Adding Xray Source Control Service

access/auth/accessdetails.go

@@ -12,6 +12,18 @@ type accessDetails struct {
 	auth.CommonConfigFields
 }
 
+func (rt *accessDetails) GetXscUrl() string {
+	panic("Failed: Method is not implemented")
+}
+
+func (rt *accessDetails) SetXscUrl(url string) {
+	panic("Failed: Method is not implemented")
+}
+
 func (rt *accessDetails) GetVersion() (string, error) {
 	panic("Failed: Method is not implemented")
 }
+
+func (rt *accessDetails) GetXscVersion() string {
+	panic("Failed: Method is not implemented")
+}

artifactory/auth/rtdetails.go

@@ -15,6 +15,18 @@ type artifactoryDetails struct {
 	auth.CommonConfigFields
 }
 
+func (rt *artifactoryDetails) SetXscUrl(url string) {
+	panic("Failed: Method is not implemented")
+}
+
+func (rt *artifactoryDetails) GetXscUrl() string {
+	panic("Failed: Method is not implemented")
+}
+
+func (rt *artifactoryDetails) GetXscVersion() string {
+	panic("Failed: Method is not implemented")
+}
+
 func (rt *artifactoryDetails) GetVersion() (string, error) {
 	var err error
 	if rt.Version == "" {

artifactory/services/utils/tests/xray/consts.go

@@ -1433,3 +1433,12 @@ var MapResponse = map[string]map[string]string {
     "ReportDetails": LicensesReportDetailsResponse,
   },
 }
+
+const gitInfoSentResponse = `{"multi_scan_id": "f2a8d4fe-40e6-11ee-84e4-02ee10c7f40e"}`
+
+const scanGraphResponse = `{"scan_id": "9c9dbd61-f544-4e33-4613-34727043d71f"}`
+
+// Empty body as tests currently do not check response body.
+const getScanResultsResponse = `{}`
+
+const xscVersionResponse = `{"xsc_version": "0.0.0"}`

artifactory/services/utils/tests/xray/server.go

@@ -84,7 +84,6 @@ func reportHandler(w http.ResponseWriter, r *http.Request) {
 				log.Error(err)
 				http.Error(w, err.Error(), http.StatusInternalServerError)
 			}
-
 			return
 		}
 	case http.MethodPost:
@@ -114,7 +113,7 @@ func reportHandler(w http.ResponseWriter, r *http.Request) {
 		}
 	case http.MethodDelete:
 		if numSegments == 0 {
-			_, err := fmt.Fprint(w, XrayReportDeleteResponse) 
+			_, err := fmt.Fprint(w, XrayReportDeleteResponse)
 			if err != nil {
 				log.Error(err)
 				http.Error(w, err.Error(), http.StatusInternalServerError)
@@ -140,6 +139,27 @@ func entitlementsHandler(w http.ResponseWriter, r *http.Request) {
 	}
 }
 
+func securityHandler(w http.ResponseWriter, r *http.Request) {
+	var err error
+	endpoint := r.URL.Path[strings.LastIndex(r.URL.Path, "/")+1:]
+	switch endpoint {
+	case "gitinfo":
+		_, err = fmt.Fprint(w, gitInfoSentResponse)
+	case "graph":
+		_, err = fmt.Fprint(w, scanGraphResponse)
+	case "9c9dbd61-f544-4e33-4613-34727043d71f":
+		_, err = fmt.Fprint(w, getScanResultsResponse)
+	case "version":
+		_, err = fmt.Fprint(w, xscVersionResponse)
+	default:
+		panic("Unexpected request URI:" + r.RequestURI)
+	}
+	if err != nil {
+		log.Error(err)
+		http.Error(w, err.Error(), http.StatusInternalServerError)
+	}
+}
+
 func buildScanHandler(w http.ResponseWriter, r *http.Request) {
 	argsSegment := strings.Split(r.URL.Path, services.BuildScanAPI)[1]
 	switch r.Method {
@@ -188,6 +208,8 @@ func StartXrayMockServer() int {
 	handlers["/api/xray/scanBuild"] = scanBuildHandler
 	handlers["/api/v2/summary/artifact"] = artifactSummaryHandler
 	handlers["/api/v1/entitlements/feature/"] = entitlementsHandler
+	handlers["/xsc/"] = securityHandler
+	handlers["/xray/"] = securityHandler
 	handlers[fmt.Sprintf("/%s/", services.ReportsAPI)] = reportHandler
 	handlers[fmt.Sprintf("/%s/", services.BuildScanAPI)] = buildScanHandler
 	handlers["/"] = http.NotFound

auth/servicedetails.go

@@ -30,8 +30,11 @@ type ServiceDetails interface {
 	GetSshAuthHeaders() map[string]string
 	GetClient() *jfroghttpclient.JfrogHttpClient
 	GetVersion() (string, error)
+	GetXscUrl() string
+	GetXscVersion() string
 
 	SetUrl(url string)
+	SetXscUrl(url string)
 	SetUser(user string)
 	SetPassword(password string)
 	SetApiKey(apiKey string)
@@ -51,12 +54,12 @@ type ServiceDetails interface {
 	AuthenticateSsh(sshKey, sshPassphrase string) error
 	InitSsh() error
 	RunPreRequestFunctions(httpClientDetails *httputils.HttpClientDetails) error
-
 	CreateHttpClientDetails() httputils.HttpClientDetails
 }
 
 type CommonConfigFields struct {
 	Url                    string                         `json:"-"`
+	XscUrl                 string                         `json:"-"`
 	User                   string                         `json:"-"`
 	Password               string                         `json:"-"`
 	ApiKey                 string                         `json:"-"`

distribution/auth/dsdetails.go

@@ -15,6 +15,18 @@ type distributionDetails struct {
 	auth.CommonConfigFields
 }
 
+func (ds *distributionDetails) GetXscUrl() string {
+	panic("Failed: Method is not implemented")
+}
+
+func (ds *distributionDetails) SetXscUrl(url string) {
+	panic("Failed: Method is not implemented")
+}
+
+func (ds *distributionDetails) GetXscVersion() string {
+	panic("Failed: Method is not implemented")
+}
+
 func (ds *distributionDetails) GetVersion() (string, error) {
 	var err error
 	if ds.Version == "" {

lifecycle/auth/lifecycledetails.go

@@ -12,6 +12,18 @@ type lifecycleDetails struct {
 	auth.CommonConfigFields
 }
 
+func (rt *lifecycleDetails) GetXscUrl() string {
+	panic("Failed: Method is not implemented")
+}
+
+func (rt *lifecycleDetails) SetXscUrl(url string) {
+	panic("Failed: Method is not implemented")
+}
+
 func (rt *lifecycleDetails) GetVersion() (string, error) {
 	panic("Failed: Method is not implemented")
 }
+
+func (rt *lifecycleDetails) GetXscVersion() string {
+	panic("Failed: Method is not implemented")
+}

pipelines/auth/pipelinesdetails.go

@@ -15,6 +15,18 @@ type pipelinesDetails struct {
 	auth.CommonConfigFields
 }
 
+func (pd *pipelinesDetails) GetXscUrl() string {
+	panic("Failed: Method is not implemented")
+}
+
+func (pd *pipelinesDetails) SetXscUrl(url string) {
+	panic("Failed: Method is not implemented")
+}
+
+func (pd *pipelinesDetails) GetXscVersion() string {
+	panic("Failed: Method is not implemented")
+}
+
 func (pd *pipelinesDetails) GetVersion() (string, error) {
 	var err error
 	if pd.Version == "" {

tests/jfrogclient_test.go

@@ -64,6 +64,7 @@ func setupIntegrationTests() {
 		createXrayWatchManager()
 		createXrayPolicyManager()
 		createXrayBinMgrManager()
+		createSecurityServiceManager()
 	}
 	if *TestPipelines {
 		createPipelinesIntegrationsManager()

tests/utils_test.go

@@ -5,6 +5,7 @@ import (
 	"errors"
 	"flag"
 	"fmt"
+	"github.com/jfrog/jfrog-client-go/config"
 	"net/http"
 	"os"
 	"path/filepath"
@@ -110,6 +111,7 @@ var (
 	testsXrayWatchService  *xrayServices.WatchService
 	testsXrayPolicyService *xrayServices.PolicyService
 	testXrayBinMgrService  *xrayServices.BinMgrService
+	securityServiceManager xrayServices.SecurityServiceManager
 
 	// Pipelines Services
 	testsPipelinesIntegrationsService *pipelinesServices.IntegrationsService
@@ -140,10 +142,10 @@ const (
 func init() {
 	ciRunId = flag.String("ci.runId", "", "A unique identifier used as a suffix to create repositories in the tests")
 	TestArtifactory = flag.Bool("test.artifactory", false, "Test Artifactory")
-	TestDistribution = flag.Bool("test.distribution", false, "Test distribution")
-	TestXray = flag.Bool("test.xray", false, "Test xray")
-	TestPipelines = flag.Bool("test.pipelines", false, "Test pipelines")
-	TestAccess = flag.Bool("test.access", false, "Test access")
+	TestDistribution = flag.Bool("test.distribution", false, "Test Distribution")
+	TestXray = flag.Bool("test.xray", false, "Test Xray")
+	TestPipelines = flag.Bool("test.pipelines", false, "Test Pipelines")
+	TestAccess = flag.Bool("test.access", false, "Test Access")
 	TestRepositories = flag.Bool("test.repositories", false, "Test repositories in Artifactory")
 	RtUrl = flag.String("rt.url", "http://localhost:8081/artifactory", "Artifactory url")
 	DistUrl = flag.String("ds.url", "", "Distribution url")
@@ -542,7 +544,11 @@ func GetDistDetails() auth.ServiceDetails {
 
