core/parsers/tool.trivy.parser.ts

core/parsers/tool.trivy.parser.ts is a file in GovLab Quality. 21 lines of code and 2 definitions.

import { numberField, recordAt, recordsAt, stringField } from "#core/selectors/record.selector";
import type { Finding } from "#types/finding.types";
import { POSITION } from "#configuration/constants/tool.constants";
import { advisoryFinding } from "#core/factories/finding.factory";
import { jsonRecordsAt } from "#core/parsers/record.parser";

const TOOL = "trivy";

export const parseTrivyOutput = function parseTrivyOutput(stdout: string, ecosystem: string): Finding[] {
    return jsonRecordsAt(stdout || "{}", "Results").flatMap((result) =>
        recordsAt(result, "Misconfigurations").map((misconfig) =>
            advisoryFinding({
                column: POSITION,
                ecosystem,
                file: stringField(result, "Target"),
                line: numberField(recordAt(misconfig, "CauseMetadata"), "StartLine", POSITION),
                message: stringField(misconfig, "Title") || stringField(misconfig, "Message"),
                ruleId: stringField(misconfig, "ID", TOOL),
                tool: TOOL,
            }),
        ),
    );
};