forked from secureCodeBox/secureCodeBox
-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathhook.js
More file actions
53 lines (49 loc) · 1.59 KB
/
hook.js
File metadata and controls
53 lines (49 loc) · 1.59 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
/**
Copyright 2020 iteratec GmbH
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/
const { isMatch, merge } = require("lodash");
async function handle({
getFindings,
updateFindings,
rules = JSON.parse(process.env["RULES"]),
}) {
const findings = await getFindings();
const res = applyRules(rules, findings);
if (res.hasChanged) {
await updateFindings(res.findings);
}
}
module.exports.handle = handle;
/**
* Goes through the Findings and the Finding Post Processing Rules
* and applies the changes to the findings defined in the rules if matching
*/
function applyRules(rules, findings) {
let hasChanged = false;
const newFindings = findings.map((finding) => {
let newFinding = finding;
for (const rule of rules) {
const isRuleMatching = rule.matches.anyOf.some((condition) =>
isMatch(finding, condition)
);
if (isRuleMatching) {
hasChanged = true;
newFinding = postProcessFinding(finding, rule);
}
}
return newFinding;
});
return { hasChanged, findings: newFindings };
}
function postProcessFinding(finding, rule) {
return merge(finding, rule.override);
}