Upload XLSX template to Google Drive (#993)

* Upload Xlsx file to Google Drive after Xlsx Build
* Fix misconfigured build command in checklist build
* Update checklists readme with Google Sheets Template
* Fix typo in env variable

Author: rejahrehim

.github/workflows/build-checklists.yml

@@ -43,7 +43,7 @@ jobs:
         python-version: "3.10"
     - name: Install Dependencies
       run: |
-        pip install openpyxl
+        pip install openpyxl pydrive
     - name: Run XLSX Build
       if: env.CHANGED == 'true'
       run: npm run-script xlsxgen
@@ -79,3 +79,15 @@ jobs:
           git push --set-upstream origin $BRANCH_STAMP
           hub pull-request --no-edit
         fi
+    - name: Set XLSXPublishing Secrets
+      run: |
+        echo "$GDRIVECREDSFILE" | base64 -d > credentials.json
+        echo "$GDRIVESETTINGSFILE" | base64 -d > settings.yaml
+      shell: bash
+      env:
+        GDRIVECREDSFILE: ${{ secrets.GDRIVECREDSFILE }}
+        GDRIVESETTINGSFILE: ${{ secrets.GDRIVESETTINGSFILE }}
+    - name: Publish XLSX file to Google Drive
+      run: |
+        npm run-script publishxlsx --  ${{ secrets.GDRIVEFILEID }}  ${{ github.event.inputs.version }}
+

.github/xlsx/scripts/create-google-drive-cred.py

@@ -0,0 +1,16 @@
+from pydrive.auth import GoogleAuth
+from pydrive.drive import GoogleDrive
+
+# To Create GAuth Credentials file
+gauth = GoogleAuth()
+gauth.LoadCredentialsFile("credentials.json")
+
+if gauth.credentials is None:
+    gauth.LocalWebserverAuth()
+
+elif gauth.access_token_expired:
+    gauth.Refresh()
+else:
+    gauth.Authorize()
+
+gauth.SaveCredentialsFile("credentials.json")

.github/xlsx/scripts/upload-to-google-drive.py

@@ -0,0 +1,55 @@
+from pydrive.drive import GoogleDrive
+from pydrive.auth import GoogleAuth
+
+import sys
+
+if len(sys.argv) < 2:
+    print ('usage: upload-to-google-drive.py <drive-file-id> <version>')
+    print ('drive-file-id is the id of the file to update, version is optional')
+    exit(1)
+
+def set_version():
+    if (len( sys.argv ) > 2):
+        return "-"+str(sys.argv[2])
+    else:
+        return ""
+
+def set_file_id():
+    if (len( sys.argv ) > 1):
+        return str(sys.argv[1])
+    else:
+        return ""
+
+def set_sheet_title(version):
+   return "WSTG-Checklist{version}.xlsx".replace('{version}', version)
+
+# The authentication
+gauth = GoogleAuth()
+drive = GoogleDrive(gauth)
+
+# Set Version
+version = set_version()
+# Set Title
+title = set_sheet_title(version)
+#
+id = set_file_id()
+
+# Upload file
+upload_file_path = 'checklists/checklist.xlsx'
+f = drive.CreateFile({'id': id})
+f.SetContentFile(upload_file_path)
+f.Upload()
+
+# Update title
+a=drive.auth.service.files().get(fileId=id).execute()
+a['title']= title
+update=drive.auth.service.files().update(fileId=id,body=a).execute()
+
+# Insert the permission.
+permission = f.InsertPermission({'type': 'anyone', 'value': 'anyone','role': 'reader'})
+
+
+# Empty the variable used to upload the files to Google Drive
+# If the file stays open in memory and causes a memory leak
+# therefore preventing its deletion
+f = None

checklists/README.md

@@ -18,18 +18,10 @@ Contained in this folder is an Excel file which provides the following worksheet
 
 SHA-256: 153e6d19750ce6c02ff4a6b6c30d0e6ac0d3f08a4b8c97eb885902b7328c734f
 
-## Google Sheets Import
+## Google Sheets Template
 
-The following instructions can be used to import the Checklist spreadsheet directly into a new Google sheet without having to save the doc locally first.
+The following instructions can be used to copy the Checklist spreadsheet template directly into a new Google sheet without having to save the doc locally first.
 
-Note: These instructions are based on use of Mozilla Firefox (72.0.1) on Win 10, and Google sheets on 2020-01-12. Minor procedural differences may be necessary for other browsers, OSes, or future iterations of Google sheets.
-
-1. Visit this page :+1:
-2. In another tab create a new [Google sheet](https://sheets.new).
-3. Copy the `Direct Link` listed above.
-4. In your Google sheet select `File > Import` from the main menu.
-5. In the `Import file` dialog select the `Upload` tab.
-6. Click `Select a file from your device`.
-7. In the `File Upload` dialog, paste the previously copied URL (from step 3) into the `File name` field, click the `Open` button.
-8. Wait a few seconds and an `Import file` dialog should be displayed (choose your `Import location`, likely `Replace spreadsheet`), then click the `import data` button.
-9. You should now have a fully populated and functional Web Security Testing Guide Checklist Google sheet, with the four tabs as mentioned above.
+1. Go to this [Google Spreadsheet template](https://docs.google.com/spreadsheets/d/1csiYqA3DXhpz69K2JCLKN4H-kzkRFlFi/copy?copyCollaborators=false&copyComments=false&title=WSTG+Checklist)
+2. Click `Make a copy` button. This will create a new checklist in your logged in Google Drive.
+3. You should now have a fully populated and functional Web Security Testing Guide Checklist in a Google sheet, with the four tabs as mentioned above.

package.json

@@ -10,7 +10,8 @@
   "scripts": {
     "pdfgen": "bash ./.github/pdf/scripts/make-pdf.sh",
     "jsongen": "bash ./.github/json/scripts/make-json.sh",
-    "xlsxgen": "python ./.github/xlsx/scripts/build-checklist.py"
+    "xlsxgen": "python ./.github/xlsx/scripts/build-checklist.py",
+    "publishxlsx" :"python ./.github/xlsx/scripts/upload-to-google-drive.py"
   },
   "repository": {
     "type": "git",