boman-cli 2.4.7__tar.gz → 2.4.8__tar.gz

{boman-cli-2.4.7 → boman_cli-2.4.8}/PKG-INFO

@@ -1,17 +1,22 @@
 Metadata-Version: 2.1
 Name: boman-cli
-Version: 2.4.7
+Version: 2.4.8
 Summary: CLI tool of boman.ai
 Home-page: https://boman.ai
 Author: Sumeru Software Solutions Pvt. Ltd.
 Author-email: support@boman.ai
 License: BSD 2-clause
-Platform: UNKNOWN
 Classifier: Development Status :: 5 - Production/Stable
 Classifier: Intended Audience :: Developers
 Classifier: License :: OSI Approved :: BSD License
 Classifier: Operating System :: OS Independent
 Description-Content-Type: text/markdown
+Requires-Dist: docker<=7.0.0
+Requires-Dist: requests<=2.31.0
+Requires-Dist: pyyaml
+Requires-Dist: coloredlogs<=15.0.1
+Requires-Dist: xmltodict<=0.13.0
+Requires-Dist: pyfiglet<=1.0.2
 
 # Introduction 
 Boman CLI is a Orchestration script written in python to run security scans on the local or CI/CD environment and upload the results to Boman.ai SaaS server.
@@ -95,11 +100,18 @@ Example: boman-cli -a run -zap_session_script ./session.js
 
 ### Release Note:
 
+### 2.4.8
+- **New:** Semgrep pro (API) integration. Navigate to **Integrations -> Semgrep pro/api** in the Boman SaaS to setup Semgrep pro.
+
+- **New:** Reachability analysis for SCA enabled.
+
+- **Feature Request:** when Failbuild is configured. Boman should not take false positive, Accepted Risk, Not applicable and Muted vulnerabilities into account.
+
 ### V2.4.7
 - **BUG:** Failing build if token is not configured.
 
 ### V2.4.6
-- **New:** Semgrep API integration. Pass the semgrpe token as -semgrep_token {value}.
+- **New:** Semgrep CLI integration. Pass the semgrep token as -semgrep_token {value}.
 
 ### V2.4.5
 - **New:** Snyk API integration. Navigate to **Integrations -> Snyk** in the Boman SaaS to setup Snyk.
@@ -165,5 +177,3 @@ Released on: 21 May 2024
 
 
 
-
-

{boman-cli-2.4.7 → boman_cli-2.4.8}/README.md

@@ -80,11 +80,18 @@ Example: boman-cli -a run -zap_session_script ./session.js
 
 ### Release Note:
 
+### 2.4.8
+- **New:** Semgrep pro (API) integration. Navigate to **Integrations -> Semgrep pro/api** in the Boman SaaS to setup Semgrep pro.
+
+- **New:** Reachability analysis for SCA enabled.
+
+- **Feature Request:** when Failbuild is configured. Boman should not take false positive, Accepted Risk, Not applicable and Muted vulnerabilities into account.
+
 ### V2.4.7
 - **BUG:** Failing build if token is not configured.
 
 ### V2.4.6
-- **New:** Semgrep API integration. Pass the semgrpe token as -semgrep_token {value}.
+- **New:** Semgrep CLI integration. Pass the semgrep token as -semgrep_token {value}.
 
 ### V2.4.5
 - **New:** Snyk API integration. Navigate to **Integrations -> Snyk** in the Boman SaaS to setup Snyk.

{boman-cli-2.4.7 → boman_cli-2.4.8}/boman_cli.egg-info/PKG-INFO

@@ -1,17 +1,22 @@
 Metadata-Version: 2.1
 Name: boman-cli
-Version: 2.4.7
+Version: 2.4.8
 Summary: CLI tool of boman.ai
 Home-page: https://boman.ai
 Author: Sumeru Software Solutions Pvt. Ltd.
 Author-email: support@boman.ai
 License: BSD 2-clause
-Platform: UNKNOWN
 Classifier: Development Status :: 5 - Production/Stable
 Classifier: Intended Audience :: Developers
 Classifier: License :: OSI Approved :: BSD License
 Classifier: Operating System :: OS Independent
 Description-Content-Type: text/markdown
+Requires-Dist: docker<=7.0.0
+Requires-Dist: requests<=2.31.0
+Requires-Dist: pyyaml
+Requires-Dist: coloredlogs<=15.0.1
+Requires-Dist: xmltodict<=0.13.0
+Requires-Dist: pyfiglet<=1.0.2
 
 # Introduction 
 Boman CLI is a Orchestration script written in python to run security scans on the local or CI/CD environment and upload the results to Boman.ai SaaS server.
@@ -95,11 +100,18 @@ Example: boman-cli -a run -zap_session_script ./session.js
 
 ### Release Note:
 
+### 2.4.8
+- **New:** Semgrep pro (API) integration. Navigate to **Integrations -> Semgrep pro/api** in the Boman SaaS to setup Semgrep pro.
+
+- **New:** Reachability analysis for SCA enabled.
+
+- **Feature Request:** when Failbuild is configured. Boman should not take false positive, Accepted Risk, Not applicable and Muted vulnerabilities into account.
+
 ### V2.4.7
 - **BUG:** Failing build if token is not configured.
 
