vpzscalergitdemo11 1.0.0

package/package.json

@@ -0,0 +1,21 @@
+{
+  "name": "vpzscalergitdemo11",
+  "version": "1.0.0",
+  "description": "",
+  "main": "index.js",
+  "scripts": {
+    "test": "echo \"Error: no test specified\" && exit 1"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/vivek2727-ship-it/demorepo.git"
+  },
+  "keywords": [],
+  "author": "",
+  "license": "ISC",
+  "type": "commonjs",
+  "bugs": {
+    "url": "https://github.com/vivek2727-ship-it/demorepo/issues"
+  },
+  "homepage": "https://github.com/vivek2727-ship-it/demorepo#readme"
+}

package/test3.py

@@ -0,0 +1,207 @@
+#!/usr/bin/env python3
+"""
+Zscaler Workflow Automation (ZWA) - Incident Export to Excel
+================================================================
+
+Pulls incidents from the Zscaler Workflow Automation API and exports
+them to a formatted Excel workbook.
+
+API DOCS:
+  ZWA (Zscaler Workflow Automation) uses its own legacy auth scheme:
+  POST {API_BASE_URL}/auth/v1/token with key_id + key_secret (HMAC-signed
+  with a timestamp) returns a Bearer token used for subsequent calls.
+  Base URL is cloud-specific, e.g. https://api.us1.zsworkflow.net
+
+SETUP:
+  1. In ZWA admin console, create an API key (key_id + key_secret).
+  2. Set the environment variables below (or edit the CONFIG section).
+  3. pip install requests openpyxl --break-system-packages
+  4. python export_incidents.py --start 2026-05-01 --end 2026-06-11
+
+USAGE EXAMPLES:
+  python export_incidents.py
+  python export_incidents.py --start 2026-06-01 --end 2026-06-11 --status OPEN
+  python export_incidents.py --output my_incidents.xlsx --page-size 200
+"""
+
+import os
+import sys
+import time
+import argparse
+import requests
+from datetime import datetime, timedelta
+from openpyxl import Workbook
+from openpyxl.styles import Font, PatternFill, Alignment
+from openpyxl.utils import get_column_letter
+
+# ---------------------------------------------------------------------------
+# CONFIG - set via environment variables (recommended) or edit directly
+# ---------------------------------------------------------------------------
+KEY_ID = os.environ.get("ZWA_CLIENT_ID", "")
+KEY_SECRET = os.environ.get("ZWA_CLIENT_SECRET", "")
+API_BASE_URL = os.environ.get("ZWA_API_BASE_URL", "https://us1.zsworkflow.net")
+AUTH_ENDPOINT = "/auth/v1/token"
+INCIDENTS_ENDPOINT = "/dlp/v1/incidents/transactions"  # adjust per docs if needed
+
+VERIFY_SSL = True
+TIMEOUT = 30
+
+
+# ---------------------------------------------------------------------------
+# Auth
+# ---------------------------------------------------------------------------
+def obfuscate_secret(key_secret, timestamp_ms):
+    """Zscaler legacy-style obfuscation of the API secret using a timestamp."""
+    high = str(timestamp_ms)[-6:]
+    low = bin(int(high))[2:].zfill(20)
+    obf = ""
+    for ch in high:
+        obf += key_secret[int(ch)]
+    j = len(high) - 1
+    for bit in low:
+        if bit == "1" and j >= 0:
+            obf += key_secret[j]
+            j -= 1
+    return obf
+
+
+def get_access_token():
+    if not KEY_ID or not KEY_SECRET:
+        sys.exit("ERROR: Set ZWA_CLIENT_ID and ZWA_CLIENT_SECRET environment variables.")
+
+    timestamp_ms = int(time.time() * 1000)
+    obf_secret = obfuscate_secret(KEY_SECRET, timestamp_ms)
+    payload = {
+        "key_id": KEY_ID,
+        "key_secret": obf_secret,
+        "timestamp": str(timestamp_ms),
+    }
+    url = API_BASE_URL.rstrip("/") + AUTH_ENDPOINT
+    resp = requests.post(url, json=payload, timeout=TIMEOUT, verify=VERIFY_SSL)
+    if resp.status_code in (401, 403):
+        sys.exit(f"ERROR: Auth failed ({resp.status_code}). Response: {resp.text}")
+    resp.raise_for_status()
+    data = resp.json()
+    token = data.get("token") or data.get("access_token") or data.get("accessToken")
+    if not token:
+        sys.exit(f"ERROR: No token in auth response: {resp.text}")
+    return token
+
+
+# ---------------------------------------------------------------------------
+# Fetch incidents (paginated)
+# ---------------------------------------------------------------------------
+def fetch_incidents(token, start_date=None, end_date=None, status=None, page_size=100):
