supplier-meesho.webflow 1.0.0

package/meesecops/application/jira_functions.py

@@ -0,0 +1,554 @@
+
+from flask import jsonify
+from requests.auth import HTTPBasicAuth
+import requests
+from datetime import datetime, timedelta
+from application import app
+import requests
+import json
+from . import cache
+from collections import defaultdict
+
+app.config.from_object(__name__)
+JIRA_SETTINGS = app.config['JIRA_SETTINGS']
+DEFAULT_USER = app.config['DEFAULT_USER']
+
+JIRA_URL = JIRA_SETTINGS['JIRA_URL']
+JIRA_USER = JIRA_SETTINGS['JIRA_USER']
+JIRA_PASS = JIRA_SETTINGS['JIRA_PASS']
+
+JIRA_PROJECT = JIRA_SETTINGS["JIRA_PROJECT"]
+DEFAULT_SEVERITY = JIRA_SETTINGS["DEFAULT_SEVERITY"]
+
+JIRA_COMPONENTS = JIRA_SETTINGS["JIRA_COMPONENTS"]
+JIRA_FILTERS = JIRA_SETTINGS["JIRA_FILTERS"]
+JIRA_TRANSITIONS = JIRA_SETTINGS['JIRA_TRANSITIONS']
+
+def create_new_jira(jira,JIRA_SETTINGS,product_title="Temp", description="Temp",component="Security Review",peer_review_enabled=False,Issue_Severity=DEFAULT_SEVERITY):
+    
+    TODO_TRANS = JIRA_TRANSITIONS[peer_review_enabled]['TODO_TRANS']
+
+    task = "Story"
+    if component == JIRA_COMPONENTS["SECURITY_BUG"]:
+        task = "Bug"
+
+    duedate = 21
+    if Issue_Severity in ["Critical","P0 (Blocker)"]:
+        duedate = 5
+    
+    if Issue_Severity in ["Blocker","P1 (Critical)","Urgent"]:
+        duedate = 14
+    
+    if Issue_Severity in ["Major","P2 (Major)"]:
+        duedate = 21
+    
+    if Issue_Severity in ["Minor", "Lowest", "P3 (Minor)", "P4 (Trivial)", "None"]:
+        duedate = 28
+
+    duedate = datetime.now() + timedelta(duedate)
+
+    temp_url = JIRA_URL
+
+    url=temp_url+"rest/api/2/issue"
+
+    headers={
+        "Accept": "application/json",
+        "Content-Type": "application/json"
+    }
+
+    payload=json.dumps(
+        {
+        "fields": {
+        "project": {
+            "key": JIRA_PROJECT
+        }, 
+        "summary": product_title,
+        "description": description, 
+        "issuetype": {
+            "name": task
+        },
+        "components":[{
+            "name": component
+        }],
+        "priority":{
+            "name": Issue_Severity
+        }
+    }
+    }
+    )
+
+    """
+    fields = {
+        "project": {
+            "key": JIRA_PROJECT
+        }, 
+        "summary": product_title,
+        "description": description, 
+        "issuetype": {
+            'name': task
+        },
+        "components":[{
+            'name': component
+        }],
+        "priority":{
+            "name": Issue_Severity
+        },
+        "duedate" : duedate.strftime('%Y-%m-%d')
+    }
+    """
+
+    try:
+        result = requests.post(url,headers=headers,data=payload,auth=(JIRA_USER,JIRA_PASS))
+        return result.text
+    except Exception, ae:
+        print ae
+        return str(ae)
+        # return False
+
+    return None
+
+@cache.memoize(timeout=300)
+def get_jira_issues(jira, JIRA_SETTINGS, jira_filter, assignee=None, reporter=None, since=None, flag=None):
+
+    #if "secreviews" in flag:flag="secrev"
+    #else: flag="sec"
+    
+    jira_filter = 'filter='+str(jira_filter)
+    if assignee:
+        jira_filter = jira_filter+' AND assignee=\"'+str(assignee)+'\"'
+
+    if reporter:
+        jira_filter = jira_filter+' AND reporter=\"'+str(reporter)+'\"'
+
+    if since:
+        jira_filter = jira_filter+' AND createdDate >= '+str(since)
+
+    # return jsonify(jira_filter)
+    open_issues = []
+
+    temp = jira.search_issues(jira_filter, startAt=0, maxResults=0, json_result=True)
+    total = temp['total']
+
+    fintotal = 0
+    
