registry / @itentialopensource/adapter-gogetssl / 1.0.5

@itentialopensource/adapter-gogetssl@1.0.5

This adapter integrates with system described as: gogetsslApi(v1)Documentation.

Static Scan Results

scanned 10d ago · by rust-scanner

Static analysis flagged 26 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 20 file(s), 388 KB of source, external domains: adapters.itential.io, registry.npmjs.org

Source & flagged code

19 flagged

package.jsonView file

Lines 1-30json

2 "name": "@itentialopensource/adapter-gogetssl",

3 "version": "1.0.5",

4 "description": "This adapter integrates with system described as: gogetsslApi(v1)Documentation.",

5 "main": "adapter.js",

6 "wizardVersion": "3.12.1",

7 "engineVersion": "1.82.5",

8 "adapterType": "http",

9 "scripts": {

10 "preinstall": "node utils/setup.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L10

11 "deinstall": "node utils/removeHooks.js",

12 "lint": "node --max_old_space_size=4096 ./node_modules/eslint/bin/eslint.js . --ext .json --ext .js",

13 "lint:errors": "node --max_old_space_size=4096 ./node_modules/eslint/bin/eslint.js . --ext .json --ext .js --quiet",

14 "test:baseunit": "mocha test/unit/adapterBaseTestUnit.js --LOG=error",

15 "test:unit": "mocha test/unit/adapterTestUnit.js --LOG=error",

16 "test:integration": "mocha test/integration/adapterTestIntegration.js --LOG=error",

17 "test": "npm run test:baseunit && npm run test:unit && npm run test:integration",

18 "adapter:checkMigrate": "node utils/checkMigrate.js",

19 "adapter:findPath": "node utils/findPath.js",

20 "adapter:migrate": "node utils/modify.js -m",

21 "adapter:update": "node utils/modify.js -u",

22 "adapter:revert": "node utils/modify.js -r",

23 "troubleshoot": "node utils/tbScript.js troubleshoot",

24 "healthcheck": "node utils/tbScript.js healthcheck",

25 "basicget": "node utils/tbScript.js basicget",

26 "connectivity": "node utils/tbScript.js connectivity"

27 },

28 "keywords": [

29 "Itential",

30 "Itential Platform",

test/integration/adapterTestIntegration.jsView file

Lines 23-63javascript

23// stub and attemptTimeout are used throughout the code so set them here

24const isRapidFail = false;

25const isSaveMockData = false;

27// read in the properties from the sampleProperties files

28let adaptdir = __dirname;

29if (adaptdir.

adapter.jsView file

Lines 1-29javascript

1/* @copyright Itential, LLC 2019 (pre-modifications) */

3/* eslint import/no-dynamic-require: warn */

4/* eslint object-curly-newline: warn */

6// Set globals

7/* global log */

9/* Required libraries. */

10const path = require('path');

utils/pre-commit.shView file

•path = utils/pre-commit.sh kind = build_helper sizeBytes = 824 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

utils/pre-commit.shView on unpkg

test/unit/adapterTestUnit.jsView file

Lines 23-63javascript

23const ajv = new Ajv({ strictSchema: false, allErrors: true, allowUnionTypes: true });

24const anything = td.matchers.anything();

25const isRapidFail = false;

test/unit/adapterBaseTestUnit.jsView file

Lines 10-50javascript

10const mocha = require('mocha');

11const winston = require('winston');

12const { expect } = require('chai');

13const { use }

utils/testRunner.jsView file

Lines 1-39javascript

1#!/usr/bin/env node

2/* @copyright Itential, LLC 2019 */

4const execute = require('child_process').exec;

5const fs = require('fs-extra');

6const rl = require(

pronghorn.jsonView file

3781patternName = private_key_rsa severity = critical line = 3781 matchedText = "csr_key...--",

Critical

Secret Pattern

RSA private key in pronghorn.json

pronghorn.jsonView on unpkg · L3781

report/auto-adapter-openapi.jsonView file

1266patternName = private_key_rsa severity = critical line = 1266 matchedText = "csr_key...--",

