csa_report.py

import logging
logger = logging.getLogger(__name__)

def generate_report(_shared, report_save_path, use_cached_data):
    import os
    from datetime import datetime

    import jinja2
    
    lw_provider = _shared.p_lw_cached if use_cached_data else _shared.p_lw

    host_vulns_data = gather_host_vulns_data(_shared, lw_provider)
    container_vulns_data = gather_container_vulns_data(_shared, lw_provider)
    compliance_data = gather_compliance_data(_shared, lw_provider)

    polygraph_graphic_bytes = _shared.p_local_asset.local_file(os.path.join(os.getcwd(), 'assets/lacework/images/polygraph-info.png'))
    polygraph_graphic_html = _shared.common.bytes_to_image_tag(polygraph_graphic_bytes,'png')

    templateLoader = jinja2.FileSystemLoader(searchpath=os.path.dirname(__file__))
    templateEnv = jinja2.Environment(loader=templateLoader, autoescape=True, trim_blocks=True, lstrip_blocks=True)
    TEMPLATE_FILE = "csa_report.html"
    template = templateEnv.get_template(TEMPLATE_FILE)
    html = template.render(
        customer                                   = _shared.cli_data['customer'],
        date                                       = datetime.now().strftime("%A %B %d, %Y"),
        author                                     = _shared.cli_data['author'],
        polygraph_graphic_html                     = polygraph_graphic_html,
        compliance_data                            = compliance_data,
        host_vulns_data                            = host_vulns_data,
        container_vulns_data                       = container_vulns_data,
    )

    logger.info('Saving report to: ' + report_save_path)

    with open(report_save_path, 'w') as file:
        file.write(html)

def gather_host_vulns_data(_shared, lw_provider):
    # get host vulns
    host_vulns = lw_provider.host_vulns(_shared._25_hours_ago, _shared._now)
    if not host_vulns:
        return False

    # set table classes
    host_vulns_summary_by_host = _shared.t_lw.host_vulns_summary_by_host(host_vulns)
    host_vulns_summary_by_host = host_vulns_summary_by_host.style.set_table_attributes('class="host_vulns_summary_by_host"')
    host_vulns_summary_data = _shared.t_lw.host_vulns_summary(host_vulns)
    host_vulns_summary = host_vulns_summary_data.style.set_table_attributes('class="host_vulns_summary"')    

    # get graphics
    host_vulns_summary_bar_graphic = _shared.g_lw_plotly.host_vulns_by_severity_bar(host_vulns_summary_data, width=750)
    host_vulns_summary_bar_graphic = _shared.common.bytes_to_image_tag(host_vulns_summary_bar_graphic,'svg+xml')

    return {
        'hosts_scanned_count': _shared.t_lw.host_vulns_total_evaluated(host_vulns),
        'host_vulns_summary': host_vulns_summary,
        'host_vulns_summary_bar_graphic': host_vulns_summary_bar_graphic,
        'host_vulns_summary_by_host': host_vulns_summary_by_host
    }

def gather_container_vulns_data(_shared, lw_provider):
    # get container vulns
    container_vulns = lw_provider.container_vulns(_shared._25_hours_ago,_shared._now)
    if not container_vulns:
        return False

    # set table classes
    container_vulns_summary_by_image = _shared.t_lw.container_vulns_summary_by_image(container_vulns)
    container_vulns_summary_by_image = container_vulns_summary_by_image.style.set_table_attributes('class="container_vulns_summary_by_image"')
    container_vulns_summary = _shared.t_lw.container_vulns_summary(container_vulns)
    container_vulns_summary = container_vulns_summary.style.set_table_attributes('class="container_vulns_summary"')

    return {
        'containers_scanned_count': _shared.t_lw.container_vulns_total_evaluated(container_vulns),
        'container_vulns_summary': container_vulns_summary,
        'container_vulns_summary_bar_graphic': '[Container Vulns Summary Bar Graphic Placeholder]',
        'container_vulns_summary_by_image': container_vulns_summary_by_image
    }

def gather_compliance_data(_shared, lw_provider):
    # get aws accounts
    integrations = lw_provider.integrations()

    aws_config_accounts = _shared.t_lw.integrations_config_accounts(integrations)
    if not aws_config_accounts:
        return False

    # get compliance reports
    compliance_reports = lw_provider.compliance_reports(accounts=aws_config_accounts)
    if not compliance_reports:
        return False

    # set table classes
    compliance_detail = _shared.t_lw.compliance_reports_raw(compliance_reports)
    compliance_detail = compliance_detail.style.set_table_attributes('class="compliance_detail"')
    compliance_summary = _shared.t_lw.compliance_reports_summary(compliance_reports)
    compliance_summary = compliance_summary.style.set_table_attributes('class="compliance_summary"')

    return {
        'cloud_accounts_count': _shared.t_lw.compliance_reports_total_accounts_evaluated(compliance_reports),
        'compliance_summary': compliance_summary,
        'compliance_findings_by_service_bar_graphic': '[Compliance Findings by Service Bar Graphic Placeholder]',
        'compliance_findings_by_account_bar_graphic': '[Compliance Findings by Account Bar Graphic Placeholder]',
        'compliance_detail': compliance_detail
    }