verification-layer 0.20.0 → 0.22.0

package/dist/scanners/configuration/patterns.js

@@ -0,0 +1,146 @@
+/**
+ * Configuration Security Detection Patterns
+ * Detects insecure configuration settings and missing security controls
+ */
+/**
+ * CONFIG-001: Debug/Verbose Mode Without Environment Gate
+ * Detects debug/verbose flags enabled without NODE_ENV check
+ */
+export const DEBUG_WITHOUT_ENV_GATE = {
+    id: 'CONFIG-001',
+    name: 'Debug/Verbose Mode Without Environment Gate',
+    description: 'Debug or verbose mode enabled (debug:true, DEBUG:true, verbose:true, devTools:true) without NODE_ENV environment gate. May expose sensitive information in production.',
+    severity: 'high',
+    hipaaReference: 'NPRM Configuration Management',
+    patterns: [
+        // debug: true
+        /\bdebug\s*:\s*true\b/i,
+        // DEBUG: true (environment variable style)
+        /\bDEBUG\s*:\s*true\b/,
+        // verbose: true
+        /\bverbose\s*:\s*true\b/i,
+        // devTools: true
+        /\bdevTools\s*:\s*true\b/i,
+        // debug = true
+        /\bdebug\s*=\s*true\b/i,
+        // process.env.DEBUG = 'true'
+        /process\.env\.DEBUG\s*=\s*['"]true['"]/i,
+    ],
+    negativePatterns: [
+        // Environment checks
+        /NODE_ENV/i,
+        /process\.env\.NODE_ENV/i,
+        /isDevelopment/i,
+        /isProduction/i,
+        /\.env\s*===?\s*['"]development['"]/i,
+        /\.env\s*!==?\s*['"]production['"]/i,
+        // Conditional logic
+        /if\s*\(/i,
+        /\?\s*true\s*:\s*false/i,
+        // Test files
+        /\.test\./i,
+        /\.spec\./i,
+        /describe\(/i,
+        /it\(/i,
+        // Type definitions
+        /interface\s+/i,
+        /type\s+\w+\s*=/i,
+        // Comments (at start of line or after whitespace)
+        /^\s*\/\//,
+        /^\s*\/\*/,
+    ],
+    recommendation: 'Gate debug/verbose modes with environment checks. Example: debug: process.env.NODE_ENV === "development", or use environment variables: debug: process.env.DEBUG === "true". Never hardcode debug:true in production config.',
+    category: 'audit-logging',
+};
+/**
+ * CONFIG-002: Web Server Without Security Headers
+ * Detects web servers created without helmet or security headers middleware
+ */
+export const SERVER_WITHOUT_SECURITY_HEADERS = {
+    id: 'CONFIG-002',
+    name: 'Web Server Without Security Headers Middleware',
+    description: 'Web server created (express(), createServer, new Hono, new Elysia) without helmet() or security headers middleware (CSP, X-Frame-Options, X-Content-Type-Options). Missing security headers expose app to XSS, clickjacking, and MIME sniffing attacks.',
+    severity: 'medium',
+    hipaaReference: 'NPRM Configuration Management',
+    patterns: [
+        // Express app creation
+        /(?:const|let|var)\s+\w+\s*=\s*express\s*\(\s*\)/i,
+        // HTTP server creation
+        /(?:http|https)\.createServer\s*\(/i,
+        // Hono
+        /new\s+Hono\s*\(/i,
+        // Elysia
+        /new\s+Elysia\s*\(/i,
+        // Fastify
+        /fastify\s*\(\s*\{/i,
+        // Koa
+        /new\s+Koa\s*\(/i,
+    ],
+    negativePatterns: [
+        // Helmet middleware
+        /helmet\s*\(/i,
+        /app\.use\s*\(\s*helmet/i,
+        // Security headers
+        /Content-Security-Policy/i,
+        /X-Frame-Options/i,
+        /X-Content-Type-Options/i,
+        /Strict-Transport-Security/i,
+        /X-XSS-Protection/i,
+        // Header setting methods
+        /setHeader\s*\(/i,
+        /\.set\s*\(\s*['"]X-Frame-Options['"]/i,
+        /\.header\s*\(/i,
+        // Security middleware
+        /cors\s*\(/i,
+        /compression\s*\(/i,
+        // Configuration objects with security
+        /security/i,
+    ],
