/**
 * Security Scanner Thresholds and Constants
 * Centralized configuration for security scanning parameters
 */
/**
 * Entropy thresholds for detecting high-entropy strings (potential secrets)
 */
export declare const ENTROPY_THRESHOLDS: {
    /** High entropy threshold for generic secrets (bits) */
    readonly HIGH: 4.5;
    /** Medium entropy threshold (bits) */
    readonly MEDIUM: 3.5;
    /** Low entropy threshold (bits) */
    readonly LOW: 3;
};
/**
 * Severity score weights for calculating overall security score
 */
export declare const SEVERITY_WEIGHTS: {
    /** Weight for critical severity findings */
    readonly CRITICAL: 100;
    /** Weight for high severity findings */
    readonly HIGH: 50;
    /** Weight for medium severity findings */
    readonly MEDIUM: 25;
    /** Weight for low severity findings */
    readonly LOW: 10;
    /** Weight for info severity findings */
    readonly INFO: 5;
};
/**
 * Security score bounds
 */
export declare const SECURITY_SCORE: {
    /** Maximum security score (perfect) */
    readonly MAX: 100;
    /** Minimum security score */
    readonly MIN: 0;
};
/**
 * File processing limits
 */
export declare const FILE_LIMITS: {
    /** Maximum line length to scan (prevent ReDoS) */
    readonly MAX_LINE_LENGTH: 1000;
    /** Maximum file size to scan (bytes) */
    readonly MAX_FILE_SIZE: 10000000;
    /** Default context lines to show around findings */
    readonly CONTEXT_LINES: 2;
    /** Maximum number of findings per file before stopping */
    readonly MAX_FINDINGS_PER_FILE: 100;
};
/**
 * Pattern matching limits
 */
export declare const PATTERN_LIMITS: {
    /** Maximum regex match length */
    readonly MAX_MATCH_LENGTH: 1000;
    /** Minimum secret length to consider */
    readonly MIN_SECRET_LENGTH: 8;
    /** Maximum secret preview length in reports */
    readonly SECRET_PREVIEW_LENGTH: 20;
};
/**
 * Dependency scanning configuration
 */
export declare const DEPENDENCY_LIMITS: {
    /** Default CVSS score for unknown vulnerabilities */
    readonly DEFAULT_CVSS: 7.5;
    /** Minimum CVSS score to report */
    readonly MIN_CVSS_THRESHOLD: 4;
};
/**
 * CVSS scores for specific vulnerability types
 */
export declare const CVSS_SCORES: {
    /** SQL Injection vulnerability score */
    readonly SQL_INJECTION: 9.8;
    /** XSS vulnerability score */
    readonly XSS: 7.5;
    /** Insecure deserialization score */
    readonly INSECURE_DESERIALIZATION: 8.1;
};
/**
 * OWASP Top 10 category mappings
 */
export declare const OWASP_CATEGORIES: {
    readonly BROKEN_ACCESS_CONTROL: "A01:2021";
    readonly CRYPTOGRAPHIC_FAILURES: "A02:2021";
    readonly INJECTION: "A03:2021";
    readonly INSECURE_DESIGN: "A04:2021";
    readonly SECURITY_MISCONFIGURATION: "A05:2021";
    readonly VULNERABLE_COMPONENTS: "A06:2021";
    readonly IDENTIFICATION_FAILURES: "A07:2021";
    readonly SOFTWARE_INTEGRITY_FAILURES: "A08:2021";
    readonly LOGGING_FAILURES: "A09:2021";
    readonly SERVER_SIDE_REQUEST_FORGERY: "A10:2021";
};
/**
 * CWE (Common Weakness Enumeration) mappings
 */
export declare const CWE_IDS: {
    readonly HARDCODED_CREDENTIALS: "CWE-798";
    readonly SQL_INJECTION: "CWE-89";
    readonly XSS: "CWE-79";
    readonly PATH_TRAVERSAL: "CWE-22";
    readonly COMMAND_INJECTION: "CWE-78";
    readonly WEAK_CRYPTO: "CWE-327";
    readonly INSECURE_DESERIALIZATION: "CWE-502";
    readonly XXE: "CWE-611";
    readonly SSRF: "CWE-918";
    readonly OPEN_REDIRECT: "CWE-601";
};
//# sourceMappingURL=security-thresholds.d.ts.map