Create download-all-artifacts.sh

Signed-off-by: John Osborne <josborne@chainguard.dev>

Author: johnfosborneiii

scripts/athena/download-all-artifacts.sh

@@ -0,0 +1,54 @@
+#!/bin/bash
+
+echo "Fetching gavs endpoint"
+curl -L --user "$CHAINGUARD_JAVA_IDENTITY_ID:$CHAINGUARD_JAVA_TOKEN" "$BASEURL-/api/gavs?page_size=1000" 2>/dev/null | jq > gavs.json
+echo "GAVs found: $(jq '.gavs | length' gavs.json)"
+echo ".cgr fixes: $(jq '[.gavs[] | capture("cgr\\.(?<n>[0-9]+)") | .n | tonumber] | add // 0' gavs.json)"
+echo ".cgp fixes: $(jq '[.gavs[] | capture("cgp\\.(?<n>[0-9]+)") | .n | tonumber] | add // 0' gavs.json)"
+echo "saving results to gavs.json"
+
+mkdir -p jars patches
+for gav in $(jq -r '.gavs[]' gavs.json); do
+  
+  group=$(echo "$gav" | cut -d: -f1)
+  artifact=$(echo "$gav" | cut -d: -f2)
+  version=$(echo "$gav" | cut -d: -f3)
+  name="${group}:${artifact}"
+  QUERYJSON=$(curl -s "$CONSOLE_API_URL_QUERY" \
+       -H "Authorization: Bearer $(chainctl auth token)" \
+       -H 'Content-Type: application/json' \
+       -d "{\"package\":{\"ecosystem\":\"Maven\",\"name\":\"${name}\"}}" | jq)
+  
+  if fixed_version=$(echo "$QUERYJSON" | jq -r '.vulns[].affected[].ranges[].events[] | select(has("fixed")) | .fixed' | head -1) && [ -n "$fixed_version" ]; then
+      echo "OSV Fixed Data Found for Artifact: $group:$artifact:$fixed_version"
+  fi
+      
+  VERSION_DIR="$BASEURL${group//.//}/${artifact//.//}/$version/"
+  GAV_DIR="artifacts/${group//.//}/${artifact//.//}/$version"
+  mkdir -p "$GAV_DIR"
+
+  LISTING=$(curl -L --user "$CHAINGUARD_JAVA_IDENTITY_ID:$CHAINGUARD_JAVA_TOKEN" -s "$VERSION_DIR")
+  FILES=$(echo "$LISTING" | grep -oP '(?<=href=")[^"]+' | grep -v '^\.\./$')
+
+  if [ -z "$FILES" ]; then
+    echo "Failed: no listing returned for $VERSION_DIR"
+    echo "Attempting to guess the .jar and -patches.zip URLs"
+    
+    # Fall back to guessing standard jar/patches URLs since the listing-based fetch failed
+    JARURL="$BASEURL${group//.//}/${artifact//.//}/$version/$artifact-$version.jar"
+    PATCHURL="$BASEURL${group//.//}/${artifact//.//}/$version/$artifact-$version-patches.zip"
+    JAR_URL_HTTP_CODE=$(curl -L --user "$CHAINGUARD_JAVA_IDENTITY_ID:$CHAINGUARD_JAVA_TOKEN" -s -o "$GAV_DIR/$(basename "$JARURL")" -w "%{http_code}" "$JARURL")
+    [ "$JAR_URL_HTTP_CODE" = "200" ] && echo "Saved: $DEST" || echo "Failed ($JAR_URL_HTTP_CODE): $JARURL"
+    PATCH_URL_HTTP_CODE=$(curl -L --user "$CHAINGUARD_JAVA_IDENTITY_ID:$CHAINGUARD_JAVA_TOKEN" -s -o "$GAV_DIR/$(basename "$PATCHURL")" -w "%{http_code}" "$PATCHURL")
+    [ "$PATCH_URL_HTTP_CODE" = "200" ] && echo "Saved: $DEST" || echo "Failed ($PATCH_URL_HTTP_CODE): $PATCHURL"
+  else
+    echo "Found file listing for $VERSION_DIR"
+    while IFS= read -r FNAME; do
+      FILEURL="${VERSION_DIR}${FNAME}"
+      DEST="$GAV_DIR/$FNAME"
+
+      HTTP_CODE=$(curl -L --user "$CHAINGUARD_JAVA_IDENTITY_ID:$CHAINGUARD_JAVA_TOKEN" -s -o "$DEST" -w "%{http_code}" "$FILEURL")
+      [ "$HTTP_CODE" = "200" ] && echo "Saved: $DEST" || echo "Failed ($HTTP_CODE): $FILEURL"
+    done <<< "$FILES"
+  fi
+done