chore: disable sentry and amplitude for fedramp instance

src/integTest/kotlin/io/snyk/plugin/cli/ConsoleCommandRunnerTest.kt

@@ -80,6 +80,22 @@ class ConsoleCommandRunnerTest : LightPlatformTestCase() {
         }
     }
 
+    @Test
+    fun testSetupCliEnvironmentVariablesWithFedrampCustomEndpoint() {
+        val oldEndpoint = pluginSettings().customEndpointUrl
+        try {
+            val generalCommandLine = GeneralCommandLine("")
+            val expectedEndpoint = "https://api.fedramp.snykgov.io/"
+            pluginSettings().customEndpointUrl = expectedEndpoint
+
+            ConsoleCommandRunner().setupCliEnvironmentVariables(generalCommandLine, "")
+
+            assertEquals("1", generalCommandLine.environment["SNYK_CFG_DISABLE_ANALYTICS"])
+        } finally {
+            pluginSettings().customEndpointUrl = oldEndpoint
+        }
+    }
+
     @Test
     fun testSetupCliEnvironmentVariablesWithOAuthEndpoint() {
         val oldEndpoint = pluginSettings().customEndpointUrl

src/main/kotlin/io/snyk/plugin/cli/ConsoleCommandRunner.kt

@@ -16,6 +16,7 @@ import io.snyk.plugin.getWaitForResultsTimeout
 import io.snyk.plugin.pluginSettings
 import io.snyk.plugin.ui.SnykBalloonNotificationHelper
 import snyk.common.getEndpointUrl
+import snyk.common.isFedramp
 import snyk.common.isOauth
 import snyk.errorHandler.SentryErrorReporter
 import snyk.pluginInfo
@@ -95,7 +96,8 @@ open class ConsoleCommandRunner {
         val oauthEnvVar = "INTERNAL_OAUTH_TOKEN_STORAGE"
         val snykTokenEnvVar = "SNYK_TOKEN"
 
-        val oauthEnabled = URI(endpoint).isOauth()
+        val endpointURI = URI(endpoint)
+        val oauthEnabled = endpointURI.isOauth()
         if (oauthEnabled) {
             commandLine.environment[oauthEnabledEnvVar] = "1"
             commandLine.environment.remove(snykTokenEnvVar)
@@ -114,7 +116,7 @@ open class ConsoleCommandRunner {
 
         commandLine.environment["SNYK_API"] = endpoint
 
-        if (!pluginSettings().usageAnalyticsEnabled) {
+        if (!pluginSettings().usageAnalyticsEnabled || endpointURI.isFedramp()) {
             commandLine.environment["SNYK_CFG_DISABLE_ANALYTICS"] = "1"
         }
 

src/main/kotlin/io/snyk/plugin/services/SnykAnalyticsService.kt

@@ -22,6 +22,7 @@ import snyk.analytics.QuickFixIsDisplayed
 import snyk.analytics.QuickFixIsTriggered
 import snyk.analytics.WelcomeIsViewed
 import snyk.common.SnykError
+import snyk.common.isFedramp
 import snyk.container.ContainerResult
 import snyk.iac.IacResult
 import snyk.oss.OssResult
@@ -146,8 +147,8 @@ class SnykAnalyticsService : Disposable {
     }
 
     fun obtainUserId(token: String?): String {
-        if (token.isNullOrBlank()) {
-            log.warn("Token is null or empty, user public id will not be obtained.")
+        if (token.isNullOrBlank() || !settings.usageAnalyticsEnabled || isFedramp()) {
+            log.warn("Token is null or empty, or analytics disabled. User public id will not be obtained.")
             return ""
         }
         val userId = getSnykApiService().userId
@@ -159,7 +160,7 @@ class SnykAnalyticsService : Disposable {
     }
 
     fun identify() {
-        if (!settings.usageAnalyticsEnabled || userId.isBlank()) {
+        if (!settings.usageAnalyticsEnabled || isFedramp() || userId.isBlank()) {
             return
         }
 
@@ -169,15 +170,15 @@ class SnykAnalyticsService : Disposable {
     }
 
     fun logWelcomeIsViewed(event: WelcomeIsViewed) {
-        if (!settings.usageAnalyticsEnabled) return
+        if (!settings.usageAnalyticsEnabled || isFedramp()) return
 
         catchAll(log, "welcomeIsViewed") {
             itly.logWelcomeIsViewed(userId, event)
         }
     }
 
     fun logProductSelectionIsViewed(event: ProductSelectionIsViewed) {
-        if (!settings.usageAnalyticsEnabled || userId.isBlank()) {
+        if (!settings.usageAnalyticsEnabled || isFedramp() || userId.isBlank()) {
             return
         }
 
