Current state with latest updates

2026-08-23 13:28:34 +02:00
parent 5af95f6533
commit f52879edbb
74 changed files with 5174 additions and 960 deletions
@@ -0,0 +1,160 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Models;
+
+use Illuminate\Database\Eloquent\Model;
+use Illuminate\Database\Eloquent\Relations\BelongsTo;
+
+final class SecurityReport extends Model
+{
+    protected $fillable = [
+        'status',
+        'started_at',
+        'finished_at',
+        'composer_critical',
+        'composer_high',
+        'composer_medium',
+        'composer_low',
+        'composer_unknown',
+        'npm_critical',
+        'npm_high',
+        'npm_moderate',
+        'npm_low',
+        'npm_info',
+        'npm_unknown',
+        'total_critical',
+        'total_high',
+        'total_medium',
+        'total_low',
+        'total_unknown',
+        'composer_outdated_count',
+        'npm_outdated_count',
+        'summary',
+        'composer_audit',
+        'composer_outdated',
+        'npm_audit',
+        'npm_outdated',
+        'error_message',
+        'triggered_by',
+        'user_id',
+    ];
+
+    protected function casts(): array
+    {
+        return [
+            'started_at' => 'datetime',
+            'finished_at' => 'datetime',
+            'summary' => 'array',
+            'composer_audit' => 'array',
+            'composer_outdated' => 'array',
+            'npm_audit' => 'array',
+            'npm_outdated' => 'array',
+        ];
+    }
+
+    public function user(): BelongsTo
+    {
+        return $this->belongsTo(User::class);
+    }
+
+    public function hasCriticalFindings(): bool
+    {
+        return $this->total_critical > 0;
+    }
+
+    public function hasHighFindings(): bool
+    {
+        return $this->total_high > 0;
+    }
+
+    public function hasDangerFindings(): bool
+    {
+        return $this->hasCriticalFindings() || $this->hasHighFindings();
+    }
+
+    public function getRiskLabelAttribute(): string
+    {
+        if ($this->total_critical > 0) {
+            return 'Critical';
+        }
+
+        if ($this->total_high > 0) {
+            return 'High';
+        }
+
+        if ($this->total_medium > 0) {
+            return 'Medium';
+        }
+
+        if ($this->total_low > 0) {
+            return 'Low';
+        }
+
+        return 'Clean';
+    }
+
+    /**
+     * @return array<int, array<string, mixed>>
+     */
+    public function composerAdvisories(): array
+    {
+        $advisories = $this->composer_audit['advisories'] ?? [];
+        $items = [];
+
+        foreach ($advisories as $package => $packageAdvisories) {
+            if (! is_array($packageAdvisories)) {
+                continue;
+            }
+
+            foreach ($packageAdvisories as $advisory) {
+                if (! is_array($advisory)) {
+                    continue;
+                }
+
+                $items[] = [
+                    'package' => (string) $package,
+                    'severity' => strtolower((string) ($advisory['severity'] ?? 'unknown')),
+                    'title' => (string) ($advisory['title'] ?? $advisory['advisoryId'] ?? 'Unknown advisory'),
+                    'cve' => (string) ($advisory['cve'] ?? $advisory['link'] ?? ''),
+                    'affected_versions' => (string) ($advisory['affectedVersions'] ?? $advisory['affected_versions'] ?? ''),
+                    'reported_at' => (string) ($advisory['reportedAt'] ?? ''),
+                    'link' => (string) ($advisory['link'] ?? ''),
+                ];
+            }
+        }
+
+        return $items;
+    }
+
+    /**
+     * @return array<int, array<string, mixed>>
+     */
+    public function npmVulnerabilities(): array
+    {
+        $vulnerabilities = $this->npm_audit['vulnerabilities'] ?? [];
+        $items = [];
+
+        foreach ($vulnerabilities as $package => $vulnerability) {
+            if (! is_array($vulnerability)) {
+                continue;
+            }
+
+            $via = collect((array) ($vulnerability['via'] ?? []))
+                ->first(fn (mixed $item): bool => is_array($item));
+
+            $items[] = [
+                'package' => (string) $package,
+                'severity' => strtolower((string) ($vulnerability['severity'] ?? 'unknown')),
+                'title' => is_array($via) ? (string) ($via['title'] ?? 'Unknown advisory') : 'Unknown advisory',
+                'cve' => is_array($via) ? (string) ($via['cve'] ?? '') : '',
+                'range' => (string) ($vulnerability['range'] ?? ''),
+                'fix_available' => is_array($vulnerability['fixAvailable'] ?? null) ? (string) (($vulnerability['fixAvailable']['name'] ?? '') . '@' . ($vulnerability['fixAvailable']['version'] ?? '')) : ((bool) ($vulnerability['fixAvailable'] ?? false) ? 'Yes' : ''),
+                'url' => is_array($via) ? (string) ($via['url'] ?? '') : '',
+            ];
+        }
+
+        return $items;
+    }
+}