extension.json

{
    "id": "ibm.devops.services.pipeline.crawler.tester",
    "version": 1,
    "name_key": "ExtName",
    "desc_key": "ExtDesc",
    "extension_type": "Test",
    "message_key": "ExtMessage",
    "inputs": [
        {
            "type": "Bluemix",
            "inclusion" : "always",
            "regions": ["ibm:ys1:us-south", "ibm:yp:us-south", "ibm:yp:eu-gb"]
        }
    ],
    "params": [
        {
            "name": "WAIT_TIME",
            "type": "Text",
            "required": "false",
            "default_value": "5",
            "label_key": "WAIT_TIME_KEY",
            "desc_key": "WAIT_TIME_DESC"
        }
    ],
    "outputs": [
        {
            "type": "Artifacts",
            "inclusion" : "always"
        }
    ],
    "execution": {
        "type": "JenkinsDocker",
        "shell": "#!/bin/bash
set +x
set +e
export INIT_START_TIME=$(date +\"%s\")
export WAIT_TIME=#WAIT_TIME#
# OSSC line
dpkg -l | grep '^ii' > $EXT_DIR/pkglist
. $EXT_DIR/_init.sh
# OSSC line
dpkg -l | grep '^ii' > $EXT_DIR/pkglist2
if [[ $DEBUG -eq 1 ]]; then
    diff $EXT_DIR/pkglist $EXT_DIR/pkglist2
fi
INIT_END_TIME=$(date +\"%s\")
export INIT_EST_TIME=$(($INIT_END_TIME-$INIT_START_TIME))
log_and_echo \"$INFO\" \"Init runtime of `date -u -d @\"$INIT_EST_TIME\" +\'%-Mm %-Ss\'`\"
log_and_echo \"$INFO\" \"Starting test script\"

# helper function to print the end time for this script
end_script_time() {
    SCRIPT_END_TIME=$(date +\"%s\")
    SCRIPT_EST_TIME=$(($SCRIPT_END_TIME-$INIT_END_TIME))
    log_and_echo \"$INFO\" \"Script runtime of `date -u -d @\"$SCRIPT_EST_TIME\" +\'%-Mm %-Ss\'`\"
}

# run the python crawler checker to get, dump results on output
if [ -f ${EXT_DIR}/check_crawler_results.py ]; then 
    ${EXT_DIR}/check_crawler_results.py
    RESULT=$?

    # add the appscan result json file to DRA
    if [ $DRA_ENABLED -eq 0 ]; then
        RESULT_FILE=\"compliance-result.json\"
        EVENT_TYPE=\"SecurityCompliance\"
        if [ -e \"$RESULT_FILE\" ]; then
            add_result_rule_to_dra \"${RESULT_FILE}\" \"${EVENT_TYPE}\"
            RC=$?
            if [ $RC -eq 0 ]; then
                log_and_echo \"$SUCCESSFUL\" \"Request DRA decision for ${CRITERIAL_NAME}.\"
                dra_grunt_decision \"${CRITERIAL_NAME}\"
                RC=$?
                if [ $RC -eq 0 ]; then
                    log_and_echo \"$SUCCESSFUL\" \"DRA Decision result is '${DRA_DECISION}'\"
                elif [ $RC -eq 1 ]; then
                    log_and_echo \"$LABEL\" \"DRA Decision result is '${DRA_DECISION}'\"
                elif [ $RC -eq 2 ]; then
                    log_and_echo \"$ERROR\" \"DRA Decision result is '${DRA_DECISION}'\"
                else
                    log_and_echo \"$ERROR\" \"Failed to execute decision for criterial ${CRITERIAL_NAME} with return error code ${RC}.\"
                fi
            else
                log_and_echo \"$ERROR\" \"Failed to add result rule file ${RESULT_FILE} to DRA with return error code ${RC}.\"
            fi
        else
            log_and_echo \"$ERROR\" \"Failed to get result rule file ${RESULT_FILE}.\"
        fi
    fi

    if [ \"${ARCHIVE_DIR}\" == \"${WORKSPACE}\" ]; then 
       log_and_echo \"$INFO\" \"Achive directory is the working directory\"
    else 
        log_and_echo \"$INFO\" \"Archive directory is $ARCHIVE_DIR - copying all content to that directory\"
        pushd ${WORKSPACE} &> /dev/null
        # also copy .git metadata
        if [ -d .git ]; then
            tar -cf source.tar * .git
        else
            tar -cf source.tar *
        fi
        mv source.tar $ARCHIVE_DIR
        cd $ARCHIVE_DIR
        tar -xf source.tar 
        rm source.tar 
        popd &> /dev/null
    fi 

    if [ $RESULT -ne 0 ]; then
        log_and_echo \"$ERROR\" \"Issues found in or while getting compliance results.\"
        ${EXT_DIR}/utilities/sendMessage.sh -l bad -m \"completed with issues found in or while getting compliance results.\"
        end_script_time
        exit 1
    else
        log_and_echo \"$SUCCESSFUL\" \"Compliance and vulnerability scan was successful\"
        ${EXT_DIR}/utilities/sendMessage.sh -l good -m \"Compliance and vulnerability scan was successful.\"
    fi  
else 
    log_and_echo \"$ERROR\" \"Compliance scan helper script not available, failed.\"
    ${EXT_DIR}/utilities/sendMessage.sh -l good -m \"Compliance scan helper script not available, failed.\"
    end_script_time
    exit 1
fi  
"
    }
    },
    "project": "https://hub.jazz.net/project/alchemy/Alchemy-Ostanes",
    "project_example": "https://hub.jazz.net/pipeline/rjminsha/ice-pipeline_demo",
    "project_contact": "rjminsha@us.ibm.com"
}