Skip to content

Commit e57f6e0

Browse files
aniket-oktaaniket-okta
committed
chore: integrate snyk scan and semgrep, and fix malware scanner
1 parent 171ab55 commit e57f6e0

File tree

3 files changed

+154
-134
lines changed

3 files changed

+154
-134
lines changed

‎.circleci/config.yaml‎

Lines changed: 0 additions & 70 deletions
This file was deleted.

‎.circleci/config.yml‎

Lines changed: 150 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,150 @@
1+
version: 2.1
2+
3+
orbs:
4+
general-platform-helpers: okta/general-platform-helpers@1.9
5+
platform-helpers: okta/platform-helpers@1
6+
python: circleci/python@2.0.3
7+
aws-cli: circleci/aws-cli@5.1
8+
9+
jobs:
10+
reversing-labs:
11+
docker:
12+
- image: mcr.microsoft.com/dotnet/sdk:6.0
13+
steps:
14+
- run:
15+
name: Manual HTTPS checkout (avoid SSH)
16+
command: |
17+
git --version
18+
rm -rf .git || true
19+
git init .
20+
git remote add origin https://github.com/$CIRCLE_PROJECT_USERNAME/$CIRCLE_PROJECT_REPONAME.git
21+
git fetch --depth=1 origin $CIRCLE_SHA1
22+
git checkout --force $CIRCLE_SHA1
23+
24+
- run: dotnet --version
25+
26+
- run:
27+
name: Build Binary to scan
28+
command: |
29+
dotnet build ./Okta.Xamarin/Okta.Xamarin/Okta.Xamarin.csproj --configuration Release
30+
dotnet build ./Okta.Xamarin/Tests/Okta.Xamarin.Test/Okta.Xamarin.Test.csproj --configuration Release
31+
dotnet build ./Okta.Xamarin/Tests/Okta.Xamarin.UITest.Shared/Okta.Xamarin.UITest.Shared.shproj --configuration Release
32+
33+
# Necessary to Install rl wrapper
34+
- run:
35+
name: Install Python
36+
command: |
37+
apt-get update
38+
apt-get install -y curl python3 python3-pip unzip
39+
pip3 install --upgrade pip
40+
41+
# Download the scanner from Okta Security
42+
- run:
43+
name: Download Reverse Labs Scanner
44+
command: |
45+
curl https://dso-resources.oktasecurity.com/scanner \
46+
-H "x-api-key: $DSO_RLSECURE_TOKEN" \
47+
--output rl_wrapper-0.0.2+35ababa-py3-none-any.whl
48+
49+
# Install the wrapper that was downloaded
50+
- run:
51+
name: Install RL Wrapper
52+
command: |
53+
pip3 install ./rl_wrapper-0.0.2+35ababa-py3-none-any.whl
54+
55+
# Setup the AWS profile
56+
- aws-cli/setup:
57+
profile_name: default
58+
role_arn: $AWS_ARN
59+
region: us-east-1
60+
61+
# Get the credentials and save to env
62+
- run:
63+
name: Export AWS credentials to environment
64+
command: >-
65+
eval "$(aws configure export-credentials --profile default --format env)" 2> /dev/null
66+
67+
# Run the wrapper, do not change anything here
68+
- run:
69+
name: Run Reversing Labs Wrapper Scanner
70+
command: |
71+
rl-wrapper \
72+
--artifact ${CIRCLE_WORKING_DIRECTORY/#\~/$HOME} \
73+
--name $CIRCLE_PROJECT_REPONAME\
74+
--version $CIRCLE_SHA1\
75+
--repository $CIRCLE_PROJECT_USERNAME/$CIRCLE_PROJECT_REPONAME \
76+
--commit $CIRCLE_SHA1 \
77+
--build-env "circleci" \
78+
--suppress_output
79+
80+
build:
81+
docker:
82+
- image: mcr.microsoft.com/dotnet/sdk:6.0
83+
environment:
84+
CIRCLE_CI: true
85+
steps:
86+
- run:
87+
name: Manual HTTPS checkout (avoid SSH)
88+
command: |
89+
set -e
90+
git --version || (apt-get update -y && apt-get install -y --no-install-recommends git ca-certificates curl && rm -rf /var/lib/apt/lists/*)
91+
rm -rf .git || true
92+
git init .
93+
git remote add origin https://github.com/$CIRCLE_PROJECT_USERNAME/$CIRCLE_PROJECT_REPONAME.git
94+
git fetch --depth=1 origin $CIRCLE_SHA1
95+
git checkout --force $CIRCLE_SHA1
96+
git config --global --add safe.directory "$(pwd)"
97+
- run:
98+
name: Restore solutions
99+
command: |
100+
dotnet restore ./Okta.Xamarin/Okta.Xamarin/Okta.Xamarin.csproj
101+
dotnet restore ./Okta.Xamarin/Tests/Okta.Xamarin.Test/Okta.Xamarin.Test.csproj
102+
dotnet restore ./Okta.Xamarin/Tests/Okta.Xamarin.UITest.Shared/Okta.Xamarin.UITest.Shared.shproj
103+
104+
- run:
105+
name: Build solutions
106+
command: |
107+
dotnet build ./Okta.Xamarin/Okta.Xamarin/Okta.Xamarin.csproj --configuration Release --no-restore
108+
dotnet build ./Okta.Xamarin/Tests/Okta.Xamarin.Test/Okta.Xamarin.Test.csproj --configuration Release --no-restore
109+
dotnet build ./Okta.Xamarin/Tests/Okta.Xamarin.UITest.Shared/Okta.Xamarin.UITest.Shared.shproj --configuration Release --no-restore
110+
111+
- persist_to_workspace:
112+
root: ~/project
113+
paths:
114+
- .
115+
116+
snyk-scan:
117+
docker:
118+
- image: cimg/python:3.10
119+
working_directory: ~/project
120+
steps:
121+
- attach_workspace:
122+
at: ~/project
123+
- general-platform-helpers/step-load-dependencies
124+
- general-platform-helpers/step-run-snyk-monitor:
125+
scan-all-projects: true
126+
skip-unresolved: false
127+
run-on-non-main: true
128+
detection-depth: 4
129+
130+
workflows:
131+
"Malware Scanner":
132+
jobs:
133+
- reversing-labs:
134+
context:
135+
- static-analysis
136+
"Circle CI Build & Snyk Scan":
137+
jobs:
138+
- build
139+
- snyk-scan:
140+
name: execute-snyk
141+
context:
142+
- static-analysis
143+
requires:
144+
- build
145+
"Semgrep":
146+
jobs:
147+
- platform-helpers/job-semgrep-scan:
148+
context:
149+
- static-analysis
150+
name: "Scan with Semgrep"