+    recommendation: 'Add helmet middleware for Express: app.use(helmet()), or set security headers manually: res.setHeader("X-Frame-Options", "DENY"); res.setHeader("X-Content-Type-Options", "nosniff"); res.setHeader("Content-Security-Policy", "default-src \'self\'"). Use helmet for comprehensive security headers.',
+    category: 'audit-logging',
+};
+/**
+ * CONFIG-003: Test Framework Imports in Production Code
+ * Detects test framework imports in non-test files
+ */
+export const TEST_IMPORTS_IN_PRODUCTION = {
+    id: 'CONFIG-003',
+    name: 'Test Framework Imports in Production Code',
+    description: 'Test framework imports (jest, vitest, mocha, chai, faker, cypress) found in production code (non-test files). Test frameworks should only be imported in test files (*.test.*, *.spec.*).',
+    severity: 'low',
+    hipaaReference: 'NPRM Configuration Management',
+    patterns: [
+        // Jest
+        /import\s+.*?from\s+['"]@?jest/i,
+        /require\s*\(\s*['"]@?jest/i,
+        // Vitest
+        /import\s+.*?from\s+['"]vitest['"]/i,
+        /require\s*\(\s*['"]vitest['"]/i,
+        // Mocha
+        /import\s+.*?from\s+['"]mocha['"]/i,
+        /require\s*\(\s*['"]mocha['"]/i,
+        // Chai
+        /import\s+.*?from\s+['"]chai['"]/i,
+        /require\s*\(\s*['"]chai['"]/i,
+        // Faker
+        /import\s+.*?from\s+['"]@?faker/i,
+        /require\s*\(\s*['"]@?faker/i,
+        // Cypress
+        /import\s+.*?from\s+['"]cypress['"]/i,
+        /require\s*\(\s*['"]cypress['"]/i,
+        // Testing Library
+        /import\s+.*?from\s+['"]@testing-library/i,
+        /require\s*\(\s*['"]@testing-library/i,
+    ],
+    negativePatterns: [
+    // This pattern will be checked in the scanner by filename, not content
+    ],
+    recommendation: 'Remove test framework imports from production code. Test frameworks should only be imported in test files (*.test.ts, *.spec.js, etc.). Move test utilities to separate test helper files.',
+    category: 'audit-logging',
+};
+export const ALL_CONFIGURATION_PATTERNS = [
+    DEBUG_WITHOUT_ENV_GATE,
+    SERVER_WITHOUT_SECURITY_HEADERS,
+    TEST_IMPORTS_IN_PRODUCTION,
+];
+//# sourceMappingURL=patterns.js.map

package/dist/scanners/configuration/patterns.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"patterns.js","sourceRoot":"","sources":["../../../src/scanners/configuration/patterns.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAcH;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAyB;IAC1D,EAAE,EAAE,YAAY;IAChB,IAAI,EAAE,6CAA6C;IACnD,WAAW,EACT,wKAAwK;IAC1K,QAAQ,EAAE,MAAM;IAChB,cAAc,EAAE,+BAA+B;IAC/C,QAAQ,EAAE;QACR,cAAc;QACd,uBAAuB;QAEvB,2CAA2C;QAC3C,sBAAsB;QAEtB,gBAAgB;QAChB,yBAAyB;QAEzB,iBAAiB;QACjB,0BAA0B;QAE1B,eAAe;QACf,uBAAuB;QAEvB,6BAA6B;QAC7B,yCAAyC;KAC1C;IACD,gBAAgB,EAAE;QAChB,qBAAqB;QACrB,WAAW;QACX,yBAAyB;QACzB,gBAAgB;QAChB,eAAe;QACf,qCAAqC;QACrC,oCAAoC;QAEpC,oBAAoB;QACpB,UAAU;QACV,wBAAwB;QAExB,aAAa;QACb,WAAW;QACX,WAAW;QACX,aAAa;QACb,OAAO;QAEP,mBAAmB;QACnB,eAAe;QACf,iBAAiB;QAEjB,kDAAkD;QAClD,UAAU;QACV,UAAU;KACX;IACD,cAAc,EACZ,8NAA8N;IAChO,QAAQ,EAAE,eAAe;CAC1B,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAyB;IACnE,EAAE,EAAE,YAAY;IAChB,IAAI,EAAE,gDAAgD;IACtD,WAAW,EACT,yPAAyP;IAC3P,QAAQ,EAAE,QAAQ;IAClB,cAAc,EAAE,+BAA+B;IAC/C,QAAQ,EAAE;QACR,uBAAuB;QACvB,kDAAkD;QAElD,uBAAuB;QACvB,oCAAoC;QAEpC,OAAO;QACP,kBAAkB;QAElB,SAAS;QACT,oBAAoB;QAEpB,UAAU;QACV,oBAAoB;QAEpB,MAAM;QACN,iBAAiB;KAClB;IACD,gBAAgB,EAAE;QAChB,oBAAoB;QACpB,cAAc;QACd,yBAAyB;QAEzB,mBAAmB;QACnB,0BAA0B;QAC1B,kBAAkB;QAClB,yBAAyB;QACzB,4BAA4B;QAC5B,mBAAmB;QAEnB,yBAAyB;QACzB,iBAAiB;QACjB,uCAAuC;QACvC,gBAAgB;QAEhB,sBAAsB;QACtB,YAAY;QACZ,mBAAmB;QAEnB,sCAAsC;QACtC,WAAW;KACZ;IACD,cAAc,EACZ,wSAAwS;IAC1S,QAAQ,EAAE,eAAe;CAC1B,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAyB;IAC9D,EAAE,EAAE,YAAY;IAChB,IAAI,EAAE,2CAA2C;IACjD,WAAW,EACT,2LAA2L;IAC7L,QAAQ,EAAE,KAAK;IACf,cAAc,EAAE,+BAA+B;IAC/C,QAAQ,EAAE;QACR,OAAO;QACP,gCAAgC;QAChC,4BAA4B;QAE5B,SAAS;QACT,oCAAoC;QACpC,gCAAgC;QAEhC,QAAQ;QACR,mCAAmC;QACnC,+BAA+B;QAE/B,OAAO;QACP,kCAAkC;QAClC,8BAA8B;QAE9B,QAAQ;QACR,iCAAiC;QACjC,6BAA6B;QAE7B,UAAU;QACV,qCAAqC;QACrC,iCAAiC;QAEjC,kBAAkB;QAClB,0CAA0C;QAC1C,sCAAsC;KACvC;IACD,gBAAgB,EAAE;IAChB,uEAAuE;KACxE;IACD,cAAc,EACZ,4LAA4L;IAC9L,QAAQ,EAAE,eAAe;CAC1B,CAAC;AAEF,MAAM,CAAC,MAAM,0BAA0B,GAA2B;IAChE,sBAAsB;IACtB,+BAA+B;IAC/B,0BAA0B;CAC3B,CAAC"}

