public bool Save(ThreatAssessment threatAssessment)
{
throw new NotImplementedException();
}
static void Main(string[] args)
{
// Build configuration
configuration = new ConfigurationBuilder()
.SetBasePath(AppContext.BaseDirectory)
.AddJsonFile("appsettings.json", false)
.AddEnvironmentVariables()
.Build();
string userName = configuration["Git::UserName"];
string password = configuration["Git::Password"];
string gitToken = configuration["Git::Token"];
// DI
var serviceProvider = new ServiceCollection()
.AddLogging()
.AddSingleton <IConfiguration>(configuration)
.AddSingleton <IGitHelper>(new Lib2GitHelper())
.AddSingleton <IGitRepositoryReporter>(new GitHubRepositoryReporter(gitToken))
.BuildServiceProvider();
List <string> repositoriesToScan = (serviceProvider.GetRequiredService <IGitRepositoryReporter>()).List();
List <IThreatAssessor> threatAssessors = new List <IThreatAssessor>()
{
new CachedThreatAssessor(),
new OSSThreatAssessor(configuration["SonaType::UserName"], configuration["SonaType::APIToken"])
};
IGitHelper gitHelper = serviceProvider.GetRequiredService <IGitHelper>();
gitHelper.Connect(userName, password);
foreach (string repositoryUrl in repositoriesToScan)
{
string localPath = @"c:\temp";
gitHelper.Clone(repositoryUrl, localPath, true);
List <string> commits = gitHelper.History(localPath);
string[] projectFiles = Directory.GetFiles(localPath, "*.csproj", new EnumerationOptions()
{
RecurseSubdirectories = true, MatchCasing = MatchCasing.CaseInsensitive
});
foreach (string projectFile in projectFiles)
{
IProjectScanner projectScanner = ProjectScannerFactory.Get(projectFile);
ProjectScannerResult scanResult = projectScanner.Scan(File.ReadAllText(projectFile));
foreach (var packageReference in scanResult.Packages)
{
ThreatAssessment assessment = null;
foreach (IThreatAssessor threatAssessor in threatAssessors)
{
assessment = threatAssessor.Assess(packageReference);
if (assessment != null)
{
break;
}
}
if (assessment != null)
{
// Cache to any assessor that allows caching
foreach (IThreatAssessor threatAssessor in threatAssessors.Where(thr => thr.CanSave))
{
threatAssessor.Save(assessment);
}
}
}
}
}
}