Critical

Secret Pattern

RSA private key in report/auto-adapter-openapi.json

report/auto-adapter-openapi.jsonView on unpkg · L1266

report/adapter-openapi.yamlView file

4443patternName = private_key_rsa severity = critical line = 4443 matchedText = -----BEG...----

Critical

Secret Pattern

RSA private key in report/adapter-openapi.yaml

report/adapter-openapi.yamlView on unpkg · L4443

4535patternName = private_key_rsa severity = critical line = 4535 matchedText = -----BEG...----

Critical

Secret Pattern

RSA private key in report/adapter-openapi.yaml

report/adapter-openapi.yamlView on unpkg · L4535

16569patternName = private_key_rsa severity = critical line = 16569 matchedText = -----BEG...----

Critical

Secret Pattern

RSA private key in report/adapter-openapi.yaml

report/adapter-openapi.yamlView on unpkg · L16569

report/adapter-openapi.jsonView file

3322patternName = private_key_rsa severity = critical line = 3322 matchedText = "csr_key...--",

Critical

Secret Pattern

RSA private key in report/adapter-openapi.json

report/adapter-openapi.jsonView on unpkg · L3322

15615patternName = private_key_rsa severity = critical line = 15615 matchedText = "csr_key...--",

Critical

Secret Pattern

RSA private key in report/adapter-openapi.json

report/adapter-openapi.jsonView on unpkg · L15615

entities/CSR/mockdatafiles/generateCSR-default.jsonView file

3patternName = private_key_rsa severity = critical line = 3 matchedText = "csr_key...--",

Critical

Secret Pattern

RSA private key in entities/CSR/mockdatafiles/generateCSR-default.json

entities/CSR/mockdatafiles/generateCSR-default.jsonView on unpkg · L3

Source & flagged code

19 flagged · loading source

package.jsonView file

•scripts.preinstall = node utils/setup.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

test/integration/adapterTestIntegration.jsView file

668patternName = private_key_rsa severity = critical line = 668 matchedText = assert.e...ey);

Critical

Critical Secret

Package contains a critical-looking secret pattern.

test/integration/adapterTestIntegration.jsView on unpkg · L668

668patternName = private_key_rsa severity = critical line = 668 matchedText = assert.e...ey);

Critical

Secret Pattern

RSA private key in test/integration/adapterTestIntegration.js

test/integration/adapterTestIntegration.jsView on unpkg · L668

43patternName = generic_password severity = medium line = 43 matchedText = // samPr...rd';

Medium

Secret Pattern

Hardcoded password in test/integration/adapterTestIntegration.js

test/integration/adapterTestIntegration.jsView on unpkg · L43

adapter.jsView file

9/* Required libraries. */ L10: const path = require('path'); L11:

Medium

Dynamic Require

Package source references dynamic require/import behavior.

adapter.jsView on unpkg · L9

utils/pre-commit.shView file

•path = utils/pre-commit.sh kind = build_helper sizeBytes = 824 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

utils/pre-commit.shView on unpkg

test/unit/adapterTestUnit.jsView file

43patternName = generic_password severity = medium line = 43 matchedText = // samPr...rd';

Medium

Secret Pattern

Hardcoded password in test/unit/adapterTestUnit.js

test/unit/adapterTestUnit.jsView on unpkg · L43

test/unit/adapterBaseTestUnit.jsView file

30patternName = generic_password severity = medium line = 30 matchedText = const pa...rd';

Medium

Secret Pattern

Hardcoded password in test/unit/adapterBaseTestUnit.js

test/unit/adapterBaseTestUnit.jsView on unpkg · L30

utils/testRunner.jsView file

19patternName = generic_password severity = medium line = 19 matchedText = let pass...rd';

Medium

Secret Pattern

Hardcoded password in utils/testRunner.js

utils/testRunner.jsView on unpkg · L19

29patternName = generic_password severity = medium line = 29 matchedText = const dp...rd';