+    while fintotal<total:
+        open_issues += jira.search_issues(jira_filter, startAt=fintotal, maxResults=100)
+        fintotal+=100
+
+    return jsonify(create_dashboard_stats(flag,open_issues, JIRA_SETTINGS))
+
+
+def create_dashboard_stats(flag, open_issues, JIRA_SETTINGS):
+    return_obj = {}
+    issue_statusses = {}
+    issue_priorities = {}
+    issue_ages = {}
+    
+    SLA1 = {}
+    SLA2 = {}
+    SLA3 = {}
+    SLA4 = {}
+
+    for open_issue in open_issues:
+        key = str(open_issue.key)
+        summary = str(open_issue.fields.summary)
+        
+        status = str(open_issue.fields.status.name)
+        if status not in issue_statusses:
+            issue_statusses[status] = []
+
+        if key not in issue_statusses[status]:
+            issue_statusses[status].append({key:summary})
+
+        #if flag=='secrev':priority = str(open_issue.fields.priority.name)
+        #else:priority = str(open_issue.fields.customfield_10077.value)
+
+        priority = str(open_issue.fields.customfield_10077.value)
+        if priority not in issue_priorities:
+            issue_priorities[priority] = []
+
+        if key not in issue_priorities[priority]:
+            issue_priorities[priority].append({key:summary})
+
+        if "open" in flag:
+            due_date = (open_issue.fields.created)[:10]
+            due_date = datetime.strptime(due_date, '%Y-%m-%d')
+            due_days = (datetime.now() - due_date).days
+
+            if priority=="Critical":
+                due_days -= 1
+            elif priority=="High":
+                due_days -= 3
+            elif priority=="Medium":
+                due_days -= 7
+            elif priority=="Low":
+                due_days -= 14
+            else:
+                due_days -= 21
+
+            if due_days>0:
+                if due_days <=10:
+                    status = "0-10 Days"
+                    if priority not in SLA1: SLA1[priority] = []
+                    if key not in SLA1[priority]: SLA1[priority].append({key:summary})
+
+                elif due_days > 10 and due_days <= 20:
+                    status = "10-20 Days"
+                    if priority not in SLA2: SLA2[priority] = []
+                    if key not in SLA2[priority]: SLA2[priority].append({key:summary})
+
+                elif due_days > 20 and due_days <= 30:
+                    status = "20-30 Days"
+                    if priority not in SLA3: SLA3[priority] = []
+                    if key not in SLA3[priority]: SLA3[priority].append({key:summary})
+
+                else:
+                    status = ">30 Days"
+                    if priority not in SLA4: SLA4[priority] = []
+                    if key not in SLA4[priority]: SLA4[priority].append({key:summary})
+
+                if status not in issue_ages:
+                    issue_ages[status] = []
+
+                if key not in issue_ages[status]:
+                    issue_ages[status].append({key:summary})
+        
+    return_obj['by_status'] = issue_statusses
+    return_obj['by_severity'] = issue_priorities
+    return_obj['by_age'] = issue_ages
+    return_obj['0-10 Days'] = SLA1
+    return_obj['10-20 Days'] = SLA2
+    return_obj['20-30 Days'] = SLA3
+    return_obj['>30 Days'] = SLA4
+
+    return return_obj
+
+@cache.memoize(timeout=300)
+def get_quarterly_issues(jira, JIRA_SETTINGS, jira_filter, year, flag):
+    
+    jira_filter = 'filter='+str(jira_filter)
+
+    if year:
+        next_year = int(year)+1
+        jira_filter = jira_filter+' AND createdDate >= '+str(year)+'-01-01 AND createdDate < '+str(next_year)+'-01-01'
+
+    # return jsonify(jira_filter)