@@ -187,7 +188,7 @@ class SnykAnalyticsService : Disposable {
     }
 
     fun logAnalysisIsTriggered(event: AnalysisIsTriggered) {
-        if (!settings.usageAnalyticsEnabled || userId.isBlank()) {
+        if (!settings.usageAnalyticsEnabled || isFedramp() || userId.isBlank()) {
             return
         }
 
@@ -197,7 +198,7 @@ class SnykAnalyticsService : Disposable {
     }
 
     private fun logAnalysisIsReady(event: AnalysisIsReady) {
-        if (!settings.usageAnalyticsEnabled || userId.isBlank()) {
+        if (!settings.usageAnalyticsEnabled || isFedramp() || userId.isBlank()) {
             return
         }
 
@@ -207,7 +208,7 @@ class SnykAnalyticsService : Disposable {
     }
 
     fun logIssueInTreeIsClicked(event: IssueInTreeIsClicked) {
-        if (!settings.usageAnalyticsEnabled || userId.isBlank()) {
+        if (!settings.usageAnalyticsEnabled || isFedramp() || userId.isBlank()) {
             return
         }
 
@@ -217,7 +218,7 @@ class SnykAnalyticsService : Disposable {
     }
 
     fun logHealthScoreIsClicked(event: HealthScoreIsClicked) {
-        if (!settings.usageAnalyticsEnabled || userId.isBlank()) {
+        if (!settings.usageAnalyticsEnabled || isFedramp() || userId.isBlank()) {
             return
         }
 
@@ -227,39 +228,39 @@ class SnykAnalyticsService : Disposable {
     }
 
     fun logPluginIsInstalled(event: PluginIsInstalled) {
-        if (!settings.usageAnalyticsEnabled) return
+        if (!settings.usageAnalyticsEnabled || isFedramp()) return
 
         catchAll(log, "pluginIsInstalled") {
             itly.logPluginIsInstalled(userId, event)
         }
     }
 
     fun logPluginIsUninstalled(event: PluginIsUninstalled) {
-        if (!settings.usageAnalyticsEnabled) return
+        if (!settings.usageAnalyticsEnabled || isFedramp()) return
 
         catchAll(log, "pluginIsUninstalled") {
             itly.logPluginIsUninstalled(userId, event)
         }
     }
 
     fun logAuthenticateButtonIsClicked(event: AuthenticateButtonIsClicked) {
-        if (!settings.usageAnalyticsEnabled) return
+        if (!settings.usageAnalyticsEnabled || isFedramp()) return
 
         catchAll(log, "authenticateButtonIsClicked") {
             itly.logAuthenticateButtonIsClicked(userId, event)
         }
     }
 
     fun logQuickFixIsDisplayed(event: QuickFixIsDisplayed) {
-        if (!settings.usageAnalyticsEnabled) return
+        if (!settings.usageAnalyticsEnabled || isFedramp()) return
 
         catchAll(log, "quickFixIsDisplayed") {
             itly.logQuickFixIsDisplayed(userId, event)
         }
     }
 
     fun logQuickFixIsTriggered(event: QuickFixIsTriggered) {
-        if (!settings.usageAnalyticsEnabled) return
+        if (!settings.usageAnalyticsEnabled || isFedramp()) return
 
         catchAll(log, "quickFixIsTriggered") {
             itly.logQuickFixIsTriggered(userId, event)

src/main/kotlin/snyk/amplitude/AmplitudeExperimentService.kt

@@ -3,11 +3,13 @@ package snyk.amplitude
 import com.intellij.openapi.Disposable
 import com.intellij.openapi.components.Service
 import com.intellij.openapi.diagnostic.logger
+import io.snyk.plugin.pluginSettings
 import org.jetbrains.annotations.TestOnly
 import snyk.amplitude.api.AmplitudeExperimentApiClient
 import snyk.amplitude.api.AmplitudeExperimentApiClient.Defaults.FALLBACK_VARIANT
 import snyk.amplitude.api.ExperimentUser
 import snyk.amplitude.api.Variant
+import snyk.common.isFedramp
 import java.io.IOException
 import java.util.Properties
 import java.util.concurrent.ConcurrentHashMap
@@ -28,7 +30,12 @@ class AmplitudeExperimentService : Disposable {
             val prop = Properties()
             prop.load(javaClass.classLoader.getResourceAsStream("application.properties"))
             val apiKey = prop.getProperty("amplitude.experiment.api-key") ?: ""
-            apiClient = AmplitudeExperimentApiClient.create(apiKey = apiKey)
+            val settings = pluginSettings()
+            if (settings.usageAnalyticsEnabled && !isFedramp()) {
+                apiClient = AmplitudeExperimentApiClient.create(apiKey = apiKey)
+            } else {
+                LOG.debug("Amplitude experiment disabled.")
+            }
         } catch (e: IllegalArgumentException) {
             LOG.warn("Property file contains a malformed Unicode escape sequence", e)
         } catch (e: IOException) {

src/main/kotlin/snyk/common/CustomEndpoints.kt

@@ -105,6 +105,15 @@ fun URI.isOauth() = host != null && host.endsWith(".snykgov.io")
 
 fun URI.isDev() = isSnykDomain() && host.startsWith("dev.")
 
