 'ECDH / X25519 key exchange detected' },
|
|
44
|
+
fullDescription: {
|
|
45
|
+
text: "ECDH/X25519 key exchange is vulnerable to Shor's algorithm. Migrate to ML-KEM (FIPS 203).",
|
|
46
|
+
},
|
|
47
|
+
helpUri: 'https://postquant.dev/docs/findings/ecdh',
|
|
48
|
+
defaultConfiguration: { level: 'error' },
|
|
49
|
+
properties: { tags: ['security', 'quantum', 'cryptography', 'pqc'], cwe: 'CWE-327' },
|
|
50
|
+
relationships: [{ target: { id: 'CWE-327', toolComponent: { name: 'CWE' } } }],
|
|
51
|
+
},
|
|
52
|
+
{
|
|
53
|
+
id: 'PQ004',
|
|
54
|
+
name: 'QuantumVulnerableDH',
|
|
55
|
+
shortDescription: { text: 'Classic Diffie-Hellman key exchange detected' },
|
|
56
|
+
fullDescription: {
|
|
57
|
+
text: "DH is vulnerable to Shor's algorithm. Migrate to ML-KEM (FIPS 203).",
|
|
58
|
+
},
|
|
59
|
+
defaultConfiguration: { level: 'error' },
|
|
60
|
+
properties: { tags: ['security', 'quantum', 'cryptography', 'pqc'], cwe: 'CWE-327' },
|
|
61
|
+
relationships: [{ target: { id: 'CWE-327', toolComponent: { name: 'CWE' } } }],
|
|
62
|
+
},
|
|
63
|
+
{
|
|
64
|
+
id: 'PQ005',
|
|
65
|
+
name: 'QuantumVulnerableDSA',
|
|
66
|
+
shortDescription: { text: 'DSA signing detected' },
|
|
67
|
+
fullDescription: {
|
|
68
|
+
text: "DSA is vulnerable to Shor's algorithm and is also deprecated classically. Migrate to ML-DSA (FIPS 204).",
|
|
69
|
+
},
|
|
70
|
+
defaultConfiguration: { level: 'error' },
|
|
71
|
+
properties: { tags: ['security', 'quantum', 'cryptography', 'pqc'], cwe: 'CWE-327' },
|
|
72
|
+
relationships: [{ target: { id: 'CWE-327', toolComponent: { name: 'CWE' } } }],
|
|
73
|
+
},
|
|
74
|
+
{
|
|
75
|
+
id: 'PQ006',
|
|
76
|
+
name: 'WeakSymmetricKey',
|
|
77
|
+
shortDescription: { text: 'AES-128 or other sub-256-bit symmetric key detected' },
|
|
78
|
+
fullDescription: {
|
|
79
|
+
text: "Grover's algorithm reduces AES-128 to 64-bit effective security. Upgrade to AES-256.",
|
|
80
|
+
},
|
|
81
|
+
defaultConfiguration: { level: 'warning' },
|
|
82
|
+
properties: { tags: ['security', 'quantum', 'cryptography'], cwe: 'CWE-326' },
|
|
83
|
+
relationships: [{ target: { id: 'CWE-326', toolComponent: { name: 'CWE' } } }],
|
|
84
|
+
},
|
|
85
|
+
{
|
|
86
|
+
id: 'PQ007',
|
|
87
|
+
name: 'BrokenHash',
|
|
88
|
+
shortDescription: { text: 'MD5 or SHA-1 hash usage detected' },
|
|
89
|
+
fullDescription: {
|
|
90
|
+
text: 'MD5 and SHA-1 are already broken classically (collision attacks). Replace with SHA-256 or stronger.',
|
|
91
|
+
},
|
|
92
|
+
defaultConfiguration: { level: 'error' },
|
|
93
|
+
properties: { tags: ['security', 'cryptography'], cwe: 'CWE-328' },
|
|
94
|
+
relationships: [{ target: { id: 'CWE-328', toolComponent: { name: 'CWE' } } }],
|
|
95
|
+
},
|
|
96
|
+
{
|
|
97
|
+
id: 'PQ008',
|
|
98
|
+
name: 'BrokenCipher',
|
|
99
|
+
shortDescription: { text: 'DES or 3DES cipher detected' },
|
|
100
|
+
fullDescription: {
|
|
101
|
+
text: 'DES and 3DES are deprecated and weak. Replace with AES-256-GCM.',
|
|
102
|
+
},
|
|
103
|
+
defaultConfiguration: { level: 'error' },
|
|
104
|
+
properties: { tags: ['security', 'cryptography'], cwe: 'CWE-327' },
|
|
105
|
+
relationships: [{ target: { id: 'CWE-327', toolComponent: { name: 'CWE' } } }],
|
|
106
|
+
},
|
|
107
|
+
{
|
|
108
|
+
id: 'PQ009',
|
|
109
|
+
name: 'QuantumVulnerableJWT',
|
|
110
|
+
shortDescription: { text: 'JWT signed with quantum-vulnerable algorithm' },
|
|
111
|
+
fullDescription: {
|
|
112
|
+
text: 'RS256/ES256/PS256/EdDSA JWT signatures are vulnerable to quantum attacks. Consider HMAC (HS256) for symmetric use cases, or plan migration to PQC-based JWT.',
|
|
113
|
+
},
|
|
114
|
+
defaultConfiguration: { level: 'error' },
|
|
115
|
+
properties: { tags: ['security', 'quantum', 'cryptography', 'jwt'], cwe: 'CWE-327' },
|
|
116
|
+
relationships: [{ target: { id: 'CWE-327', toolComponent: { name: 'CWE' } } }],
|
|
117
|
+
},
|
|
118
|
+
{
|
|
119
|
+
id: 'PQ010',
|
|
120
|
+
name: 'QuantumVulnerableEdDSA',
|
|
121
|
+
shortDescription: { text: 'Ed25519/Ed448 signing detected' },
|
|
122
|
+
fullDescription: {
|
|
123
|
+
text: "EdDSA (Ed25519/Ed448) is vulnerable to Shor's algorithm. Migrate to ML-DSA (FIPS 204).",
|
|
124
|
+
},
|
|
125
|
+
defaultConfiguration: { level: 'error' },
|
|
126
|
+
properties: { tags: ['security', 'quantum', 'cryptography', 'pqc'], cwe: 'CWE-327' },
|
|
127
|
+
relationships: [{ target: { id: 'CWE-327', toolComponent: { name: 'CWE' } } }],
|
|
128
|
+
},
|
|
129
|
+
{
|
|
130
|
+
id: 'PQ100',
|
|
131
|
+
name: 'PQCAlgorithmDetected',
|
|
132
|
+
shortDescription: { text: 'Post-quantum cryptographic algorithm detected' },
|
|
133
|
+
fullDescription: {
|
|
134
|
+
text: 'This code uses a NIST-standardized post-quantum algorithm. No migration needed.',
|
|
135
|
+
},
|
|
136
|
+
defaultConfiguration: { level: 'note' },
|
|
137
|
+
properties: { tags: ['security', 'quantum', 'cryptography', 'pqc'], cwe: '' },
|
|
138
|
+
},
|
|
139
|
+
];
|
|
140
|
+
// --- Category → Rule ID mapping ---
|
|
141
|
+
/** Map a finding's category + patternId to a SARIF rule ID. */
|
|
142
|
+
function mapToRuleId(finding) {
|
|
143
|
+
// JWT-specific patterns
|
|
144
|
+
if (finding.patternId.includes('jwt'))
|
|
145
|
+
return 'PQ009';
|
|
146
|
+
// EdDSA-specific: ed25519/ed448 patterns that are digital-signature category
|
|
147
|
+
if (finding.patternId.includes('ed25519') ||
|
|
148
|
+
finding.patternId.includes('ed448') ||
|
|
149
|
+
finding.patternId.includes('eddsa')) {
|
|
150
|
+
return 'PQ010';
|
|
151
|
+
}
|
|
152
|
+
// Category-based mapping
|
|
153
|
+
const categoryMap = {
|
|
154
|
+
'asymmetric-encryption': 'PQ001',
|
|
155
|
+
'digital-signature': 'PQ002',
|
|
156
|
+
'key-exchange': 'PQ003',
|
|
157
|
+
'weak-symmetric': 'PQ006',
|
|
158
|
+
'weak-hash': 'PQ007',
|
|
159
|
+
'broken-cipher': 'PQ008',
|
|
160
|
+
'safe-symmetric': 'PQ100',
|
|
161
|
+
'safe-hash': 'PQ100',
|
|
162
|
+
'pqc-algorithm': 'PQ100',
|
|
163
|
+
};
|
|
164
|
+
const ruleId = categoryMap[finding.category];
|
|
165
|
+
if (ruleId)
|
|
166
|
+
return ruleId;
|
|
167
|
+
// Fallback: try algorithm name for DH/DSA distinction
|
|
168
|
+
const algoUpper = finding.algorithm.toUpperCase();
|
|
169
|
+
if (algoUpper.includes('DSA') && !algoUpper.includes('ECDSA'))
|
|
170
|
+
return 'PQ005';
|
|
171
|
+
if (algoUpper.includes('DH') && !algoUpper.includes('ECDH'))
|
|
172
|
+
return 'PQ004';
|
|
173
|
+
return 'PQ001';
|
|
174
|
+
}
|
|
175
|
+
/** Map risk level to SARIF level. */
|
|
176
|
+
function riskToLevel(risk) {
|
|
177
|
+
switch (risk) {
|
|
178
|
+
case 'critical':
|
|
179
|
+
return 'error';
|
|
180
|
+
case 'moderate':
|
|
181
|
+
return 'warning';
|
|
182
|
+
case 'safe':
|
|
183
|
+
return 'note';
|
|
184
|
+
}
|
|
185
|
+
}
|
|
186
|
+
/** Map adjusted risk to SARIF level. */
|
|
187
|
+
function adjustedRiskToLevel(risk) {
|
|
188
|
+
switch (risk) {
|
|
189
|
+
case 'critical':
|
|
190
|
+
case 'high':
|
|
191
|
+
return 'error';
|
|
192
|
+
case 'medium':
|
|
193
|
+
return 'warning';
|
|
194
|
+
case 'low':
|
|
195
|
+
case 'informational':
|
|
196
|
+
return 'note';
|
|
197
|
+
}
|
|
198
|
+
}
|
|
199
|
+
// --- Public API ---
|
|
200
|
+
export function formatSarif(result) {
|
|
201
|
+
const sarifResults = result.findings.map((f) => {
|
|
202
|
+
const ruleId = mapToRuleId(f);
|
|
203
|
+
const assessed = isAssessedFinding(f);
|
|
204
|
+
const level = assessed
|
|
205
|
+
? adjustedRiskToLevel(f.riskContext.adjustedRisk)
|
|
206
|
+
: riskToLevel(f.risk);
|
|
207
|
+
let messageText = `${f.algorithm} detected. ${f.reason}.${f.migration ? ` ${f.migration}.` : ''}`;
|
|
208
|
+
if (assessed) {
|
|
209
|
+
messageText += ` [Usage: ${f.riskContext.usageContext}, Adjusted risk: ${f.riskContext.adjustedRisk}]`;
|
|
210
|
+
}
|
|
211
|
+
const entry = {
|
|
212
|
+
ruleId,
|
|
213
|
+
level,
|
|
214
|
+
message: {
|
|
215
|
+
text: messageText,
|
|
216
|
+
},
|
|
217
|
+
locations: [
|
|
218
|
+
{
|
|
219
|
+
physicalLocation: {
|
|
220
|
+
artifactLocation: {
|
|
221
|
+
uri: f.file,
|
|
222
|
+
uriBaseId: '%SRCROOT%',
|
|
223
|
+
},
|
|
224
|
+
region: {
|
|
225
|
+
startLine: f.line,
|
|
226
|
+
startColumn: 1,
|
|
227
|
+
},
|
|
228
|
+
},
|
|
229
|
+
},
|
|
230
|
+
],
|
|
231
|
+
};
|
|
232
|
+
if (assessed && (f.riskContext.adjustedRisk === 'informational')) {
|
|
233
|
+
entry.kind = 'informational';
|
|
234
|
+
}
|
|
235
|
+
if (f.migration) {
|
|
236
|
+
entry.fixes = [
|
|
237
|
+
{
|
|
238
|
+
description: {
|
|
239
|
+
text: f.migration,
|
|
240
|
+
},
|
|
241
|
+
},
|
|
242
|
+
];
|
|
243
|
+
}
|
|
244
|
+
return entry;
|
|
245
|
+
});
|
|
246
|
+
const sarif = {
|
|
247
|
+
$schema: 'https://raw.githubusercontent.com/oasis-tcs/sarif-spec/master/Schemata/sarif-schema-2.1.0.json',
|
|
248
|
+
version: '2.1.0',
|
|
249
|
+
runs: [
|
|
250
|
+
{
|
|
251
|
+
tool: {
|
|
252
|
+
driver: {
|
|
253
|
+
name: 'PostQuant',
|
|
254
|
+
version: getVersion(),
|
|
255
|
+
informationUri: 'https://postquant.dev',
|
|
256
|
+
rules: RULES,
|
|
257
|
+
},
|
|
258
|
+
},
|
|
259
|
+
results: sarifResults,
|
|
260
|
+
},
|
|
261
|
+
],
|
|
262
|
+
};
|
|
263
|
+
return JSON.stringify(sarif, null, 2);
|
|
264
|
+
}
|
|
265
|
+
//# sourceMappingURL=sarif.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"sarif.js","sourceRoot":"","sources":["../../src/output/sarif.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAEtD,SAAS,UAAU;IACjB,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CACpB,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC,EAAE,OAAO,CAAC,CACnE,CAAC;QACF,OAAO,GAAG,CAAC,OAAO,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC;AAeD,MAAM,KAAK,GAAgB;IACzB;QACE,EAAE,EAAE,OAAO;QACX,IAAI,EAAE,sBAAsB;QAC5B,gBAAgB,EAAE,EAAE,IAAI,EAAE,6BAA6B,EAAE;QACzD,eAAe,EAAE;YACf,IAAI,EAAE,sJAAsJ;SAC7J;QACD,OAAO,EAAE,yCAAyC;QAClD,oBAAoB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE;QACxC,UAAU,EAAE,EAAE,IAAI,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,cAAc,EAAE,KAAK,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE;QACpF,aAAa,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;KAC/E;IACD;QACE,EAAE,EAAE,OAAO;QACX,IAAI,EAAE,wBAAwB;QAC9B,gBAAgB,EAAE,EAAE,IAAI,EAAE,0CAA0C,EAAE;QACtE,eAAe,EAAE;YACf,IAAI,EAAE,wEAAwE;SAC/E;QACD,OAAO,EAAE,2CAA2C;QACpD,oBAAoB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE;QACxC,UAAU,EAAE,EAAE,IAAI,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,cAAc,EAAE,KAAK,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE;QACpF,aAAa,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;KAC/E;IACD;QACE,EAAE,EAAE,OAAO;QACX,IAAI,EAAE,uBAAuB;QAC7B,gBAAgB,EAAE,EAAE,IAAI,EAAE,qCAAqC,EAAE;QACjE,eAAe,EAAE;YACf,IAAI,EAAE,2FAA2F;SAClG;QACD,OAAO,EAAE,0CAA0C;QACnD,oBAAoB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE;QACxC,UAAU,EAAE,EAAE,IAAI,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,cAAc,EAAE,KAAK,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE;QACpF,aAAa,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;KAC/E;IACD;QACE,EAAE,EAAE,OAAO;QACX,IAAI,EAAE,qBAAqB;QAC3B,gBAAgB,EAAE,EAAE,IAAI,EAAE,8CAA8C,EAAE;QAC1E,eAAe,EAAE;YACf,IAAI,EAAE,qEAAqE;SAC5E;QACD,oBAAoB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE;QACxC,UAAU,EAAE,EAAE,IAAI,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,cAAc,EAAE,KAAK,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE;QACpF,aAAa,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;KAC/E;IACD;QACE,EAAE,EAAE,OAAO;QACX,IAAI,EAAE,sBAAsB;QAC5B,gBAAgB,EAAE,EAAE,IAAI,EAAE,sBAAsB,EAAE;QAClD,eAAe,EAAE;YACf,IAAI,EAAE,yGAAyG;SAChH;QACD,oBAAoB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE;QACxC,UAAU,EAAE,EAAE,IAAI,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,cAAc,EAAE,KAAK,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE;QACpF,aAAa,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;KAC/E;IACD;QACE,EAAE,EAAE,OAAO;QACX,IAAI,EAAE,kBAAkB;QACxB,gBAAgB,EAAE,EAAE,IAAI,EAAE,qDAAqD,EAAE;QACjF,eAAe,EAAE;YACf,IAAI,EAAE,sFAAsF;SAC7F;QACD,oBAAoB,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE;QAC1C,UAAU,EAAE,EAAE,IAAI,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,cAAc,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE;QAC7E,aAAa,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;KAC/E;IACD;QACE,EAAE,EAAE,OAAO;QACX,IAAI,EAAE,YAAY;QAClB,gBAAgB,EAAE,EAAE,IAAI,EAAE,kCAAkC,EAAE;QAC9D,eAAe,EAAE;YACf,IAAI,EAAE,qGAAqG;SAC5G;QACD,oBAAoB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE;QACxC,UAAU,EAAE,EAAE,IAAI,EAAE,CAAC,UAAU,EAAE,cAAc,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE;QAClE,aAAa,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;KAC/E;IACD;QACE,EAAE,EAAE,OAAO;QACX,IAAI,EAAE,cAAc;QACpB,gBAAgB,EAAE,EAAE,IAAI,EAAE,6BAA6B,EAAE;QACzD,eAAe,EAAE;YACf,IAAI,EAAE,iEAAiE;SACxE;QACD,oBAAoB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE;QACxC,UAAU,EAAE,EAAE,IAAI,EAAE,CAAC,UAAU,EAAE,cAAc,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE;QAClE,aAAa,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;KAC/E;IACD;QACE,EAAE,EAAE,OAAO;QACX,IAAI,EAAE,sBAAsB;QAC5B,gBAAgB,EAAE,EAAE,IAAI,EAAE,8CAA8C,EAAE;QAC1E,eAAe,EAAE;YACf,IAAI,EAAE,8JAA8J;SACrK;QACD,oBAAoB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE;QACxC,UAAU,EAAE,EAAE,IAAI,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,cAAc,EAAE,KAAK,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE;QACpF,aAAa,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;KAC/E;IACD;QACE,EAAE,EAAE,OAAO;QACX,IAAI,EAAE,wBAAwB;QAC9B,gBAAgB,EAAE,EAAE,IAAI,EAAE,gCAAgC,EAAE;QAC5D,eAAe,EAAE;YACf,IAAI,EAAE,wFAAwF;SAC/F;QACD,oBAAoB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE;QACxC,UAAU,EAAE,EAAE,IAAI,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,cAAc,EAAE,KAAK,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE;QACpF,aAAa,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;KAC/E;IACD;QACE,EAAE,EAAE,OAAO;QACX,IAAI,EAAE,sBAAsB;QAC5B,gBAAgB,EAAE,EAAE,IAAI,EAAE,+CAA+C,EAAE;QAC3E,eAAe,EAAE;YACf,IAAI,EAAE,iFAAiF;SACxF;QACD,oBAAoB,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE;QACvC,UAAU,EAAE,EAAE,IAAI,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,cAAc,EAAE,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE;KAC9E;CACF,CAAC;AAEF,qCAAqC;AAErC,+DAA+D;AAC/D,SAAS,WAAW,CAAC,OAAoB;IACvC,wBAAwB;IACxB,IAAI,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC;IAEtD,6EAA6E;IAC7E,IACE,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC;QACrC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC;QACnC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,EACnC,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,yBAAyB;IACzB,MAAM,WAAW,GAA2B;QAC1C,uBAAuB,EAAE,OAAO;QAChC,mBAAmB,EAAE,OAAO;QAC5B,cAAc,EAAE,OAAO;QACvB,gBAAgB,EAAE,OAAO;QACzB,WAAW,EAAE,OAAO;QACpB,eAAe,EAAE,OAAO;QACxB,gBAAgB,EAAE,OAAO;QACzB,WAAW,EAAE,OAAO;QACpB,eAAe,EAAE,OAAO;KACzB,CAAC;IAEF,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC7C,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,sDAAsD;IACtD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;IAClD,IAAI,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IAC9E,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,OAAO,CAAC;IAE5E,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,qCAAqC;AACrC,SAAS,WAAW,CAAC,IAAe;IAClC,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