Medium

Secret Pattern

Hardcoded password in utils/testRunner.js

utils/testRunner.jsView on unpkg · L29

89patternName = generic_password severity = medium line = 89 matchedText = intTest ...;`);

Medium

Secret Pattern

Hardcoded password in utils/testRunner.js

utils/testRunner.jsView on unpkg · L89

pronghorn.jsonView file

3781patternName = private_key_rsa severity = critical line = 3781 matchedText = "csr_key...--",

Critical

Secret Pattern

RSA private key in pronghorn.json

pronghorn.jsonView on unpkg · L3781

report/auto-adapter-openapi.jsonView file

1266patternName = private_key_rsa severity = critical line = 1266 matchedText = "csr_key...--",

Critical

Secret Pattern

RSA private key in report/auto-adapter-openapi.json

report/auto-adapter-openapi.jsonView on unpkg · L1266

report/adapter-openapi.yamlView file

4443patternName = private_key_rsa severity = critical line = 4443 matchedText = -----BEG...----

Critical

Secret Pattern

RSA private key in report/adapter-openapi.yaml

report/adapter-openapi.yamlView on unpkg · L4443

4535patternName = private_key_rsa severity = critical line = 4535 matchedText = -----BEG...----

Critical

Secret Pattern

RSA private key in report/adapter-openapi.yaml

report/adapter-openapi.yamlView on unpkg · L4535

16569patternName = private_key_rsa severity = critical line = 16569 matchedText = -----BEG...----

Critical

Secret Pattern

RSA private key in report/adapter-openapi.yaml

report/adapter-openapi.yamlView on unpkg · L16569

report/adapter-openapi.jsonView file

3322patternName = private_key_rsa severity = critical line = 3322 matchedText = "csr_key...--",

Critical

Secret Pattern

RSA private key in report/adapter-openapi.json

report/adapter-openapi.jsonView on unpkg · L3322

15615patternName = private_key_rsa severity = critical line = 15615 matchedText = "csr_key...--",

Critical

Secret Pattern

RSA private key in report/adapter-openapi.json

report/adapter-openapi.jsonView on unpkg · L15615

entities/CSR/mockdatafiles/generateCSR-default.jsonView file

3patternName = private_key_rsa severity = critical line = 3 matchedText = "csr_key...--",

Critical

Secret Pattern

RSA private key in entities/CSR/mockdatafiles/generateCSR-default.json

entities/CSR/mockdatafiles/generateCSR-default.jsonView on unpkg · L3

Findings

10 Critical1 High11 Medium4 Low

CriticalCritical Secrettest/integration/adapterTestIntegration.js

CriticalSecret Patterntest/integration/adapterTestIntegration.js

CriticalSecret Patternpronghorn.json

CriticalSecret Patternreport/auto-adapter-openapi.json

CriticalSecret Patternreport/adapter-openapi.yaml

CriticalSecret Patternreport/adapter-openapi.json

CriticalSecret Patternentities/CSR/mockdatafiles/generateCSR-default.json

HighInstall Time Lifecycle Scriptspackage.json

MediumDynamic Requireadapter.js

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperutils/pre-commit.sh

MediumStructural Risk Force Deep Review

MediumSecret Patterntest/unit/adapterTestUnit.js

MediumSecret Patterntest/unit/adapterBaseTestUnit.js

MediumSecret Patterntest/integration/adapterTestIntegration.js

MediumSecret Patternutils/testRunner.js

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

19 flagged

package.jsonView file

Lines 1-30json

2 "name": "@itentialopensource/adapter-gogetssl",

3 "version": "1.0.5",

4 "description": "This adapter integrates with system described as: gogetsslApi(v1)Documentation.",

5 "main": "adapter.js",

6 "wizardVersion": "3.12.1",

7 "engineVersion": "1.82.5",

8 "adapterType": "http",

9 "scripts": {

10 "preinstall": "node utils/setup.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L10

11 "deinstall": "node utils/removeHooks.js",

12 "lint": "node --max_old_space_size=4096 ./node_modules/eslint/bin/eslint.js . --ext .json --ext .js",

