38 lines
2.6 KiB
Python
38 lines
2.6 KiB
Python
"""Compact, evidence-based presentation of the full assessment."""
|
|
import re
|
|
from samsara.analyzers.dependencies import service_family
|
|
|
|
# Name hints for server workloads, not a comprehensive application classifier.
|
|
WORKLOAD = re.compile(r'(?:nginx|apache|httpd|iis|w3svc|sql|postgres|mariadb|mysql|redis|mongo|oracle|tomcat|haproxy|docker|containerd|podman|samba|smbd|nfs|bind|named|rabbitmq|kafka|jenkins|backup|reporting|dedicated server|minecraft|valheim|rustdedicated)', re.I)
|
|
|
|
|
|
def summarize(data, assessment):
|
|
server, inventory = data['server'], data['inventory']
|
|
os_name = str(server.get('operating_system') or 'Not collected')
|
|
version = server.get('os_version')
|
|
if not version:
|
|
match = re.search(r'\b(?:20\d{2}|\d+(?:\.\d+)+)\b', os_name)
|
|
version = match[0] if match else 'Not collected'
|
|
version = str(version)
|
|
important = []
|
|
for row in inventory.get('software', []):
|
|
if WORKLOAD.search(row['name']) and not row['name'].lower().startswith('lib') and not row['name'].lower().endswith(('-dev', '-devel', '-doc')):
|
|
important.append({'name': row['name'], 'version': row.get('version', 'Not collected'),
|
|
'evidence': 'Installed software name matches a server-workload hint; use unverified'})
|
|
names = {row['name'].lower().split(':')[0] for row in important}
|
|
for row in inventory.get('services', []):
|
|
if row.get('state') == 'Running' and service_family(row['name']) is not None and row['name'].lower().removesuffix('.service') not in names:
|
|
important.append({'name': row['name'], 'version': 'Not collected', 'evidence': 'Running service; application ownership requires review'})
|
|
jobs = []
|
|
task_classes = {row['inventory_index']: row['classification'] for row in assessment.get('task_observations', [])}
|
|
for index, row in enumerate(inventory.get('tasks', [])):
|
|
if (row.get('enabled') or row.get('state') == 'Running') and task_classes.get(index) != 'Standard operating system activity':
|
|
jobs.append({'name': row['name'], 'schedule': row.get('triggers', 'Schedule not collected'),
|
|
'status': row.get('state', 'Enabled schedule; execution unverified'),
|
|
'account': row.get('account', 'Not collected')})
|
|
return {'os_type': os_name, 'version': version,
|
|
'risk_score': assessment['score'], 'risk_level': assessment['level'],
|
|
'software': important, 'jobs': jobs,
|
|
'incomplete': len(assessment['coverage']['incomplete_checks']),
|
|
'coverage_percent': assessment['coverage']['percent'], 'confidence': assessment['confidence']['level']}
|