github-issue-tower-defence-management 1.148.3 → 1.148.5

package/src/domain/usecases/DailySecurityScanUseCase.ts

@@ -12,6 +12,8 @@ export type DailySecurityScanConfig = {
 
 type KevVulnerability = {
   cveID: string;
+  vendorProject: string;
+  product: string;
   vulnerabilityName: string;
   dateAdded: string;
 };
@@ -27,6 +29,8 @@ const isKevVulnerability = (value: unknown): value is KevVulnerability => {
   const record: Record<string, unknown> = { ...value };
   return (
     typeof record.cveID === 'string' &&
+    typeof record.vendorProject === 'string' &&
+    typeof record.product === 'string' &&
     typeof record.vulnerabilityName === 'string' &&
     typeof record.dateAdded === 'string'
   );
@@ -178,13 +182,21 @@ export class DailySecurityScanUseCase {
       );
     }
 
-    const newKevEntries = parsedKev.vulnerabilities
-      .filter((vulnerability) => vulnerability.dateAdded >= yesterdayYmd)
-      .map(
-        (vulnerability) =>
-          `- ${vulnerability.dateAdded} ${vulnerability.cveID} ${vulnerability.vulnerabilityName}`,
-      );
-    if (newKevEntries.length === 0) {
+    const newKevEntries = parsedKev.vulnerabilities.filter(
+      (vulnerability) => vulnerability.dateAdded >= yesterdayYmd,
+    );
+    const usedKevEntries: KevVulnerability[] = [];
+    for (const vulnerability of newKevEntries) {
+      if (
+        await this.isProductPresentInScannedWorkspace(
+          config.scanBaseDirectory,
+          vulnerability.product,
+        )
+      ) {
+        usedKevEntries.push(vulnerability);
+      }
+    }
+    if (usedKevEntries.length === 0) {
       return;
     }
 
@@ -192,9 +204,54 @@ export class DailySecurityScanUseCase {
       org,
       config.kevReportRepo,
       `CISA KEV new additions since ${yesterdayYmd}`,
-      newKevEntries.join('\n'),
+      usedKevEntries
+        .map(
+          (vulnerability) =>
+            `- ${vulnerability.dateAdded} ${vulnerability.cveID} ${vulnerability.vulnerabilityName}`,
+        )
+        .join('\n'),
       [manager],
       [],
     );
   };
+
+  private isProductPresentInScannedWorkspace = async (
+    scanBaseDirectory: string,
+    product: string,
+  ): Promise<boolean> => {
+    const { stdout: findOutput } = await this.localCommandRunner.runCommand(
+      'find',
+      [scanBaseDirectory, '-maxdepth', '3', '-name', '.git', '-type', 'd'],
+    );
+    const repositoryDirectories = findOutput
+      .split('\n')
+      .filter((line) => line.length > 0)
+      .map((gitDirectory) => gitDirectory.replace(/\/\.git$/, ''));
+
+    for (const repositoryDirectory of repositoryDirectories) {
+      const { stderr, exitCode } = await this.localCommandRunner.runCommand(
+        'git',
+        [
+          '-C',
+          repositoryDirectory,
+          'grep',
+          '-I',
+          '-i',
+          '-q',
+          '-F',
+          '-e',
+          product,
+        ],
+      );
+      if (exitCode === 0) {
+        return true;
+      }
+      if (exitCode !== 1) {
+        console.error(
+          `Failed to search ${repositoryDirectory} for ${product}: ${stderr}`,
+        );
+      }
+    }
+    return false;
+  };
 }

package/types/domain/usecases/DailySecurityScanUseCase.d.ts

@@ -21,5 +21,6 @@ export declare class DailySecurityScanUseCase {
     }) => Promise<void>;
     private scanRepositories;
     private reportKevAdditions;
+    private isProductPresentInScannedWorkspace;
 }
 //# sourceMappingURL=DailySecurityScanUseCase.d.ts.map

package/types/domain/usecases/DailySecurityScanUseCase.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"DailySecurityScanUseCase.d.ts","sourceRoot":"","sources":["../../../src/domain/usecases/DailySecurityScanUseCase.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAC7E,OAAO,EAAE,eAAe,EAAE,MAAM,sCAAsC,CAAC;AACvE,OAAO,EAAE,cAAc,EAAE,MAAM,qCAAqC,CAAC;AACrE,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,MAAM,MAAM,uBAAuB,GAAG;IACpC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC;AAsCF,qBAAa,wBAAwB;IAEjC,QAAQ,CAAC,kBAAkB,EAAE,kBAAkB;IAC/C,QAAQ,CAAC,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,gBAAgB,CAAC;IACjE,QAAQ,CAAC,cAAc,EAAE,cAAc;gBAF9B,kBAAkB,EAAE,kBAAkB,EACtC,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,gBAAgB,CAAC,EACxD,cAAc,EAAE,cAAc;IAGzC,GAAG,GAAU,OAAO;QAClB,WAAW,EAAE,IAAI,EAAE,CAAC;QACpB,GAAG,EAAE,MAAM,CAAC;QACZ,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACxB,iBAAiB,EAAE,uBAAuB,CAAC;KAC5C,KAAG,OAAO,CAAC,IAAI,CAAC,CA0Bf;IAEF,OAAO,CAAC,gBAAgB,CAoEtB;IAEF,OAAO,CAAC,kBAAkB,CAwCxB;CACH"}
+{"version":3,"file":"DailySecurityScanUseCase.d.ts","sourceRoot":"","sources":["../../../src/domain/usecases/DailySecurityScanUseCase.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAC7E,OAAO,EAAE,eAAe,EAAE,MAAM,sCAAsC,CAAC;AACvE,OAAO,EAAE,cAAc,EAAE,MAAM,qCAAqC,CAAC;AACrE,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,MAAM,MAAM,uBAAuB,GAAG;IACpC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC;AA0CF,qBAAa,wBAAwB;IAEjC,QAAQ,CAAC,kBAAkB,EAAE,kBAAkB;IAC/C,QAAQ,CAAC,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,gBAAgB,CAAC;IACjE,QAAQ,CAAC,cAAc,EAAE,cAAc;gBAF9B,kBAAkB,EAAE,kBAAkB,EACtC,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,gBAAgB,CAAC,EACxD,cAAc,EAAE,cAAc;IAGzC,GAAG,GAAU,OAAO;QAClB,WAAW,EAAE,IAAI,EAAE,CAAC;QACpB,GAAG,EAAE,MAAM,CAAC;QACZ,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACxB,iBAAiB,EAAE,uBAAuB,CAAC;KAC5C,KAAG,OAAO,CAAC,IAAI,CAAC,CA0Bf;IAEF,OAAO,CAAC,gBAAgB,CAoEtB;IAEF,OAAO,CAAC,kBAAkB,CAqDxB;IAEF,OAAO,CAAC,kCAAkC,CAsCxC;CACH"}