13 "lint:errors": "node --max_old_space_size=4096 ./node_modules/eslint/bin/eslint.js . --ext .json --ext .js --quiet",

14 "test:baseunit": "mocha test/unit/adapterBaseTestUnit.js --LOG=error",

15 "test:unit": "mocha test/unit/adapterTestUnit.js --LOG=error",

16 "test:integration": "mocha test/integration/adapterTestIntegration.js --LOG=error",

17 "test": "npm run test:baseunit && npm run test:unit && npm run test:integration",

18 "adapter:checkMigrate": "node utils/checkMigrate.js",

19 "adapter:findPath": "node utils/findPath.js",

20 "adapter:migrate": "node utils/modify.js -m",

21 "adapter:update": "node utils/modify.js -u",

22 "adapter:revert": "node utils/modify.js -r",

23 "troubleshoot": "node utils/tbScript.js troubleshoot",

24 "healthcheck": "node utils/tbScript.js healthcheck",

25 "basicget": "node utils/tbScript.js basicget",

26 "connectivity": "node utils/tbScript.js connectivity"

27 },

28 "keywords": [

29 "Itential",

30 "Itential Platform",

test/integration/adapterTestIntegration.jsView file

Lines 23-63javascript

23// stub and attemptTimeout are used throughout the code so set them here

24const isRapidFail = false;

25const isSaveMockData = false;

27// read in the properties from the sampleProperties files

28let adaptdir = __dirname;

29if (adaptdir.

adapter.jsView file

Lines 1-29javascript

1/* @copyright Itential, LLC 2019 (pre-modifications) */

3/* eslint import/no-dynamic-require: warn */

4/* eslint object-curly-newline: warn */

6// Set globals

7/* global log */

9/* Required libraries. */

10const path = require('path');

utils/pre-commit.shView file

•path = utils/pre-commit.sh kind = build_helper sizeBytes = 824 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

utils/pre-commit.shView on unpkg

test/unit/adapterTestUnit.jsView file

Lines 23-63javascript

23const ajv = new Ajv({ strictSchema: false, allErrors: true, allowUnionTypes: true });

24const anything = td.matchers.anything();

25const isRapidFail = false;

test/unit/adapterBaseTestUnit.jsView file

Lines 10-50javascript

10const mocha = require('mocha');

11const winston = require('winston');

12const { expect } = require('chai');

13const { use }

utils/testRunner.jsView file

Lines 1-39javascript

1#!/usr/bin/env node

2/* @copyright Itential, LLC 2019 */

4const execute = require('child_process').exec;

5const fs = require('fs-extra');

6const rl = require(

pronghorn.jsonView file

3781patternName = private_key_rsa severity = critical line = 3781 matchedText = "csr_key...--",

Critical

Secret Pattern

RSA private key in pronghorn.json

pronghorn.jsonView on unpkg · L3781

report/auto-adapter-openapi.jsonView file

1266patternName = private_key_rsa severity = critical line = 1266 matchedText = "csr_key...--",

Critical

Secret Pattern

RSA private key in report/auto-adapter-openapi.json

report/auto-adapter-openapi.jsonView on unpkg · L1266

report/adapter-openapi.yamlView file

4443patternName = private_key_rsa severity = critical line = 4443 matchedText = -----BEG...----

Critical

Secret Pattern

RSA private key in report/adapter-openapi.yaml

report/adapter-openapi.yamlView on unpkg · L4443

4535patternName = private_key_rsa severity = critical line = 4535 matchedText = -----BEG...----

Critical

Secret Pattern

RSA private key in report/adapter-openapi.yaml

report/adapter-openapi.yamlView on unpkg · L4535

16569patternName = private_key_rsa severity = critical line = 16569 matchedText = -----BEG...----

Critical

Secret Pattern

RSA private key in report/adapter-openapi.yaml

report/adapter-openapi.yamlView on unpkg · L16569

report/adapter-openapi.jsonView file

3322patternName = private_key_rsa severity = critical line = 3322 matchedText = "csr_key...--",

