old_apisec_job_invoke_script.sh

#!/bin/bash
# Begin
TEMP=$(getopt -n "$0" -a -l "host:,username:,password:,project:,profile:,scanner:,emailReport:,reportType:,outputfile:, tags:,fail-on-high-vulns,openApiSpecUrl,oas,playbookCreatePolicy:,scanAllProjects:,category:" -- -- "$@")

    [ $? -eq 0 ] || exit

    eval set --  "$TEMP"

    while [ $# -gt 0 ]
    do
             case "$1" in
		    --host) FX_HOST="$2"; shift;;
                    --username) FX_USER="$2"; shift;;
                    --password) FX_PWD="$2"; shift;;
                    --project) FX_PROJECT_NAME="$2"; shift;;
                    --profile) JOB_NAME="$2"; shift;;
                    --scanner) REGION="$2"; shift;;
                    --emailReport) FX_EMAIL_REPORT="$2"; shift;;
                    --reportType) FX_REPORT_TYPE="$2"; shift;;
                    --fail-on-high-vulns) FAIL_ON_HIGH_VULNS="$2"; shift;;
                    --oas) OAS="$2"; shift;;
                    --openApiSpecUrl) OPEN_API_SPEC_URL="$2"; shift;;
                    --playbookCreatePolicy) PLAYBOOK_CREATE_POLICY="$2"; shift;;             
                    --scanAllProjects) SCAN_ALL_PROJECTS="$2"; shift;;
                    --category) CAT="$2"; shift;;
                    --tags) FX_TAGS="$2"; shift;;
                    --) shift;;
             esac
             shift;
    done
    
#FX_USER=$1
#FX_PWD=$2
#FX_JOBID=$3
#REGION=$4
#FX_ENVID=$5
#FX_PROJECTID=$6
#FX_EMAIL_REPORT=$7
#FX_TAGS=$8

if [ "$FX_HOST" = "" ];
then
FX_HOST="https://cloud.apisec.ai"
fi

FX_SCRIPT=""
if [ "$FX_TAGS" != "" ];
then
FX_SCRIPT="&tags=script:"+${FX_TAGS}
fi

if   [ "$FAIL_ON_HIGH_VULNS" == ""  ]; then
        FAIL_ON_HIGH_VULNS=false
fi

if   [ "$OAS" == ""  ]; then
        OAS=false
fi

#if   [ "$PLAYBOOK_CREATE_POLICY" == ""  ] || [ "$OAS" = true ]; then
if   [ "$PLAYBOOK_CREATE_POLICY" == ""  ]; then
        PLAYBOOK_CREATE_POLICY=false
fi

if [ "$SCAN_ALL_PROJECTS" == "" ]; then
      SCAN_ALL_PROJECTS=false
fi

token=$(curl -s -H "Content-Type: application/json" -X POST -d '{"username": "'${FX_USER}'", "password": "'${FX_PWD}'"}' ${FX_HOST}/login | jq -r .token)

echo "generated token is:" $token

if [ "$OAS" = true ]; then

     getProjectName=$(curl -s -X GET "${FX_HOST}/api/v1/projects/find-by-name/${FX_PROJECT_NAME}" -H "accept: */*"  --header "Authorization: Bearer "$token"" | jq -r '.data|.name')

     if [ "$getProjectName" == null ];
     then
          curl -s  -H "Accept: application/json" -H "Content-Type: application/json" --location --request POST "${FX_HOST}/api/v1/projects" --header "Authorization: Bearer "$token"" -d  '{"name":"'${FX_PROJECT_NAME}'","openAPISpec":"'${OPEN_API_SPEC_URL}'","planType":"ENTERPRISE","isFileLoad": false,"personalizedCoverage":{"auths":[]}}' > /dev/null
                sleep 5
                dto=$(curl -s --location --request GET  "${FX_HOST}/api/v1/projects/find-by-name/${FX_PROJECT_NAME}" --header "Accept: application/json" --header "Content-Type: application/json" --header "Authorization: Bearer "$token"" | jq -r '.data')
                projectId=$(echo "$dto" | jq -r '.id')

                curl -s -X PUT "${FX_HOST}/api/v1/projects/${projectId}/refresh-specs" -H "accept: */*" -H "Content-Type: application/json" --header "Authorization: Bearer "$token"" -d "$dto" > /dev/null
     
                playbookTaskStatus="In_progress"
                echo "playbookTaskStatus = " $playbookTaskStatus
                retryCount=0
                pCount=0

                while [ "$playbookTaskStatus" == "In_progress" ]
                        do
                            if [ $pCount -eq 0 ]; then
                                 echo "Checking playbooks generate task Status...."
                            fi
                            pCount=`expr $pCount + 1`  
                            retryCount=`expr $retryCount + 1`  
                            sleep 2

