Merge pull request #737 from okta/arvindkrishnakumar-okta-patch-4

Add RL Scanner to CCI

.circleci/config.yml

@@ -2,7 +2,9 @@ version: 2.1
 
 orbs:
   general-platform-helpers: okta/[email protected]
-
+  python: circleci/[email protected]
+  aws-cli: circleci/[email protected]
+
 aliases:
 
   - &build_steps
@@ -31,6 +33,50 @@ jobs:
           run-on-non-main: true
           additional-arguments: "--maven-aggregate-project"
 
+  reversing-labs:
+    docker:
+      - image: cimg/openjdk:21.0.0
+    steps:
+      - checkout
+
+      - run:
+          name: Install Python
+          command: |
+            sudo apt-get update
+            sudo apt-get install -y python3 python3-pip
+            sudo pip install --upgrade pip
+      - run:
+          name: Download Reverse Labs Scanner
+          command: |
+            curl https://dso-resources.oktasecurity.com/scanner \
+              -H "x-api-key: $DSO_RLSECURE_TOKEN" \
+              --output rl_wrapper-0.0.2+35ababa-py3-none-any.whl
+      # Install the wrapper that was downloaded
+      - run:
+          name: Install RL Wrapper
+          command: |
+            pip install ./rl_wrapper-0.0.2+35ababa-py3-none-any.whl
+      # Setup the AWS profile
+      - aws-cli/setup:
+          profile_name: default
+          role_arn: $AWS_ARN
+          region: us-east-1
+      # Get the credentials and save to env
+      - run: >-
+          eval "$(aws configure export-credentials --profile default --format env)" 2> /dev/null
+      # Run the wrapper, do not change anything here
+      - run:
+          name: Run Reversing Labs Wrapper Scanner
+          command: |
+            rl-wrapper \
+              --artifact ${CIRCLE_WORKING_DIRECTORY/#\~/$HOME} \
+              --name $CIRCLE_PROJECT_REPONAME\
+              --version $CIRCLE_SHA1\
+              --repository $CIRCLE_PROJECT_USERNAME/$CIRCLE_PROJECT_REPONAME \
+              --commit $CIRCLE_SHA1 \
+              --build-env "circleci" \
+              --suppress_output  
+
 workflows:
   build_and_test:
     jobs:
@@ -43,3 +89,8 @@ workflows:
            name: execute-snyk
            context:
              - static-analysis
+  "Malware Scanner":
+    jobs:
+      - reversing-labs:
+          context:
+            - static-analysis