* refactor(report): LocalFileWriter * refactor -format-json * refacotr: -format-one-email * refactor: -format-csv * refactor: -gzip * refactor: -format-full-text * refactor: -format-one-line-text * refactor: -format-list * refacotr: remove -to-* from config * refactor: IgnoreGitHubDismissed * refactor: GitHub * refactor: IgnoreUnsocred * refactor: diff * refacotr: lang * refacotr: cacheDBPath * refactor: Remove config references * refactor: ScanResults * refacotr: constant pkg * chore: comment * refactor: scanner * refactor: scanner * refactor: serverapi.go * refactor: serverapi * refactor: change pkg structure * refactor: serverapi.go * chore: remove emtpy file * fix(scan): remove -ssh-native-insecure option * fix(scan): remove the deprecated option `keypassword`
127 lines
2.8 KiB
Go
127 lines
2.8 KiB
Go
package reporter
|
|
|
|
import (
|
|
"bytes"
|
|
"encoding/json"
|
|
"fmt"
|
|
"time"
|
|
|
|
storage "github.com/Azure/azure-sdk-for-go/storage"
|
|
"golang.org/x/xerrors"
|
|
|
|
c "github.com/future-architect/vuls/config"
|
|
"github.com/future-architect/vuls/models"
|
|
)
|
|
|
|
// AzureBlobWriter writes results to AzureBlob
|
|
type AzureBlobWriter struct {
|
|
FormatJSON bool
|
|
FormatFullText bool
|
|
FormatOneLineText bool
|
|
FormatList bool
|
|
Gzip bool
|
|
}
|
|
|
|
// Write results to Azure Blob storage
|
|
func (w AzureBlobWriter) Write(rs ...models.ScanResult) (err error) {
|
|
if len(rs) == 0 {
|
|
return nil
|
|
}
|
|
|
|
cli, err := getBlobClient()
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
if w.FormatOneLineText {
|
|
timestr := rs[0].ScannedAt.Format(time.RFC3339)
|
|
k := fmt.Sprintf(timestr + "/summary.txt")
|
|
text := formatOneLineSummary(rs...)
|
|
b := []byte(text)
|
|
if err := createBlockBlob(cli, k, b, w.Gzip); err != nil {
|
|
return err
|
|
}
|
|
}
|
|
|
|
for _, r := range rs {
|
|
key := r.ReportKeyName()
|
|
if w.FormatJSON {
|
|
k := key + ".json"
|
|
var b []byte
|
|
if b, err = json.Marshal(r); err != nil {
|
|
return xerrors.Errorf("Failed to Marshal to JSON: %w", err)
|
|
}
|
|
if err := createBlockBlob(cli, k, b, w.Gzip); err != nil {
|
|
return err
|
|
}
|
|
}
|
|
|
|
if w.FormatList {
|
|
k := key + "_short.txt"
|
|
b := []byte(formatList(r))
|
|
if err := createBlockBlob(cli, k, b, w.Gzip); err != nil {
|
|
return err
|
|
}
|
|
}
|
|
|
|
if w.FormatFullText {
|
|
k := key + "_full.txt"
|
|
b := []byte(formatFullPlainText(r))
|
|
if err := createBlockBlob(cli, k, b, w.Gzip); err != nil {
|
|
return err
|
|
}
|
|
}
|
|
}
|
|
return
|
|
}
|
|
|
|
// CheckIfAzureContainerExists check the existence of Azure storage container
|
|
func CheckIfAzureContainerExists() error {
|
|
cli, err := getBlobClient()
|
|
if err != nil {
|
|
return err
|
|
}
|
|
r, err := cli.ListContainers(storage.ListContainersParameters{})
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
found := false
|
|
for _, con := range r.Containers {
|
|
if con.Name == c.Conf.Azure.ContainerName {
|
|
found = true
|
|
break
|
|
}
|
|
}
|
|
if !found {
|
|
return xerrors.Errorf("Container not found. Container: %s", c.Conf.Azure.ContainerName)
|
|
}
|
|
return nil
|
|
}
|
|
|
|
func getBlobClient() (storage.BlobStorageClient, error) {
|
|
api, err := storage.NewBasicClient(c.Conf.Azure.AccountName, c.Conf.Azure.AccountKey)
|
|
if err != nil {
|
|
return storage.BlobStorageClient{}, err
|
|
}
|
|
return api.GetBlobService(), nil
|
|
}
|
|
|
|
func createBlockBlob(cli storage.BlobStorageClient, k string, b []byte, gzip bool) error {
|
|
var err error
|
|
if gzip {
|
|
if b, err = gz(b); err != nil {
|
|
return err
|
|
}
|
|
k += ".gz"
|
|
}
|
|
|
|
ref := cli.GetContainerReference(c.Conf.Azure.ContainerName)
|
|
blob := ref.GetBlobReference(k)
|
|
if err := blob.CreateBlockBlobFromReader(bytes.NewReader(b), nil); err != nil {
|
|
return xerrors.Errorf("Failed to upload data to %s/%s, err: %w",
|
|
c.Conf.Azure.ContainerName, k, err)
|
|
}
|
|
return nil
|
|
}
|