-
Notifications
You must be signed in to change notification settings - Fork 1
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge pull request #6 from instriq/develop
refactor(core): migrate to Perl and modularize codebase
- Loading branch information
Showing
21 changed files
with
526 additions
and
229 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,6 +1,6 @@ | ||
| version: 2 | ||
| updates: | ||
| - package-ecosystem: "pip" | ||
| directory: "/" | ||
| - package-ecosystem: github-actions | ||
| directory: / | ||
| schedule: | ||
| interval: "weekly" | ||
| interval: weekly |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,28 @@ | ||
| name: Test Suite | ||
|
|
||
| on: | ||
| pull_request: | ||
| branches: | ||
| - main | ||
| - develop | ||
|
|
||
| jobs: | ||
| test: | ||
| runs-on: ubuntu-latest | ||
|
|
||
| steps: | ||
| - name: Checkout repository | ||
| uses: actions/checkout@v4 | ||
|
|
||
| - name: Setup Perl | ||
| run: | | ||
| sudo apt-get update | ||
| sudo apt-get install -y perl | ||
| sudo apt-get install -y cpanminus | ||
| - name: Install dependencies | ||
| run: sudo cpanm --installdeps --with-test . | ||
|
|
||
| - name: Run tests | ||
| working-directory: ./tests | ||
| run: prove -r |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,5 @@ | ||
| severity = 3 | ||
|
|
||
| [-TestingAndDebugging::RequireUseStrict] | ||
| [-TestingAndDebugging::RequireUseWarnings] | ||
| [-Subroutines::ProhibitManyArgs] |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,11 @@ | ||
| requires "Getopt::Long", "2.54"; | ||
| requires "Mojo::UserAgent"; | ||
| requires "Mojo::JSON"; | ||
| requires "DateTime"; | ||
| requires "DateTime::Format::ISO8601"; | ||
|
|
||
| on 'test' => sub { | ||
| requires "Test::More"; | ||
| requires "Test::MockModule"; | ||
| requires "Mojo::Transaction::HTTP"; | ||
| }; |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,66 @@ | ||
| package Sentra::Engine::DependabotMetrics { | ||
| use strict; | ||
| use warnings; | ||
| use Mojo::UserAgent; | ||
| use Mojo::JSON qw(decode_json); | ||
|
|
||
| sub new { | ||
| my ($class, $org, $token, $per_page) = @_; | ||
|
|
||
| my $ua = Mojo::UserAgent->new; | ||
| my $headers = { | ||
| 'X-GitHub-Api-Version' => '2022-11-28', | ||
| 'Accept' => 'application/vnd.github+json', | ||
| 'User-Agent' => 'Sentra 0.0.1', | ||
| 'Authorization' => "Bearer $token" | ||
| }; | ||
|
|
||
| my @repos; | ||
| my $repo_page = 1; | ||
| while (1) { | ||
| my $repo_url = "https://api.github.com/orgs/$org/repos?per_page=$per_page&page=$repo_page"; | ||
| my $repo_tx = $ua->get($repo_url => $headers); | ||
|
|
||
| my $res = $repo_tx->result or return "Error fetching repositories: " . $repo_tx->error->{message} . "\n"; | ||
| $res->is_success or return "Error fetching repositories: " . $res->message . "\n"; | ||
|
|
||
| my $repo_data = $res->json; | ||
| last unless @$repo_data; | ||
| push @repos, map { "$org/$_->{name}" } grep { !$_->{archived} } @$repo_data; | ||
| $repo_page++; | ||
| } | ||
|
|
||
| return "Error when trying to request information from GitHub, please review the parameters provided." unless @repos; | ||
|
|
||
| my $total_alerts = 0; | ||
| my %severity_count = (low => 0, medium => 0, high => 0, critical => 0); | ||
|
|
||
| for my $repo (@repos) { | ||
| my $alert_page = 1; | ||
| while (1) { | ||
| my $alert_url = "https://api.github.com/repos/$repo/dependabot/alerts?state=open&per_page=$per_page&page=$alert_page"; | ||
| my $alert_tx = $ua->get($alert_url => $headers); | ||
|
|
||
| my $res = $alert_tx->result or return "Error fetching alerts for $repo: " . $alert_tx->error->{message} . "\n"; | ||
| $res->is_success or return "Error fetching alerts for $repo: " . $res->message . "\n"; | ||
|
|
||
| my $alert_data = $res->json; | ||
| last unless @$alert_data; | ||
| $total_alerts += scalar @$alert_data; | ||
| for my $alert (@$alert_data) { | ||
| my $severity = $alert->{security_vulnerability}{severity} || 'unknown'; | ||
| $severity_count{$severity}++ if exists $severity_count{$severity}; | ||
| } | ||
| $alert_page++; | ||
| } | ||
| } | ||
|
|
||
| my $output = ""; | ||
| $output .= "Severity $_: $severity_count{$_}\n" for keys %severity_count; | ||
