import {z} from 'zod' export type GetApiIndexOracleCpuCsafArgs = {page?: number | undefined, limit?: number | undefined, cursor?: string | undefined, start_cursor?: 'true' | undefined, order?: ('asc' | 'desc') | undefined, sort?: string | undefined, cve?: string | undefined, alias?: string | undefined, iava?: string | undefined, jvndb?: string | undefined, ilvn?: string | undefined, threat_actor?: string | undefined, mitre_id?: string | undefined, misp_id?: string | undefined, ransomware?: string | undefined, botnet?: string | undefined, published?: string | undefined, date?: string | undefined, updatedAtStartDate?: string | undefined, updatedAtEndDate?: string | undefined, lastModStartDate?: string | undefined, lastModEndDate?: string | undefined, pubStartDate?: string | undefined, pubEndDate?: string | undefined}; export type GetApiIndexOracleCpuCsafOptions = {baseUrl: string, Bearer?: string | undefined, fetch?: typeof fetch | undefined}; export const paginateMatch = z.object({field: z.string().optional(), value: z.string().optional()}); export const paginateParam = z.object({filtering: z.string().optional(), format: z.string().optional(), name: z.string().optional()}); export const paginatePagination = z.object({cursor: z.string().optional(), first_item: z.number().int().optional(), index: z.string().optional(), last_item: z.number().int().optional(), limit: z.number().int().optional(), matches: z.array(paginateMatch).optional(), max_pages: z.number().int().optional(), next_cursor: z.string().optional(), opensearch_query: z.object({}).optional(), order: z.string().optional(), page: z.number().int().optional(), pages: z.array(z.string()).optional(), parameters: z.array(paginateParam).optional(), show_pages: z.boolean().optional(), show_query: z.boolean().optional(), sort: z.string().optional(), timestamp: z.string().optional(), total_documents: z.number().int().optional(), total_pages: z.number().int().optional(), truncated: z.boolean().optional(), warnings: z.array(z.string()).optional()}); export const advisoryCSAFDistribution = z.object({}); export const advisoryCSAFNote = z.object({audience: z.string().optional(), category: z.string().optional(), text: z.string().optional(), title: z.string().optional()}); export const advisoryPublisher = z.object({category: z.string().optional(), contact_details: z.string().optional(), issuing_authority: z.string().optional(), name: z.string().optional(), namespace: z.string().optional()}); export const advisoryCSAFReference = z.object({category: z.string().optional(), summary: z.string().optional(), url: z.string().optional()}); export const advisoryRevisionHistory = z.object({date: z.string().optional(), number: z.string().optional(), summary: z.string().optional()}); export const advisoryTracking = z.object({current_release_date: z.string().optional(), id: z.string().optional(), initial_release_date: z.string().optional(), revision_history: z.array(advisoryRevisionHistory).optional(), status: z.string().optional(), version: z.string().optional()}); export const advisoryDocumentMetadata = z.object({category: z.string().optional(), csaf_version: z.string().optional(), distribution: advisoryCSAFDistribution.optional(), lang: z.string().optional(), notes: z.array(advisoryCSAFNote).optional(), publisher: advisoryPublisher.optional(), references: z.array(advisoryCSAFReference).optional(), title: z.string().optional(), tracking: advisoryTracking.optional()}); export const advisoryIdentificationHelper = z.record(z.string(), z.unknown()); export const advisoryProduct = z.object({name: z.string().optional(), product_id: z.string().optional(), product_identification_helper: advisoryIdentificationHelper.optional()}); export const advisoryCSAFRelationship = z.object({category: z.string().optional(), full_product_name: advisoryProduct.optional(), product_reference: z.string().optional(), relates_to_product_reference: z.string().optional()}); export const advisoryProductBranch: z.ZodType = z.object({branches: z.array(z.lazy(() => advisoryProductBranch)).optional(), category: z.string().optional(), name: z.string().optional(), product: advisoryProduct.optional(), relationships: z.array(advisoryCSAFRelationship).optional()}); export const advisoryCwe = z.object({id: z.string().optional(), name: z.string().optional()}); export const advisoryFlag = z.object({date: z.string().optional(), group_ids: z.array(z.string()).optional(), label: z.string().optional(), product_ids: z.array(z.string()).optional()}); export const advisoryTrackingID = z.object({system_name: z.string().optional(), text: z.string().optional()}); export const advisoryRestartData = z.object({category: z.string().optional(), details: z.string().optional()}); export const advisoryRemediationData = z.object({category: z.string().optional(), date: z.string().optional(), details: z.string().optional(), entitlements: z.array(z.string()).optional(), group_ids: z.array(z.string()).optional(), product_ids: z.array(z.string()).optional(), restart_required: advisoryRestartData.optional()}); export const advisoryCVSSV2 = z.object({accessComplexity: z.string().optional(), accessVector: z.string().optional(), authentication: z.string().optional(), availabilityImpact: z.string().optional(), availabilityRequirement: z.string().optional(), baseScore: z.number().optional(), collateralDamagePotential: z.string().optional(), confidentialityImpact: z.string().optional(), confidentialityRequirement: z.string().optional(), environmentalScore: z.number().optional(), exploitability: z.string().optional(), integrityImpact: z.string().optional(), integrityRequirement: z.string().optional(), remediationLevel: z.string().optional(), reportConfidence: z.string().optional(), targetDistribution: z.string().optional(), temporalScore: z.number().optional()}); export const advisoryCVSSV3 = z.object({attackComplexity: z.string().optional(), attackVector: z.string().optional(), availabilityImpact: z.string().optional(), baseScore: z.number().optional(), baseSeverity: z.string().optional(), confidentialityImpact: z.string().optional(), integrityImpact: z.string().optional(), privilegesRequired: z.string().optional(), scope: z.string().optional(), userInteraction: z.string().optional(), vectorString: z.string().optional(), version: z.string().optional()}); export const advisoryCSAFScore = z.object({cvss_v2: advisoryCVSSV2.optional(), cvss_v3: advisoryCVSSV3.optional(), products: z.array(z.string()).optional()}); export const advisoryThreatData = z.object({category: z.string().optional(), details: z.string().optional(), product_ids: z.array(z.string()).optional()}); export const advisoryCSAFVulnerability = z.object({cve: z.string().optional(), cwe: advisoryCwe.optional(), flags: z.array(advisoryFlag).optional(), ids: z.array(advisoryTrackingID).optional(), notes: z.array(advisoryCSAFNote).optional(), product_status: z.record(z.string(), z.array(z.string())).optional(), references: z.array(advisoryCSAFReference).optional(), release_date: z.string().optional(), remediations: z.array(advisoryRemediationData).optional(), scores: z.array(advisoryCSAFScore).optional(), threats: z.array(advisoryThreatData).optional()}); export const advisoryCSAF = z.object({document: advisoryDocumentMetadata.optional(), notes: z.array(advisoryCSAFNote).optional(), product_tree: advisoryProductBranch.optional(), vulnerabilities: z.array(advisoryCSAFVulnerability).optional()}); export const advisoryOracleCPUCSAF = z.object({csaf: advisoryCSAF.optional(), cve: z.array(z.string()).optional(), date_added: z.string().optional(), url: z.string().optional()}); export const renderResponseWithMetadataArrayAdvisoryOracleCPUCSAFPaginatePagination = z.object({_benchmark: z.number().optional(), _meta: paginatePagination.optional(), data: z.array(advisoryOracleCPUCSAF).optional()}); export const validateResponse = async ( schema: { readonly '~standard': { readonly validate: (value: unknown) => ({ readonly value: Output; readonly issues?: undefined } | { readonly issues: ReadonlyArray<{ readonly message: string; readonly path?: ReadonlyArray | undefined }> }) | Promise<{ readonly value: Output; readonly issues?: undefined } | { readonly issues: ReadonlyArray<{ readonly message: string; readonly path?: ReadonlyArray | undefined }> }> } }, value: unknown ): Promise => { const result = await schema['~standard'].validate(value) if (result.issues !== undefined) { const detail = result.issues .map(({ message, path }) => path?.length ? `${path.map((segment) => String(typeof segment === 'object' ? segment.key : segment)).join('.')}: ${message}` : message ) .join('; ') throw new Error(`Response does not match the schema: ${detail}`, { cause: { issues: result.issues } }) } return result.value }; /** * Return vulnerability data stored in index "oracle-cpu-csaf" * * GET /index/oracle-cpu-csaf */ export const getApiIndexOracleCpuCsaf = async (args: GetApiIndexOracleCpuCsafArgs, options: GetApiIndexOracleCpuCsafOptions) => { const {baseUrl, fetch: fetchFn = fetch, Bearer} = options ?? {} const query = new URLSearchParams() const headers = new Headers() headers.set('accept', "application/json") if (args.page != null) query.append("page", String(args.page)) if (args.limit != null) query.append("limit", String(args.limit)) if (args.cursor != null) query.append("cursor", String(args.cursor)) if (args.start_cursor != null) query.append("start_cursor", String(args.start_cursor)) if (args.order != null) query.append("order", String(args.order)) if (args.sort != null) query.append("sort", String(args.sort)) if (args.cve != null) query.append("cve", String(args.cve)) if (args.alias != null) query.append("alias", String(args.alias)) if (args.iava != null) query.append("iava", String(args.iava)) if (args.jvndb != null) query.append("jvndb", String(args.jvndb)) if (args.ilvn != null) query.append("ilvn", String(args.ilvn)) if (args.threat_actor != null) query.append("threat_actor", String(args.threat_actor)) if (args.mitre_id != null) query.append("mitre_id", String(args.mitre_id)) if (args.misp_id != null) query.append("misp_id", String(args.misp_id)) if (args.ransomware != null) query.append("ransomware", String(args.ransomware)) if (args.botnet != null) query.append("botnet", String(args.botnet)) if (args.published != null) query.append("published", String(args.published)) if (args.date != null) query.append("date", String(args.date)) if (args.updatedAtStartDate != null) query.append("updatedAtStartDate", String(args.updatedAtStartDate)) if (args.updatedAtEndDate != null) query.append("updatedAtEndDate", String(args.updatedAtEndDate)) if (args.lastModStartDate != null) query.append("lastModStartDate", String(args.lastModStartDate)) if (args.lastModEndDate != null) query.append("lastModEndDate", String(args.lastModEndDate)) if (args.pubStartDate != null) query.append("pubStartDate", String(args.pubStartDate)) if (args.pubEndDate != null) query.append("pubEndDate", String(args.pubEndDate)) if (Bearer !== undefined) headers.set("Authorization", Bearer) const url = `${baseUrl.replace(/\/+$/, '')}/index/oracle-cpu-csaf${query.size > 0 ? `?${query}` : ''}` const res = await fetchFn(url, {method: "GET", headers}) if (!res.ok) throw new Error(`Request failed with status ${res.status}`, {cause: {status: res.status, body: await res.text()}}) return validateResponse(renderResponseWithMetadataArrayAdvisoryOracleCPUCSAFPaginatePagination, await res.json()) };