verification-layer 0.24.1 → 0.24.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/config.d.ts.map +1 -1
- package/dist/config.js +27 -0
- package/dist/config.js.map +1 -1
- package/dist/scanners/encryption/index.d.ts.map +1 -1
- package/dist/scanners/encryption/index.js +21 -0
- package/dist/scanners/encryption/index.js.map +1 -1
- package/dist/scanners/hipaa2026/index.js +2 -2
- package/package.json +1 -1
package/dist/config.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C,QAAA,MAAM,cAAc,EAAE,
|
|
1
|
+
{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C,QAAA,MAAM,cAAc,EAAE,YAiErB,CAAC;AAEF,wBAAsB,UAAU,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAmB/F;AAED,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,GAAG,OAAO,CAU7E;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,GAAG,OAAO,CAGxE;AAED,OAAO,EAAE,cAAc,EAAE,CAAC"}
|
package/dist/config.js
CHANGED
|
@@ -30,6 +30,33 @@ const DEFAULT_CONFIG = {
|
|
|
30
30
|
'schema.org',
|
|
31
31
|
'ogp.me',
|
|
32
32
|
'rdfs.org',
|
|
33
|
+
// Healthcare standards
|
|
34
|
+
'hl7.org',
|
|
35
|
+
'www.hl7.org',
|
|
36
|
+
'fhir.org',
|
|
37
|
+
'terminology.hl7.org',
|
|
38
|
+
'loinc.org',
|
|
39
|
+
'snomed.info',
|
|
40
|
+
'icd.who.int',
|
|
41
|
+
'unitsofmeasure.org',
|
|
42
|
+
'nucc.org',
|
|
43
|
+
'ada.org',
|
|
44
|
+
'x12.org',
|
|
45
|
+
// Tooling / package registries
|
|
46
|
+
'opensource.org',
|
|
47
|
+
'creativecommons.org',
|
|
48
|
+
'spdx.org',
|
|
49
|
+
'json-schema.org',
|
|
50
|
+
'yaml.org',
|
|
51
|
+
'xml.org',
|
|
52
|
+
'maven.apache.org',
|
|
53
|
+
'www.apache.org',
|
|
54
|
+
'registry.npmjs.org',
|
|
55
|
+
'pypi.org',
|
|
56
|
+
'rubygems.org',
|
|
57
|
+
'crates.io',
|
|
58
|
+
'pkg.go.dev',
|
|
59
|
+
'mvnrepository.com',
|
|
33
60
|
// Documentation
|
|
34
61
|
'example.com',
|
|
35
62
|
'example.org',
|
package/dist/config.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,IAAI,MAAM,MAAM,CAAC;AAGxB,MAAM,cAAc,GAAiB;IACnC,OAAO,EAAE,EAAE;IACX,WAAW,EAAE,EAAE;IACf,eAAe,EAAE;QACf,iBAAiB;QACjB,YAAY;QACZ,QAAQ;QACR,WAAW;QACX,UAAU;QACV,cAAc;QACd,OAAO;QACP,sBAAsB;QACtB,WAAW;QACX,cAAc;QACd,kBAAkB;QAClB,gBAAgB;QAChB,sBAAsB;QACtB,qBAAqB;QACrB,aAAa;QACb,mBAAmB;QACnB,gBAAgB;QAChB,kBAAkB;QAClB,yBAAyB;QACzB,4BAA4B;QAC5B,iBAAiB;QACjB,qBAAqB;QACrB,mBAAmB;QACnB,YAAY;QACZ,QAAQ;QACR,UAAU;QACV,gBAAgB;QAChB,aAAa;QACb,aAAa;QACb,WAAW;QACX,WAAW;KACZ;IACD,YAAY,EAAE,CAAC;IACf,UAAU,EAAE,SAAS;CACtB,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,UAAkB,EAAE,UAAmB;IACtE,MAAM,UAAU,GAAG,UAAU,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;IAEzE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACpD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAA0B,CAAC;QAEhE,OAAO;YACL,GAAG,cAAc;YACjB,GAAG,UAAU;YACb,oCAAoC;YACpC,OAAO,EAAE,CAAC,GAAG,CAAC,cAAc,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,UAAU,