Windows package (#11)

* Create windows package

Signed-off-by: Prabhu Subramanian <prabhu@appthreat.com>

* Create windows package

Signed-off-by: Prabhu Subramanian <prabhu@appthreat.com>

---------

Signed-off-by: Prabhu Subramanian <prabhu@appthreat.com>

.github/workflows/release.yml

@@ -42,12 +42,21 @@ jobs:
         npm publish --access=public --@cyclonedx:registry='https://npm.pkg.github.com'
         echo "cyclonedx:registry=https://registry.npmjs.org" > ~/.npmrc
         npm publish --access=public --@cyclonedx:registry='https://registry.npmjs.org'
+
+        pushd packages/windows-amd64
+        echo "cyclonedx:registry=https://npm.pkg.github.com" > ~/.npmrc
+        npm publish --access=public --@cyclonedx:registry='https://npm.pkg.github.com'
+        echo "cyclonedx:registry=https://registry.npmjs.org" > ~/.npmrc
+        npm publish --access=public --@cyclonedx:registry='https://registry.npmjs.org'
+        popd
+
         pushd packages/arm64
         echo "cyclonedx:registry=https://npm.pkg.github.com" > ~/.npmrc
         npm publish --access=public --@cyclonedx:registry='https://npm.pkg.github.com'
         echo "cyclonedx:registry=https://registry.npmjs.org" > ~/.npmrc
         npm publish --access=public --@cyclonedx:registry='https://registry.npmjs.org'
         popd
+
         pushd packages/ppc64
         echo "cyclonedx:registry=https://npm.pkg.github.com" > ~/.npmrc
         npm publish --access=public --@cyclonedx:registry='https://npm.pkg.github.com'

.github/workflows/test.yml

@@ -40,6 +40,9 @@ jobs:
         pip3 install blint
         blint -i plugins -o /tmp/reports
         npm publish --dry-run
+        pushd packages/windows-amd64
+        npm publish --dry-run
+        popd
         pushd packages/arm64
         npm publish --dry-run
         popd

build.sh

@@ -7,14 +7,6 @@ rm -rf plugins/osquery
 rm -rf plugins/dosai
 mkdir -p plugins/osquery plugins/dosai
 
-wget https://github.com/osquery/osquery/releases/download/5.10.2/osquery-5.10.2.windows_x86_64.zip
-unzip osquery-5.10.2.windows_x86_64.zip
-cp "osquery-5.10.2.windows_x86_64/Program Files/osquery/osqueryi.exe" plugins/osquery/osqueryi-windows-amd64.exe
-upx -9 --lzma plugins/osquery/osqueryi-windows-amd64.exe
-sha256sum plugins/osquery/osqueryi-windows-amd64.exe > plugins/osquery/osqueryi-windows-amd64.exe.sha256
-rm -rf osquery-5.10.2.windows_x86_64
-rm osquery-5.10.2.windows_x86_64.zip
-
 wget https://github.com/osquery/osquery/releases/download/5.10.2/osquery-5.10.2_1.linux_x86_64.tar.gz
 tar -xvf osquery-5.10.2_1.linux_x86_64.tar.gz
 cp opt/osquery/bin/osqueryd plugins/osquery/osqueryi-linux-amd64
@@ -27,9 +19,6 @@ curl -L https://github.com/owasp-dep-scan/dosai/releases/latest/download/Dosai -
 chmod +x plugins/dosai/dosai-linux-amd64
 sha256sum plugins/dosai/dosai-linux-amd64 > plugins/dosai/dosai-linux-amd64.sha256
 
-curl -L https://github.com/owasp-dep-scan/dosai/releases/latest/download/Dosai.exe -o plugins/dosai/dosai-windows-amd64.exe
-sha256sum plugins/dosai/dosai-windows-amd64.exe > plugins/dosai/dosai-windows-amd64.exe.sha256
-
 for plug in goversion trivy cargo-auditable
 do
     mkdir -p plugins/$plug
@@ -47,11 +36,10 @@ done
 ./plugins/cargo-auditable/cargo-auditable-cdxgen-linux-amd64
 ./plugins/dosai/dosai-linux-amd64 --help
 