,UAAU;YACb,OAAO,OAAO,CAAC;QACjB,KAAK,UAAU;YACb,OAAO,SAAS,CAAC;QACnB,KAAK,MAAM;YACT,OAAO,MAAM,CAAC;IAClB,CAAC;AACH,CAAC;AAED,wCAAwC;AACxC,SAAS,mBAAmB,CAAC,IAAkB;IAC7C,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,UAAU,CAAC;QAChB,KAAK,MAAM;YACT,OAAO,OAAO,CAAC;QACjB,KAAK,QAAQ;YACX,OAAO,SAAS,CAAC;QACnB,KAAK,KAAK,CAAC;QACX,KAAK,eAAe;YAClB,OAAO,MAAM,CAAC;IAClB,CAAC;AACH,CAAC;AAED,qBAAqB;AAErB,MAAM,UAAU,WAAW,CAAC,MAAwB;IAClD,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAC7C,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,QAAQ,GAAG,iBAAiB,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,KAAK,GAAG,QAAQ;YACpB,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,WAAW,CAAC,YAAY,CAAC;YACjD,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAExB,IAAI,WAAW,GAAG,GAAG,CAAC,CAAC,SAAS,cAAc,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAClG,IAAI,QAAQ,EAAE,CAAC;YACb,WAAW,IAAI,YAAY,CAAC,CAAC,WAAW,CAAC,YAAY,oBAAoB,CAAC,CAAC,WAAW,CAAC,YAAY,GAAG,CAAC;QACzG,CAAC;QAED,MAAM,KAAK,GAA4B;YACrC,MAAM;YACN,KAAK;YACL,OAAO,EAAE;gBACP,IAAI,EAAE,WAAW;aAClB;YACD,SAAS,EAAE;gBACT;oBACE,gBAAgB,EAAE;wBAChB,gBAAgB,EAAE;4BAChB,GAAG,EAAE,CAAC,CAAC,IAAI;4BACX,SAAS,EAAE,WAAW;yBACvB;wBACD,MAAM,EAAE;4BACN,SAAS,EAAE,CAAC,CAAC,IAAI;4BACjB,WAAW,EAAE,CAAC;yBACf;qBACF;iBACF;aACF;SACF,CAAC;QAEF,IAAI,QAAQ,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,YAAY,KAAK,eAAe,CAAC,EAAE,CAAC;YACjE,KAAK,CAAC,IAAI,GAAG,eAAe,CAAC;QAC/B,CAAC;QAED,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;YAChB,KAAK,CAAC,KAAK,GAAG;gBACZ;oBACE,WAAW,EAAE;wBACX,IAAI,EAAE,CAAC,CAAC,SAAS;qBAClB;iBACF;aACF,CAAC;QACJ,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG;QACZ,OAAO,EACL,gGAAgG;QAClG,OAAO,EAAE,OAAO;QAChB,IAAI,EAAE;YACJ;gBACE,IAAI,EAAE;oBACJ,MAAM,EAAE;wBACN,IAAI,EAAE,WAAW;wBACjB,OAAO,EAAE,UAAU,EAAE;wBACrB,cAAc,EAAE,uBAAuB;wBACvC,KAAK,EAAE,KAAK;qBACb;iBACF;gBACD,OAAO,EAAE,YAAY;aACtB;SACF;KACF,CAAC;IAEF,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AACxC,CAAC"}
|
|
@@ -0,0 +1,8 @@
|
|
|
1
|
+
import type { CodeGradedResult } from '../types/index.js';
|
|
2
|
+
export interface CodeTerminalOptions {
|
|
3
|
+
verbose?: boolean;
|
|
4
|
+
noMigration?: boolean;
|
|
5
|
+
showAll?: boolean;
|
|
6
|
+
}
|
|
7
|
+
export declare function formatCodeTerminal(result: CodeGradedResult, options?: CodeTerminalOptions): string;
|
|
8
|
+
//# sourceMappingURL=terminal-code.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"terminal-code.d.ts","sourceRoot":"","sources":["../../src/output/terminal-code.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,gBAAgB,EAAkE,MAAM,mBAAmB,CAAC;AAe1H,MAAM,WAAW,mBAAmB;IAClC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAsCD,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,gBAAgB,EACxB,OAAO,GAAE,mBAAwB,GAChC,MAAM,CA8IR"}
|
|
@@ -0,0 +1,155 @@
|
|
|
1
|
+
import { readFileSync } from 'node:fs';
|
|
2
|
+
import { fileURLToPath } from 'node:url';
|
|
3
|
+
import { dirname, join } from 'node:path';
|
|
4
|
+
import chalk from 'chalk';
|
|
5
|
+
import { isAssessedFinding } from '../types/index.js';
|
|
6
|
+
function getVersion() {
|
|
7
|
+
try {
|
|
8
|
+
const __dirname = dirname(fileURLToPath(import.meta.url));
|
|
9
|
+
const pkg = JSON.parse(readFileSync(join(__dirname, '..', '..', 'package.json'), 'utf-8'));
|
|
10
|
+
return pkg.version;
|
|
11
|
+
}
|
|
12
|
+
catch {
|
|
13
|
+
return '0.2.0';
|
|
14
|
+
}
|
|
15
|
+
}
|
|
16
|
+
function riskIcon(risk) {
|
|
17
|
+
switch (risk) {
|
|
18
|
+
case 'critical':
|
|
19
|
+
return chalk.red('🔴 Quantum Vulnerable');
|
|
20
|
+
case 'moderate':
|
|
21
|
+
return chalk.yellow('🟡 Moderate Risk');
|
|
22
|
+
case 'safe':
|
|
23
|
+
return chalk.green('🟢 Quantum Safe');
|
|
24
|
+
}
|
|
25
|
+
}
|
|
26
|
+
function adjustedRiskIcon(risk) {
|
|
27
|
+
switch (risk) {
|
|
28
|
+
case 'critical':
|
|
29
|
+
return chalk.red('🔴 Critical');
|
|
30
|
+
case 'high':
|
|
31
|
+
return chalk.red('🔴 High');
|
|
32
|
+
case 'medium':
|
|
33
|
+
return chalk.yellow('🟡 Medium');
|
|
34
|
+
case 'low':
|
|
35
|
+
return chalk.green('🟢 Low');
|
|
36
|
+
case 'informational':
|
|
37
|
+
return chalk.green('🟢 Info');
|
|
38
|
+
}
|
|
39
|
+
}
|
|
40
|
+
function usageContextLabel(context) {
|
|
41
|
+
return context.replace(/-/g, ' ');
|
|
42
|
+
}
|
|
43
|
+
function gradeColor(g) {
|
|
44
|
+
if (g.startsWith('A'))
|
|
45
|
+
return chalk.green.bold(g);
|
|
46
|
+
if (g.startsWith('B'))
|
|
47
|
+
return chalk.yellow.bold(g);
|
|
48
|
+
return chalk.red.bold(g);
|
|
49
|
+
}
|
|
50
|
+
export function formatCodeTerminal(result, options = {}) {
|
|
51
|
+
const { verbose = false, noMigration = false, showAll = false } = options;
|
|
52
|
+
const lines = [];
|
|
53
|
+
const bar = '━'.repeat(48);
|
|
54
|
+
lines.push('');
|
|
55
|
+
lines.push(chalk.bold(`🔐 PostQuant v${getVersion()} — Code Scanner`));
|
|
56
|
+
lines.push(chalk.dim(bar));
|
|
57
|
+
lines.push('');
|
|
58
|
+
lines.push(` Scan Root: ${chalk.bold(result.scanRoot)}`);
|
|
59
|
+
lines.push('');
|
|
60
|
+
lines.push(` Overall Grade: ${gradeColor(result.grade)}`);
|
|
61
|
+
lines.push('');
