export2gitops.py

import json
import yaml
import argparse

def policy_to_yaml(json_file, yaml_file):
    """Reads a JSON file, converts it to YAML, and writes it to an output file."""
    # Read the JSON file
    with open(json_file, "r") as file:
        json_data = json.load(file)
    
    policies = json_data.get("policies", [])
    yaml_policies = []

    for policy in policies:
        yaml_policy = {
            "kind": "SecurityPolicy",
            "apiVersion": "config.stackrox.io/v1alpha1",
            "metadata": {
                "name": policy["name"].lower().replace(" ", "-")
            },
            "spec": {
                "policyName": policy["name"],
                "categories": policy.get("categories", []),
                "description": policy.get("description", ""),
                "disabled": policy.get("disabled", False),
                "remediation": policy.get("remediation", ""),
                "lifecycleStages": policy.get("lifecycleStages", []),
                "policySections": policy.get("policySections", []),
                "rationale": policy.get("rationale", ""),
                "severity": policy.get("severity", "LOW_SEVERITY")
            }
        }
        yaml_policies.append(yaml_policy)

    # Write to YAML file
    with open(yaml_file, "w") as file:
        yaml.dump_all(yaml_policies, file, default_flow_style=False, sort_keys=False)

    print(f"✅ YAML output saved to {yaml_file}")

if __name__ == "__main__":
    # Set up argument parser
    parser = argparse.ArgumentParser(description="Convert StackRox JSON exports to SecurityPolicy YAML")
    parser.add_argument("-i", "--input", required=True, help="Path to the exported JSON file")
    parser.add_argument("-o", "--output", required=True, help="Output file path")
    
    # Parse arguments
    args = parser.parse_args()

    # Convert the policy
    policy_to_yaml(args.input, args.output)