import {z} from 'zod' export type GetApiSastResultsArgs = {scanId: number, offset: number, limit: number, LCID?: number | undefined, severity?: number | undefined}; export type GetApiSastResultsOptions = {baseUrl?: string | undefined, Bearer?: string | undefined, fetch?: typeof fetch | undefined}; export const checkmarxDataTypesQueryInfo = z.object({queryVersionId: z.number().int().optional(), queryId: z.number().int().optional(), name: z.string().optional(), severity: z.number().int().optional(), categories: z.string().optional(), cwe: z.number().int().optional()}); export const checkmarxDataTypesSnippetInfo = z.object({fileName: z.string().optional(), line: z.number().int().optional(), code: z.string().optional()}); export const checkmarxDataTypesNodeInfo = z.object({nodeId: z.number().int().optional(), fullName: z.string().optional(), shortName: z.string().optional(), fileName: z.string().optional(), line: z.number().int().optional(), column: z.number().int().optional(), length: z.number().int().optional(), remarks: z.string().optional(), methodLine: z.number().int().optional()}); export const checkmarxDataTypesResultInfo = z.object({index: z.number().int().optional(), pathId: z.number().int().optional(), similarityHash: z.number().int().optional(), date: z.string().optional(), detectionDate: z.string().optional(), confidenceLevel: z.number().int().optional(), cxRank: z.number().optional(), bflNodeShortName: z.string().optional(), bflNodeId: z.number().int().optional(), severity: z.number().int().optional(), state: z.number().int().optional(), status: z.number().int().optional(), assignedToUserId: z.number().int().optional(), assignedTo: z.string().optional(), comment: z.string().optional(), deepLink: z.string().optional(), query: checkmarxDataTypesQueryInfo.optional(), sourceSnippet: checkmarxDataTypesSnippetInfo.optional(), sinkSnippet: checkmarxDataTypesSnippetInfo.optional(), nodes: z.array(checkmarxDataTypesNodeInfo).optional(), lcid: z.number().int().optional(), cxDescriptionID: z.number().int().optional(), resultDescription: z.string().optional(), bestFixLocation: z.string().optional(), risk: z.string().optional(), cause: z.string().optional(), generalRecommendations: z.string().optional()}); export const checkmarxDataTypesScanInfo = z.object({scanId: z.number().int().optional(), offset: z.number().int().optional(), limit: z.number().int().optional(), totalCount: z.number().int().optional(), results: z.array(checkmarxDataTypesResultInfo).optional()}); export const validateResponse = async ( schema: { readonly '~standard': { readonly validate: (value: unknown) => ({ readonly value: Output; readonly issues?: undefined } | { readonly issues: ReadonlyArray<{ readonly message: string; readonly path?: ReadonlyArray | undefined }> }) | Promise<{ readonly value: Output; readonly issues?: undefined } | { readonly issues: ReadonlyArray<{ readonly message: string; readonly path?: ReadonlyArray | undefined }> }> } }, value: unknown ): Promise => { const result = await schema['~standard'].validate(value) if (result.issues !== undefined) { const detail = result.issues .map(({ message, path }) => path?.length ? `${path.map((segment) => String(typeof segment === 'object' ? segment.key : segment)).join('.')}: ${message}` : message ) .join('; ') throw new Error(`Response does not match the schema: ${detail}`, { cause: { issues: result.issues } }) } return result.value }; /** * Gets scan results in paged mode. * * GET /sast/results */ export const getApiSastResults = async (args: GetApiSastResultsArgs, options?: GetApiSastResultsOptions) => { const {baseUrl = "https://desktop-rmvpboc/cxrestapi/help", fetch: fetchFn = fetch, Bearer} = options ?? {} const query = new URLSearchParams() const headers = new Headers() headers.set('accept', "application/json;v=5.2") if (args.scanId != null) query.append("scanId", String(args.scanId)) if (args.offset != null) query.append("offset", String(args.offset)) if (args.limit != null) query.append("limit", String(args.limit)) if (args.LCID != null) query.append("LCID", String(args.LCID)) if (args.severity != null) query.append("severity", String(args.severity)) if (Bearer !== undefined) headers.set('authorization', `Bearer ${Bearer}`) const url = `${baseUrl.replace(/\/+$/, '')}/sast/results${query.size > 0 ? `?${query}` : ''}` const res = await fetchFn(url, {method: "GET", headers}) if (!res.ok) throw new Error(`Request failed with status ${res.status}`, {cause: {status: res.status, body: await res.text()}}) return validateResponse(checkmarxDataTypesScanInfo, await res.json()) };