|
|
62
|
+
// Stats
|
|
63
|
+
lines.push(' Stats');
|
|
64
|
+
lines.push(` Files scanned: ${result.summary.filesScanned}`);
|
|
65
|
+
lines.push(` Files with findings: ${result.summary.filesWithFindings}`);
|
|
66
|
+
lines.push('');
|
|
67
|
+
// Summary counts
|
|
68
|
+
lines.push(' Summary');
|
|
69
|
+
if (result.summary.critical > 0) {
|
|
70
|
+
lines.push(chalk.red(` 🔴 ${result.summary.critical} quantum-vulnerable finding${result.summary.critical > 1 ? 's' : ''}`));
|
|
71
|
+
}
|
|
72
|
+
if (result.summary.moderate > 0) {
|
|
73
|
+
lines.push(chalk.yellow(` 🟡 ${result.summary.moderate} moderate-risk finding${result.summary.moderate > 1 ? 's' : ''}`));
|
|
74
|
+
}
|
|
75
|
+
if (result.summary.safe > 0) {
|
|
76
|
+
lines.push(chalk.green(` 🟢 ${result.summary.safe} quantum-safe finding${result.summary.safe > 1 ? 's' : ''}`));
|
|
77
|
+
}
|
|
78
|
+
if (result.summary.total === 0) {
|
|
79
|
+
lines.push(chalk.green(' No quantum-vulnerable cryptography detected.'));
|
|
80
|
+
}
|
|
81
|
+
// Adjusted risk summary when findings have risk context
|
|
82
|
+
const hasAssessment = result.findings.some(f => isAssessedFinding(f));
|
|
83
|
+
if (hasAssessment) {
|
|
84
|
+
const adjCounts = { critical: 0, high: 0, medium: 0, low: 0, informational: 0 };
|
|
85
|
+
for (const f of result.findings) {
|
|
86
|
+
if (isAssessedFinding(f)) {
|
|
87
|
+
adjCounts[f.riskContext.adjustedRisk]++;
|
|
88
|
+
}
|
|
89
|
+
}
|
|
90
|
+
lines.push('');
|
|
91
|
+
lines.push(' Adjusted Risk (with context)');
|
|
92
|
+
if (adjCounts.critical > 0) {
|
|
93
|
+
lines.push(chalk.red(` 🔴 ${adjCounts.critical} critical`));
|
|
94
|
+
}
|
|
95
|
+
if (adjCounts.high > 0) {
|
|
96
|
+
lines.push(chalk.red(` 🔴 ${adjCounts.high} high`));
|
|
97
|
+
}
|
|
98
|
+
if (adjCounts.medium > 0) {
|
|
99
|
+
lines.push(chalk.yellow(` 🟡 ${adjCounts.medium} medium`));
|
|
100
|
+
}
|
|
101
|
+
if (adjCounts.low > 0) {
|
|
102
|
+
lines.push(chalk.green(` 🟢 ${adjCounts.low} low`));
|
|
103
|
+
}
|
|
104
|
+
if (adjCounts.informational > 0) {
|
|
105
|
+
lines.push(chalk.green(` 🟢 ${adjCounts.informational} informational`));
|
|
106
|
+
}
|
|
107
|
+
}
|
|
108
|
+
lines.push('');
|
|
109
|
+
// Per-file breakdown
|
|
110
|
+
const filesToShow = (verbose || showAll)
|
|
111
|
+
? result.fileBreakdown
|
|
112
|
+
: result.fileBreakdown.filter((fb) => fb.criticalCount > 0 || fb.moderateCount > 0);
|
|
113
|
+
if (filesToShow.length > 0) {
|
|
114
|
+
lines.push(' Findings');
|
|
115
|
+
lines.push('');
|
|
116
|
+
for (const fb of filesToShow) {
|
|
117
|
+
lines.push(` ${chalk.bold(fb.file)} ${chalk.dim(`(${fb.language})`)}`);
|
|
118
|
+
const findingsToShow = fb.findings.filter((f) => {
|
|
119
|
+
if (isAssessedFinding(f)) {
|
|
120
|
+
const adj = f.riskContext.adjustedRisk;
|
|
121
|
+
if ((adj === 'low' || adj === 'informational') && !showAll)
|
|
122
|
+
return false;
|
|
123
|
+
return true;
|
|
124
|
+
}
|
|
125
|
+
// Raw findings: same logic as before
|
|
126
|
+
if (!verbose && f.risk === 'safe')
|
|
127
|
+
return false;
|
|
128
|
+
return true;
|
|
129
|
+
});
|
|
130
|
+
for (const f of findingsToShow) {
|
|
131
|
+
if (isAssessedFinding(f)) {
|
|
132
|
+
const ctxLabel = usageContextLabel(f.riskContext.usageContext);
|
|
133
|
+
lines.push(` L${f.line}: ${f.algorithm.padEnd(16)} ${adjustedRiskIcon(f.riskContext.adjustedRisk)} ${chalk.dim(`— ${ctxLabel}`)}`);
|
|
134
|
+
}
|
|
135
|
+
else {
|
|
136
|
+
lines.push(` L${f.line}: ${f.algorithm.padEnd(16)} ${riskIcon(f.risk)}`);
|
|
137
|
+
}
|
|
138
|
+
}
|
|
139
|
+
lines.push('');
|
|
140
|
+
}
|
|
141
|
+
}
|
|
142
|
+
// Migration notes
|
|
143
|
+
if (!noMigration && result.migrationNotes.length > 0) {
|
|
144
|
+
lines.push(' Migration Notes');
|
|
145
|
+
for (const note of result.migrationNotes) {
|
|
146
|
+
lines.push(` • ${note}`);
|
|
147
|
+
}
|
|
148
|
+
lines.push(chalk.dim(' • NIST Timeline: Current algorithms deprecated 2030, disallowed 2035'));
|
|
149
|
+
lines.push('');
|
|
150
|
+
}
|
|
151
|
+
lines.push(chalk.dim(bar));
|
|
152
|
+
lines.push('');
|
|
153
|
+
return lines.join('\n');
|
|
154
|
+
}
|
|
155
|
+
//# sourceMappingURL=terminal-code.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"terminal-code.js","sourceRoot":"","sources":["../../src/output/terminal-code.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAEtD,SAAS,UAAU;IACjB,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CACpB,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC,EAAE,OAAO,CAAC,CACnE,CAAC;QACF,OAAO,GAAG,CAAC,OAAO,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC;AAQD,SAAS,QAAQ,CAAC,IAAe;IAC/B,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,UAAU;YACb,OAAO,KAAK,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;QAC5C,KAAK,UAAU;YACb,OAAO,KAAK,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAC1C,KAAK,MAAM;YACT,OAAO,KAAK,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAkB;IAC1C,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,UAAU;YACb,OAAO,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAClC,KAAK,MAAM;YACT,OAAO,