367d560bfb
Assuming the default behavior will scan has lead to a bug with the alpine-nightly build. Better to just explicitly specify that we always want to scan when we're running it.
43 lines
2.3 KiB
Bash
43 lines
2.3 KiB
Bash
#!/bin/bash
|
|
DATETIME="`date '+%H:%M'`"
|
|
|
|
if [ -z "$INPUT_PATH" ]
|
|
then
|
|
echo "${DATETIME} - ERR input path can't be empty"
|
|
exit 1
|
|
else
|
|
INPUT_PARAM="-p $INPUT_PATH"
|
|
fi
|
|
|
|
[[ ! -z "$INPUT_OUTPUT_PATH" ]] && OUTPUT_PATH_PARAM="-o $INPUT_OUTPUT_PATH"
|
|
[[ ! -z "$INPUT_PAYLOAD_PATH" ]] && PAYLOAD_PATH_PARAM="-d $INPUT_PAYLOAD_PATH"
|
|
[[ ! -z "$INPUT_CONFIG_PATH" ]] && CONFIG_PATH_PARAM="--config $INPUT_CONFIG_PATH"
|
|
[[ ! -z "$INPUT_EXCLUDE_PATHS" ]] && EXCLUDE_PATHS_PARAM="-e $INPUT_EXCLUDE_PATHS"
|
|
[[ ! -z "$INPUT_EXCLUDE_RESULTS" ]] && EXCLUDE_RESULTS_PARAM="-x $INPUT_EXCLUDE_RESULTS"
|
|
[[ ! -z "$INPUT_EXCLUDE_QUERIES" ]] && EXCLUDE_QUERIES_PARAM="--exclude-queries $INPUT_EXCLUDE_QUERIES"
|
|
[[ ! -z "$INPUT_EXCLUDE_CATEGORIES" ]] && EXCLUDE_CATEGORIES_PARAM="--exclude-categories $INPUT_EXCLUDE_CATEGORIES"
|
|
[[ ! -z "$INPUT_OUTPUT_FORMATS" ]] && OUTPUT_FORMATS_PARAM="--report-formats $INPUT_OUTPUT_FORMATS"
|
|
[[ ! -z "$INPUT_PLATFORM_TYPE" ]] && PLATFORM_TYPE_PARAM="--type $INPUT_PLATFORM_TYPE"
|
|
|
|
[[ ! -z "$INPUT_VERBOSE" ]] && VERBOSE_PARAM="-v"
|
|
|
|
if [ ! -z "$INPUT_QUERIES" ]
|
|
then
|
|
QUERIES_PARAM="-q $INPUT_QUERIES"
|
|
else
|
|
QUERIES_PARAM="-q /usr/bin/assets/queries"
|
|
fi
|
|
|
|
tag=`curl --silent "https://api.github.com/repos/Checkmarx/kics/releases/latest" | grep '"tag_name":' | sed -E 's/.*"([^"]+)".*/\1/'`
|
|
echo "${DATETIME} - INF latest tag is $tag"
|
|
version=`echo $tag | sed -r 's/^.{1}//'`
|
|
echo "${DATETIME} - INF version is $version"
|
|
|
|
echo "${DATETIME} - INF downloading latest kics binaries kics_${version}_linux_x64.tar.gz"
|
|
wget -q -c "https://github.com/Checkmarx/kics/releases/download/${tag}/kics_${version}_linux_x64.tar.gz" -O - | tar -xz --directory /usr/bin &>/dev/null
|
|
|
|
echo "${DATETIME} - INF : current directory - ${PWD}"
|
|
echo "${DATETIME} - INF : about to scan directory $INPUT_PATH"
|
|
echo "${DATETIME} - INF : kics command kics $INPUT_PARAM $OUTPUT_PATH_PARAM $OUTPUT_FORMATS_PARAM $PLATFORM_TYPE_PARAM $PAYLOAD_PATH_PARAM $CONFIG_PATH_PARAM $EXCLUDE_PATHS_PARAM $EXCLUDE_CATEGORIES_PARAM $EXCLUDE_RESULTS_PARAM $EXCLUDE_QUERIES_PARAM $QUERIES_PARAM $VERBOSE_PARAM"
|
|
kics scan --no-progress $INPUT_PARAM $OUTPUT_PATH_PARAM $OUTPUT_FORMATS_PARAM $PLATFORM_TYPE_PARAM $PAYLOAD_PATH_PARAM $CONFIG_PATH_PARAM $EXCLUDE_PATHS_PARAM $EXCLUDE_CATEGORIES_PARAM $EXCLUDE_RESULTS_PARAM $EXCLUDE_QUERIES_PARAM $QUERIES_PARAM $VERBOSE_PARAM
|