Evidence Management & Audit Trails

#!/usr/bin/env python3
# Verify ASPICE SUP.10 audit trail: every code change has approved CR in JIRA

import subprocess, json, requests

JIRA_BASE = "https://jira.company.com/rest/api/2"
JIRA_AUTH = ("automation_user", "api_token_here")

def get_commits_since_baseline(repo_path, baseline_tag):
    result = subprocess.run(
        ["git", "log", f"{baseline_tag}..HEAD", "--pretty=%H|%s|%ae"],
        cwd=repo_path, capture_output=True, text=True
    )
    return [line.split("|") for line in result.stdout.strip().split("\n") if line]

def check_cr_exists(commit_message):
    # Expect commit message format: "CR-XXXX: description"
    if not commit_message.startswith("CR-"):
        return None, "No CR reference in commit message"
    cr_id = commit_message.split(":")[0]
    response = requests.get(f"{JIRA_BASE}/issue/{cr_id}", auth=JIRA_AUTH)
    if response.status_code == 200:
        issue = response.json()
        status = issue["fields"]["status"]["name"]
        approved = status in ["Approved", "Implemented", "Verified", "Closed"]
        return cr_id, "Approved" if approved else f"Not approved (status: {status})"
    return cr_id, f"CR not found in JIRA (HTTP {response.status_code})"

print("ASPICE SUP.10 Audit Trail Check:")
commits = get_commits_since_baseline("repos/app_sw", "Release_EPS_v3.1")
for commit_hash, message, author in commits:
    cr_id, status = check_cr_exists(message)
    icon = "OK" if status == "Approved" else "FAIL"
    print(f"  [{icon}] {commit_hash[:8]} | {message[:50]} | CR: {cr_id} | {status}")