veracodecli 0.1.5 → 0.1.6

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 827da5c760675286fc6a2401713dbd844237d54d
-  data.tar.gz: e231f9e7dc2f4f7d034314ead5edba8e50d2b860
+  metadata.gz: 84e40ad9f106004bf5dccb40fdfbcfe7aa92a95e
+  data.tar.gz: 43026621561ac4aea615fd70aaec4f109446c280
 SHA512:
-  metadata.gz: d42ba6d8ecd48ec4303bb8191f02b5ad65ee5ec90993d2285809ae13fb0a33f76367ad1a42a7f47990bb6f97b2867211d8409df8c003d5f755ec9bab57016f79
-  data.tar.gz: ca77d8f24973a65401fb23ac514980eb43ec1dd34fc4f5d159f4e56bf4c62f371d928665ef7d3458b42e49c67907fffa8fc265d3081fcc7c46bc8c20f9870308
+  metadata.gz: 349560ffb43459d9460da0f492b3966ed711fb18d35fea17abf463d18494bd9285687118231a01afea3284347253453c9c5caf4cce155dbb8558b931fea43e14
+  data.tar.gz: f9379bee72141331a3196868ca3d23a121fbbf71064a13b07b6d9e8f841263fc5783060bea607ce44a4eee5a8650bf2c33b2df55c4048a265b454154ccbad79a

data/README.md

@@ -18,7 +18,7 @@ gem install veracodecli
 
 ## Usage
 
-1. Set `VERACODE_USERNAME`, `VERACODE_PASSWORD`, and `VERACODE_TEAM` environment variables to your API credentials for the veracode API.
+1. Set `VERACODE_USERNAME` and `VERACODE_PASSWORD` environment variables to your API credentials for the veracode API.
 2. To run a scan use `veracodecli scan _app\_name_ _archive\_path_
 
 - `veracodecli help` to see commands

data/bin/veracodecli

@@ -22,14 +22,14 @@ Commander.configure do
     c.action do |args,options|
       fail 'Specify application Name.' if args.first.nil?
       fail 'Specify repo location.' if args[1].nil?
-      # VeracodeApiScan.submit_scan args[0], args[1]
       options.default :business_criticality => 'High'
       options.default :business_unit => 'TELUS Digital'
-      dir = "/home/#{ENV['USER']}/veracodecli_data/sast_clone"
-      if !Dir.exists?(dir) then `git clone #{args[1]} #{dir}` end
-      if Dir.exists?(dir) then `cd #{dir}; git pull; git archive --format=tar -o sast_upload.tar master` else fail 'Repository not found' end
-      VeracodeApiMacros.submit_scan_macro args[0], options.business_criticality, options.business_unit, options.team, 'sast_clone/sast_upload.tar'
-      `cd #{dir}; rm -r sast_upload.tar`
+      directory = "/home/#{ENV['USER']}/veracodecli_data/sast_clone"
+      VeracodeApiBase.get_repo_archive directory
+      # if !Dir.exists?(dir) then `git clone #{args[1]} #{dir}` end
+      # if Dir.exists?(dir) then `cd #{dir}; git pull; git archive --format=tar -o sast_upload.tar master` else fail 'Repository not found' end
+      VeracodeApiMacros.submit_scan_macro args[0], options.business_criticality, options.business_unit, options.team, "#{directory}/sast_upload.tar"
+      `cd #{directory}; rm -r sast_upload.tar`
     end
   end
 
@@ -56,9 +56,16 @@ Commander.configure do
     c.description = 'Downloads the final scan report from Veracode.'
     c.action do |args|
       fail 'Specify app_name.' if args.first.nil?
-      #VeracodeApiResults.get_scan_report args.first
-      VeracodeApiMacros.get_scan_report args.first
+      VeracodeApiMacros.get_report_macro args.first
     end
   end
 
+  command :get_pdf_report do |c|
+    c.syntax = 'veracodecli get-pdf [app_name]'
+    c.description = 'Downloads the final scan report in pdf format.'
+    c.action do |args|
+      fail 'Specify app_name.' if args.first.nil?
+      VeracodeApiMacros.get_pdf_macro args.first
+    end
+  end
 end

data/lib/veracodecli/api.rb

@@ -11,6 +11,11 @@ module VeracodeApiBase
     check_environment_login_variables
     response = RestClient.get "https://#{ENV['VERACODE_USERNAME']}:#{ENV['VERACODE_PASSWORD']}@analysiscenter.veracode.com/api/#{api_version}/#{api_call}", { params: params }
   end
+
+  def get_repo_archive(directory)
+    if !Dir.exists?(directory) then `git clone #{args[1]} #{directory}` end
+    if Dir.exists?(directory) then `cd #{directory}; git pull; git archive --format=tar -o sast_upload.tar master` else fail 'Repository not found' end
+  end
 end
 
 module VeracodeApiScan
@@ -66,6 +71,11 @@ module VeracodeApiResults
     report = veracode_api_request 'detailedreport.do', api_version: '3.0', build_id: build_id
     report = report.body
   end
+
+  def get_scan_report_pdf(build_id)
+    report = veracode_api_request 'detailedreportpdf.do', api_version: '3.0', build_id: build_id
+    report = report.body
+  end
 end
 
 module VeracodeApiMacros
@@ -84,7 +94,13 @@ module VeracodeApiMacros
   def get_report_macro(app_name)
     app_id = get_app_id app_name
     build_id = get_most_recent_build_id app_id
-    report = get_scan_report app_id
+    report = get_scan_report build_id
+  end
+
+  def get_pdf_macro(app_name)
+    app_id = get_app_id app_name
+    build_id = get_most_recent_build_id app_id
+    report = get_scan_report build_id
   end
 
 end

data/test/test_veracodecli.rb

@@ -8,8 +8,9 @@ class TestVeracodecli < Test::Unit::TestCase
   context 'VeracodeApi' do
 
     setup do
-      ENV['VERACODE_USERNAME'] = 'telusdigitalapi'
-      ENV['VERACODE_PASSWORD'] = 'OSJ939q4'
+      ENV['VERACODE_USERNAME'] = ''
+      ENV['VERACODE_PASSWORD'] = ''
+      @test_file_location = '' # a .tar or .zip archive path
     end
 
     should 'Return existing application profile ID' do
@@ -24,9 +25,13 @@ class TestVeracodecli < Test::Unit::TestCase
       assert_equal 200, veracode_api_request('beginprescan.do', app_id:'12379').code
     end
 
-    # should 'Return XML response for uploadfile.do' do
-    #   assert_boolean upload_file('12379', '/home/zaya/Documents/test.php.tar').include?('Uploaded')
-    # end
+    should 'Return Response Object' do
+      assert_kind_of RestClient::Response, veracode_api_request('getapplist.do')
+    end
+
+    should 'Return XML response for uploadfile.do' do
+      assert_boolean upload_file('12379', @test_file_location).include?('Uploaded')
+    end
 
     should 'Return HTTP from get_prescan_results function' do
       assert_equal 200, get_prescan_results('12379').code

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: veracodecli
 version: !ruby/object:Gem::Version
-  version: 0.1.5
+  version: 0.1.6
 platform: ruby
 authors:
 - isaiah thiessen