+fun URI.isFedramp() = isOauth() && host.contains("fedramp")
+
+fun isFedramp(): Boolean {
+    val settings = pluginSettings()
+    return settings.customEndpointUrl
+        ?.let { URI(it) }
+        ?.isFedramp() ?: false
+}
+
 internal fun String.removeTrailingSlashesIfPresent(): String {
     val candidate = this.replace(Regex("/+$"), "")
     return try {

src/main/kotlin/snyk/errorHandler/SentryErrorReporter.kt

@@ -18,6 +18,7 @@ import io.sentry.protocol.SentryId
 import io.sentry.protocol.SentryRuntime
 import io.snyk.plugin.pluginSettings
 import snyk.PropertyLoader
+import snyk.common.isFedramp
 import snyk.pluginInfo
 
 object SentryErrorReporter {
@@ -108,7 +109,7 @@ object SentryErrorReporter {
         if (ApplicationManager.getApplication().isUnitTestMode) return SentryId.EMPTY_ID
 
         val settings = pluginSettings()
-        return if (settings.crashReportingEnabled) {
+        return if (settings.crashReportingEnabled && !isFedramp()) {
             val sentryId = Sentry.captureException(throwable)
             LOG.info("Sentry event reported: $sentryId")
             sentryId

src/test/kotlin/snyk/amplitude/AmplitudeExperimentServiceTest.kt

@@ -23,8 +23,6 @@ class AmplitudeExperimentServiceTest {
         unmockkAll()
         mockkStatic("io.snyk.plugin.UtilsKt")
         every { pluginSettings() } returns SnykApplicationSettingsStateService()
-        cut = AmplitudeExperimentService()
-        cut.setApiClient(amplitudeApiClientMock)
         user = ExperimentUser("testUser")
     }
 
@@ -37,8 +35,21 @@ class AmplitudeExperimentServiceTest {
     fun `fetch should call amplitude for data with the userId`() {
         every { amplitudeApiClientMock.allVariants(any()) } returns emptyMap()
 
+        cut = AmplitudeExperimentService()
+        cut.setApiClient(amplitudeApiClientMock)
         cut.fetch(user)
 
         verify(exactly = 1) { amplitudeApiClientMock.allVariants(user) }
     }
+
+    @Test
+    fun `fetch should not call amplitude for data with the userId when fedramp`() {
+        every { amplitudeApiClientMock.allVariants(any()) } returns emptyMap()
+        pluginSettings().customEndpointUrl = "https://api.fedramp.snykgov.io"
+        cut = AmplitudeExperimentService()
+
+        cut.fetch(user)
+
+        verify(exactly = 0) { amplitudeApiClientMock.allVariants(user) }
+    }
 }

src/test/kotlin/snyk/common/CustomEndpointsTest.kt

@@ -163,4 +163,15 @@ class CustomEndpointsTest {
         assertTrue(uri.isOauth())
     }
 
+    @Test
+    fun `isFedramp true for the right URI`() {
+        val uri = URI("https://app.fedramp.snykgov.io")
+        assertTrue(uri.isFedramp())
+    }
+
+    @Test
+    fun `isFedramp false for the right URI`() {
+        val uri = URI("https://app.fedddramp.snykgov.io")
+        assertFalse(uri.isFedramp())
+    }
 }

src/test/kotlin/snyk/errorHandler/SentryErrorReporterTest.kt

@@ -42,6 +42,18 @@ class SentryErrorReporterTest {
         verify(exactly = 1) { Sentry.captureException(any()) }
     }
 
+    @Test
+    fun `captureException should not send exceptions to Sentry when crashReportingEnabled is true and fedramp`() {
+        val settings = mockPluginInformation()
+        setUnitTesting(false)
+        settings.crashReportingEnabled = true
+        settings.customEndpointUrl = "https://api.fedramp.snykgov.io"
+
+        SentryErrorReporter.captureException(RuntimeException("test"))
+
+        verify(exactly = 0) { Sentry.captureException(any()) }
+    }
+
     @Test
     fun `captureException should not send exceptions to Sentry when crashReportingEnabled is false`() {
         val settings = mockPluginInformation()