Changes to sec_analysis to add part where keyfiles and pem files are searched.

Author: jiteshmohan

analysis/sec_analysis.py

@@ -8,7 +8,8 @@
     mypath = os.getcwd()
 
 filelist = []
-opbufferinit = 'Running security analysis:\n'
+keyfilelist = []
+opbufferinit = '\nRunning security analysis:'
 opbuffer = ''
 for (dirpath, dirnames, filenames) in walk(mypath):
     for filename in fnmatch.filter(filenames, '*.c'):
@@ -19,6 +20,10 @@
         filelist.append(os.path.join(dirpath,filename))
     for filename in fnmatch.filter(filenames, '*.json'):
         filelist.append(os.path.join(dirpath,filename))
+    for filename in fnmatch.filter(filenames, '*.key'):
+        keyfilelist.append(os.path.join(dirpath,filename))
+    for filename in fnmatch.filter(filenames, '*.pem'):
+        keyfilelist.append(os.path.join(dirpath,filename))
 
 doregex = re.compile('([A-Z0-9]{64})[\s\'\"\;\)\]\}]*$')
 awsregex = re.compile('([A-Z]*[0-9][A-Z0-9]+)[\s\'\"\;\)\]\}]*$')
@@ -30,22 +35,28 @@
             linenum+=1
             eachline = eachline.lstrip().rstrip()
             if len(doregex.findall(eachline)):
-                opbuffer+='\n' + 'Filename: {}\nLine number: {}\n'.format(filename, linenum)
+                opbuffer+='\n\n' + 'Filename: {}\nLine number: {}'.format(filename, linenum)
                 break
             elif len(awsregex.findall(eachline)):
                 flag = False
                 for eachtoken in awsregex.findall(eachline):
                     if len(eachtoken) == 40:
-                        opbuffer+='\n' + 'Filename: {}\nLine number: {}\n'.format(filename, linenum)
+                        opbuffer+='\n\n' + 'Filename: {}\nLine number: {}'.format(filename, linenum)
                         flag = True
                         break
                 if flag:
                     break
+if len(keyfilelist):
+    opbuffer+="\n\nFound files with security keys."
+    for eachfile in keyfilelist:
+        opbuffer+='\n' + 'Filename: {}'.format(eachfile)
+    opbuffer+="\n\nPlease remove these files before pushing changes."
+
 with open(os.path.join(os.path.dirname(os.path.abspath(sys.argv[0])),'secanalysis.result'),'w') as opfile:
     opfile.write(opbufferinit)
-    if len(opbuffer):
-        opbuffer+='\nSTATUS: FAILURE'
+    if len(opbuffer) or len(keyfilelist):
+        opbuffer+='\n\nSTATUS: FAILURE'
     else:
-        opbuffer+='\nSTATUS: SUCCESS'
+        opbuffer+='\n\nSTATUS: SUCCESS'
     opfile.write(opbuffer)
-print opbufferinit + opbuffer + '\n'
+print opbufferinit + opbuffer + '\n'

analysis/secanalysis.result

@@ -1,3 +1,4 @@
+
 Running security analysis:
 
 STATUS: SUCCESS