package/dist/scanners/credentials/index.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Credential Security Scanner
+ * Detects weak password hashing, hardcoded credentials, and exposed secrets
+ */
+import type { Scanner } from '../../types.js';
+export declare const credentialsScanner: Scanner;
+//# sourceMappingURL=index.d.ts.map

package/dist/scanners/credentials/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/scanners/credentials/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,KAAK,EAAE,OAAO,EAAwB,MAAM,gBAAgB,CAAC;AAMpE,eAAO,MAAM,kBAAkB,EAAE,OAkGhC,CAAC"}

package/dist/scanners/credentials/index.js

@@ -0,0 +1,129 @@
+/**
+ * Credential Security Scanner
+ * Detects weak password hashing, hardcoded credentials, and exposed secrets
+ */
+import * as fs from 'fs/promises';
+import { ALL_CREDENTIAL_PATTERNS, } from './patterns.js';
+export const credentialsScanner = {
+    name: 'Credential Security Scanner',
+    category: 'encryption',
+    async scan(files, options) {
+        const findings = [];
+        // Filter to code and config files
+        const codeFiles = files.filter((f) => /\.(js|ts|jsx|tsx|py|java|go|rb|php|cs|env|yml|yaml|json)$/i.test(f));
+        for (const file of codeFiles) {
+            try {
+                const content = await fs.readFile(file, 'utf-8');
+                const lines = content.split('\n');
+                for (const pattern of ALL_CREDENTIAL_PATTERNS) {
+                    // Special handling for CRED-001 (weak password hashing)
+                    if (pattern.id === 'CRED-001') {
+                        await scanWeakPasswordHashing(file, content, lines, pattern, findings);
+                        continue;
+                    }
+                    // Standard pattern matching for CRED-002 and CRED-003
+                    for (let i = 0; i < lines.length; i++) {
+                        const line = lines[i];
+                        const lineNumber = i + 1;
+                        // Skip comments and empty lines
+                        if (/^\s*(?:\/\/|#|\/\*|\*|$)/.test(line))
+                            continue;
+                        // Check if line matches violation pattern
+                        const matched = pattern.patterns.some((p) => p.test(line));
+                        if (!matched)
+                            continue;
+                        // Check if negative patterns indicate safe usage
+                        const isSafe = pattern.negativePatterns?.some((p) => {
+                            // Check current line for safe indicators
+                            if (p.test(line))
+                                return true;
+                            // For CRED-002, check if it's an env var or placeholder
+                            if (pattern.id === 'CRED-002') {
+                                // Extract the value being assigned
+                                const valueMatch = line.match(/[:=]\s*['"`]([^'"`]+)['"`]/);
+                                if (valueMatch) {
+                                    const value = valueMatch[1];
+                                    // Check if value looks like a placeholder
+                                    if (/^(?:your|my|the|a|an|test|example|demo|sample|placeholder|xxx|changeme|replace|todo)/i.test(value)) {
+                                        return true;
+                                    }
+                                    // Check if value is too short or generic
+                                    if (value.length < 8 ||