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;YAC3E,WAAW,EAAE,CAAC,GAAG,CAAC,cAAc,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,UAAU,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;YACvF,eAAe,EAAE,CAAC,GAAG,CAAC,cAAc,CAAC,eAAe,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,UAAU,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC;SACpG,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,qCAAqC;QACrC,OAAO,cAAc,CAAC;IACxB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,QAAgB,EAAE,MAAoB;IAClE,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC;IAC7C,OAAO,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;QAChC,uBAAuB;QACvB,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;YACvD,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9B,CAAC;QACD,OAAO,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAW,EAAE,MAAoB;IAC7D,MAAM,WAAW,GAAG,MAAM,CAAC,eAAe,IAAI,EAAE,CAAC;IACjD,OAAO,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,OAAO,EAAE,cAAc,EAAE,CAAC"}
|
|
1
|
+
{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,IAAI,MAAM,MAAM,CAAC;AAGxB,MAAM,cAAc,GAAiB;IACnC,OAAO,EAAE,EAAE;IACX,WAAW,EAAE,EAAE;IACf,eAAe,EAAE;QACf,iBAAiB;QACjB,YAAY;QACZ,QAAQ;QACR,WAAW;QACX,UAAU;QACV,cAAc;QACd,OAAO;QACP,sBAAsB;QACtB,WAAW;QACX,cAAc;QACd,kBAAkB;QAClB,gBAAgB;QAChB,sBAAsB;QACtB,qBAAqB;QACrB,aAAa;QACb,mBAAmB;QACnB,gBAAgB;QAChB,kBAAkB;QAClB,yBAAyB;QACzB,4BAA4B;QAC5B,iBAAiB;QACjB,qBAAqB;QACrB,mBAAmB;QACnB,YAAY;QACZ,QAAQ;QACR,UAAU;QACV,uBAAuB;QACvB,SAAS;QACT,aAAa;QACb,UAAU;QACV,qBAAqB;QACrB,WAAW;QACX,aAAa;QACb,aAAa;QACb,oBAAoB;QACpB,UAAU;QACV,SAAS;QACT,SAAS;QACT,+BAA+B;QAC/B,gBAAgB;QAChB,qBAAqB;QACrB,UAAU;QACV,iBAAiB;QACjB,UAAU;QACV,SAAS;QACT,kBAAkB;QAClB,gBAAgB;QAChB,oBAAoB;QACpB,UAAU;QACV,cAAc;QACd,WAAW;QACX,YAAY;QACZ,mBAAmB;QACnB,gBAAgB;QAChB,aAAa;QACb,aAAa;QACb,WAAW;QACX,WAAW;KACZ;IACD,YAAY,EAAE,CAAC;IACf,UAAU,EAAE,SAAS;CACtB,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,UAAkB,EAAE,UAAmB;IACtE,MAAM,UAAU,GAAG,UAAU,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;IAEzE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACpD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAA0B,CAAC;QAEhE,OAAO;YACL,GAAG,cAAc;YACjB,GAAG,UAAU;YACb,oCAAoC;YACpC,OAAO,EAAE,CAAC,GAAG,CAAC,cAAc,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,UAAU,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;YAC3E,WAAW,EAAE,CAAC,GAAG,CAAC,cAAc,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,UAAU,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;YACvF,eAAe,EAAE,CAAC,GAAG,CAAC,cAAc,CAAC,eAAe,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,UAAU,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC;SACpG,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,qCAAqC;QACrC,OAAO,cAAc,CAAC;IACxB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,QAAgB,EAAE,MAAoB;IAClE,