‎Okta.Xamarin/Okta.Xamarin.sln‎

Lines changed: 4 additions & 64 deletions
Original file line numberDiff line numberDiff line change
@@ -31,14 +31,7 @@ Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "Okta.Xamarin.UITest.iOS", "
3131
EndProject
3232
Project("{D954291E-2A0B-460D-934E-DC6B0785DB48}") = "Okta.Xamarin.UITest.Shared", "Tests\Okta.Xamarin.UITest.Shared\Okta.Xamarin.UITest.Shared.shproj", "{B1B20CDE-B8D7-4303-BEC5-867E29D19F70}"
3333
EndProject
34-
Project("{2150E333-8FDC-42A3-9474-1A3956D46DE8}") = "Sample", "Sample", "{88BA0661-6DBD-4742-A7AF-CFB5B951B184}"
35-
EndProject
36-
Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "Okta.Xamarin.Demo.Android", "Samples\xamarin\Okta.Xamarin.Demo.Android\Okta.Xamarin.Demo.Android.csproj", "{BAFA3987-AD5D-4E29-BF57-56F4145B5A23}"
37-
EndProject
38-
Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "Okta.Xamarin.Demo.iOS", "Samples\xamarin\Okta.Xamarin.Demo.iOS\Okta.Xamarin.Demo.iOS.csproj", "{F7AADB5C-B6FE-48D7-AC10-8F033A19B8CB}"
39-
EndProject
40-
Project("{9A19103F-16F7-4668-BE54-9A1E7A4F7556}") = "Okta.Xamarin.Demo", "Samples\xamarin\Okta.Xamarin.Demo\Okta.Xamarin.Demo.csproj", "{D82B6C59-231E-4D06-97C0-38CF6CAE0540}"
41-
EndProject
34+
4235
Global
4336
GlobalSection(SolutionConfigurationPlatforms) = preSolution
4437
Debug|Android = Debug|Android
@@ -155,59 +148,9 @@ Global
155148
{353226EA-CFB4-4CC1-BBF7-046F22C81838}.Release|iPhone.Build.0 = Release|Any CPU
156149
{353226EA-CFB4-4CC1-BBF7-046F22C81838}.Release|iPhoneSimulator.ActiveCfg = Release|Any CPU
157150
{353226EA-CFB4-4CC1-BBF7-046F22C81838}.Release|iPhoneSimulator.Build.0 = Release|Any CPU
158-
{BAFA3987-AD5D-4E29-BF57-56F4145B5A23}.Debug|Android.ActiveCfg = Debug|Any CPU
159-
{BAFA3987-AD5D-4E29-BF57-56F4145B5A23}.Debug|Android.Build.0 = Debug|Any CPU
160-
{BAFA3987-AD5D-4E29-BF57-56F4145B5A23}.Debug|Android.Deploy.0 = Debug|Any CPU
161-
{BAFA3987-AD5D-4E29-BF57-56F4145B5A23}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
162-
{BAFA3987-AD5D-4E29-BF57-56F4145B5A23}.Debug|Any CPU.Build.0 = Debug|Any CPU
163-
{BAFA3987-AD5D-4E29-BF57-56F4145B5A23}.Debug|Any CPU.Deploy.0 = Debug|Any CPU
164-
{BAFA3987-AD5D-4E29-BF57-56F4145B5A23}.Debug|iPhone.ActiveCfg = Debug|Any CPU
165-
{BAFA3987-AD5D-4E29-BF57-56F4145B5A23}.Debug|iPhone.Build.0 = Debug|Any CPU
166-
{BAFA3987-AD5D-4E29-BF57-56F4145B5A23}.Debug|iPhone.Deploy.0 = Debug|Any CPU