+    open_issues = []
+
+    temp = jira.search_issues(jira_filter, startAt=0, maxResults=0, json_result=True)
+    total = temp['total']
+
+    fintotal = 0
+    
+    while fintotal<total:
+        open_issues += jira.search_issues(jira_filter, startAt=fintotal, maxResults=100)
+        fintotal+=100
+
+    return_obj = defaultdict(list)
+
+    for open_issue in open_issues:
+        created_date = (open_issue.fields.created)[:10]
+        month = created_date[5:7]
+        if month in {'01','02','03'}:
+            return_obj['Q1'].append(open_issue)
+        elif month in {'04','05','06'}:
+            return_obj['Q2'].append(open_issue)
+        elif month in {'07','08','09'}:
+            return_obj['Q3'].append(open_issue)
+        elif month in {'10','11','12'}:
+            return_obj['Q4'].append(open_issue)
+
+    result = {}
+    for k,v in return_obj.items():
+        result[k] = jsonify(create_dashboard_stats(flag,v, JIRA_SETTINGS))
+
+    return result
+
+def get_jira_states(JIRA_SETTINGS, jira_type=None):
+
+    STATUS_N_SEVERITY = JIRA_SETTINGS['STATUS_N_SEVERITY']
+    STATUS_CODES = JIRA_SETTINGS['STATUS_CODES']
+    COLOR_CODES = JIRA_SETTINGS['COLOR_CODES']
+
+    jira_states = STATUS_N_SEVERITY
+
+    """
+    states = requests.get(JIRA_URL+'rest/api/latest/project/'+JIRA_PROJECT+'/statuses', auth=HTTPBasicAuth(JIRA_USER, JIRA_PASS), verify=False).json()
+    if 'errorMessages' not in states:
+        for state in states:
+            if state['name'] in ["Task","Bug"]:
+                for status in state['statuses']:
+                    if status['name'] not in jira_states['by_status']:
+                        jira_states['by_status'].append(status['name'])
+
+
+    states = requests.get(JIRA_URL+'rest/api/latest/priority', auth=HTTPBasicAuth(JIRA_USER, JIRA_PASS), verify=False).json()
+    if 'errorMessages' not in states:
+        for state in states:
+            if state['name'] not in jira_states['by_severity']:
+                jira_states['by_severity'].append(state['name'])
+    """
+
+    jira_states['STATUS_CODES'] = STATUS_CODES
+    jira_states['COLOR_CODES'] = COLOR_CODES
+
+    return jsonify(jira_states)
+
+def get_open_tickets(jira,JIRA_SETTINGS,user_email):
+
+    open_issues = jira.search_issues('filter='+str(JIRA_FILTERS['open_tickets']), maxResults=1000)
+
+    return get_jira_issue_strings(open_issues, JIRA_SETTINGS, user_email);
+
+def get_open_ticket_by_id(jira,JIRA_SETTINGS,ticket_id,user_email):
+
+    jql = 'key in ('+str(ticket_id).strip("[").strip("]")+')'+' and status in ("Backlog","Open","Pending","In Progress")'
+    try:
+        open_issues = jira.search_issues(jql, maxResults=10)
+        temp = get_jira_issue_strings(open_issues, JIRA_SETTINGS, user_email)
+        if not temp[-1] and not temp[-2]:return None
+        return temp
+    except Exception as ae:
+        app.logger.warning("Invalid Ticket ID")
+        return None
+
+def get_jira_issue_strings(open_issues, JIRA_SETTINGS,user_email):
+
+    secreview_string = ""
+    secbugs_string = ""
+    secreview_count = 0
+    secbugs_count = 0
+
+    for open_issue in open_issues:
+        status = str(open_issue.fields.status.name)
+        icon = 'glyphicon glyphicon-hourglass icon_info blue" title="Open'
+        if status == "In Progress":
+            icon = 'glyphicon glyphicon-road icon_info green" title="In Progress'
+        if status == "Pending":
+            icon = 'glyphicon glyphicon-time icon_info orange" title="Pending'
+        if status == "Open":
+            icon = 'glyphicon glyphicon-hourglass icon_info blue" title="Open'