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC;IAC7C,OAAO,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;QAChC,uBAAuB;QACvB,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;YACvD,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9B,CAAC;QACD,OAAO,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAW,EAAE,MAAoB;IAC7D,MAAM,WAAW,GAAG,MAAM,CAAC,eAAe,IAAI,EAAE,CAAC;IACjD,OAAO,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,OAAO,EAAE,cAAc,EAAE,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/scanners/encryption/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAiC,MAAM,gBAAgB,CAAC;
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/scanners/encryption/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAiC,MAAM,gBAAgB,CAAC;AA8C7E,eAAO,MAAM,iBAAiB,EAAE,OA2E/B,CAAC"}
|
|
@@ -22,6 +22,19 @@ const MISSING_ENCRYPTION_PATTERNS = [
|
|
|
22
22
|
{ regex: /s3.*upload.*backup(?!.*encrypt|.*sse|.*kms)/i, issue: 'S3 backup without server-side encryption', severity: 'high' },
|
|
23
23
|
{ regex: /backup.*storage(?!.*encrypt)|storage.*backup(?!.*encrypt)/i, issue: 'Backup storage without encryption specified', severity: 'medium' },
|
|
24
24
|
];
|
|
25
|
+
/** Detect test, fixture, example, doc, migration, and seed files */
|
|
26
|
+
function isReducedConfidenceFile(filePath) {
|
|
27
|
+
return /\.(test|spec)\.[^.]+$|__tests__|__mocks__|\/fixtures\/|\/examples\/|\/docs\/|\/migrations?\/|\/seeds?\//i.test(filePath);
|
|
28
|
+
}
|
|
29
|
+
/** Detect comment lines and non-functional references (docs, RFCs, specs) */
|
|
30
|
+
function isCommentOrNonFunctional(line) {
|
|
31
|
+
const trimmed = line.trimStart();
|
|
32
|
+
if (/^(\/\/|#|\*|\/\*)/.test(trimmed))
|
|
33
|
+
return true;
|
|
34
|
+
if (/\b(see|docs|reference|spec|rfc|example|documentation)\b/i.test(trimmed))
|
|
35
|
+
return true;
|
|
36
|
+
return false;
|
|
37
|
+
}
|
|
25
38
|
export const encryptionScanner = {
|
|
26
39
|
name: 'Encryption Scanner',
|
|
27
40
|
category: 'encryption',
|
|
@@ -53,12 +66,20 @@ export const encryptionScanner = {
|
|
|
53
66
|
});
|
|
54
67
|
}
|
|
55
68
|
}
|
|
69
|
+
const isTestOrDocFile = isReducedConfidenceFile(filePath);
|
|
56
70
|
for (const pattern of MISSING_ENCRYPTION_PATTERNS) {
|
|
57
71
|
if (pattern.regex.test(line)) {
|
|
58
72
|
// Check if this is a safe HTTP URL (CDN, namespace, etc.)
|
|
59
73
|
if (pattern.checkSafe && isSafeHttpUrl(line, config)) {
|
|
60
74
|
continue;
|
|
61
75
|
}
|
|
76
|
+
// Skip test/doc files and comment lines for safe-checkable patterns
|
|
77
|
+
if (pattern.checkSafe && isTestOrDocFile) {
|
|
78
|
+
continue;
|
|
79
|
+
}
|
|
80
|
+
if (pattern.checkSafe && isCommentOrNonFunctional(line)) {
|
|
81
|
+
continue;
|
|
82
|
+
}
|
|
62
83
|
findings.push({
|
|
63
84
|
id: `enc-missing-${lineNum}`,
|
|
64
85
|
category: 'encryption',