-chmod +x packages/arm64/build-arm64.sh
-pushd packages/arm64
-./build-arm64.sh
-popd
-chmod +x packages/ppc64/build-ppc64.sh
-pushd packages/ppc64
-./build-ppc64.sh
-popd
+for flavours in windows-amd64 arm64 ppc64
+do
+    chmod +x packages/$flavours/build-$flavours.sh
+    pushd packages/$flavours
+    ./build-$flavours.sh
+    popd
+done

packages/arm64/plugins/.gitignore

@@ -2,3 +2,4 @@ goversion/
 trivy/
 cargo-auditable/
 osquery/
+dosai/

packages/ppc64/plugins/.gitignore

@@ -2,3 +2,4 @@ goversion/
 trivy/
 cargo-auditable/
 osquery/
+dosai/

packages/windows-amd64/build-windows-amd64.sh

@@ -0,0 +1,25 @@
+#!/usr/bin/env bash
+
+rm -rf plugins/goversion
+rm -rf plugins/trivy
+rm -rf plugins/cargo-auditable
+rm -rf plugins/osquery
+rm -rf plugins/dosai
+mkdir -p plugins/osquery plugins/dosai
+
+wget https://github.com/osquery/osquery/releases/download/5.10.2/osquery-5.10.2.windows_x86_64.zip
+unzip osquery-5.10.2.windows_x86_64.zip
+cp "osquery-5.10.2.windows_x86_64/Program Files/osquery/osqueryi.exe" plugins/osquery/osqueryi-windows-amd64.exe
+upx -9 --lzma plugins/osquery/osqueryi-windows-amd64.exe
+sha256sum plugins/osquery/osqueryi-windows-amd64.exe > plugins/osquery/osqueryi-windows-amd64.exe.sha256
+rm -rf osquery-5.10.2.windows_x86_64
+rm osquery-5.10.2.windows_x86_64.zip
+
+curl -L https://github.com/owasp-dep-scan/dosai/releases/latest/download/Dosai.exe -o plugins/dosai/dosai-windows-amd64.exe
+sha256sum plugins/dosai/dosai-windows-amd64.exe > plugins/dosai/dosai-windows-amd64.exe.sha256
+
+for plug in goversion trivy cargo-auditable
+do
+    mkdir -p plugins/$plug
+    mv ../../plugins/$plug/*.exe* plugins/$plug/
+done

packages/windows-amd64/index.js

@@ -0,0 +1,8 @@
+// Debug mode flag
+const DEBUG_MODE =
+  process.env.CDXGEN_DEBUG_MODE === "debug" ||
+  process.env.NODE_ENV === "development";
+
+if (DEBUG_MODE) {
+  console.log("cdxgen plugins check");
+}

packages/windows-amd64/package.json

@@ -0,0 +1,34 @@
+{
+  "name": "@cyclonedx/cdxgen-plugins-bin-windows-amd64",
+  "version": "1.5.3",
+  "description": "Windows amd64 binary plugins to supercharge @cyclonedx/cdxgen npm package",
+  "main": "index.js",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/cyclonedx/cdxgen-plugins-bin.git"
+  },
+  "keywords": [
+    "cdxgen",
+    "sbom",
+    "bom",
+    "plugins",
+    "dependency",
+    "appsec"
+  ],
+  "author": "Prabhu Subramanian <prabhu@appthreat.com>",
+  "license": "Apache-2.0",
+  "bugs": {
+    "url": "https://github.com/cyclonedx/cdxgen-plugins-bin/issues"
+  },
+  "homepage": "https://github.com/cyclonedx/cdxgen-plugins-bin#readme",
+  "files": [
+    "*.js",
+    "plugins/"
+  ],
+  "os": [
+    "win32"
+  ],
+  "cpu": [
+    "x64"
+  ]
+}

packages/windows-amd64/plugins/.gitignore

@@ -0,0 +1,5 @@
+goversion/
+trivy/
+cargo-auditable/
+osquery/
+dosai/

plugins/.gitignore

@@ -2,3 +2,4 @@ goversion/
 trivy/
 cargo-auditable/
 osquery/
+dosai/