n8nを使ったアプリーケーションリスク評価フローの作成

# Retrieve DEB packages, APT sources, RPM packages, ...
cdxgen -t os --server-url "Dependency-Track APIサーバのURL" --api-key "Dependency-Trackで発行したAPIキー" --project-id "Dependency-Trackで作成した親プロジェクトのID"
 
# Parse composer.lock
cdxgen -t php "プロジェクトのルートディレクトリ" --server-url "Dependency-Track APIサーバのURL" --api-key "Dependency-Trackで発行したAPIキー" --project-id "Dependency-Trackで作成した子プロジェクトのID"
 
# Parse package-lock.json
cdxgen -t javascript "プロジェクトのルートディレクトリ" --server-url "Dependency-Track APIサーバのURL" --api-key "Dependency-Trackで発行したAPIキー" --project-id "Dependency-Trackで作成した子プロジェクトのID"

[
  {
    "name": "demo-app-php",
    [...]
    "metrics": {
      "critical": 1,
      "high": 6,
      "medium": 0,
      "low": 0,
      "unassigned": 0,
      "vulnerabilities": 7,
      "vulnerableComponents": 3,
      "components": 97,
      "suppressed": 0,
      "findingsTotal": 7,
      "findingsAudited": 0,
      "findingsUnaudited": 7,
      "inheritedRiskScore": 40,
      "policyViolationsFail": 0,
      "policyViolationsWarn": 0,
      "policyViolationsInfo": 130,
      "policyViolationsTotal": 130,
      [...]
    }
  }
]

const base = {
  version: "2",
  backgroundColor: "transparent",
  width: 500,
  height: 300,
  devicePixelRatio: 1.0,
  format: "png",
  chart: {
    type: "bar",
    data: {
      labels: [],
      datasets: []
    },
    options: {
      title: {
        display: true,
        position: "top",
        text: ""
      }
    }
  }
}
const vulnerabilities = JSON.parse(JSON.stringify(base))
const violations = JSON.parse(JSON.stringify(base))
 
vulnerabilities.chart.data.labels = ["critical", "high", "medium", "low"]
vulnerabilities.chart.options.title.text = "vulnerabilities"
violations.chart.data.labels = ["fail", "warn", "info"]
violations.chart.options.title.text = "violations"
 
for (const project of $input.all()) {
  vulnerabilities.chart.data.datasets.push({
    label: project.json.name,
    data: [
      project.json.metrics.critical,
      project.json.metrics.high,
      project.json.metrics.medium,
      project.json.metrics.low
    ],
  })
  violations.chart.data.datasets.push({
    label: project.json.name,
    data: [
      project.json.metrics.policyViolationsFail,
      project.json.metrics.policyViolationsWarn,
      project.json.metrics.policyViolationsInfo,
    ]
  })
}
 
return [vulnerabilities, violations]

items[0].binary = $('グラフ画像生成ノードの名前').first().binary
return items

return {
  filepath: 'http://(Caddyの静的ファイル配信用アドレス)/' + $('ハッシュ値作成ノードの名前').first().json.hash + '.png'
}

let message = ''
 
for (const f of $input.all()) {
  message += `![chart](${f.json.filepath})\n`
}
 
for (const p of $('プロジェクト取得ノードの名前').all()) {
  message += `
**${p.json.name}**
 
|vulnerability|count|
|:---|---:|
|critical|${p.json.metrics.critical}|
|high|${p.json.metrics.high}|
|medium|${p.json.metrics.medium}|
|low|${p.json.metrics.low}|
 
|policy violation|count|
|:---|---:|
|fail|${p.json.metrics.policyViolationsFail}|
|warn|${p.json.metrics.policyViolationsWarn}|
|info|${p.json.metrics.policyViolationsInfo}|
 
`
}
 
return {
  message
}

### Security Report

{{ $json.message }}