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/scanners/encryption/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD,MAAM,oBAAoB,GAAG;IAC3B,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAe,EAAE;IAC/E,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,oBAAoB,EAAE,QAAQ,EAAE,QAAiB,EAAE;IACnF,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,gBAAgB,EAAE,QAAQ,EAAE,UAAmB,EAAE;IAC7E,EAAE,KAAK,EAAE,oBAAoB,EAAE,KAAK,EAAE,gBAAgB,EAAE,QAAQ,EAAE,UAAmB,EAAE;IACvF,EAAE,KAAK,EAAE,oBAAoB,EAAE,KAAK,EAAE,0BAA0B,EAAE,QAAQ,EAAE,MAAe,EAAE;IAC7F,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,qBAAqB,EAAE,QAAQ,EAAE,MAAe,EAAE;CAC9E,CAAC;AAEF,MAAM,2BAA2B,GAM5B;IACH,EAAE,KAAK,EAAE,sCAAsC,EAAE,KAAK,EAAE,sBAAsB,EAAE,QAAQ,EAAE,MAAe,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE;IACjJ,EAAE,KAAK,EAAE,qBAAqB,EAAE,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,UAAmB,EAAE;IACtF,EAAE,KAAK,EAAE,6BAA6B,EAAE,KAAK,EAAE,2BAA2B,EAAE,QAAQ,EAAE,UAAmB,EAAE;IAC3G,EAAE,KAAK,EAAE,iCAAiC,EAAE,KAAK,EAAE,qCAAqC,EAAE,QAAQ,EAAE,UAAmB,EAAE;IACzH,8BAA8B;IAC9B,EAAE,KAAK,EAAE,gEAAgE,EAAE,KAAK,EAAE,4BAA4B,EAAE,QAAQ,EAAE,UAAmB,EAAE,OAAO,EAAE,oBAA+B,EAAE;IACzL,EAAE,KAAK,EAAE,oDAAoD,EAAE,KAAK,EAAE,6BAA6B,EAAE,QAAQ,EAAE,MAAe,EAAE;IAChI,EAAE,KAAK,EAAE,gEAAgE,EAAE,KAAK,EAAE,gCAAgC,EAAE,QAAQ,EAAE,MAAe,EAAE,OAAO,EAAE,oBAA+B,EAAE;IACzL,EAAE,KAAK,EAAE,wDAAwD,EAAE,KAAK,EAAE,+BAA+B,EAAE,QAAQ,EAAE,UAAmB,EAAE,OAAO,EAAE,oBAA+B,EAAE;IACpL,EAAE,KAAK,EAAE,8CAA8C,EAAE,KAAK,EAAE,0CAA0C,EAAE,QAAQ,EAAE,MAAe,EAAE;IACvI,EAAE,KAAK,EAAE,4DAA4D,EAAE,KAAK,EAAE,6CAA6C,EAAE,QAAQ,EAAE,QAAiB,EAAE;CAC3J,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAY;IACxC,IAAI,EAAE,oBAAoB;IAC1B,QAAQ,EAAE,YAAY;IAEtB,KAAK,CAAC,IAAI,CAAC,KAAe,EAAE,OAAoB;QAC9C,MAAM,QAAQ,GAAc,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,cAAc,CAAC;QAChD,MAAM,WAAW,GAAG,MAAM,CAAC,YAAY,IAAI,CAAC,CAAC;QAC7C,MAAM,cAAc,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACtI,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAEjF,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;gBAClD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAElC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC;oBACxD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;oBAE5B,KAAK,MAAM,OAAO,IAAI,oBAAoB,EAAE,CAAC;wBAC3C,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;4BAC7B,QAAQ,CAAC,IAAI,CAAC;gCACZ,EAAE,EAAE,YAAY,OAAO,EAAE;gCACzB,QAAQ,EAAE,YAAY;gCACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gCAC1B,KAAK,EAAE,sBAAsB,OAAO,CAAC,KAAK,EAAE;gCAC5C,WAAW,EAAE,GAAG,OAAO,CAAC,KAAK,sCAAsC;gCACnE,IAAI,EAAE,QAAQ;gCACd,IAAI,EAAE,OAAO,GAAG,CAAC;gCACjB,cAAc,EAAE,qEAAqE;gCACrF,cAAc,EAAE,wCAAwC;gCACxD,OAAO,EAAE,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC;6BACtD,CAAC,CAAC;wBACL,CAAC;oBACH,CAAC;oBAED,KAAK,MAAM,OAAO,IAAI,2BAA2B,EAAE,CAAC;wBAClD,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