                            playbookTaskStatus=$(curl -s -X GET "${FX_HOST}/api/v1/events/project/${projectId}/Sync" -H "accept: */*" -H "Content-Type: application/json" --header "Authorization: Bearer "$token"" | jq -r '."data".status')
                            #playbookTaskStatus="In_progress"
                            if [ "$playbookTaskStatus" == "Done" ]; then
                                 echo "Playbooks generation task for the registered project $FX_PROJECT_NAME is succesfully completed!!!"
                            fi

                            if [ $retryCount -ge 55  ]; then
                                 echo " "
                                 retryCount=`expr $retryCount \* 2`  
                                 echo "Playbooks Generation Task Status $playbookTaskStatus even after $retryCount seconds, so halting/breaking script execution!!!"
                                 exit 1
                            fi
                        done
                PLAYBOOK_CREATE_POLICY=false

     else
          echo "$FX_PROJECT_NAME project already exists."          
          echo " "
     fi
    
fi


if [ "$PLAYBOOK_CREATE_POLICY" = true ]; then

      dto=$(curl -s --location --request GET  "${FX_HOST}/api/v1/projects/find-by-name/${FX_PROJECT_NAME}" --header "Accept: application/json" --header "Content-Type: application/json" --header "Authorization: Bearer "$token"" | jq -r '.data')
      projectId=$(echo "3$dto" | jq -r '.id')

     curl -s -X PUT "${FX_HOST}/api/v1/projects/${projectId}/refresh-specs" -H "accept: */*" -H "Content-Type: application/json" --header "Authorization: Bearer "$token"" -d "$dto" > /dev/null
     
    playbookTaskStatus="In_progress"
    echo "playbookTaskStatus = " $playbookTaskStatus
    retryCount=0
    pCount=0

    while [ "$playbookTaskStatus" == "In_progress" ]
           do
                if [ $pCount -eq 0 ]; then
                     echo "Checking playbooks regenerate task Status...."
                fi
                pCount=`expr $pCount + 1`  
                retryCount=`expr $retryCount + 1`  
                sleep 2

                playbookTaskStatus=$(curl -s -X GET "${FX_HOST}/api/v1/events/project/${projectId}/Sync" -H "accept: */*" -H "Content-Type: application/json" --header "Authorization: Bearer "$token"" | jq -r '."data".status')
                #playbookTaskStatus="In_progress"
                if [ "$playbookTaskStatus" == "Done" ]; then
                     echo "Playbooks regenerate task is succesfully completed!!!"
                fi

                if [ $retryCount -ge 55  ]; then
                     echo " "
                     retryCount=`expr $retryCount \* 2`  
                     echo "Playbook Regenerate Task Status $playbookTaskStatus even after $retryCount seconds, so halting script execution!!!"
                     exit 1
                fi                            
           done
  
fi

if [ "$SCAN_ALL_PROJECTS" = true ]; then
    
     projList=$(curl -s -X GET "$FX_HOST/api/v1/projects/myProjects?page=0&pageSize=20&sort=createdDate&sortType=DESC" -H "accept: */*"  --header "Authorization: Bearer "$token"" | jq -r '.data[]|.name')
     #echo "$projList"
     tprojCount=1
     for proj in ${projList}
       do
                  URL="${FX_HOST}/api/v1/runs/project/${proj}?jobName=${JOB_NAME}&region=${REGION}&emailReport=${FX_EMAIL_REPORT}&reportType=${FX_REPORT_TYPE}${FX_SCRIPT}"		  
                  url=$( echo "$URL" | sed 's/ /%20/g' )
		  echo "The request is $url"
                  data=$(curl -s --location --request POST "$url" --header "Authorization: Bearer "$token"" | jq -r '.["data"]')
                  runId=$( jq -r '.id' <<< "$data")
                  projectId=$( jq -r '.job.project.id' <<< "$data")
                  echo "ProjectName: $proj"
                  echo "Scanned project count No. $tprojCount"
                  #runId=$(curl -s --location --request POST "$url" --header "Authorization: Bearer "$token"" | jq -r '.["data"]|.id')

