reorganize directory structure

security_tools/redhat_oval_definition_parser/oval_stream_data_parser.rb

@@ -1,64 +0,0 @@
-# frozen_string_literal: true
-
-require 'json'
-require 'rest-client'
-
-class OvalStreamDataParser
-  attr_accessor :index_data, :api_url
-
-  def initialize
-    @api_url = 'https://access.redhat.com/hydra/rest/securitydata/oval'
-    @index_data = refresh_index
-  end
-
-  def refresh_index
-    response = RestClient::Request.execute(
-      method: :get,
-      url: "#{api_url}/ovalstreams.json",
-      content_type: 'application/json'
-    )
-    if response.code == 200
-      parse_index(response)
-    else
-      puts "Error: HTTP Response code #{response.code} received."
-    end
-  end
-
-  def parse_index(response)
-    JSON.parse(response.body)
-  end
-
-  def list_stream_names
-    index_data.map do |entry|
-      entry['stream']
-    end.sort
-  end
-
-  def list_stream_urls
-    index_data.map do |entry|
-      entry['resourceUrl']
-    end.sort
-  end
-
-  def list_stream_labels
-    index_data.map do |entry|
-      entry['label']
-    end.sort
-  end
-
-  def select_stream_by_label(label)
-    index_data.select { |json| json['label'] == label }
-  end
-
-  def verify_shasum
-    # method that will check the sha256sum of a downloaded file from resourceUrl and ensure they match
-    # step 1:
-    # get original shasum
-    # step 2:
-    # download file
-    # step 3:
-    # run sha256sum against file download
-    # step 4:
-    # run == logic against both sums and return true/false
-  end
-end

security_tools/redhat_oval_definition_parser/refresh_data_xml.sh

@@ -1,5 +0,0 @@
-#!/usr/bin/env bash
-# do a fresh pull of the data
-# the class should also do this when initialized but if you want a seperate script to run quick just to pull you can use this 
-
-wget https://access.redhat.com/hydra/rest/securitydata/oval/ovalstreams.json

security_tools/rpm_to_cve_parser/rhel_rpm_to_cve.rb

@@ -1,50 +0,0 @@
-require 'ox'
-
-class RhelRpmToCve
-  # filepath == /path/to/rpm-to-cve.xml
-  attr_accessor :filepath, :file, :xml
-  
-  def initialize(filepath)
-    @filepath = filepath
-    @file = File.read(filepath)
-    @xml = Ox.parse(file)
-  end
-
-  def list_pkg_names
-    xml.rpms.locate("?/@rpm")
-  end
-
-  def pkg_exists?(pkg_name)
-    list_pkg_names.include? pkg_name
-  end
-
-  def cves_per_pkg_name(pkg_name)
-    if pkg_exists? pkg_name
-      results = find_pkg(pkg_name).locate('*/cve').map do |r|
-        r.text
-      end.compact
-
-      cves = results.map {|cve| cve}
-
-      { 
-        :rhel_package_name => pkg_name,
-        :cves => cves,
-        :cve_count => cves.count
-      }
-    else
-      'Package not found.'
-    end
-  end
-
-  def find_pkg(pkg_name)
-    xml.rpms.locate("rpm[@rpm=#{pkg_name}]").first
-  end
-
-  def convert_to_json
-    pkgs = list_pkg_names
-    pkgs_and_cves = pkgs.map do |pkg_name|
-      cves_per_pkg_name(pkg_name)
-    end
-    pkgs_and_cves.to_json
-  end
-end

security_tools/rpm_to_cve_parser/rpm_pkg_audit.rb

@@ -1,32 +0,0 @@
-#!/usr/bin/env ruby
-# frozen_string_literal: true
-
-require 'optparse'
-require 'json'
-require './rhel_rpm_to_cve'
-
-data_file = './rpm-to-cve.xml'
-
-options = {}
-
-parser = OptionParser.new do |parser|
-  parser.banner = 'Usage: rpm_pkg_audit.rb [options]'
-  parser.on('-p', '--pkg PKGNAME', 'The pkg name you want to audit.') do |pkg|
-    options[:pkg] = pkg
-  end
-  parser.on('-l', '--list', 'List packages in the XML datafile.') do |list|
-    options[:list] = list
-  end
-end
-
-parser.parse!
-
-pkg_name = options[:pkg]
-rpm_auditer = RhelRpmToCve.new(data_file)
-
-if pkg_name
-  json = rpm_auditer.cves_per_pkg_name(pkg_name).to_json
-  puts JSON.pretty_generate(JSON.parse(json))
-else options.key?(:list)
-  puts rpm_auditer.list_pkg_names.sort
-end

security_tools/rpm_to_cve_parser/sax_parser.rb

@@ -1,36 +0,0 @@
-#!/usr/bin/env ruby
-
-require 'ox'
-
-class SaxParser < Ox::Sax
-
-  def initialize
-    @elements = []
-  end
-
-  def start_element(name)
-    #puts "start: #{name}"
-  end
-
-  def current_element
-    @elements.last
-  end
-
-  def end_element(name)
-    #puts "end: #{name}"
-  end
-
-  def attr(name, value)
-    #puts "  #{name} => #{value}"
-  end
-
-  def text(value)
-    #puts "text: #{value}"
-  end
-
-end
-
-file = File.read('./rpm-to-cve.xml')
-handler = SaxParser.new()
-
-Ox.sax_parse(handler, file)

security_tools/rpm_to_cve_parser/update_rpms_to_cve_xml.sh

@@ -1,4 +0,0 @@
-#!/usr/bin/env bash
-# refresh the latest rpm to cve xml mapping file from redhat security page
-
-wget https://www.redhat.com/security/data/metrics/rpm-to-cve.xml .