Critical

Secret Pattern

RSA private key in report/adapter-openapi.json

report/adapter-openapi.jsonView on unpkg · L3322

15615patternName = private_key_rsa severity = critical line = 15615 matchedText = "csr_key...--",

Critical

Secret Pattern

RSA private key in report/adapter-openapi.json

report/adapter-openapi.jsonView on unpkg · L15615

entities/CSR/mockdatafiles/generateCSR-default.jsonView file

3patternName = private_key_rsa severity = critical line = 3 matchedText = "csr_key...--",

Critical

Secret Pattern

RSA private key in entities/CSR/mockdatafiles/generateCSR-default.json

entities/CSR/mockdatafiles/generateCSR-default.jsonView on unpkg · L3

Lines 648-688javascript

648 done(error);

649 }

650 }).timeout(attemptTimeout);

651 });

652

653 const cSRCsrCommonname = 'fakedata';

654 const cSRCsrOrganization = 'fakedata';

655 const cSRCsrDepartment = 'fakedata';

656 const cSRCsrCity = 'fakedata';

657 const cSRCsrState = 'fakedata';

658 const cSRCsrCountry = 'fakedata';

659 const cSRCsrEmail = 'fakedata';

660 describe('#generateCSR - errors', () => {

661 it('should work if integrated or standalone with mockdata', (done) => {

662 try {

663 a.generateCSR(cSRCsrCommonname, cSRCsrOrganization, cSRCsrDepartment, cSRCsrCity, cSRCsrState, cSRCsrCountry, cSRCsrEmail, (data, error) => {

664 try {

665 if (stub) {

666 runCommonAsserts(data, error);

667 assert.equal('-----BEGIN CERTIFICATE REQUEST-----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\n9M2Sw ...

668 assert.equal('-----BEGIN PRIVATE KEY-----\nMIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQDQ7mDYtNwdJNYj\nwqao07/hvGV2ZRhb5F3Kq+RY1v8OvQfmmWK2hNiqUh5LIkW/ssaGcz2tqCv5IaHr\nBgKe3E5/ZVS7FyxmSWZdv2ISsgavycZ+Y9M1dJgPIGT563kZ5LGEQ9SlbOwy+KrG\nD/2MCD2dxq29olGJqrUUa/erLKnJfpidSVqaoXLUO4dXKRG55M0lYt+yWoaI6683\nj8r3EmIczIT2XytvyxpavD8W5tgcyUn/xempRpMh97NseOQEVM2Pwh6jk5kMH7VD\nOQT0zZLAx6Zs5bSYMGKJQLy1TAp2H3DovyIHtp18sg2kQO6mLPYTGR1gDhc+sSPS\nGiYjo1dbAgMBAAECggEBAKX11KQO9hGIYzlAs1XD7dWH6yiioTjNK9uDsv0Gus+g\nRBhemtTUra6NUFbqQHFHtv6xp7q7rUJV/uJLgeVipk/309hRTglqIJAzJ9ol473b\nD3ryHKGHngnV9 ...

Critical

Critical Secret

Package contains a critical-looking secret pattern.

test/integration/adapterTestIntegration.jsView on unpkg · L668

Critical

Secret Pattern

RSA private key in test/integration/adapterTestIntegration.js

test/integration/adapterTestIntegration.jsView on unpkg · L668

669 assert.equal(true, data.response.success);

670 } else {

671 runCommonAsserts(data, error);

672 }

673 saveMockData('CSR', 'generateCSR', 'default', data);

674 done();

675 } catch (err) {

676 log.error(`Test Failure: ${err}`);

677 done(err);

678 }

679 });

680 } catch (error) {

681 log.error(`Adapter Exception: ${error}`);

682 done(error);

683 }

684 }).timeout(attemptTimeout);

685 });

686

687 describe('#validateCSR - errors', () => {

688 it('should work if integrated but since no mockdata should error when run standalone', (done) => {

Long lines were clipped for display.