/* Vuls - Vulnerability Scanner Copyright (C) 2016 Future Architect, Inc. Japan. This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program. If not, see . */ package report import ( "bytes" "encoding/json" "encoding/xml" "fmt" "time" "github.com/aws/aws-sdk-go/aws" "github.com/aws/aws-sdk-go/aws/credentials" "github.com/aws/aws-sdk-go/aws/session" "github.com/aws/aws-sdk-go/service/s3" c "github.com/future-architect/vuls/config" "github.com/future-architect/vuls/models" ) // S3Writer writes results to S3 type S3Writer struct{} func getS3() *s3.S3 { return s3.New(session.New(&aws.Config{ Region: aws.String(c.Conf.AwsRegion), Credentials: credentials.NewSharedCredentials("", c.Conf.AwsProfile), })) } // Write results to S3 // http://docs.aws.amazon.com/sdk-for-go/latest/v1/developerguide/common-examples.title.html func (w S3Writer) Write(rs ...models.ScanResult) (err error) { if len(rs) == 0 { return nil } svc := getS3() if c.Conf.FormatOneLineText { timestr := rs[0].ScannedAt.Format(time.RFC3339) k := fmt.Sprintf(timestr + "/summary.txt") text := formatOneLineSummary(rs...) if err := putObject(svc, k, []byte(text)); err != nil { return err } } for _, r := range rs { key := r.ReportKeyName() if c.Conf.FormatJSON { k := key + ".json" var b []byte if b, err = json.Marshal(r); err != nil { return fmt.Errorf("Failed to Marshal to JSON: %s", err) } if err := putObject(svc, k, b); err != nil { return err } } if c.Conf.FormatShortText { k := key + "_short.txt" text := formatShortPlainText(r) if err := putObject(svc, k, []byte(text)); err != nil { return err } } if c.Conf.FormatFullText { k := key + "_full.txt" text := formatFullPlainText(r) if err := putObject(svc, k, []byte(text)); err != nil { return err } } if c.Conf.FormatXML { k := key + ".xml" var b []byte if b, err = xml.Marshal(r); err != nil { return fmt.Errorf("Failed to Marshal to XML: %s", err) } allBytes := bytes.Join([][]byte{[]byte(xml.Header + vulsOpenTag), b, []byte(vulsCloseTag)}, []byte{}) if err := putObject(svc, k, allBytes); err != nil { return err } } } return nil } // CheckIfBucketExists check the existence of S3 bucket func CheckIfBucketExists() error { svc := getS3() result, err := svc.ListBuckets(&s3.ListBucketsInput{}) if err != nil { return fmt.Errorf( "Failed to list buckets. err: %s, profile: %s, region: %s", err, c.Conf.AwsProfile, c.Conf.AwsRegion) } found := false for _, bucket := range result.Buckets { if *bucket.Name == c.Conf.S3Bucket { found = true break } } if !found { return fmt.Errorf( "Failed to find the buckets. profile: %s, region: %s, bukdet: %s", c.Conf.AwsProfile, c.Conf.AwsRegion, c.Conf.S3Bucket) } return nil } func putObject(svc *s3.S3, k string, b []byte) error { var err error if c.Conf.GZIP { if b, err = gz(b); err != nil { return err } k = k + ".gz" } if _, err := svc.PutObject(&s3.PutObjectInput{ Bucket: &c.Conf.S3Bucket, Key: &k, Body: bytes.NewReader(b), }); err != nil { return fmt.Errorf("Failed to upload data to %s/%s, %s", c.Conf.S3Bucket, k, err) } return nil }