secure-scan 1.2.2

package/dist/rules/vulnerabilities/engine/index.d.ts

@@ -0,0 +1,145 @@
+/**
+ * @fileoverview Vulnerability Rule Engine - Core Detection Engine
+ * @module rules/vulnerabilities/engine
+ *
+ * Orchestrates vulnerability detection across all rule categories:
+ * - Multi-pattern matching with timeout protection
+ * - Taint analysis integration
+ * - AST-aware analysis
+ * - Dynamic scoring
+ * - Rule correlation
+ * - Finding aggregation and deduplication
+ */
+import { VulnerabilityRule, VulnerabilityFinding, VulnerabilityPattern, AnalysisContext, AnalysisOptions, IVulnerabilityRuleEngine, IPatternMatcher, PatternMatch, ConfidenceLevel, SupportedLanguage, TaintFlow, DataFlowTrace } from '../types';
+/**
+ * Pattern matcher with timeout protection
+ */
+export declare class PatternMatcher implements IPatternMatcher {
+    private timeoutMs;
+    private maxMatches;
+    constructor(options?: {
+        timeoutMs?: number;
+        maxMatches?: number;
+    });
+    /**
+     * Match patterns against content
+     */
+    match(content: string, patterns: VulnerabilityPattern[], language: SupportedLanguage): PatternMatch[];
+    /**
+     * Match with timeout protection
+     */
+    matchWithTimeout(content: string, patterns: VulnerabilityPattern[], language: SupportedLanguage, timeout: number): Promise<PatternMatch[]>;
+    /**
+     * Match a single pattern against code
+     */
+    private matchSinglePattern;
+    /**
+     * Match literal string pattern
+     */
+    private matchLiteralPattern;
+}
+/**
+ * Simple taint analyzer for detecting data flows
+ */
+export declare class SimpleTaintAnalyzer {
+    /**
+     * Analyze taint flows in code
+     */
+    analyze(context: AnalysisContext, rule: VulnerabilityRule): TaintFlow[];
+    /**
+     * Convert taint flow to data flow trace for reporting
+     */
+    createDataFlowTrace(flow: TaintFlow, code: string): DataFlowTrace;
+}
+export interface EngineOptions {
+    enableTaintAnalysis: boolean;
+    enableAstAnalysis: boolean;
+    enableCfgAnalysis: boolean;
+    timeoutMs: number;
+    maxFindings: number;
+    minConfidence: ConfidenceLevel;
+    includeInfo: boolean;
+    excludeTestFiles: boolean;
+    excludeVendorCode: boolean;
+    language?: SupportedLanguage;
+}
+/**
+ * Main vulnerability detection engine
+ */
+export declare class VulnerabilityRuleEngine implements IVulnerabilityRuleEngine {
+    private rules;
+    private patternMatcher;
+    private taintAnalyzer;
+    private scoreCalculator;
+    private engineOptions;
+    constructor(rules: VulnerabilityRule[], options?: Partial<EngineOptions>);
+    /**
+     * Analyze code against all enabled rules
+     */
+    analyze(context: AnalysisContext, options?: AnalysisOptions): Promise<VulnerabilityFinding[]>;
+    /**
+     * Analyze code with a specific rule
+     */
+    private analyzeWithRule;
+    /**
+     * Create a vulnerability finding
+     */
+    private createFinding;
+    /**
+     * Generate finding message
+     */
+    private generateMessage;
+    /**
+     * Generate detailed audit analysis
+     */
+    private generateAuditAnalysis;
+    /**
+     * Generate developer-friendly explanation
+     */
+    private generateDeveloperExplanation;
+    /**
+     * Get rules applicable to a language
+     */
+    private getApplicableRules;
+    /**
+     * Get all registered rules
+     */
+    getRules(): VulnerabilityRule[];
+    /**
+     * Get rule by ID
+     */
+    getRule(id: string): VulnerabilityRule | undefined;
+    /**
+     * Enable/disable a rule
+     */
+    setRuleEnabled(id: string, enabled: boolean): void;
+    /**
+     * Add a custom rule
+     */
+    addRule(rule: VulnerabilityRule): void;
+    /**
+     * Group matches by location
+     */
+    private groupMatchesByLocation;
+    /**
+     * Check if two locations overlap
+     */
+    private locationsOverlap;
+    /**
+     * Check if confidence meets minimum
+     */
+    private meetsMinConfidence;
+    /**
+     * Deduplicate findings
+     */
+    private deduplicateFindings;
+}
+/**
+ * Create default vulnerability engine
+ */
+export declare function createDefaultEngine(rules: VulnerabilityRule[], options?: Partial<EngineOptions>): VulnerabilityRuleEngine;
+/**
+ * Quick scan function for simple usage
+ */
+export declare function quickScan(code: string, filePath: string, language: SupportedLanguage, rules: VulnerabilityRule[], options?: Partial<EngineOptions>): Promise<VulnerabilityFinding[]>;
+//# sourceMappingURL=index.d.ts.map

