gosec/output/junit_xml_format.go

package output

import (
	"encoding/json"
	"encoding/xml"

	"github.com/GoASTScanner/gas"
)

type JUnitXMLReport struct {
	XMLName    xml.Name    `xml:"testsuites"`
	Testsuites []Testsuite `xml:"testsuite"`
}

type Testsuite struct {
	XMLName   xml.Name   `xml:"testsuite"`
	Name      string     `xml:"name,attr"`
	Tests     int        `xml:"tests,attr"`
	Testcases []Testcase `xml:"testcase"`
}

type Testcase struct {
	XMLName xml.Name `xml:"testcase"`
	Name    string   `xml:"name,attr"`
	Failure Failure  `xml:"failure"`
}

type Failure struct {
	XMLName xml.Name `xml:"failure"`
	Message string   `xml:"message,attr"`
	Text    string   `xml:",innerxml"`
}

func groupDataByRules(data *reportInfo) map[string][]*gas.Issue {
	groupedData := make(map[string][]*gas.Issue)
	for _, issue := range data.Issues {
		if _, ok := groupedData[issue.What]; ok {
			groupedData[issue.What] = append(groupedData[issue.What], issue)
		} else {
			groupedData[issue.What] = []*gas.Issue{issue}
		}
	}
	return groupedData
}

func createJUnitXMLStruct(groupedData map[string][]*gas.Issue) JUnitXMLReport {
	var xmlReport JUnitXMLReport
	for what, issues := range groupedData {
		testsuite := Testsuite{
			Name:  what,
			Tests: len(issues),
		}
		for _, issue := range issues {
			stacktrace, err := json.MarshalIndent(issue, "", "\t")
			if err != nil {
				panic(err)
			}
			testcase := Testcase{
				Name: issue.File,
				Failure: Failure{
					Message: "Found 1 vulnerability. See stacktrace for details.",
					Text:    string(stacktrace),
				},
			}
			testsuite.Testcases = append(testsuite.Testcases, testcase)
		}
		xmlReport.Testsuites = append(xmlReport.Testsuites, testsuite)
	}
	return xmlReport
}