Repository navigation
Changes
7f77277 chore(release): prepare v3.7.2 (#447)
93f274f chore(release): prepare v3.7.2-rc.2 (#446)
5ce1a4d chore(release): prepare v3.7.2-rc.1 (#445)
4c64abe Fix/release review followups (#444)
a47f256 Release/v3.7.2 prep (#443)
3622726 Fix/component selector guards (#439)
2451d44 refactor(hdf-engine): own the StatusCounts roll-up; retire the deref copies (#440)
9cfa353 fix(hdf-cli): reject bad filter values at the boundary and never leave a half-written or colliding output (#433)
e70d47a docs(adr-0008): correct the tooling and contract claims Phase 1b falsified (#441)
551ee6c fix(deps): retarget the shell-quote override past GHSA-pqg4-j6r4-53mv (#442)
9747897 Fix/csv effective impact (#389)
f734e5a Feat/instance identity (#437)
153da46 Fix/threshold spec strictness (#388)
51849cf fix(hdf-converters): correct the shared dual-language status and enrich helpers (#434)
282fe75 fix(deps): drop 20 inert dependency overrides and stop the rest going stale (#431)
7d363d2 docs(adr): HDF data platform — ADR-0008 to ADR-0013 (design review) (#272)
b457256 feat(converters): add hdf-to-html report converter (#419)
adebaf7 feat(cli): add --external-id to hdf label set, remove and show (#420)
a569ec1 docs(hdf-converters): say that union de-duplication is asymmetric by design (#430)
5084241 fix(cli): reject a non-UUID --component-id before writing (#418)
1609b1d fix: make three repo gates actually gate (#432)
aba81ef chore(deps): bump semgrep in /.github/requirements (#426)
40c4ffc chore(deps): bump github.com/aws/aws-sdk-go-v2/service/securityhub (#424)
02fa940 chore(deps): bump github.com/protobom/protobom (#425)
b9a3b04 chore(deps): bump github/codeql-action/upload-sarif (#427)
d30d233 chore(deps): bump the go-dependencies group (#429)
b92c35a feat(hdf-converters): add the shared requirement roll-up helper and a result-count anchor (#423)
2824fdb chore: raise the Node floor from 22 to 24 across the repository (#422)
ff0b988 Feat/hadolint to hdf converter (#404)
559059b Feat/gitlab vulnerabilities fetcher (#376)
68b5c68 build(hdf-schema): drop cpy-cli and nodemon, clearing the braces advisory (#421)
c387ffe Chore/ci gate cli 3.7.1 (#413)
Installation
# TypeScript/Node.js — install the packages you need
npm install @mitre/hdf-converters@next # converters + schema + parsers + utilities + mappings
# (bare `latest` on @mitre/hdf-converters belongs to the heimdall2 v2 line — use @next, @rc, or an exact version)
npm install @mitre/hdf-validators # schema validation
npm install @mitre/hdf-diff # structural diff engine
npm install @mitre/hdf-engine # detection, query, compliance rollups
npm install @mitre/hdf-generators # InSpec profile generation
npm install @mitre/hdf-extension-graph # profile/baseline extension chains
# Go libraries — hdf-converters pulls in schema, parsers, utilities,
# mappings and validators; the rest are independent modules. hdf-cli is
# deliberately absent despite being tagged: its go.mod carries replace
# directives, so `go install` refuses it outright — it ships as a binary,
# covered below.
go get github.com/mitre/hdf-libs/hdf-converters/v3@v3.7.2
go get github.com/mitre/hdf-libs/hdf-diff/go/v3@v3.7.2
go get github.com/mitre/hdf-libs/hdf-engine/go/v3@v3.7.2
go get github.com/mitre/hdf-libs/hdf-extension-graph/go/v3@v3.7.2
go get github.com/mitre/hdf-libs/hdf-generators/go/v3@v3.7.2
# Go CLI — download a binary for your platform from the assets below, then:
chmod +x hdf && sudo mv hdf /usr/local/bin/Schema Files
Bundled JSON schemas are attached as release assets and hosted at:
https://mitre.github.io/hdf-libs/schemas/