Add add-attributes hook for integration tests

Author: J12934

hooks/add-attributes/.dockerignore

@@ -0,0 +1 @@
+node_modules/

hooks/add-attributes/.gitignore

@@ -0,0 +1 @@
+node_modules

hooks/add-attributes/.helmignore

@@ -0,0 +1,30 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
+.vscode/
+# Node.js files
+node_modules/*
+package.json
+package-lock.json
+src/*
+config/*
+Dockerfile
+.dockerignore

hooks/add-attributes/Chart.lock

@@ -0,0 +1,3 @@
+dependencies: []
+digest: sha256:643d5437104296e21d906ecb15b2c96ad278f20cfc4af53b12bb6069bd853726
+generated: "2020-05-26T16:56:03.119255+02:00"

hooks/add-attributes/Chart.yaml

@@ -0,0 +1,11 @@
+apiVersion: v2
+name: add-attributes-hook
+description: Lets you add new attributes to every finding
+
+type: application
+
+version: 0.1.0
+
+appVersion: latest
+
+dependencies: []

hooks/add-attributes/Dockerfile

@@ -0,0 +1,3 @@
+FROM scbexperimental/hook-sdk-nodejs:latest
+WORKDIR /home/app/hook-wrapper/hook/
+COPY --chown=app:app ./hook.js ./hook.js

hooks/add-attributes/hook.js

@@ -0,0 +1,18 @@
+async function handle({
+  getFindings,
+  updateFindings,
+  attributeName = process.env["ATTRIBUTE_NAME"],
+  attributeValue = process.env["ATTRIBUTE_VALUE"],
+}) {
+  const findings = await getFindings();
+
+  const newFindings = findings.map((finding) => {
+    finding.attributes[attributeName] = attributeValue;
+    return finding;
+  });
+
+  console.log(`Updated attributes on ${findings.length} findings`);
+
+  await updateFindings(newFindings);
+}
+module.exports.handle = handle;

hooks/add-attributes/hook.test.js

@@ -0,0 +1,33 @@
+const { handle } = require("./hook");
+
+test("should send a post request to the url when fired", async () => {
+  const findings = [
+    {
+      name: "Open Port",
+      attributes: {
+        hostname: "foobar.com",
+      },
+    },
+  ];
+
+  const getFindings = async () => findings;
+
+  const updateFindings = jest.fn();
+
+  await handle({
+    getFindings,
+    updateFindings,
+    attributeName: "cluster",
+    attributeValue: "gke-internal",
+  });
+
+  expect(updateFindings).toBeCalledWith([
+    {
+      name: "Open Port",
+      attributes: {
+        hostname: "foobar.com",
+        cluster: "gke-internal",
+      },
+    },
+  ]);
+});

hooks/add-attributes/templates/NOTES.txt

@@ -0,0 +1,2 @@
+AddAttribute Hook deployed.
+This will add a attribute "{{ .Values.attribute.name }}: {{ .Values.attribute.value }}" on every finding in this namespace.

hooks/add-attributes/templates/_helpers.tpl

@@ -0,0 +1,52 @@
+{{/* vim: set filetype=mustache: */}}
+{{/*
+Expand the name of the chart.
+*/}}
+{{- define "add-attribute.name" -}}
+{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}}
+{{- end -}}
+
+{{/*
+Create a default fully qualified app name.
+We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
+If release name contains chart name it will be used as a full name.
+*/}}
+{{- define "add-attribute.fullname" -}}
+{{- if .Values.fullnameOverride -}}
+{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" -}}
+{{- else -}}
+{{- $name := default .Chart.Name .Values.nameOverride -}}
+{{- if contains $name .Release.Name -}}
+{{- .Release.Name | trunc 63 | trimSuffix "-" -}}
+{{- else -}}
+{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}}
+{{- end -}}
+{{- end -}}
+{{- end -}}
+
+{{/*
+Create chart name and version as used by the chart label.
+*/}}
+{{- define "add-attribute.chart" -}}
+{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" -}}
+{{- end -}}
+
+{{/*
+Common labels
+*/}}
+{{- define "add-attribute.labels" -}}
+helm.sh/chart: {{ include "add-attribute.chart" . }}
+{{ include "add-attribute.selectorLabels" . }}
+{{- if .Chart.AppVersion }}
+app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
+{{- end }}
+app.kubernetes.io/managed-by: {{ .Release.Service }}
+{{- end -}}
+
+{{/*
+Selector labels
+*/}}
+{{- define "add-attribute.selectorLabels" -}}
+app.kubernetes.io/name: {{ include "add-attribute.name" . }}
+app.kubernetes.io/instance: {{ .Release.Name }}
+{{- end -}}