package/dist/rules/vulnerabilities/engine/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/rules/vulnerabilities/engine/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,oBAAoB,EAEpB,eAAe,EACf,eAAe,EACf,wBAAwB,EACxB,eAAe,EACf,YAAY,EAGZ,eAAe,EAEf,iBAAiB,EAEjB,SAAS,EACT,aAAa,EAEd,MAAM,UAAU,CAAC;AA0BlB;;GAEG;AACH,qBAAa,cAAe,YAAW,eAAe;IACpD,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,UAAU,CAAS;gBAEf,OAAO,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE;IAKjE;;OAEG;IACH,KAAK,CACH,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,oBAAoB,EAAE,EAChC,QAAQ,EAAE,iBAAiB,GAC1B,YAAY,EAAE;IAoBjB;;OAEG;IACG,gBAAgB,CACpB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,oBAAoB,EAAE,EAChC,QAAQ,EAAE,iBAAiB,EAC3B,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,YAAY,EAAE,CAAC;IAiB1B;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAsC1B;;OAEG;IACH,OAAO,CAAC,mBAAmB;CAuC5B;AAMD;;GAEG;AACH,qBAAa,mBAAmB;IAC9B;;OAEG;IACH,OAAO,CACL,OAAO,EAAE,eAAe,EACxB,IAAI,EAAE,iBAAiB,GACtB,SAAS,EAAE;IAgEd;;OAEG;IACH,mBAAmB,CACjB,IAAI,EAAE,SAAS,EACf,IAAI,EAAE,MAAM,GACX,aAAa;CA6BjB;AAMD,MAAM,WAAW,aAAa;IAC5B,mBAAmB,EAAE,OAAO,CAAC;IAC7B,iBAAiB,EAAE,OAAO,CAAC;IAC3B,iBAAiB,EAAE,OAAO,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,eAAe,CAAC;IAC/B,WAAW,EAAE,OAAO,CAAC;IACrB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,iBAAiB,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,EAAE,iBAAiB,CAAC;CAC9B;AAkBD;;GAEG;AACH,qBAAa,uBAAwB,YAAW,wBAAwB;IACtE,OAAO,CAAC,KAAK,CAAiC;IAC9C,OAAO,CAAC,cAAc,CAAiB;IACvC,OAAO,CAAC,aAAa,CAAsB;IAC3C,OAAO,CAAC,eAAe,CAA+B;IACtD,OAAO,CAAC,aAAa,CAAgB;gBAGnC,KAAK,EAAE,iBAAiB,EAAE,EAC1B,OAAO,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC;IASlC;;OAEG;IACG,OAAO,CACX,OAAO,EAAE,eAAe,EACxB,OAAO,CAAC,EAAE,eAAe,GACxB,OAAO,CAAC,oBAAoB,EAAE,CAAC;IAyDlC;;OAEG;YACW,eAAe;IAyE7B;;OAEG;IACH,OAAO,CAAC,aAAa;IA2DrB;;OAEG;IACH,OAAO,CAAC,eAAe;IAcvB;;OAEG;IACH,OAAO,CAAC,qBAAqB;IA4D7B;;OAEG;IACH,OAAO,CAAC,4BAA4B;IAmCpC;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAM1B;;OAEG;IACH,QAAQ,IAAI,iBAAiB,EAAE;IAI/B;;OAEG;IACH,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS;IAIlD;;OAEG;IACH,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI;IAOlD;;OAEG;IACH,OAAO,CAAC,IAAI,EAAE,iBAAiB,GAAG,IAAI;IAItC;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAe9B;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAIxB;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAc1B;;OAEG;IACH,OAAO,CAAC,mBAAmB;CAa5B;AAMD;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,iBAAiB,EAAE,EAC1B,OAAO,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,GAC/B,uBAAuB,CAEzB;AAED;;GAEG;AACH,wBAAsB,SAAS,CAC7B,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,iBAAiB,EAC3B,KAAK,EAAE,iBAAiB,EAAE,EAC1B,OAAO,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,GAC/B,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAYjC"}