                  echo "runId =" $runId
                  #if [ -z "$runId" ]
                  if [ "$runId" == null ]
                  then
                         echo "RunId = " "$runId"
                         echo "Invalid runid"
                         echo $(curl -s --location --request POST "${FX_HOST}/api/v1/runs/project/${proj}?jobName=${JOB_NAME}&region=${REGION}&emailReport=${FX_EMAIL_REPORT}&reportType=${FX_REPORT_TYPE}${FX_SCRIPT}" --header "Authorization: Bearer "$token"" | jq -r '.["data"]|.id')
                         exit 1
                  fi


                  taskStatus="WAITING"
                  echo "taskStatus = " $taskStatus

                  while [ "$taskStatus" == "WAITING" -o "$taskStatus" == "PROCESSING" ]
                           do
                               sleep 5
                               echo "Checking Status...."

                               passPercent=$(curl -s --location --request GET "${FX_HOST}/api/v1/runs/${runId}" --header "Authorization: Bearer "$token""| jq -r '.["data"]|.ciCdStatus')

                               IFS=':' read -r -a array <<< "$passPercent"
  
                               taskStatus="${array[0]}"

                               echo "Status =" "${array[0]}" " Success Percent =" "${array[1]}"  " Total Tests =" "${array[2]}" " Total Failed =" "${array[3]}" " Run =" "${array[6]}"
                               # VAR2=$(echo "Status =" "${array[0]}" " Success Percent =" "${array[1]}"  " Total Tests =" "${array[2]}" " Total Failed =" "${array[3]}" " Run =" "${array[6]}")      


                               if [ "$taskStatus" == "COMPLETED" ];then
                                        echo "------------------------------------------------"
                                        # echo  "Run detail link ${FX_HOST}/${array[7]}"
                                        echo  "Run detail link ${FX_HOST}${array[7]}"
                                        echo "-----------------------------------------------"
                                        echo "Scan Successfully Completed"
                                        echo " "
                                        if [ "$FAIL_ON_HIGH_VULNS" = true ]; then
                                               severity=$(curl -s -X GET "${FX_HOST}/api/v1/projects/${projectId}/vulnerabilities?&severity=All&page=0&pageSize=20" -H "accept: */*"  "Content-Type: application/json" --header "Authorization: Bearer "$token"" | jq -r '.data[] | .severity')

                                               cVulCount=0
                                               for vul in ${severity}
                                                  do
                                                
                                                      if [ "$vul" == "Critical"  ]; then
                                                  
                                                            cVulCount=`expr $cVulCount + 1`                                           
                                                      fi

                                                  done
                                                echo "Found $cVulCount Critical Severity Vulnerabilities in $proj project!!!"
                                                echo " "

                                                hVulCount=0
                                                for vul in ${severity}
                                                   do
                                                
                                                        if [ "$vul" == "High"  ]; then
                                                              hVulCount=`expr $hVulCount + 1`                                           
                                           
                                                        fi

                                                   done
                                                echo "Found $hVulCount High Severity Vulnerabilities in $proj project!!!"
                                                echo " "

                                                majVulCount=0
                                                for vul in ${severity}
                                                   do
                                                
                                                        if [ "$vul" == "Major"  ]; then
                                                 
                                                               majVulCount=`expr $majVulCount + 1`
                                                        fi
                                          
                                                   done
                                                echo "Found $majVulCount Major Severity Vulnerabilities in $proj project!!!"
                                                echo " "

                                                medVulCount=0
                                                for vul in ${severity}
                                                    do
                                                
                                                        if [ "$vul" == "Medium"  ]; then
                                                
                                                               medVulCount=`expr $medVulCount + 1`
                                                        fi
                                          
                                                    done
                                                echo "Found $medVulCount Medium Severity Vulnerabilities in $proj project!!!"
                                                echo " "