+    headers = {"Authorization": f"Bearer {token}", "Accept": "application/json"}
+    all_incidents = []
+    page = 1
+
+    while True:
+        params = {"pageSize": page_size, "page": page}
+        if start_date:
+            params["startTime"] = start_date
+        if end_date:
+            params["endTime"] = end_date
+        if status:
+            params["status"] = status
+
+        url = API_BASE_URL.rstrip("/") + INCIDENTS_ENDPOINT
+        resp = requests.get(url, headers=headers, params=params, timeout=TIMEOUT, verify=VERIFY_SSL)
+        if resp.status_code == 401:
+            sys.exit("ERROR: Unauthorized - check client credentials/scopes.")
+        resp.raise_for_status()
+
+        data = resp.json()
+        # Response shape varies; handle common patterns
+        items = data.get("incidents") or data.get("results") or data.get("data") or []
+        if not items:
+            break
+
+        all_incidents.extend(items)
+        print(f"  Fetched page {page}: {len(items)} incidents (total so far: {len(all_incidents)})")
+
+        total_pages = data.get("totalPages")
+        if total_pages and page >= total_pages:
+            break
+        if not total_pages and len(items) < page_size:
+            break
+
+        page += 1
+
+    return all_incidents
+
+
+# ---------------------------------------------------------------------------
+# Excel export
+# ---------------------------------------------------------------------------
+def export_to_excel(incidents, output_path):
+    wb = Workbook()
+    ws = wb.active
+    ws.title = "Incidents"
+
+    if not incidents:
+        ws["A1"] = "No incidents found for the given filters."
+        wb.save(output_path)
+        return
+
+    # Collect a consistent set of columns across all incidents
+    columns = []
+    for inc in incidents:
+        for k in inc.keys():
+            if k not in columns:
+                columns.append(k)
+
+    header_font = Font(name="Arial", bold=True, color="FFFFFF")
+    header_fill = PatternFill("solid", start_color="2F5496")
+    header_align = Alignment(horizontal="center", vertical="center", wrap_text=True)
+
+    for col_idx, col_name in enumerate(columns, start=1):
+        cell = ws.cell(row=1, column=col_idx, value=col_name)
+        cell.font = header_font
+        cell.fill = header_fill
+        cell.alignment = header_align
+
+    for row_idx, inc in enumerate(incidents, start=2):
+        for col_idx, col_name in enumerate(columns, start=1):
+            value = inc.get(col_name, "")
+            if isinstance(value, (dict, list)):
+                value = str(value)
+            cell = ws.cell(row=row_idx, column=col_idx, value=value)
+            cell.font = Font(name="Arial")
+
+    ws.freeze_panes = "A2"
+    for col_idx in range(1, len(columns) + 1):
+        ws.column_dimensions[get_column_letter(col_idx)].width = 22
+
+    wb.save(output_path)
+
+
+# ---------------------------------------------------------------------------
+# Main
+# ---------------------------------------------------------------------------
+def main():
+    parser = argparse.ArgumentParser(description="Export Zscaler Workflow Automation incidents to Excel")
+    parser.add_argument("--start", help="Start date YYYY-MM-DD (default: 7 days ago)")
+    parser.add_argument("--end", help="End date YYYY-MM-DD (default: today)")
+    parser.add_argument("--status", help="Filter by incident status (e.g. OPEN, CLOSED)")
+    parser.add_argument("--page-size", type=int, default=100)
+    parser.add_argument("--output", default="zwa_incidents.xlsx")
+    args = parser.parse_args()
+
+    end_date = args.end or datetime.utcnow().strftime("%Y-%m-%d")
+    start_date = args.start or (datetime.utcnow() - timedelta(days=7)).strftime("%Y-%m-%d")
+
+    print("Authenticating...")
+    token = get_access_token()
+
+    print(f"Fetching incidents from {start_date} to {end_date}...")
+    incidents = fetch_incidents(token, start_date, end_date, args.status, args.page_size)
+
+    print(f"Total incidents fetched: {len(incidents)}")
+    print(f"Writing to {args.output}...")
+    export_to_excel(incidents, args.output)
+    print("Done.")
+
+
+if __name__ == "__main__":
+    main()