150 lines
3.6 KiB
Go
150 lines
3.6 KiB
Go
/* Vuls - Vulnerability Scanner
|
|
Copyright (C) 2016 Future Architect, Inc. Japan.
|
|
|
|
This program is free software: you can redistribute it and/or modify
|
|
it under the terms of the GNU General Public License as published by
|
|
the Free Software Foundation, either version 3 of the License, or
|
|
(at your option) any later version.
|
|
|
|
This program is distributed in the hope that it will be useful,
|
|
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
GNU General Public License for more details.
|
|
|
|
You should have received a copy of the GNU General Public License
|
|
along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
package report
|
|
|
|
import (
|
|
"bytes"
|
|
"encoding/json"
|
|
"encoding/xml"
|
|
"fmt"
|
|
"time"
|
|
|
|
"github.com/Azure/azure-storage-go"
|
|
|
|
c "github.com/future-architect/vuls/config"
|
|
"github.com/future-architect/vuls/models"
|
|
)
|
|
|
|
// AzureBlobWriter writes results to AzureBlob
|
|
type AzureBlobWriter struct{}
|
|
|
|
// Write results to Azure Blob storage
|
|
func (w AzureBlobWriter) Write(rs ...models.ScanResult) (err error) {
|
|
if len(rs) == 0 {
|
|
return nil
|
|
}
|
|
|
|
cli, err := getBlobClient()
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
if c.Conf.FormatOneLineText {
|
|
timestr := rs[0].ScannedAt.Format(time.RFC3339)
|
|
k := fmt.Sprintf(timestr + "/summary.txt")
|
|
text := formatOneLineSummary(rs...)
|
|
b := []byte(text)
|
|
if err := createBlockBlob(cli, k, b); err != nil {
|
|
return err
|
|
}
|
|
}
|
|
|
|
for _, r := range rs {
|
|
key := r.ReportKeyName()
|
|
if c.Conf.FormatJSON {
|
|
k := key + ".json"
|
|
var b []byte
|
|
if b, err = json.Marshal(r); err != nil {
|
|
return fmt.Errorf("Failed to Marshal to JSON: %s", err)
|
|
}
|
|
if err := createBlockBlob(cli, k, b); err != nil {
|
|
return err
|
|
}
|
|
}
|
|
|
|
if c.Conf.FormatShortText {
|
|
k := key + "_short.txt"
|
|
b := []byte(formatShortPlainText(r))
|
|
if err := createBlockBlob(cli, k, b); err != nil {
|
|
return err
|
|
}
|
|
}
|
|
|
|
if c.Conf.FormatFullText {
|
|
k := key + "_full.txt"
|
|
b := []byte(formatFullPlainText(r))
|
|
if err := createBlockBlob(cli, k, b); err != nil {
|
|
return err
|
|
}
|
|
}
|
|
|
|
if c.Conf.FormatXML {
|
|
k := key + ".xml"
|
|
var b []byte
|
|
if b, err = xml.Marshal(r); err != nil {
|
|
return fmt.Errorf("Failed to Marshal to XML: %s", err)
|
|
}
|
|
allBytes := bytes.Join([][]byte{[]byte(xml.Header + vulsOpenTag), b, []byte(vulsCloseTag)}, []byte{})
|
|
if err := createBlockBlob(cli, k, allBytes); err != nil {
|
|
return err
|
|
}
|
|
}
|
|
}
|
|
return
|
|
}
|
|
|
|
// CheckIfAzureContainerExists check the existence of Azure storage container
|
|
func CheckIfAzureContainerExists() error {
|
|
cli, err := getBlobClient()
|
|
if err != nil {
|
|
return err
|
|
}
|
|
r, err := cli.ListContainers(storage.ListContainersParameters{})
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
found := false
|
|
for _, con := range r.Containers {
|
|
if con.Name == c.Conf.AzureContainer {
|
|
found = true
|
|
break
|
|
}
|
|
}
|
|
if !found {
|
|
return fmt.Errorf("Container not found. Container: %s", c.Conf.AzureContainer)
|
|
}
|
|
return nil
|
|
}
|
|
|
|
func getBlobClient() (storage.BlobStorageClient, error) {
|
|
api, err := storage.NewBasicClient(c.Conf.AzureAccount, c.Conf.AzureKey)
|
|
if err != nil {
|
|
return storage.BlobStorageClient{}, err
|
|
}
|
|
return api.GetBlobService(), nil
|
|
}
|
|
|
|
func createBlockBlob(cli storage.BlobStorageClient, k string, b []byte) error {
|
|
var err error
|
|
if c.Conf.GZIP {
|
|
if b, err = gz(b); err != nil {
|
|
return err
|
|
}
|
|
k = k + ".gz"
|
|
}
|
|
|
|
ref := cli.GetContainerReference(c.Conf.AzureContainer)
|
|
blob := ref.GetBlobReference(k)
|
|
if err := blob.CreateBlockBlobFromReader(bytes.NewReader(b), nil); err != nil {
|
|
return fmt.Errorf("Failed to upload data to %s/%s, %s",
|
|
c.Conf.AzureContainer, k, err)
|
|
}
|
|
return nil
|
|
}
|