Change add-attribute hook to update-field hook

This allows chaning other fields, like the category, name, location of the findings, not just the attribute

Author: J12934

.github/workflows/ci.yaml

@@ -239,6 +239,14 @@ jobs:
           repository: scbexperimental/test-read-write-hook
           path: ./hooks/test-read-write-hook/
           tag_with_ref: true
+      - uses: docker/build-push-action@v1
+        name: "Build & Push UpdateField Hook Image"
+        with:
+          username: ${{ secrets.DOCKER_USERNAME }}
+          password: ${{ secrets.DOCKER_PASSWORD }}
+          repository: scbexperimental/update-field
+          path: ./hooks/update-field/
+          tag_with_ref: true
   scannerImages:
     # Note we only build images for scanner that don't provider official public container images
     name: "Build / Scanner"

hooks/add-attributes/Dockerfile

@@ -1,6 +1,6 @@
 apiVersion: v2
-name: add-attributes-hook
-description: Lets you add new attributes to every finding
+name: update-field-hook
+description: Lets you add or override a field to every finding
 
 type: application
 

hooks/add-attributes/templates/NOTES.txt

@@ -0,0 +1,10 @@
+FROM node:12-alpine as build
+RUN mkdir -p /home/app
+WORKDIR /home/app
+COPY package.json package-lock.json ./
+RUN npm ci --production
+
+FROM scbexperimental/hook-sdk-nodejs:latest
+WORKDIR /home/app/hook-wrapper/hook/
+COPY --from=build --chown=app:app /home/app/node_modules/ ./node_modules/
+COPY --chown=app:app ./hook.js ./hook.js

hooks/add-attributes/.dockerignore hooks/update-field/.dockerignorehooks/add-attributes/.dockerignore renamed to hooks/update-field/.dockerignore

@@ -1,3 +1,5 @@
+const set = require("lodash.set");
+
 async function handle({
   getFindings,
   updateFindings,
@@ -7,7 +9,7 @@ async function handle({
   const findings = await getFindings();
 
   const newFindings = findings.map((finding) => {
-    finding.attributes[attributeName] = attributeValue;
+    set(finding, attributeName, attributeValue);
     return finding;
   });