                                                minVulCount=0
                                                for vul in ${severity}
                                                    do
                                                
                                                        if [ "$vul" == "Minor"  ]; then
                                                
                                                               minVulCount=`expr $minVulCount + 1`
                                                        fi
                                          
                                                    done
                                                echo "Found $minVulCount Minor Severity Vulnerabilities in $proj project!!!"
                                                echo " "

                                                lowVulCount=0
                                                for vul in ${severity}
                                                    do
                                                
                                                        if [ "$vul" == "Low"  ]; then

                                                               lowVulCount=`expr $lowVulCount + 1`                                                
                                                        fi
                                          
                                                    done
                                                echo "Found $lowVulCount Low Severity Vulnerabilities in $proj project!!!"
                                                echo " "

                                                triVulCount=0
                                                for vul in ${severity}
                                                    do                                                
                                                        if [ "$vul" == "Trivial"  ]; then
                                                
                                                               triVulCount=`expr $triVulCount + 1` 
                                                        fi                                          
                                                    done
                                                echo "Found $triVulCount Trivial Severity Vulnerabilities in $projS projectS!!!"
                                                echo " "

                                                 vCount=1
                                                 for vul in ${severity}
                                                     do
                                                
                                                         if  [ "$vul" == "Critical"  ] || [ "$vul" == "High"  ] ; then
                                                                 echo "Failing script execution since we have found "$vul" severity vulnerability in $proj project!!!"
                                                                 exit 1
                                           
                                                         fi
                                                         vCount=`expr $vCount + 1`
                                                     done
                            
                            
                                        fi 
                                    #exit 0

                               fi
                           done

                           if [ "$taskStatus" == "TIMEOUT" ];then
                                  echo "Task Status = " $taskStatus
                                  exit 1
                                  
                           fi
             tprojCount=`expr $tprojCount + 1`
             
                           #echo "$(curl -s --location --request GET "${FX_HOST}/api/v1/runs/${runId}" --header "Authorization: Bearer "$token"")"
                           #exit 1
       done
       tprojCount=`expr $tprojCount - 1`
       echo " "
       echo "Total no. of projects scanned: $tprojCount"
       exit 0
else
     URL="${FX_HOST}/api/v1/runs/project/${FX_PROJECT_NAME}?jobName=${JOB_NAME}&region=${REGION}&categories=${CAT}&emailReport=${FX_EMAIL_REPORT}&reportType=${FX_REPORT_TYPE}${FX_SCRIPT}"
     url=$( echo "$URL" | sed 's/ /%20/g' )
     echo "The request is $url"
     data=$(curl -s --location --request POST "$url" --header "Authorization: Bearer "$token"" | jq -r '.["data"]')
     runId=$( jq -r '.id' <<< "$data")
     projectId=$( jq -r '.job.project.id' <<< "$data")
     #runId=$(curl -s --location --request POST "$url" --header "Authorization: Bearer "$token"" | jq -r '.["data"]|.id')

     echo "runId =" $runId
     #if [ -z "$runId" ]
     if [ "$runId" == null ]
     then
          echo "RunId = " "$runId"
          echo "Invalid runid"
          echo $(curl -s --location --request POST "${FX_HOST}/api/v1/runs/project/${FX_PROJECT_NAME}?jobName=${JOB_NAME}&region=${REGION}&emailReport=${FX_EMAIL_REPORT}&reportType=${FX_REPORT_TYPE}${FX_SCRIPT}" --header "Authorization: Bearer "$token"" | jq -r '.["data"]|.id')
          exit 1
     fi


     taskStatus="WAITING"
     echo "taskStatus = " $taskStatus

     while [ "$taskStatus" == "WAITING" -o "$taskStatus" == "PROCESSING" ]
              do
                    sleep 5
                    echo "Checking Status...."

                    passPercent=$(curl -s --location --request GET "${FX_HOST}/api/v1/runs/${runId}" --header "Authorization: Bearer "$token""| jq -r '.["data"]|.ciCdStatus')

                           IFS=':' read -r -a array <<< "$passPercent"
  
                           taskStatus="${array[0]}"

