inspec-reporter-json-hdf 1.0.1 → 1.1.0.beta1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a6c20b0715afb937bf44526ca1d45e7644c594fd8fe2749baaca84da1efbbcee
-  data.tar.gz: a1cacadb0ec44285a0f506e876efe175dbe8e074608aaa66296485354a35be61
+  metadata.gz: 375c586fb5019a374276cbd7e78369e8297b75db012ade31ca84dbb607eae39c
+  data.tar.gz: 5b63861c6c0304e4800f1e98b81c5e4b66c85f3ba0c7fcfdc42732c4c21f322b
 SHA512:
-  metadata.gz: 615fbd5bda9c8018b2e01dc6fe7801289b05cc6eb7b0077234f518c9e8f23a52aa738d153dc3bf4d74ecf74a232fd1bf5a6cc692c7dc004513a5ce4ba0f28faa
-  data.tar.gz: 1bdf1a54c466a3d150522aa5546729e5d0616d68fef645b57e3a01b0ee4f73d5f5e4bf0b5c9d229f7bddb00f256a6dcfe4c8088eb9ebc61a820312701d84206f
+  metadata.gz: 37a2979dba233369c491e25404b21a5b1bcc8eae57c772f1125be4f4ac500fe43201334364b9f8f9b0501d1d590a13711e45c840635b8fe9ddba859e5d122675
+  data.tar.gz: 16b920add79bf353a0a4113f3af93cf701c449b5cdeabc35e0883e2ae14854c3c3eab83e0a0d82852b84a1742816061f53d3bb90df7a34c9b87ae25744e69910

data/inspec-reporter-json-hdf.gemspec

@@ -18,6 +18,8 @@ Gem::Specification.new do |spec|
   spec.required_ruby_version = '~> 2.5'
 
   spec.add_runtime_dependency 'git-lite-version-bump', '~> 0.17', '>= 0.17.3'
+  spec.add_runtime_dependency 'roo', '~> 2.8.3'
+
   spec.add_development_dependency 'bundler'
   spec.add_development_dependency 'bundler-audit'
   spec.add_development_dependency 'codeclimate-test-reporter'

data/lib/inspec-reporter-json-hdf/reporter.rb

@@ -1,6 +1,7 @@
 
 require 'inspec/plugin/v2'
 require 'json'
+require 'roo'
 
 VALID_FREQUENCY = %w[annually semiannually quarterly monthly every2weeks weekly every3days daily].freeze
 
@@ -123,7 +124,44 @@ module InspecPlugins::HdfReporter
 
     def collect_attestations
       plugin_config = Inspec::Config.cached.fetch_plugin_config('inspec-reporter-json-hdf')
-      attestations = plugin_config['attestations'] || []
+      attestations = []
+      if plugin_config['include-attestations-file']
+        if File.exist?(plugin_config['include-attestations-file']['path'])
+          if plugin_config['include-attestations-file']['type'].eql?('csv')
+            sheet = Roo::Spreadsheet.open(plugin_config['include-attestations-file']['path'], extension: :csv).sheet(0)
+
+            attestations = sheet.parse(control_id: "Control_ID",
+                                       explanation: "Explanation",
+                                       frequency: "Frequency",
+                                       status: "Status",
+                                       updated: "Updated",
+                                       updated_by: "Updated_By",
+                                       clean:true
+                                       )
+          elsif plugin_config['include-attestations-file']['type'].eql?('xlsx')
+            sheet = Roo::Spreadsheet.open(plugin_config['include-attestations-file']['path'], extension: :xlsx).sheet(0)
+
+            attestations = sheet.parse(control_id: "Control_ID",
+                                       explanation: "Explanation",
+                                       frequency: "Frequency",
+                                       status: "Status",
+                                       updated: "Updated",
+                                       updated_by: "Updated_By",
+                                       clean:true
+                                       )
+            attestations.map do |h|
+              h[:updated] = h[:updated].to_s
+            end
+          else
+            puts 'Warning: Invalid `include-attestations-file` type provided. Supported types: csv, xlsx'
+          end
+        else
+          puts "Warning: Include Attestation File provided  '#{plugin_config['include-attestations-file']['path']}' not found."
+        end
+      end
+      attestations.map!{ |x| x.transform_keys(&:to_s) }
+      attestations = attestations + (plugin_config['attestations'] || [])
+      attestations.reject! { |x| x['status'].eql?("") || x['status'].nil? }
 
       if attestations.empty?
         puts 'Warning: Attestations not provided; HDF will be generated without attestations.'

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: inspec-reporter-json-hdf
 version: !ruby/object:Gem::Version
-  version: 1.0.1
+  version: 1.1.0.beta1
 platform: ruby
 authors:
 - Rony Xavier
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-01-14 00:00:00.000000000 Z
+date: 2021-04-06 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: git-lite-version-bump
@@ -30,6 +30,20 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: 0.17.3
+- !ruby/object:Gem::Dependency
+  name: roo
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 2.8.3
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 2.8.3
 - !ruby/object:Gem::Dependency
   name: bundler
   requirement: !ruby/object:Gem::Requirement
@@ -183,9 +197,9 @@ required_ruby_version: !ruby/object:Gem::Requirement
       version: '2.5'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
-  - - ">="
+  - - ">"
     - !ruby/object:Gem::Version
-      version: '0'
+      version: 1.3.1
 requirements: []
 rubygems_version: 3.2.3
 signing_key: