feat: Added Flags for Assertions & Binary Download

README.md

@@ -10,6 +10,11 @@ None.
 
 Available variables are listed below, along with default values (see defaults/main.yml):
 
+```yaml
+ecomscan_binary_download: true
+```
+Boolean to set if we should try and download the latest copy of Ecomscan
+
 ```yaml
 ecomscan_binary_source: 'https://ecomscan.com/downloads/linux-amd64/ecomscan'
 ```
@@ -51,6 +56,18 @@ ecomscan_deep: false
 Boolean toggle to decide if Ecomscan should perform a deep or regular scan
 
 
+```yaml
+ecomscan_assert_no_malware: false
+```
+Boolean toggle to decide if we should assert that no malware is present. Is this is set to true, the playbook will exit with code `2`.
+
+
+```yaml
+ecomscan_assert_no_vulnerabilities: false
+```
+Boolean toggle to decide if we should assert that no vulnerabilities is present. Is this is set to true, the playbook will exit with code `2`
+
+
 ## Example Playbook
 An example playbook usage
 ```yaml
@@ -86,4 +103,4 @@ magento2:
       ansible_user: client2_mage_prod
       ecomscan_report_email: [email protected],[email protected]
       ecomscan_project_root: /var/www/vhosts/prod.client2.com/htdocs/release/
-```
+```

defaults/main.yml

@@ -1,3 +1,4 @@
+ecomscan_binary_download: true
 ecomscan_binary_source: https://ecomscan.com/downloads/linux-amd64/ecomscan
 ecomscan_binary_directory: ~/bin
 ecomscan_binary_path: ~/bin/ecomscan
@@ -7,3 +8,5 @@ ecomscan_project_root: /var/www/vhosts/magento2/htdocs/
 ecomscan_minimum_confidence: 50
 ecomscan_maximum_filesize: 20000000
 ecomscan_deep: false
+ecomscan_assert_no_malware: false
+ecomscan_assert_no_vulnerabilities: false

tasks/main.yml

@@ -4,12 +4,14 @@
     path: "{{ ecomscan_binary_directory }}"
     state: directory
     mode: '0755'
+  when: ecomscan_binary_download
 
 - name: Download the Ecomscan binary
   ansible.builtin.get_url:
     url: "{{ ecomscan_binary_source }}"
     dest: "{{ ecomscan_binary_path }}"
     mode: '0744'
+  when: ecomscan_binary_download
 
 - name: Perform Ecomscan
   ansible.builtin.command:
@@ -21,15 +23,23 @@
       --report={{ ecomscan_report_email }}
       {{ ecomscan_deep | ternary('--deep', '') }}
       {{ ecomscan_project_root }}
-  register: scan
+  register: ecomscan_scan
   changed_when: true
 
 - name: Summary
   ansible.builtin.debug:
-    msg: "{{ scan.stdout_lines | select('match', '^>> Found:.*') | first }}"
+    msg: "{{ ecomscan_scan.stdout_lines | select('match', '^>> Found:.*') | first }}"
 
 - name: Assert No Malware
   ansible.builtin.assert:
-    that: "'MALWARE' not in scan.stdout"
-    fail_msg: "❌ Malware found"
+    that: "'MALWARE' not in ecomscan_scan.stdout"
     success_msg: "✅ No Malware Found"
+    fail_msg: "❌ Malware found"
+  when: ecomscan_assert_no_malware
+
+- name: Assert No Vulnerabilities
+  ansible.builtin.assert:
+    that: "'VULNERABILITY' not in ecomscan_scan.stdout"
+    success_msg: "✅ No Vulnerabilities Found"
+    fail_msg: "❌ Vulnerabilities Found"
+  when: ecomscan_assert_no_vulnerabilities