| $output .= "Total DependaBot Alerts: $total_alerts\n"; | ||
|
|
||
| return $output; | ||
| } | ||
| } | ||
|
|
||
| 1; |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,59 @@ | ||
| package Sentra::Engine::SearchFiles { | ||
| use strict; | ||
| use warnings; | ||
| use Mojo::UserAgent; | ||
| use Mojo::JSON qw(decode_json); | ||
| use DateTime; | ||
| use DateTime::Format::ISO8601; | ||
|
|
||
| sub new { | ||
| my ($class, $org, $token, $maintained, $dependency, $per_page) = @_; | ||
|
|
||
| my $ua = Mojo::UserAgent->new; | ||
| my $headers = { | ||
| 'Authorization' => "Bearer $token", | ||
| 'Accept' => 'application/vnd.github+json', | ||
| 'X-GitHub-Api-Version' => '2022-11-28' | ||
| }; | ||
|
|
||
| my $output = ''; | ||
|
|
||
| my $repo_url = "https://api.github.com/orgs/$org/repos?per_page=$per_page"; | ||
| my $repo_tx = $ua->get($repo_url => $headers); | ||
|
|
||
| my $res = $repo_tx->result or return "Error fetching repositories: " . $repo_tx->error->{message} . "\n"; | ||
| $res->is_success or return "Error fetching repositories: " . $res->message . "\n"; | ||
|
|
||
| my $repos = $res->json; | ||
| for my $repo (@$repos) { | ||
| next if $repo->{archived}; | ||
| my $full_name = "$org/$repo->{name}"; | ||
|
|
||
| if ($dependency) { | ||
| my $dependabot_url = "https://api.github.com/repos/$full_name/contents/.github/dependabot.yaml"; | ||
| my $dependabot_tx = $ua->get($dependabot_url => $headers); | ||
| $output .= "The dependabot.yml file was not found in this repository: https://github.com/$full_name\n" | ||
| if $dependabot_tx->result->code == 404; | ||
| } | ||
|
|
||
| if ($maintained) { | ||
| my $commits_url = "https://api.github.com/repos/$full_name/commits"; | ||
| my $commits_tx = $ua->get($commits_url => $headers); | ||
| my $commits_res = $commits_tx->result; | ||
| if ($commits_res && $commits_res->is_success) { | ||
| my $commits = $commits_res->json; | ||
| if (@$commits) { | ||
| my $last_commit_date_str = $commits->[0]{commit}{committer}{date}; | ||
| my $last_commit_date = DateTime::Format::ISO8601->parse_datetime($last_commit_date_str); | ||
| $output .= "The repository https://github.com/$full_name has not been updated for more than 90 days.\n" | ||
| if DateTime->now->subtract(days => 90) > $last_commit_date; | ||
| } | ||
| } | ||
| } | ||
| } | ||
|
|
||
| return $output || "No issues found."; | ||
| } | ||
| } | ||
|
|
||
| 1; |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,29 @@ | ||
| package Sentra::Engine::SlackWebhook { | ||
| use strict; | ||
| use warnings; | ||
| use Mojo::UserAgent; | ||
| use Mojo::JSON qw(encode_json); | ||
|
|
||
| sub new { | ||
| my ($class, $message, $webhook) = @_; | ||
|
|
||
| my $ua = Mojo::UserAgent->new; | ||
| my $payload = encode_json({text => $message}); | ||
|
|
||
| my $tx = $ua->post($webhook => { | ||
| 'Content-Type' => 'application/json' | ||
| } => $payload); | ||
|
|
||
| my $res = $tx->result; | ||
| unless ($res) { | ||
| my $err = $tx->error; | ||
| return "Failed to send message: [" . ($err->{message} || "Unknown error") . "]\n"; | ||
| } | ||
|
|
||
| return "Failed to send message: [" . $res->message . "]\n" unless $res->is_success; | ||
|
|
||
| return "Message sent successfully! [" . $res->body . "]\n"; | ||
| } | ||
| } | ||
|
|
||
| 1; |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,25 @@ | ||
| package Sentra::Utils::Helper { | ||
| use strict; | ||
| use warnings; | ||
|
|
||
| sub new { | ||
| return <<"EOT"; | ||
| Sentra v0.0.1 | ||
| Core Commands | ||
| ============== | ||
| Command Description | ||
| ------- ----------- | ||
| -o, --org Specify the name of the organization | ||
| -t, --token Set the GitHub Token to use during actions | ||
| -w, --webhook Set the webhook address for Slack | ||
| -m, --message Message to send via Slack webhook | ||
| -mt, --maintained Check last commit date of repositories | ||
| -d, --dependency Check for dependabot.yaml file in repositories | ||
| -p, --per_page Set the number of items per page in API requests (default: 100) | ||
| EOT | ||
| } | ||
| } | ||
|
|
||
| 1; |
This file was deleted.
Oops, something went wrong.
Oops, something went wrong.