 func GetXrayDetails() auth.ServiceDetails {
 	xrayDetails := xrayAuth.NewXrayDetails()
-	xrayDetails.SetUrl(clientutils.AddTrailingSlashIfNeeded(*XrayUrl))
+	xrayUrl := clientutils.AddTrailingSlashIfNeeded(*XrayUrl)
+	xrayDetails.SetUrl(xrayUrl)
+	xrayDetails.SetXscUrl(strings.Replace(xrayUrl, "xray", "xsc", 1))
+	xrayDetails.SetXscVersion("0.0.0")
+
 	setAuthenticationDetail(xrayDetails)
 	return xrayDetails
 }
@@ -1115,6 +1121,34 @@ func createAccessPingManager() {
 	testsAccessPingService.ServiceDetails = accessDetails
 }
 
+func createSecurityServiceManager() {
+	xrayDetails := xrayAuth.NewXrayDetails()
+	xrayUrl := clientutils.AddTrailingSlashIfNeeded(*XrayUrl)
+	xrayDetails.SetUrl(xrayUrl)
+	xrayDetails.SetXscUrl(strings.Replace(xrayUrl, "/xray/", "/xsc/", 1))
+	// XSC version is used to determine if XSC in enabled or not.
+	xrayDetails.SetXscVersion("0.0.0")
+
+	setAuthenticationDetail(xrayDetails)
+	initSecurityManagerByServerDetails(xrayDetails)
+}
+
+// Init securityServiceManager as XSC or Xray manager depends on the server details.
+func initSecurityManagerByServerDetails(xrayDetails *xrayAuth.XrayDetails) {
+	xsc := auth.ServiceDetails(xrayDetails)
+	serviceConfig, err := config.NewConfigBuilder().
+		SetServiceDetails(xsc).
+		SetCertificatesPath(xsc.GetClientCertPath()).
+		Build()
+	failOnHttpClientCreation(err)
+	securityService, err := xrayServices.New(serviceConfig)
+	if err != nil {
+		log.Error("failed to initialize securityServiceManager")
+		os.Exit(1)
+	}
+	securityServiceManager = securityService
+}
+
 func getUniqueField(prefix string) string {
 	return strings.Join([]string{prefix, strconv.FormatInt(time.Now().Unix(), 10), runtime.GOOS}, "-")
 }

tests/xray_test.go

@@ -105,11 +105,12 @@ func initXrayTest(t *testing.T) {
 	if !*TestXray {
 		t.Skip("Skipping xray test. To run xray test add the '-test.xray=true' option.")
 	}
+	createSecurityServiceManager()
 }
 
 type testXrayDetails struct {
 	auth.ServiceDetails
-	version string
+	version    string
 }
 
 func newTestXrayDetails(serviceDetails auth.ServiceDetails) testXrayDetails {

tests/xrayscan_test.go

@@ -1,6 +1,10 @@
 package tests
 
 import (
+	"github.com/jfrog/jfrog-client-go/auth"
+	"github.com/jfrog/jfrog-client-go/config"
+	services2 "github.com/jfrog/jfrog-client-go/xray/services"
+	"github.com/stretchr/testify/assert"
 	"strconv"
 	"strings"
 	"testing"
@@ -46,6 +50,28 @@ func TestNewXrayScanService(t *testing.T) {
 	}
 }
 
+func TestXrayScanGraph(t *testing.T) {
+	initXrayTest(t)
+	mockScanId := "9c9dbd61-f544-4e33-4613-34727043d71f"
+	xrayServerPort := xray.StartXrayMockServer()
+	xrayDetails := newTestXrayDetails(GetXrayDetails())
+	xrayDetails.SetUrl("http://localhost:" + strconv.Itoa(xrayServerPort) + "/xray/")
+
+	cfp := auth.ServiceDetails(xrayDetails)
+	serviceConfig, err := config.NewConfigBuilder().
+		SetServiceDetails(cfp).
+		Build()
+	assert.NoError(t, err)
+	securityServiceManager, err = services2.New(serviceConfig)
+	assert.NoError(t, err)
+
+	scanId, err := securityServiceManager.ScanGraph(&services2.XrayGraphScanParams{})
+	assert.NoError(t, err)
+	assert.Equal(t, mockScanId, scanId)
+	_, err = securityServiceManager.GetScanGraphResults(scanId, false, false)
+	assert.NoError(t, err)
+}
+
 func scanBuild(t *testing.T, buildName, buildNumber, expected string) {
 	params := services.NewXrayScanParams()
 	params.BuildName = buildName