167-
{BAFA3987-AD5D-4E29-BF57-56F4145B5A23}.Debug|iPhoneSimulator.ActiveCfg = Debug|Any CPU
168-
{BAFA3987-AD5D-4E29-BF57-56F4145B5A23}.Debug|iPhoneSimulator.Build.0 = Debug|Any CPU
169-
{BAFA3987-AD5D-4E29-BF57-56F4145B5A23}.Debug|iPhoneSimulator.Deploy.0 = Debug|Any CPU
170-
{BAFA3987-AD5D-4E29-BF57-56F4145B5A23}.Release|Android.ActiveCfg = Release|Any CPU
171-
{BAFA3987-AD5D-4E29-BF57-56F4145B5A23}.Release|Android.Build.0 = Release|Any CPU
172-
{BAFA3987-AD5D-4E29-BF57-56F4145B5A23}.Release|Android.Deploy.0 = Release|Any CPU
173-
{BAFA3987-AD5D-4E29-BF57-56F4145B5A23}.Release|Any CPU.ActiveCfg = Release|Any CPU
174-
{BAFA3987-AD5D-4E29-BF57-56F4145B5A23}.Release|Any CPU.Build.0 = Release|Any CPU
175-
{BAFA3987-AD5D-4E29-BF57-56F4145B5A23}.Release|Any CPU.Deploy.0 = Release|Any CPU
176-
{BAFA3987-AD5D-4E29-BF57-56F4145B5A23}.Release|iPhone.ActiveCfg = Release|Any CPU
177-
{BAFA3987-AD5D-4E29-BF57-56F4145B5A23}.Release|iPhone.Build.0 = Release|Any CPU
178-
{BAFA3987-AD5D-4E29-BF57-56F4145B5A23}.Release|iPhone.Deploy.0 = Release|Any CPU
179-
{BAFA3987-AD5D-4E29-BF57-56F4145B5A23}.Release|iPhoneSimulator.ActiveCfg = Release|Any CPU
180-
{BAFA3987-AD5D-4E29-BF57-56F4145B5A23}.Release|iPhoneSimulator.Build.0 = Release|Any CPU
181-
{BAFA3987-AD5D-4E29-BF57-56F4145B5A23}.Release|iPhoneSimulator.Deploy.0 = Release|Any CPU
182-
{F7AADB5C-B6FE-48D7-AC10-8F033A19B8CB}.Debug|Android.ActiveCfg = Debug|iPhoneSimulator
183-
{F7AADB5C-B6FE-48D7-AC10-8F033A19B8CB}.Debug|Any CPU.ActiveCfg = Debug|iPhoneSimulator
184-
{F7AADB5C-B6FE-48D7-AC10-8F033A19B8CB}.Debug|iPhone.ActiveCfg = Debug|iPhone
185-
{F7AADB5C-B6FE-48D7-AC10-8F033A19B8CB}.Debug|iPhone.Build.0 = Debug|iPhone
186-
{F7AADB5C-B6FE-48D7-AC10-8F033A19B8CB}.Debug|iPhone.Deploy.0 = Debug|iPhone
187-
{F7AADB5C-B6FE-48D7-AC10-8F033A19B8CB}.Debug|iPhoneSimulator.ActiveCfg = Debug|iPhoneSimulator
188-
{F7AADB5C-B6FE-48D7-AC10-8F033A19B8CB}.Debug|iPhoneSimulator.Build.0 = Debug|iPhoneSimulator
189-
{F7AADB5C-B6FE-48D7-AC10-8F033A19B8CB}.Release|Android.ActiveCfg = Release|iPhoneSimulator
190-
{F7AADB5C-B6FE-48D7-AC10-8F033A19B8CB}.Release|Any CPU.ActiveCfg = Release|iPhoneSimulator
191-
{F7AADB5C-B6FE-48D7-AC10-8F033A19B8CB}.Release|iPhone.ActiveCfg = Release|iPhone
192-
{F7AADB5C-B6FE-48D7-AC10-8F033A19B8CB}.Release|iPhone.Build.0 = Release|iPhone
193-
{F7AADB5C-B6FE-48D7-AC10-8F033A19B8CB}.Release|iPhoneSimulator.ActiveCfg = Release|iPhoneSimulator
