Add RL Scanner to CCI

.circleci/config.yml

@@ -2,6 +2,8 @@ version: 2.1
 
 orbs:
   general-platform-helpers: okta/[email protected]
+  python: circleci/[email protected]
+  aws-cli: circleci/[email protected]
 
 aliases:
 
@@ -59,6 +61,47 @@ jobs:
           run-on-non-main: true
           additional-arguments: "--maven-aggregate-project"
 
+  reversing-labs:
+    docker:
+      - image: cimg/python:3.10
+    steps:
+      - checkout
+
+      - run:
+          name: Install Dependencies
+          command: pip wheel -r requirements.txt -w _vendor/
+
+      - run:
+          name: Download Reverse Labs Scanner
+          command: |
+            curl https://dso-resources.oktasecurity.com/scanner \
+              -H "x-api-key: $RESOURCE_TOKEN" \
+              --output rl_wrapper-0.0.2+35ababa-py3-none-any.whl
+      # Install the wrapper that was downloaded
+      - run:
+          name: Install RL Wrapper
+          command: |
+            pip install ./rl_wrapper-0.0.2+35ababa-py3-none-any.whl
+      # Setup the AWS profile
+      - aws-cli/setup:
+          profile_name: default
+          role_arn: $AWS_ARN
+          region: us-east-1
+      # Get the credentials and save to env
+      - run: >-
+          eval "$(aws configure export-credentials --profile default --format env)" 2> /dev/null
+      # Run the wrapper, do not change anything here
+      - run:
+          name: Run Reversing Labs Wrapper Scanner
+          command: |
+            rl-wrapper \
+              --artifact ${CIRCLE_WORKING_DIRECTORY/#\~/$HOME} \
+              --name $CIRCLE_PROJECT_REPONAME\
+              --version $CIRCLE_SHA1\
+              --repository $CIRCLE_PROJECT_USERNAME/$CIRCLE_PROJECT_REPONAME \
+              --commit $CIRCLE_SHA1 \
+              --build-env "circleci" \
+              --suppress_output
 workflows:
   "Circle CI Tests":
     jobs:
@@ -74,3 +117,8 @@ workflows:
             - jdk21
           context:
             - static-analysis
+  "Malware Scanner":
+    jobs:
+      - reversing-labs:
+          context:
+            - okta-dcp