mirror of
https://github.com/splunk/security_content
synced 2026-06-08 17:32:49 +00:00
pyth0n1c
84 lines
3.5 KiB
Bash
Executable File
84 lines
3.5 KiB
Bash
Executable File
#!/bin/bash
|
|
# simple script to run an appinspect API check
|
|
EXPECTED_ARGS=4
|
|
E_BADARGS=65
|
|
|
|
if [ $# -lt 4 ]
|
|
then
|
|
echo "Usage: `basename $0` <app_path> <package_name> <username> <password>"
|
|
echo "Example `basename $0` ~/ DA-ESS-ContentUpdate-latest.tar.gz doomguy R1p&T3ar"
|
|
exit $E_BADARGS
|
|
fi
|
|
|
|
if [ $# -gt $EXPECTED_ARGS ]
|
|
then
|
|
echo "Too many arguments"
|
|
exit $E_BADARGS
|
|
fi
|
|
|
|
APP_PATH=$1
|
|
PACKAGE_NAME=$2
|
|
USERNAME=$3
|
|
PASSWORD=$4
|
|
|
|
#PACKAGE_PATH="/home/circleci/"$PACKAGE_NAME
|
|
PACKAGE_PATH="build/"$PACKAGE_NAME
|
|
|
|
cd $APP_PATH
|
|
|
|
# check if report exists
|
|
if [ -d report ]
|
|
then
|
|
echo "report/ Directory exists"
|
|
else
|
|
mkdir report
|
|
fi
|
|
|
|
# get a JWT token
|
|
AUTH_TOKEN=$(echo -n "$USERNAME:$PASSWORD" | base64)
|
|
APPINSPECT_TOKEN=$(curl -s --location --request GET 'https://api.splunk.com/2.0/rest/login/splunk' --header "Authorization: Basic $AUTH_TOKEN" | jq -r '.data | .token')
|
|
sleep 1
|
|
# submit a inspection job EXPECTS app on same directory
|
|
#REQUEST_ID=$(curl -s --location --request POST 'https://appinspect.splunk.com/v1/app/validate' --header "Authorization: bearer $APPINSPECT_TOKEN" --form 'app_package=@"/home/circleci/DA-ESS-ContentUpdate-latest.tar.gz"' | jq -r '.request_id')
|
|
echo "The PACKAGE_PATH is "$PACKAGE_PATH
|
|
ls -lah $PACKAGE_PATH
|
|
|
|
REQUEST_ID=$(curl -s --location --request POST 'https://appinspect.splunk.com/v1/app/validate' --header "Authorization: bearer $APPINSPECT_TOKEN" --form 'included_tags="cloud"' --form 'app_package=@'$PACKAGE_PATH | jq -r '.request_id')
|
|
echo "app inspect request: $REQUEST_ID"
|
|
sleep 5
|
|
STATUS=$(curl -s --location --request GET https://appinspect.splunk.com/v1/app/validate/status/$REQUEST_ID --header "Authorization: bearer $APPINSPECT_TOKEN" | jq -r '.status')
|
|
while :
|
|
do
|
|
STATUS=$(curl -s --location --request GET https://appinspect.splunk.com/v1/app/validate/status/$REQUEST_ID --header "Authorization: bearer $APPINSPECT_TOKEN" | jq -r '.status')
|
|
if [ "$STATUS" == "PROCESSING" ] || [ "$STATUS" == "PREPARING" ]
|
|
then
|
|
echo "appinspect PROCESSING request: $REQUEST_ID"
|
|
elif [ "$STATUS" == "SUCCESS" ]
|
|
# REPORT FINISHED CHECK RESULTS
|
|
then
|
|
echo "appinspect completed inspection"
|
|
curl -s --location --request GET https://appinspect.splunk.com/v1/app/report/$REQUEST_ID --header "Authorization: bearer $APPINSPECT_TOKEN" --header 'Content-Type: text/html' -o report/appinspect_report_$PACKAGE_NAME.html
|
|
FAILS=$(curl -s --location --request GET https://appinspect.splunk.com/v1/app/report/$REQUEST_ID --header "Authorization: bearer $APPINSPECT_TOKEN" --header 'Content-Type: application/json' | jq -r '.summary | .failure')
|
|
ERRORS=$(curl -s --location --request GET https://appinspect.splunk.com/v1/app/report/$REQUEST_ID --header "Authorization: bearer $APPINSPECT_TOKEN" --header 'Content-Type: application/json' | jq -r '.summary | .error')
|
|
if [ $FAILS -gt 0 -o $ERRORS -gt 0 ]
|
|
then
|
|
echo "ERROR appinspect had $FAILS failures and or $ERRORS errors, see summary report under job artifacts for details"
|
|
#print out the report so that we know what went wrong
|
|
cat report/appinspect_report_$PACKAGE_NAME.html
|
|
exit 1
|
|
else
|
|
echo "appinspect passed successfully, see summary report under job artifacts for details"
|
|
exit 0
|
|
fi
|
|
else
|
|
echo "there was an error with app inspect report please see below:"
|
|
curl -s --location --request GET https://appinspect.splunk.com/v1/app/report/$REQUEST_ID --header "Authorization: bearer $APPINSPECT_TOKEN" --header 'Content-Type: application/json' | jq -r
|
|
exit 1
|
|
fi
|
|
sleep 60
|
|
done
|
|
exit 0
|
|
|
|
|
|
|