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC9B,KAAK,QAAQ;YACX,OAAO,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACnC,KAAK,KAAK;YACR,OAAO,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC/B,KAAK,eAAe;YAClB,OAAO,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAClC,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe;IACxC,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,UAAU,CAAC,CAAQ;IAC1B,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClD,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACnD,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,MAAwB,EACxB,UAA+B,EAAE;IAEjC,MAAM,EAAE,OAAO,GAAG,KAAK,EAAE,WAAW,GAAG,KAAK,EAAE,OAAO,GAAG,KAAK,EAAE,GAAG,OAAO,CAAC;IAC1E,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAE3B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CACR,KAAK,CAAC,IAAI,CAAC,iBAAiB,UAAU,EAAE,iBAAiB,CAAC,CAC3D,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,gBAAgB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC1D,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,qBAAqB,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC5D,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,QAAQ;IACR,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACtB,KAAK,CAAC,IAAI,CAAC,2BAA2B,MAAM,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;IACrE,KAAK,CAAC,IAAI,CAAC,4BAA4B,MAAM,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC;IAC3E,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,iBAAiB;IACjB,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACxB,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;QAChC,KAAK,CAAC,IAAI,CACR,KAAK,CAAC,GAAG,CACP,UAAU,MAAM,CAAC,OAAO,CAAC,QAAQ,8BAA8B,MAAM,CAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACxG,CACF,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;QAChC,KAAK,CAAC,IAAI,CACR,KAAK,CAAC,MAAM,CACV,UAAU,MAAM,CAAC,OAAO,CAAC,QAAQ,yBAAyB,MAAM,CAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACnG,CACF,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QAC5B,KAAK,CAAC,IAAI,CACR,KAAK,CAAC,KAAK,CACT,UAAU,MAAM,CAAC,OAAO,CAAC,IAAI,wBAAwB,MAAM,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAC1F,CACF,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CACR,KAAK,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAChE,CAAC;IACJ,CAAC;IAED,wDAAwD;IACxD,MAAM,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC;IACtE,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,SAAS,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC;QAChF,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YAChC,IAAI,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzB,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,YAAY,CAAC,EAAE,CAAC;YAC1C,CAAC;QACH,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QAC7C,IAAI,SAAS,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;YAC3B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,SAAS,CAAC,QAAQ,WAAW,CAAC,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,SAAS,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YACvB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,SAAS,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,SAAS,CAAC,MAAM,SAAS,CAAC,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,SAAS,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC;YACtB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,SAAS,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,SAAS,CAAC,aAAa,GAAG,CAAC,EAAE,CAAC;YAChC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,SAAS,CAAC,aAAa,gBAAgB,CAAC,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,qBAAqB;IACrB,MAAM,WAAW,GAAG,CAAC,OAAO,IAAI,OAAO,CAAC;QACtC,CAAC,CAAC,MAAM,CAAC,aAAa;QACtB,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CACzB,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,aAAa,GAAG,CAAC,IAAI,EAAE,CAAC,aAAa,GAAG,CAAC,CACrD,CAAC;IAEN,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEf,KAAK,MAAM,EAAE,IAAI,WAAW,EAAE,CAAC;YAC7B,KAAK,CAAC,IAAI,CACR,KAAK,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,QAAQ,GAAG,CAAC,EAAE,CAC5D,CAAC;YAEF,MAAM,cAAc,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;gBAC9C,IAAI,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC;oBACzB,MAAM,GAAG,GAAG,CAAC,CAAC,WAAW,CAAC,YAAY,CAAC;oBACvC,IAAI,CAAC,GAAG,KAAK,KAAK,IAAI,GAAG,KAAK,eAAe,CAAC,IAAI,CAAC,OAAO;wBAAE,OAAO,KAAK,CAAC;oBACzE,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,qCAAqC;gBACrC,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM;oBAAE,OAAO,KAAK,CAAC;gBAChD,OAAO,IAAI,CAAC;YACd,CAAC,CAAC,CAAC;YAEH,KAAK,MAAM,CAAC,IAAI,cAAc,EAAE,CAAC;gBAC/B,IAAI,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC;oBACzB,MAAM,QAAQ,GAAG,iBAAiB,CAAC,CAAC,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;oBAC/D,KAAK,CAAC,IAAI,CACR,QAAQ,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,gBAAgB,CAAC,CAAC,CAAC,WAAW,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,QAAQ,EAAE,CAAC,EAAE,CAC1H,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,KAAK,CAAC,IAAI,CACR,QAAQ,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAChE,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;IAED,kBAAkB;IAClB,IAAI,CAAC,WAAW,IAAI,MAAM,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrD,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAChC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;YACzC,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;QAC9B,CAAC;QACD,KAAK,CAAC,IAAI,CACR,KAAK,CAAC,GAAG,CACP,0EAA0E,CAC3E,CACF,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"terminal.d.ts","sourceRoot":"","sources":["../../src/output/terminal.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"terminal.d.ts","sourceRoot":"","sources":["../../src/output/terminal.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,YAAY,EAAoB,MAAM,mBAAmB,CAAC;AA0CxE,wBAAgB,cAAc,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,CAwG3D"}
