Generating index.html automatically

Author: co-stig

.github/workflows/scan-release.yml

@@ -35,7 +35,9 @@ jobs:
         env:
           GH_TOKEN: ${{ github.token }}
           RELEASE: ${{ inputs.release }}
-        run: ./download-release.sh
+        run: |
+          ./download-release.sh
+          echo "RELEASE=$RELEASE" >> $GITHUB_ENV
 
       - name: Setup Python
         uses: actions/setup-python@v5
@@ -64,15 +66,6 @@ jobs:
             vtscan-results-all.json
             vtscan-results-warnings.json
 
-#      - name: Post message
-#        uses: slackapi/slack-github-action@v2.0.0
-#        with:
-#          method: chat.postMessage
-#          token: ${{ secrets.SLACK_BOT_TOKEN }}
-#          payload: |
-#            channel: ${{ secrets.SLACK_CHANNEL_ID }}
-#            text: "${{ env.SCAN_STATUS }}"
-
   upload:
     # Making it a standalone job to limit its security perimeter
     runs-on: ubuntu-latest
@@ -95,10 +88,15 @@ jobs:
       - name: Commit scan results
         shell: bash
         run: |
+          mv vtscan-results-all.json "vt-scan-results/$RELEASE-all.json"
+          mv vtscan-results-warning.json "vt-scan-results/$RELEASE-warning.json"
+          
+          python3 html.py > index.html
+          
           git config --local user.email "github-actions[bot]@users.noreply.github.com"
           git config --local user.name "github-actions[bot]"
           git add .
-          git commit -a -m "VT scan results"
+          git commit -a -m "Updated VT scan results"
 
       - name: Push changes
         uses: ad-m/github-push-action@master

download-release.sh

@@ -33,6 +33,8 @@ else
     echo "Release variable is specified"
 fi
 
+export RELEASE
+
 echo "Downloading binaries for release $RELEASE to $(pwd)"
 
 gh release download "$RELEASE" --clobber --dir "$OUTPUT" --pattern "*.exe" --repo "$REPO"

html.py

@@ -0,0 +1,11 @@
+import datetime
+import os
+
+if __name__ == '__main__':
+    print('<h1>VirusTotal scan results for <a href="https://flowkeeper.org">Flowkeeper</a></h1>')
+    print('<ul>')
+    for f in os.listdir('vt-scan-results'):
+        if f.endswith('.json'):
+            print(f'<li><a href="vt-scan-results/{f}">{f}</a></li>')
+    print('</ul>')
+    print(f'<p>Last update: {datetime.datetime.now(tz=datetime.timezone.utc)}</p>')

vt-scan-results/DO NOT DELETE

@@ -0,0 +1 @@
+aa