+        if status == "Backlog":
+            icon = 'glyphicon glyphicon-fire icon_info red" title="Backlog'
+
+        key = str(open_issue.key)
+        summary = str(open_issue.fields.summary)
+
+        assignee = open_issue.fields.assignee
+
+        """
+        if assignee:
+            assignee = str(assignee.emailAddress)
+        else:
+            assignee = user_email
+        """
+
+        assignee = user_email
+
+        description = str(open_issue.fields.description).lower()
+        descriptions = description.split("\n")
+
+        requestingfor = ""
+        for key_values in descriptions:
+            key_values = key_values.split(" : ")
+            if "requestingfor" in key_values or "*requestingfor*" in key_values:
+                for value in key_values:
+                    if "requestingfor" not in value:
+                        requestingfor = value
+                        break
+                break
+
+
+        requestingfor = requestingfor.rstrip().lstrip();
+
+        #due_date = str(open_issue.fields.duedate)
+        
+        """
+        due_days = "-9999"
+        due_date="2022-02-14"
+        if due_date != "None":
+            due_date = datetime.strptime(due_date, '%Y-%m-%d')
+            due_days = str((datetime.now() - due_date).days)
+        """
+
+        priority = str(open_issue.fields.priority.name)
+
+        due_date = (open_issue.fields.created)[:10]
+        due_date = datetime.strptime(due_date, '%Y-%m-%d')
+        due_days = (datetime.now() - due_date).days
+
+        if priority=="Critical":
+            due_days -= 5
+        elif priority=="Blocker":
+            due_days -= 14
+        elif priority=="Major":
+            due_days -= 21
+        else:
+           due_days -= 28
+
+        due_days = str(due_days)
+
+        #follow_days = 'Follow up ('+due_days+' days)'
+        follow_days = 'Follow up'
+        follow_class = "primary"
+
+        if int(due_days) > 30:
+            follow_class = "danger"
+        elif int(due_days) > 10:
+            follow_class = "warning"
+        elif int(due_days) > 0:
+            follow_class = "info"
+        elif int(due_days) <= 0:
+            follow_class = "success"
+
+        follow_onclick = '"followup(\''+key+'\',\''+status+'\',\''+summary+'\',\''+requestingfor+'\',\''+due_days+'\',\''+follow_class+'\')"'
+        if int(due_days) == -9999:
+            follow_onclick = '#'
+
+        msg_string = '<tr><td align="center"><span class="'+icon+'"></span>&nbsp;&nbsp;&nbsp;&nbsp;<span class="glyphicon glyphicon-user" title="'+assignee+'"></span></td>'
+        msg_string += '<td class="summary">'+key+' - <a href="'+JIRA_URL+'browse/'+key+'" target="_blank">'+summary+'</a></td>'
+        if follow_onclick != "#":
+            msg_string += '<td><a onclick='+follow_onclick+' href="#"><button class="btn btn-'+follow_class+' btn-md"  data-toggle="modal" data-target="#followModal">'+follow_days+'</button></a></td>'
+        else:
+            msg_string += '<td><a onclick="alert(\'Due date is not set.\')" href="#"><button class="btn btn-'+follow_class+' btn-md"  >'+follow_days+'</button></a></td>'
+                
+        components = open_issue.fields.components
+        components_found = False
+
+        for component in components:
+            if str(component.name) == JIRA_COMPONENTS["SECURITY_REVIEW"]:
+                msg_string += '<td><a class="secreview pull-right" onclick="open_issue(\''+key+'\',\''+status+'\',\''+summary+'\',\''+requestingfor+'\',\''+due_days+'\')" href="#"><button type="button" class="btn btn-primary">Close Ticket</button></a></td></tr>'