+                                        /^(?:12345|qwerty|password|admin|test)/i.test(value)) {
+                                        return true;
+                                    }
+                                }
+                            }
+                            return false;
+                        });
+                        if (isSafe)
+                            continue;
+                        // Create finding
+                        findings.push({
+                            id: pattern.id,
+                            category: 'encryption',
+                            severity: pattern.severity,
+                            title: pattern.name,
+                            description: `${pattern.description}\n\nCode: ${line.trim()}`,
+                            file: file,
+                            line: lineNumber,
+                            recommendation: pattern.recommendation,
+                            hipaaReference: pattern.hipaaReference,
+                            confidence: 'high',
+                        });
+                    }
+                }
+            }
+            catch (error) {
+                // Skip files that can't be read
+            }
+        }
+        return findings;
+    },
+};
+/**
+ * Scan for weak password hashing algorithms
+ */
+async function scanWeakPasswordHashing(file, content, lines, pattern, findings) {
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i];
+        const lineNumber = i + 1;
+        // Skip comments
+        if (/^\s*(?:\/\/|#|\/\*|\*)/.test(line))
+            continue;
+        // Check if line contains weak hashing
+        const hasWeakHash = pattern.patterns.some((p) => p.test(line));
+        if (!hasWeakHash)
+            continue;
+        // Check surrounding context (5 lines before and after) for password-related code
+        const contextStart = Math.max(0, i - 5);
+        const contextEnd = Math.min(lines.length, i + 6);
+        const context = lines.slice(contextStart, contextEnd).join('\n');
+        // Check if this is related to password hashing
+        const isPasswordRelated = /password|passwd|pwd|credential|auth/i.test(context);
+        // Check if secure algorithms are present (indicates awareness/migration)
+        const hasSecureAlgo = pattern.negativePatterns?.some((p) => p.test(context));
+        if (hasSecureAlgo)
+            continue;
+        // Check if it's for non-password use (checksums, file hashing)
+        const isNonPasswordUse = pattern.negativePatterns?.some((p) => p.test(line) && /checksum|file|integrity/i.test(p.source));
+        if (isNonPasswordUse)
+            continue;
+        // Only flag if it's likely password-related
+        if (isPasswordRelated) {
+            findings.push({
+                id: pattern.id,
+                category: 'encryption',
+                severity: pattern.severity,
+                title: pattern.name,
+                description: `${pattern.description}\n\nCode: ${line.trim()}\n\nWeak hashing algorithm detected in password-related code.`,
+                file: file,
+                line: lineNumber,
+                recommendation: pattern.recommendation,
+                hipaaReference: pattern.hipaaReference,
+                confidence: 'high',
+            });
+        }