;4BAC7B,0DAA0D;4BAC1D,IAAI,OAAO,CAAC,SAAS,IAAI,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;gCACrD,SAAS;4BACX,CAAC;4BAED,QAAQ,CAAC,IAAI,CAAC;gCACZ,EAAE,EAAE,eAAe,OAAO,EAAE;gCAC5B,QAAQ,EAAE,YAAY;gCACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gCAC1B,KAAK,EAAE,qBAAqB,OAAO,CAAC,KAAK,EAAE;gCAC3C,WAAW,EAAE,GAAG,OAAO,CAAC,KAAK,sCAAsC;gCACnE,IAAI,EAAE,QAAQ;gCACd,IAAI,EAAE,OAAO,GAAG,CAAC;gCACjB,cAAc,EAAE,4DAA4D;gCAC5E,cAAc,EAAE,gBAAgB;gCAChC,OAAO,EAAE,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC;gCACrD,OAAO,EAAE,OAAO,CAAC,OAAO;6BACzB,CAAC,CAAC;wBACL,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,gCAAgC;YAClC,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAC"}
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/scanners/encryption/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD,MAAM,oBAAoB,GAAG;IAC3B,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAe,EAAE;IAC/E,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,oBAAoB,EAAE,QAAQ,EAAE,QAAiB,EAAE;IACnF,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,gBAAgB,EAAE,QAAQ,EAAE,UAAmB,EAAE;IAC7E,EAAE,KAAK,EAAE,oBAAoB,EAAE,KAAK,EAAE,gBAAgB,EAAE,QAAQ,EAAE,UAAmB,EAAE;IACvF,EAAE,KAAK,EAAE,oBAAoB,EAAE,KAAK,EAAE,0BAA0B,EAAE,QAAQ,EAAE,MAAe,EAAE;IAC7F,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,qBAAqB,EAAE,QAAQ,EAAE,MAAe,EAAE;CAC9E,CAAC;AAEF,MAAM,2BAA2B,GAM5B;IACH,EAAE,KAAK,EAAE,sCAAsC,EAAE,KAAK,EAAE,sBAAsB,EAAE,QAAQ,EAAE,MAAe,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE;IACjJ,EAAE,KAAK,EAAE,qBAAqB,EAAE,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,UAAmB,EAAE;IACtF,EAAE,KAAK,EAAE,6BAA6B,EAAE,KAAK,EAAE,2BAA2B,EAAE,QAAQ,EAAE,UAAmB,EAAE;IAC3G,EAAE,KAAK,EAAE,iCAAiC,EAAE,KAAK,EAAE,qCAAqC,EAAE,QAAQ,EAAE,UAAmB,EAAE;IACzH,8BAA8B;IAC9B,EAAE,KAAK,EAAE,gEAAgE,EAAE,KAAK,EAAE,4BAA4B,EAAE,QAAQ,EAAE,UAAmB,EAAE,OAAO,EAAE,oBAA+B,EAAE;IACzL,EAAE,KAAK,EAAE,oDAAoD,EAAE,KAAK,EAAE,6BAA6B,EAAE,QAAQ,EAAE,MAAe,EAAE;IAChI,EAAE,KAAK,EAAE,gEAAgE,EAAE,KAAK,EAAE,gCAAgC,EAAE,QAAQ,EAAE,MAAe,EAAE,OAAO,EAAE,oBAA+B,EAAE;IACzL,EAAE,KAAK,EAAE,wDAAwD,EAAE,KAAK,EAAE,+BAA+B,EAAE,QAAQ,EAAE,UAAmB,EAAE,OAAO,EAAE,oBAA+B,EAAE;IACpL,EAAE,KAAK,EAAE,8CAA8C,EAAE,KAAK,EAAE,0CAA0C,EAAE,QAAQ,EAAE,MAAe,EAAE;IACvI,EAAE,KAAK,EAAE,4DAA4D,EAAE,KAAK,EAAE,6CAA6C,EAAE,QAAQ,EAAE,QAAiB,EAAE;CAC3J,CAAC;AAEF,oEAAoE;AACpE,SAAS,uBAAuB,CAAC,QAAgB;IAC/C,OAAO,0GAA0G,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AACnI,CAAC;AAED,6EAA6E;AAC7E,SAAS,wBAAwB,CAAC,IAAY;IAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;IACjC,IAAI,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACnD,IAAI,0DAA0D,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1F,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAY;IACxC,IAAI,EAAE,oBAAoB;IAC1B,QAAQ,EAAE,YAAY;IAEtB,KAAK,CAAC,IAAI,CAAC,KAAe,EAAE,OAAoB;QAC9C,MAAM,QAAQ,GAAc,