Merge pull request #186 from secureCodeBox/feat/fetchProdFinding

J12934 · web-flow · commit 71e2767eb393 · 2020-06-23T09:00:37.000+02:00
feature: add fetch findings by product
diff --git a/scb-persistenceproviders/defectdojo-persistenceprovider/src/main/java/io/securecodebox/persistence/DefectDojoService.java b/scb-persistenceproviders/defectdojo-persistenceprovider/src/main/java/io/securecodebox/persistence/DefectDojoService.java
@@ -521,7 +521,6 @@ public void deleteUnusedBranches(List<String> existingBranches, long productId)
         if(existingBranches == null) {
             LOG.error("No existing branches given, this will lead to nullpointer");
         }
-        RestTemplate restTemplate = new RestTemplate();
         
         //get existing branches
         List<EngagementResponse> engagementPayloads = getEngagementsForProduct(productId, 0);
@@ -627,4 +626,20 @@ public List<Finding> receiveNonHandledFindings(String productName, String engage
         }
         return findings;
     }
+    public List<Finding> receiveNonHandledProductFindings(String productName, String minimumSeverity, LinkedMultiValueMap<String, String> options){
+        List<Finding> findings = new LinkedList<>();
+        long productId = retrieveProductId(productName);
+
+        List<EngagementResponse> engagementPayloads = getEngagementsForProduct(productId, 0);
+        for(EngagementResponse engagementPayload : engagementPayloads) {
+            long engagementId = engagementPayload.getId();
+            for(String severity : Finding.getServeritiesAndHigherServerities(minimumSeverity)) {
+                options.remove("severity");
+                options.add("severity", severity);
+                findings.addAll(getCurrentFindings(engagementId, options));
+            }
+        }
+
+        return findings;
+    }    
 }