                           echo "Status =" "${array[0]}" " Success Percent =" "${array[1]}"  " Total Tests =" "${array[2]}" " Total Failed =" "${array[3]}" " Run =" "${array[6]}"
                           # VAR2=$(echo "Status =" "${array[0]}" " Success Percent =" "${array[1]}"  " Total Tests =" "${array[2]}" " Total Failed =" "${array[3]}" " Run =" "${array[6]}")      


                           if [ "$taskStatus" == "COMPLETED" ];then
                                 echo "------------------------------------------------"
                                 # echo  "Run detail link ${FX_HOST}/${array[7]}"
                                 echo  "Run detail link ${FX_HOST}${array[7]}"
                                 echo "-----------------------------------------------"
                                 echo "Scan Successfully Completed"
                                 echo " "                                 
                                 if [ "$FAIL_ON_HIGH_VULNS" = true ]; then
                                  severity=$(curl -s -X GET "${FX_HOST}/api/v1/projects/${projectId}/vulnerabilities?&severity=All&page=0&pageSize=20" -H "accept: */*"  "Content-Type: application/json" --header "Authorization: Bearer "$token"" | jq -r '.data[] | .severity')

                                  cVulCount=0
                                  for vul in ${severity}
                                      do
                                                
                                            if [ "$vul" == "Critical"  ]; then
                                                  
                                                 cVulCount=`expr $cVulCount + 1`                                           
                                            fi

                                      done
                                  echo "Found $cVulCount Critical Severity Vulnerabilities!!!"
                                  echo " "

                                  hVulCount=0
                                  for vul in ${severity}
                                      do
                                                
                                            if [ "$vul" == "High"  ]; then
                                                 hVulCount=`expr $hVulCount + 1`                                           
                                           
                                            fi

                                      done
                                  echo "Found $hVulCount High Severity Vulnerabilities!!!"
                                  echo " "

                                  majVulCount=0
                                  for vul in ${severity}
                                      do
                                                
                                            if [ "$vul" == "Major"  ]; then
                                                 
                                                  majVulCount=`expr $majVulCount + 1`
                                            fi
                                          
                                      done
                                  echo "Found $majVulCount Major Severity Vulnerabilities!!!"
                                  echo " "

                                  medVulCount=0
                                  for vul in ${severity}
                                      do
                                                
                                            if [ "$vul" == "Medium"  ]; then
                                                
                                                  medVulCount=`expr $medVulCount + 1`
                                            fi
                                          
                                      done
                                  echo "Found $medVulCount Medium Severity Vulnerabilities!!!"
                                  echo " "

                                  minVulCount=0
                                  for vul in ${severity}
                                      do
                                                
                                            if [ "$vul" == "Minor"  ]; then
                                                
                                                  minVulCount=`expr $minVulCount + 1`
                                            fi
                                          
                                      done
                                  echo "Found $minVulCount Minor Severity Vulnerabilities!!!"
                                  echo " "

                                  lowVulCount=0
                                  for vul in ${severity}
                                      do
                                                
                                            if [ "$vul" == "Low"  ]; then

                                                  lowVulCount=`expr $lowVulCount + 1`  
                                              
                                            fi
                                          
                                      done
                                  echo "Found $lowVulCount Low Severity Vulnerabilities!!!"
                                  echo " "

                                  triVulCount=0
                                  for vul in ${severity}
                                      do
                                                
                                            if [ "$vul" == "Trivial"  ]; then
                                                
                                                  triVulCount=`expr $triVulCount + 1` 
                                           
                                            fi
                                          
                                      done
                                  echo "Found $triVulCount Trivial Severity Vulnerabilities!!!"
                                  echo " "

                                  vCount=1
                                  for vul in ${severity}
                                      do
                                                
                                            if  [ "$vul" == "Critical"  ] || [ "$vul" == "High"  ] ; then
                                                   echo "Failing script execution since we have found "$vul" severity vulnerability!!!"
                                                   exit 1
                                           
                                            fi
                                            vCount=`expr $vCount + 1`
                                      done
                            
                            
                                 fi 
                                 exit 0

                        fi
              done

              if [ "$taskStatus" == "TIMEOUT" ];then
                    echo "Task Status = " $taskStatus
                    exit 1
              fi

                    echo "$(curl -s --location --request GET "${FX_HOST}/api/v1/runs/${runId}" --header "Authorization: Bearer "$token"")"
                    exit 1
fi                    
return 0