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/scanners/credentials/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/scanners/credentials/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,MAAM,aAAa,CAAC;AAElC,OAAO,EACL,uBAAuB,GAExB,MAAM,eAAe,CAAC;AAEvB,MAAM,CAAC,MAAM,kBAAkB,GAAY;IACzC,IAAI,EAAE,6BAA6B;IACnC,QAAQ,EAAE,YAAY;IAEtB,KAAK,CAAC,IAAI,CAAC,KAAe,EAAE,OAAoB;QAC9C,MAAM,QAAQ,GAAc,EAAE,CAAC;QAE/B,kCAAkC;QAClC,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CACnC,4DAA4D,CAAC,IAAI,CAAC,CAAC,CAAC,CACrE,CAAC;QAEF,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBACjD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAElC,KAAK,MAAM,OAAO,IAAI,uBAAuB,EAAE,CAAC;oBAC9C,wDAAwD;oBACxD,IAAI,OAAO,CAAC,EAAE,KAAK,UAAU,EAAE,CAAC;wBAC9B,MAAM,uBAAuB,CAC3B,IAAI,EACJ,OAAO,EACP,KAAK,EACL,OAAO,EACP,QAAQ,CACT,CAAC;wBACF,SAAS;oBACX,CAAC;oBAED,sDAAsD;oBACtD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;wBACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;wBACtB,MAAM,UAAU,GAAG,CAAC,GAAG,CAAC,CAAC;wBAEzB,gCAAgC;wBAChC,IAAI,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC;4BAAE,SAAS;wBAEpD,0CAA0C;wBAC1C,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;wBAC3D,IAAI,CAAC,OAAO;4BAAE,SAAS;wBAEvB,iDAAiD;wBACjD,MAAM,MAAM,GAAG,OAAO,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;4BAClD,yCAAyC;4BACzC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;gCAAE,OAAO,IAAI,CAAC;4BAE9B,wDAAwD;4BACxD,IAAI,OAAO,CAAC,EAAE,KAAK,UAAU,EAAE,CAAC;gCAC9B,mCAAmC;gCACnC,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;gCAC5D,IAAI,UAAU,EAAE,CAAC;oCACf,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;oCAC5B,0CAA0C;oCAC1C,IACE,uFAAuF,CAAC,IAAI,CAC1F,KAAK,CACN,EACD,CAAC;wCACD,OAAO,IAAI,CAAC;oCACd,CAAC;oCACD,yCAAyC;oCACzC,IACE,KAAK,CAAC,MAAM,GAAG,CAAC;wCAChB,wCAAwC,CAAC,IAAI,CAAC,KAAK,CAAC,EACpD,CAAC;wCACD,OAAO,IAAI,CAAC;oCACd,CAAC;gCACH,CAAC;4BACH,CAAC;4BAED,OAAO,KAAK,CAAC;wBACf,CAAC,CAAC,CAAC;wBAEH,IAAI,MAAM;4BAAE,SAAS;wBAErB,iBAAiB;wBACjB,QAAQ,CAAC,IAAI,CAAC;4BACZ,EAAE,EAAE,OAAO,CAAC,EAAE;4BACd,QAAQ,EAAE,YAAY;4BACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;4BAC1B,KAAK,EAAE,OAAO,CAAC,IAAI;4BACnB,WAAW,EAAE,GAAG,OAAO,CAAC,WAAW,aAAa,IAAI,CAAC,IAAI,EAAE,EAAE;4BAC7D,IAAI,EAAE,IAAI;4BACV,IAAI,EAAE,UAAU;4BAChB,cAAc,EAAE,OAAO,CAAC,cAAc;4BACtC,cAAc,EAAE,OAAO,CAAC,cAAc;4BACtC,UAAU,EAAE,MAAM;yBACnB,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,gCAAgC;YAClC,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAC;AAEF;;GAEG;AACH,KAAK,UAAU,uBAAuB,CACpC,IAAY,EACZ,OAAe,EACf,KAAe,EACf,OAA0B,EAC1B,QAAmB;IAEnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACtB,MAAM,UAAU,GAAG,CAAC,GAAG,CAAC,CAAC;QAEzB,gBAAgB;QAChB,IAAI,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QAElD,sCAAsC;QACtC,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/D,IAAI,CAAC,WAAW;YAAE,SAAS;QAE3B,iFAAiF;QACjF,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACxC,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACjD,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEjE,+CAA+C;QAC/C,MAAM,iBAAiB,GACrB,sCAAsC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAEvD,yEAAyE;QACzE,MAAM,aAAa,GAAG,OAAO,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CACzD,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAChB,CAAC;QAEF,IAAI,aAAa;YAAE,SAAS;QAE5B,+DAA+D;QAC/D,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,EAAE,IAAI,CACrD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,0BAA0B,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CACjE,CAAC;QAEF,IAAI,gBAAgB;YAAE,SAAS;QAE/B,4CAA4C;QAC5C,IAAI,iBAAiB,EAAE,CAAC;YACtB,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,OAAO,CAAC,EAAE;gBACd,QAAQ,EAAE,YAAY;gBACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,KAAK,EAAE,OAAO,CAAC,IAAI;gBACnB,WAAW,EAAE,GAAG,OAAO,CAAC,WAAW,aAAa,IAAI,CAAC,IAAI,EAAE,+DAA+D;gBAC1H,IAAI,EAAE,IAAI;gBACV,IAAI,EAAE,UAAU;gBAChB,cAAc,EAAE,OAAO,CAAC,cAAc;gBACtC,cAAc,EAAE,OAAO,CAAC,cAAc;gBACtC,UAAU,EAAE,MAAM;aACnB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/scanners/credentials/index.test.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Tests for Credential Security Scanner
+ */
+export {};
+//# sourceMappingURL=index.test.d.ts.map

package/dist/scanners/credentials/index.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.test.d.ts","sourceRoot":"","sources":["../../../src/scanners/credentials/index.test.ts"],"names":[],"mappings":"AAAA;;GAEG"}