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,cAAc,CAAC;QAChD,MAAM,WAAW,GAAG,MAAM,CAAC,YAAY,IAAI,CAAC,CAAC;QAC7C,MAAM,cAAc,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACtI,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAEjF,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;gBAClD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAElC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC;oBACxD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;oBAE5B,KAAK,MAAM,OAAO,IAAI,oBAAoB,EAAE,CAAC;wBAC3C,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;4BAC7B,QAAQ,CAAC,IAAI,CAAC;gCACZ,EAAE,EAAE,YAAY,OAAO,EAAE;gCACzB,QAAQ,EAAE,YAAY;gCACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gCAC1B,KAAK,EAAE,sBAAsB,OAAO,CAAC,KAAK,EAAE;gCAC5C,WAAW,EAAE,GAAG,OAAO,CAAC,KAAK,sCAAsC;gCACnE,IAAI,EAAE,QAAQ;gCACd,IAAI,EAAE,OAAO,GAAG,CAAC;gCACjB,cAAc,EAAE,qEAAqE;gCACrF,cAAc,EAAE,wCAAwC;gCACxD,OAAO,EAAE,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC;6BACtD,CAAC,CAAC;wBACL,CAAC;oBACH,CAAC;oBAED,MAAM,eAAe,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;oBAE1D,KAAK,MAAM,OAAO,IAAI,2BAA2B,EAAE,CAAC;wBAClD,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;4BAC7B,0DAA0D;4BAC1D,IAAI,OAAO,CAAC,SAAS,IAAI,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;gCACrD,SAAS;4BACX,CAAC;4BACD,oEAAoE;4BACpE,IAAI,OAAO,CAAC,SAAS,IAAI,eAAe,EAAE,CAAC;gCACzC,SAAS;4BACX,CAAC;4BACD,IAAI,OAAO,CAAC,SAAS,IAAI,wBAAwB,CAAC,IAAI,CAAC,EAAE,CAAC;gCACxD,SAAS;4BACX,CAAC;4BAED,QAAQ,CAAC,IAAI,CAAC;gCACZ,EAAE,EAAE,eAAe,OAAO,EAAE;gCAC5B,QAAQ,EAAE,YAAY;gCACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gCAC1B,KAAK,EAAE,qBAAqB,OAAO,CAAC,KAAK,EAAE;gCAC3C,WAAW,EAAE,GAAG,OAAO,CAAC,KAAK,sCAAsC;gCACnE,IAAI,EAAE,QAAQ;gCACd,IAAI,EAAE,OAAO,GAAG,CAAC;gCACjB,cAAc,EAAE,4DAA4D;gCAC5E,cAAc,EAAE,gBAAgB;gCAChC,OAAO,EAAE,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC;gCACrD,OAAO,EAAE,OAAO,CAAC,OAAO;6BACzB,CAAC,CAAC;wBACL,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,gCAAgC;YAClC,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAC"}
|
|
@@ -314,7 +314,7 @@ export const hipaa2026Scanner = {
|
|
|
314
314
|
findings.push({
|
|
315
315
|
id: 'HIPAA-ASSET-001',
|
|
316
316
|
category: 'data-retention',
|
|
317
|
-
severity: '
|
|
317
|
+
severity: 'info',
|
|
318
318
|
title: 'ePHI Technology Asset Inventory Generated',
|
|
319
319
|
description: `Found ${assetInventory.length} assets processing ePHI`,
|
|
320
320
|
file: 'ASSET-INVENTORY',
|
|
@@ -329,7 +329,7 @@ export const hipaa2026Scanner = {
|
|
|
329
329
|
findings.push({
|
|
330
330
|
id: 'HIPAA-FLOW-001',
|
|
331
331
|
category: 'data-retention',
|
|
332
|
-
severity: '
|
|
332
|
+
severity: 'info',
|
|
333
333
|
title: 'ePHI Flow Map Generated',
|
|
334
334
|
description: `Identified ${phiFlowMap.length} PHI data flow points`,
|
|
335
335
|
file: 'PHI-FLOW-MAP',
|