sca_scan.sh

#!/bin/bash

# Set Workspace folder
cd ~ || exit
mkdir -p SCA
cd ~/SCA || exit

# Function for OWASP Dependency Check setup
owasp_dependency_check_setup() {
    echo -e "\e[94m[*]\e[0m Setting up OWASP Dependency check..."
    # Define the file and folder names
    file_name="dependency-check-9.0.9-release.zip"
    folder_name="dependency-check"

    # Check if the folder exists
    if [ -d "$folder_name" ]; then
        echo -e "\e[92m[+]\e[0m $folder_name already exists. Skipping unzip."
    else
        # Check if the file exists
        echo -e "\e[94m[*]\e[0m Downloading OWASP Dependency check Script..." && echo ""
        wget -q --show-progress "https://github.com/jeremylong/DependencyCheck/releases/download/v9.0.9/dependency-check-9.0.9-release.zip"
        if [ -e "$file_name" ]; then
            echo -e "\e[94m[*]\e[0m Unzipping OWASP Dependency check..."
            unzip -q "$file_name" && echo -e "\e[92m[+]\e[0m [+] Done."
        else
            echo -e "\e[91m[-]\e[0m Error: $file_name not found."
        fi
    fi
}

# Function for running OWASP Dependency Check
owasp_dependency_check() {
    output="$1"
    dir="$2"
    chmod +x ~/SCA/dependency-check/bin/dependency-check.sh
    ~/SCA/dependency-check/bin/dependency-check.sh --out "$output" --scan "$dir"
}

# Function for NPM Audit
npm_audit() {
    # Check if npm is installed
    if command -v npm &> /dev/null; then
        npm_version=$(npm --version)
        echo -e "\e[92m[+]\e[0m npm is already installed. Version: $npm_version"
    else
        echo -e "\e[91m[-]\e[0m npm not found. Installing npm..."
        sudo apt-get update &>/dev/null  # Suppressing stdout
        sudo apt-get install npm -y &>/dev/null  # Suppressing stdout
    fi

    echo -e "\e[94m[*]\e[0m Initiating NPM audit..."
    echo -e "\e[94m[*]\e[0m Checking for node-modules target..."

    cd "$dir" || exit

    # folder name and file name
    folder_name="node_modules"
    lock_file="package-lock.json"

    # Check if the folder exists
    if [ -d "$folder_name" ]; then
        cd "$folder_name" || exit
        echo -e "\e[94m[*]\e[0m Getting into $folder_name"

        if [ -e "$lock_file" ]; then
            echo -e "\e[92m[+]\e[0m $lock_file found in $folder_name"
            npm audit
        else
            echo -e "\e[91m[-]\e[0m $lock_file not found in $folder_name"
        fi
    else
        echo -e "\e[91m[-]\e[0m $folder_name not found"
        echo -e "\e[94m[*]\e[0m Checking for $lock_file in the current working directory"

        if [ -e "$lock_file" ]; then
            echo -e "\e[92m[+]\e[0m $lock_file found in the current working directory"
            npm audit
        else
            echo -e "\e[91m[-]\e[0m $lock_file not found in the current working directory"
        fi
    fi
}

# Function for running Snyk Audit
snyk_run() {
    echo -e "\e[94m[*]\e[0m Initiating Snyk audit..."
    echo -e "\e[94m[*]\e[0m Snyk setup started..."

    cd ~/SCA || exit
    wget -q --show-progress https://static.snyk.io/cli/latest/snyk-linux
    chmod +x snyk-linux
    sudo mv snyk-linux /usr/local/bin/snyk

    # Snyk configure
    echo -e "\e[94m[*]\e[0m Authenticate snyk... you will be redirected to a web page"
    if snyk auth; then
        echo -e "\e[92m[+]\e[0m Authentication successful"
        cd "$dir" || exit
    else
        echo -e "\e[91m[-]\e[0m Authentication failed. Please check your credentials."
    fi

    # Run snyk

    # folder name and file name
    folder_name="node_modules"
    lock_file="package-lock.json"

    # Check if the folder exists
    if [ -d "$folder_name" ]; then
        cd "$folder_name" || exit
        echo -e "\e[94m[*]\e[0m Getting into $folder_name"

        if [ -e "$lock_file" ]; then
            echo -e "\e[92m[+]\e[0m $lock_file found in $folder_name"
            snyk test
        else
            echo -e "\e[91m[-]\e[0m $lock_file not found in $folder_name"
        fi
    else
        echo -e "\e[91m[-]\e[0m $folder_name not found"
        echo -e "\e[94m[*]\e[0m Checking for $lock_file in the current working directory"

        if [ -e "$lock_file" ]; then
            echo -e "\e[92m[+]\e[0m $lock_file found in the current working directory"
            snyk test
        else
            echo -e "\e[91m[-]\e[0m $lock_file not found in the current working directory"
        fi
    fi
}


# Main function
main() {
    while true; do
        echo "--------------------------------------"
        echo "Select an Option:"
        echo "*****************"
        echo "1. OWASP Dependency Check Setup"
        echo "2. OWASP Dependency Check"
        echo "3. NPM Audit"
        echo "4. Snyk Run"
        echo "5. Exit"
        echo "--------------------------------------"

        read -rp "Enter your choice: " choice && echo ""

        case $choice in
        1) owasp_dependency_check_setup ;;
        2) read -rp "Enter output path: " output
           read -rp "Enter directory to scan: " dir
           owasp_dependency_check "$output" "$dir" ;;
        3) read -rp "Enter directory to audit: " dir
           npm_audit "$dir" ;;
        4) read -rp "Enter directory to scan: " dir
           snyk_run "$dir" ;;
        5) echo "Exiting..."; exit ;;
        *) echo "Invalid option. Please select a valid option." ;;
        esac
    done
}

main