194-
{F7AADB5C-B6FE-48D7-AC10-8F033A19B8CB}.Release|iPhoneSimulator.Build.0 = Release|iPhoneSimulator
195-
{D82B6C59-231E-4D06-97C0-38CF6CAE0540}.Debug|Android.ActiveCfg = Debug|Any CPU
196-
{D82B6C59-231E-4D06-97C0-38CF6CAE0540}.Debug|Android.Build.0 = Debug|Any CPU
197-
{D82B6C59-231E-4D06-97C0-38CF6CAE0540}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
198-
{D82B6C59-231E-4D06-97C0-38CF6CAE0540}.Debug|Any CPU.Build.0 = Debug|Any CPU
199-
{D82B6C59-231E-4D06-97C0-38CF6CAE0540}.Debug|iPhone.ActiveCfg = Debug|Any CPU
200-
{D82B6C59-231E-4D06-97C0-38CF6CAE0540}.Debug|iPhone.Build.0 = Debug|Any CPU
201-
{D82B6C59-231E-4D06-97C0-38CF6CAE0540}.Debug|iPhoneSimulator.ActiveCfg = Debug|Any CPU
202-
{D82B6C59-231E-4D06-97C0-38CF6CAE0540}.Debug|iPhoneSimulator.Build.0 = Debug|Any CPU
203-
{D82B6C59-231E-4D06-97C0-38CF6CAE0540}.Release|Android.ActiveCfg = Release|Any CPU
204-
{D82B6C59-231E-4D06-97C0-38CF6CAE0540}.Release|Android.Build.0 = Release|Any CPU
205-
{D82B6C59-231E-4D06-97C0-38CF6CAE0540}.Release|Any CPU.ActiveCfg = Release|Any CPU
206-
{D82B6C59-231E-4D06-97C0-38CF6CAE0540}.Release|Any CPU.Build.0 = Release|Any CPU
207-
{D82B6C59-231E-4D06-97C0-38CF6CAE0540}.Release|iPhone.ActiveCfg = Release|Any CPU
208-
{D82B6C59-231E-4D06-97C0-38CF6CAE0540}.Release|iPhone.Build.0 = Release|Any CPU
209-
{D82B6C59-231E-4D06-97C0-38CF6CAE0540}.Release|iPhoneSimulator.ActiveCfg = Release|Any CPU
210-
{D82B6C59-231E-4D06-97C0-38CF6CAE0540}.Release|iPhoneSimulator.Build.0 = Release|Any CPU
151+
152+
153+
211154
EndGlobalSection
212155
GlobalSection(SolutionProperties) = preSolution
213156
HideSolutionNode = FALSE
@@ -218,9 +161,6 @@ Global
218161
{D4F16703-5ABB-48D0-A2ED-9043F32850F6} = {2D5E2EAA-E3BE-495A-B058-47C3082E723F}
219162
{353226EA-CFB4-4CC1-BBF7-046F22C81838} = {2D5E2EAA-E3BE-495A-B058-47C3082E723F}
220163
{B1B20CDE-B8D7-4303-BEC5-867E29D19F70} = {2D5E2EAA-E3BE-495A-B058-47C3082E723F}
221-
{BAFA3987-AD5D-4E29-BF57-56F4145B5A23} = {88BA0661-6DBD-4742-A7AF-CFB5B951B184}
222-
{F7AADB5C-B6FE-48D7-AC10-8F033A19B8CB} = {88BA0661-6DBD-4742-A7AF-CFB5B951B184}
223-
{D82B6C59-231E-4D06-97C0-38CF6CAE0540} = {88BA0661-6DBD-4742-A7AF-CFB5B951B184}
224164
EndGlobalSection
225165
GlobalSection(ExtensibilityGlobals) = postSolution
226166
SolutionGuid = {8D258CC3-33D9-4055-9627-BB4B404A2682}

0 commit comments

Comments
 (0)