|
package/dist/output/terminal.js
CHANGED
|
@@ -1,5 +1,17 @@
|
|
|
1
|
+
import { readFileSync } from 'node:fs';
|
|
2
|
+
import { fileURLToPath } from 'node:url';
|
|
3
|
+
import { dirname, join } from 'node:path';
|
|
1
4
|
import chalk from 'chalk';
|
|
2
|
-
|
|
5
|
+
function getVersion() {
|
|
6
|
+
try {
|
|
7
|
+
const __dirname = dirname(fileURLToPath(import.meta.url));
|
|
8
|
+
const pkg = JSON.parse(readFileSync(join(__dirname, '..', '..', 'package.json'), 'utf-8'));
|
|
9
|
+
return pkg.version;
|
|
10
|
+
}
|
|
11
|
+
catch {
|
|
12
|
+
return '0.2.0';
|
|
13
|
+
}
|
|
14
|
+
}
|
|
3
15
|
function riskIcon(risk) {
|
|
4
16
|
switch (risk) {
|
|
5
17
|
case 'critical':
|
|
@@ -31,7 +43,7 @@ export function formatTerminal(result) {
|
|
|
31
43
|
const lines = [];
|
|
32
44
|
const bar = '━'.repeat(48);
|
|
33
45
|
lines.push('');
|
|
34
|
-
lines.push(chalk.bold(`🔐 PostQuant v${
|
|
46
|
+
lines.push(chalk.bold(`🔐 PostQuant v${getVersion()} — Quantum Readiness Scanner`));
|
|
35
47
|
lines.push(chalk.dim(bar));
|
|
36
48
|
lines.push('');
|
|
37
49
|
lines.push(` Target: ${chalk.bold(`${result.host}:${result.port}`)}`);
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"terminal.js","sourceRoot":"","sources":["../../src/output/terminal.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAG1B,MAAM,OAAO,GAAG,OAAO,CAAC;
|
|
1
|
+
{"version":3,"file":"terminal.js","sourceRoot":"","sources":["../../src/output/terminal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,KAAK,MAAM,OAAO,CAAC;AAG1B,SAAS,UAAU;IACjB,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CACpB,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC,EAAE,OAAO,CAAC,CACnE,CAAC;QACF,OAAO,GAAG,CAAC,OAAO,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,IAAe;IAC/B,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,UAAU;YACb,OAAO,KAAK,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;QAC5C,KAAK,UAAU;YACb,OAAO,KAAK,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAC1C,KAAK,MAAM;YACT,OAAO,KAAK,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,IAAe;IACpC,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,UAAU;YACb,OAAO,KAAK,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;QAC3C,KAAK,UAAU;YACb,OAAO,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAClC,KAAK,MAAM;YACT,OAAO,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACrC,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,CAAQ;IAC1B,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClD,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACnD,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAoB;IACjD,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAE3B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CACR,KAAK,CAAC,IAAI,CAAC,iBAAiB,UAAU,EAAE,8BAA8B,CAAC,CACxE,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,aAAa,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;IACvE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,qBAAqB,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC5D,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,aAAa,CAAC,CAAC;IAC/E,IAAI,WAAW,EAAE,CAAC;QAChB,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC5B,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK;YAC/B,CAAC,CAAC,GAAG,WAAW,CAAC,SAAS,IAAI,WAAW,CAAC,KAAK,EAAE;YACjD,CAAC,CAAC,WAAW,CAAC,OAAO;gBACnB,CAAC,CAAC,GAAG,WAAW,CAAC,SAAS,IAAI,WAAW,CAAC,OAAO,EAAE;gBACnD,CAAC,CAAC,WAAW,CAAC,SAAS,CAAC;QAC5B,KAAK,CAAC,IAAI,CACR,qBAAqB,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CACxE,CAAC;IACJ,CAAC;IAED,MAAM,eAAe,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,UAAU,CAAC,CAAC;IAChF,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,aAAa,CAAC,CAAC;IAC7E,MAAM,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC;IAC5E,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC;IAExE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC3B,IAAI,eAAe,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CACR,qBAAqB,eAAe,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,aAAa,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CACnG,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,EAAE,CAAC;QACd,KAAK,CAAC,IAAI,CACR,qBAAqB,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAClF,CAAC;IACJ,CAAC;IACD,IAAI,aAAa,EAAE,CAAC;QAClB,KAAK,CAAC,IAAI,CACR,qBAAqB,aAAa,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAC1F,CAAC;IACJ,CAAC;IACD,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,SAAS,GACb,aAAa,EAAE,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC;YACxC,aAAa,EAAE,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACzC,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,WAAW,CAAC,SAAS,CAAC;QAC5B,KAAK,CAAC,IAAI,CACR,qBAAqB,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAC1E,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACxB,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;QAChC,KAAK,CAAC,IAAI,CACR,KAAK,CAAC,GAAG,CACP,UAAU,MAAM,CAAC,OAAO,CAAC,QAAQ,8BAA8B,MAAM,CAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACxG,CACF,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;QAChC,KAAK,CAAC,IAAI,CACR,KAAK,CAAC,MAAM,CACV,UAAU,MAAM,CAAC,OAAO,CAAC,QAAQ,yBAAyB,MAAM,CAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACnG,CACF,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QAC5B,KAAK,CAAC,IAAI,CACR,KAAK,CAAC,KAAK,CACT,UAAU,MAAM,CAAC,OAAO,CAAC,IAAI,wBAAwB,MAAM,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAC1F,CACF,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAChC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;YACzC,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;QAC9B,CAAC;QACD,KAAK,CAAC,IAAI,CACR,KAAK,CAAC,GAAG,CACP,0EAA0E,CAC3E,CACF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}
|
|
@@ -0,0 +1,9 @@
|
|
|
1
|
+
import type { CodeFinding, CodeScanResult } from '../../types/index.js';
|
|
2
|
+
/**
|
|
3
|
+
* Aggregate raw CodeFinding[] into a CodeScanResult.
|
|
4
|
+
* This is the code scanner equivalent of the TLS classifier —
|
|
5
|
+
* it collects metadata (files scanned, languages detected, etc.)
|
|
6
|
+
* around the raw findings from the matcher.
|
|
7
|
+
*/
|
|
8
|
+
export declare function classifyCodeFindings(findings: CodeFinding[], scanRoot: string, filesScanned: number, durationMs: number): CodeScanResult;
|
|
9
|
+
//# sourceMappingURL=classifier.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"classifier.d.ts","sourceRoot":"","sources":["../../../src/scanner/code/classifier.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAY,MAAM,sBAAsB,CAAC;AAElF;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,WAAW,EAAE,EACvB,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,MAAM,GACjB,cAAc,CAYhB"}
|
|
@@ -0,0 +1,19 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Aggregate raw CodeFinding[] into a CodeScanResult.
|
|
3
|
+
* This is the code scanner equivalent of the TLS classifier —
|
|
4
|
+
* it collects metadata (files scanned, languages detected, etc.)
|
|
5
|
+
* around the raw findings from the matcher.
|
|
6
|
+
*/
|
|
7
|
+
export function classifyCodeFindings(findings, scanRoot, filesScanned, durationMs) {
|
|
8
|
+
const uniqueFiles = new Set(findings.map((f) => f.file));
|
|
9
|
+
const uniqueLanguages = [...new Set(findings.map((f) => f.language))];
|
|
10
|
+
return {
|
|
11
|
+
scanRoot,
|
|
12
|
+
findings,
|
|
13
|
+
filesScanned,
|
|
14
|
+
filesWithFindings: uniqueFiles.size,
|
|
15
|
+
languagesDetected: uniqueLanguages,
|
|
16
|
+
durationMs,
|
|
17
|
+
};
|
|
18
|
+
}
|
|
19
|
+
//# sourceMappingURL=classifier.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"classifier.js","sourceRoot":"","sources":["../../../src/scanner/code/classifier.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAClC,QAAuB,EACvB,QAAgB,EAChB,YAAoB,EACpB,UAAkB;IAElB,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACzD,MAAM,eAAe,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAEtE,OAAO;QACL,QAAQ;QACR,QAAQ;QACR,YAAY;QACZ,iBAAiB,EAAE,WAAW,CAAC,IAAI;QACnC,iBAAiB,EAAE,eAAe;QAClC,UAAU;KACX,CAAC;AACJ,CAAC"}
|
|
@@ -0,0 +1,17 @@
|
|
|
1
|
+
import type { Language, DiscoveredFile } from '../../types/index.js';
|
|
2
|
+
export interface DiscoverOptions {
|
|
3
|
+
/** Glob patterns to exclude */
|
|
4
|
+
ignore?: string[];
|
|
5
|
+
/** Path to ignore file (relative to scanRoot), default: .postquantignore */
|
|
6
|
+
ignoreFile?: string;
|
|
7
|
+
/** Maximum files to return */
|
|
8
|
+
maxFiles?: number;
|
|
9
|
+
/** Only return files for this language */
|
|
10
|
+
language?: Language;
|
|
11
|
+
}
|
|
12
|
+
/**
|
|
13
|
+
* Discover source files in a directory tree.
|
|
14
|
+
* Returns files with detected language, filtered by ignore patterns and options.
|
|
15
|
+
*/
|
|
16
|
+
export declare function discoverFiles(scanRoot: string, options?: DiscoverOptions): Promise<DiscoveredFile[]>;
|
|
17
|
+
//# sourceMappingURL=discovery.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"discovery.d.ts","sourceRoot":"","sources":["../../../src/scanner/code/discovery.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAuCrE,MAAM,WAAW,eAAe;IAC9B,+BAA+B;IAC/B,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,4EAA4E;IAC5E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,8BAA8B;IAC9B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,0CAA0C;IAC1C,QAAQ,CAAC,EAAE,QAAQ,CAAC;CACrB;AAED;;;GAGG;AACH,wBAAsB,aAAa,CACjC,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,eAAoB,GAC5B,OAAO,CAAC,cAAc,EAAE,CAAC,CAoC3B"}
|