+                secreview_string += msg_string
+                components_found = True
+                secreview_count += 1
+                break
+
+            if str(component.name) == JIRA_COMPONENTS["SECURITY_BUG"]:
+                msg_string += '<td><a class="secreview pull-right" onclick="open_issue(\''+key+'\',\''+status+'\',\''+summary+'\',\''+requestingfor+'\',\''+due_days+'\')" href="#"><button type="button" class="btn btn-primary">Close Bug</button></a></td></tr>'
+                secbugs_string += msg_string
+                components_found = True
+                secbugs_count += 1
+                break
+
+    return [secreview_string,secbugs_string, secreview_count,secbugs_count]
+
+def getAccountId(approver=None):
+    url = JIRA_URL+"rest/api/latest/user/search?query="+approver
+    result = requests.get(url,auth=(JIRA_USER,JIRA_PASS))
+    approver=json.loads(result.text)[0]['accountId']
+    return approver
+
+def resolve_or_close_jira(jira,JIRA_TRANSITIONS,status,key,comments,action=None,approver=None):
+    
+    if not action:
+        return [False, "Action parameter missing"]
+
+    if status in {"Open","Backlog","Pending"} and action=="Approve":
+        return [False, "Issue is in Open Status"]
+
+    if action == "Approve":
+        transaction_id = JIRA_TRANSITIONS['APPROVE_TRANS']
+        fields = {'resolution':{'name': 'Done'}}
+
+    if action == "Reject":
+        fields = {'resolution':{'name': 'Won\'t Do'}}
+
+        if status == "Open":
+            transaction_id = JIRA_TRANSITIONS['OPEN_REJECTED']
+        elif status == "Backlog":
+            transaction_id = JIRA_TRANSITIONS['BACKLOG_REJECTED']
+        elif status == "Pending":
+            transaction_id = JIRA_TRANSITIONS['PENDING_REJECTED']
+        else:
+            transaction_id = JIRA_TRANSITIONS['CLOSED_TRANS']
+
+        """
+        if status == "Under review":
+            transaction_id = JIRA_TRANSITIONS['REJECT_APPROVAL']
+            fields = None
+        """
+        
+    if action == "Send for Review":
+        transaction_id = JIRA_TRANSITIONS['SEND_FOR_REVIEW_TRANS']
+        fields = None
+
+    try:
+        result = jira.transition_issue(key, transaction_id)
+        issue = jira.issue(key)
+        jira.add_comment(key,comments)
+        msg = None
+        if approver:
+            try:
+                accountId = getAccountId(approver)
+                issue.update(assignee={'accountId': accountId})
+                #jira.assign_issue(key,'61efbbb4632452006b5e266c')
+            except Exception as ae:
+                app.logger.warning(str(ae.text))
+                msg = str(ae.text)
+                return [True, msg]
+
+        return [True,msg]
+
+    except Exception as ae:
+        app.logger.warning(str(ae.text))
+        msg = str(ae.text)
+        return [False, msg]
+
+    return [None,msg]
+
+def jira_followup(jira, key, comment):
+    return_obj = {}
+    return_obj['key'] = key
+
+    #if "@" not in assignee:
+    #    assignee = assignee+"@"+app.config['DEFAULT_DOMAIN']
+
+    #comment = "[~"+assignee+"]\n\n"+comment
+    #comment = assignee+"\n\n"+comment
+    try:
+        jira.add_comment(key,comment)
+        return_obj['status'] = "success"
+        return_obj['message'] = "Followup comment added on Issue: "+key
+        #return_obj['assignee'] = assignee
+
+    except Exception, ae:
+        return_obj['status'] = "error"
+        return_obj['message'] = ae
+
+    return return_obj
+
+def assign_issue(jira, key, assignee):
+    if "@" not in assignee:
+        assignee = assignee+"@"+app.config['DEFAULT_DOMAIN']
+
+    try:
+        issue = jira.issue(key)
+        accountId = getAccountId(assignee)
+        issue.update(assignee={'accountId': accountId})
+        #assignment_status = jira.assign_issue(key, assignee)
+        #if assignment_status:
+        #    return "Success"
+        return "Success"
+    except Exception, ae:
+        return "Failed"
+
+    return "Failed"
+
+def link_issue(jira, key1, key2):
+    try:
+        link_status = jira.create_issue_link('blocks', key1, key2)
+        if link_status.status_code == 201:
+            return "Success"
+
+        return "Failed"
+
+    except Exception, ae:
+        return str(ae)
+
+    return "Failed"
+
+def get_security_updates():
+    url = "https://portswigger.net/daily-swig/data?label=vulnerabilities&pageSize=100"
+    temp_result = requests.get(url)
+    result = json.loads(temp_result.text)
+    return result["ResultSet"]["Results"]

package/meesecops/application/static/css/close_style.css

@@ -0,0 +1,151 @@
+.secreview{
+  text-decoration: none;
+}
+
+table {
+  width: 100%;
+  table-layout: fixed;
+  white-space: normal!important;
+}
+
+td {
+  word-wrap: break-word;
+  border-bottom: 1px solid #ddd;
+}
+
+tr:nth-child(odd){background-color: #f2f2f2}
+
+label {
+  font-size: 14px;
+}
+.label-default {
+  font-size: 11px;
+  line-height: 25px;
+}
+.summary {
+  width: 60%;
+}
+
+.material-switch > input[type="checkbox"] {
+    display: none;   
+}
+
+.material-switch > label {
+    cursor: pointer;
+    height: 0px;
+    position: relative; 
+    width: 40px;  
+}
+
+.material-switch > label::before {
+    background: rgb(0, 0, 0);
+    box-shadow: inset 0px 0px 10px rgba(0, 0, 0, 0.5);
+    border-radius: 8px;
+    content: '';
+    height: 16px;
+    margin-top: -8px;
+    position:absolute;
+    opacity: 0.3;
+    transition: all 0.4s ease-in-out;
+    width: 40px;
+}
+.material-switch > label::after {
+    background: rgb(255, 255, 255);
+    border-radius: 16px;
+    box-shadow: 0px 0px 5px rgba(0, 0, 0, 0.3);
+    content: '';
+    height: 24px;
+    left: -4px;
+    margin-top: -8px;
+    position: absolute;
+    top: -4px;
+    transition: all 0.3s ease-in-out;
+    width: 24px;
+}
+.material-switch > input[type="checkbox"]:checked + label::before {
+    background: inherit;
+    opacity: 0.5;
+}
+.material-switch > input[type="checkbox"]:checked + label::after {
+    background: inherit;
+    left: 20px;
+}
+
+h2 {
+color: white;
+}
+body {
+/*font-family: 'Ubuntu', sans-serif;*/
+font-family: 'Ubuntu', sans-serif;
+}
+
+.navbar-brand
+{  
+position: absolute;
+width: 100%;
+left: 0;
+text-align: center;
+margin:0 auto;
+}
+
+.nav.navbar-nav.navbar-right li a {
+  background:white;
+  color: black;
+}
+
+.nav.navbar-nav.navbar-right li:hover a:hover{
+  background:white; 
+  color:#f43397;
+}
+
+.navbar-default{
+  position:fixed;
+  top:90;
+  left:0;
+  right:0;
+  width:100%;
+  z-index:99;
+  background:white;
+}
+
+.navbar-text a{
+  color:black;
+  text-decoration: none;
+}
+
+.navbar-text a:hover{
+  background:white; 
+  color:#f43397;
+}
+
+.navbar-inverse{
+  position:fixed;
+  top:0;
+  left:0;
+  right:0;
+  width:100%;
+  z-index:99;
+  background:white;
+}
+
+.btn-grey{
+background-color: black ;
+color:white;
+}
+
+#scan-now{
+background-color: #182530;
+color:white;
+}
+#new-scan{
+background-color: #182530;
+color:white;
+}
+#history h2{
+color:black;  
+}
+@font-face {
+font-family: 'hacked';
+src: url("{{ url_for('static', filename = 'hacked.woff') }}") format('woff'),
+url("{{ url_for('static', filename = 'hacked.woff') }}") format('truetype'); /* Chrome 4+, Firefox 3.5, Opera 10+, Safari 3—5 */
+}