#!/usr/bin/env ruby
# frozen_string_literal: true

require 'pwn'
require 'optparse'

opts = {}
OptionParser.new do |options|
  options.banner = "USAGE:
    #{File.basename($PROGRAM_NAME)} [opts]
  "

  options.on('-uURL', '--url=URL', '<Required - DefectDojo URL>') do |u|
    opts[:url] = u
  end

  options.on('-VVERSION', '--api-version=VERSION', '<Optional - DefectDojo API version v1 || v2 (Defaults to v2)>') do |v|
    opts[:api_version] = v
  end

  options.on('-UUSER', '--username=USER', '<Optional - DefectDojo Username (Will Prompt if nil)>') do |u|
    opts[:username] = u
  end

  options.on('-aKEY', '--api-key=KEY', '<Optional - DefectDojo API Key (Will Prompt if nil)>') do |a|
    opts[:api_key] = a
  end

  options.on('-nNAME', '--enagagement-name=NAME', '<Required - name of engagement to associate w/ scan>') do |n|
    opts[:engagement_name] = n
  end

  options.on('-sTYPE', '--scan-type=TYPE', '<Required - type of scan importing (see <DEFECTDOJO_URL>/admin/dojo/test_type/ for listing)>') do |t|
    opts[:scan_type] = t
  end

  options.on('-fFILE', '--file-path=FILE', '<Required - path of scan results file>') do |f|
    opts[:file] = f
  end

  options.on('-TPATH', '--test-resource-uri=PATH', '<Required - test resource URI (e.g. /api/v1/tests/1/)>') do |p|
    opts[:test_resource_uri] = p
  end

  options.on('-tTAGS', '--tags=TAGS', '<Optional - comma-delimited list of tag names to tie to scan>') do |t|
    opts[:tags] = t
  end

  options.on('-mSEVERITY', '--min-severity=SEVERITY', '<Optional - minimum finding severity Info||Low||Medium||High||Critical (Defaults to Info)>') do |m|
    opts[:minimum_severity] = m
  end

  options.on('-dDATE', '--scan-date=DATE', '<Optional - date in which scan was kicked off (Defaults to current day)>') do |d|
    opts[:scan_date] = d
  end

  options.on('-v', '--[no-]verified', '<Optional - flag finding as verified by a tester (defaults to false)') do |v|
    opts[:verified] = v
  end

  options.on('-g', '--create-finding-groups', '<Optional - group similar findings into one finding (defaults to false)') do |g|
    opts[:create_finding_groups] = g
  end

  options.on('-c', '--close-old-findings-product-scope', '<Optional - Select if close_old_findings applies to all findings of the same type in the product (defaults to false)') do |c|
    opts[:close_old_findings_product_scope] = c
  end

  options.on('-C', '--close-old-findings', '<Optional - old findings no longer present in the report get closed as mitigated when importing (defaults to false)') do |c|
    opts[:close_old_findings] = c
  end

  options.on('-j', '--push-to-jira', '<Optional - push findings to JIRA (defaults to false)') do |j|
    opts[:push_to_jira] = j
  end
end.parse!

if opts.empty?
  puts `#{File.basename($PROGRAM_NAME)} --help`
  exit 1
end

# Construct AuthN Args
url = opts[:url]
api_version = opts[:api_version]
opts[:username] ? (username = opts[:username]) : (username = PWN::Plugins::AuthenticationHelper.username)
opts[:api_key] ? (api_key = opts[:api_key]) : (api_key = PWN::Plugins::AuthenticationHelper.mask_password(prompt: 'API Key'))

# Create Engagement Args
engagement_name = opts[:engagement_name]
scan_type = opts[:scan_type]
file = opts[:file]
test_resource_uri = opts[:test_resource_uri]
tags = opts[:tags]
minimum_severity = opts[:minimum_severity]
scan_date = opts[:scan_date]
verified = opts[:verified]
create_finding_groups = opts[:create_finding_groups]
close_old_findings_product_scope = opts[:close_old_findings_product_scope]
close_old_findings = opts[:close_old_findings]
push_to_jira = opts[:push_to_jira]

begin
  dd_obj = PWN::Plugins::DefectDojo.login(
    url: url,
    api_version: api_version,
    username: username,
    api_key: api_key
  )

  reimportscan_response = PWN::Plugins::DefectDojo.reimportscan(
    dd_obj: dd_obj,
    engagement_name: engagement_name,
    scan_type: scan_type,
    file: file,
    test_resource_uri: test_resource_uri,
    tags: tags,
    minimum_severity: minimum_severity,
    scan_date: scan_date,
    verified: verified,
    create_finding_groups: create_finding_groups,
    close_old_findings_product_scope: close_old_findings_product_scope,
    close_old_findings: close_old_findings,
    push_to_jira: push_to_jira
  )
rescue StandardError => e
  raise e
end