 ### V2.4.6
-- **New:** Semgrep API integration. Pass the semgrpe token as -semgrep_token {value}.
+- **New:** Semgrep CLI integration. Pass the semgrep token as -semgrep_token {value}.
 
 ### V2.4.5
 - **New:** Snyk API integration. Navigate to **Integrations -> Snyk** in the Boman SaaS to setup Snyk.
@@ -165,5 +177,3 @@ Released on: 21 May 2024
 
 
 
-
-

{boman-cli-2.4.7 → boman_cli-2.4.8}/boman_cli.egg-info/entry_points.txt

@@ -1,3 +1,2 @@
 [console_scripts]
 boman-cli = bomancli.main:default
-

{boman-cli-2.4.7 → boman_cli-2.4.8}/bomancli/Config.py

@@ -91,6 +91,7 @@ class Config:
     secret_scan_status = None
     secret_scan_upload_status = None
     secret_scan_errors = None
+    secret_scan_lang = None
 
 
     jenkins = None
@@ -120,7 +121,7 @@ class Config:
 
     log_level = "INFO"
 
-    version = 'v2.4.7'
+    version = 'v2.4.8'
 
     boman_config_file = 'boman.yaml'
     
@@ -165,6 +166,7 @@ class Config:
     sbom_upload_status=None
     sbom_scan_status=None
     sbom_target=None
+    sbom_output_file=None
     
     #IAC scanning
     iac_scan_present=None
@@ -189,4 +191,27 @@ class Config:
     iac_scan_configuration = None
     semgrep_token = None
 
-    dast_adv_auth_enabled = None
+    dast_adv_auth_enabled = None
+    
+    supported_languages_reachability =[
+        "js",
+        "python",
+        "php",
+        "java",
+        "ruby",
+        "c",
+        "c++"
+    ]
+    
+    reachability_present=None
+    reachability_build_dir=None
+    reachability_message=None
+    reachability_response=None
+    reachability_errors=None
+    reachability_upload_status=None
+    reachability_status=None
+    reachability_language=None
+    
+    fail_build = False
+    polling_time = 60
+    polling_frequency = 10

{boman-cli-2.4.7 → boman_cli-2.4.8}/bomancli/auth.py

@@ -164,7 +164,25 @@ def authorize():
                 Config.scan_name = json_response['data']['scan_name']
                 Config.con_scan_response = json_response['data']['cs']
                 Config.sbom_response = json_response['data']['sbom']
-                Config.iac_scan_response = json_response['data']['iac']   
+                Config.iac_scan_response = json_response['data']['iac']
+                
+                
+                if 'reachability' in json_response['data'].keys():
+                    Config.reachability_response = json_response['data']['reachability']
+                    if 'code_language' in json_response.keys():
+                        Config.reachability_language = json_response['code_language']
+                        if Utils.reachability_support_check(Config.reachability_language):
+                            Config.reachability_language = Utils.reachability_support_check(Config.reachability_language)
+                            Config.reachability_present = True
+                            Config.sbom_present = True
+                        else:
+                            Config.reachability_present = False 
+                    else:
+                        Config.reachability_present = False
+                        logging.warning("Reachability: Not Configured!!!! Message: Code language was not found on JSON Response")
+                else:
+                    Config.reachability_present = False
+                    logging.warning("Reachability: Not Configured!!!! Message: Tool configuration data was not found on JSON Response")   
 
                 return 1    
             except:

{boman-cli-2.4.7 → boman_cli-2.4.8}/bomancli/main.py

@@ -36,7 +36,7 @@ parser = argparse.ArgumentParser(
 	description='''
 	#This is a CLI tool to communicate with Boman.ai SaaS server
 	''',
-	epilog='copyright (c) 2025 SUMERU'
+	epilog='copyright (c) 2025 BOMAN.AI'
 	)
 
 
@@ -81,7 +81,10 @@ def runImage(data=None,type=None):
     output_file= data['output_file']
     will_generate_output = data['will_generate_output']
     tool_id= data['tool_id']
-    scan_details_id= data['scan_details_id']
+    if tool_name != "atom":
+        scan_details_id= data['scan_details_id']
+    else:
+        scan_details_id=0
     conversion_required = data['conversion_required']
    
 
@@ -171,7 +174,7 @@ def runImage(data=None,type=None):
         else:
             try:
                 
-                #print('token pressentcle')
+                # logging.info('Semgrep token present')
 
                 if Config.jenkins == 'yes':
 
@@ -179,7 +182,7 @@ def runImage(data=None,type=None):
 
                     Config.build_dir = Config.sast_build_dir
                     container_output = docker.containers.run(docker_image, command_line, volumes={Config.sast_build_dir: {
-                                    'bind': data['bind']}}, user=userid,detach=detach,environment=env_var)
+                                    'bind': data['bind']}}, user=userid,detach=detach,environment=env_var, remove=True)
                     logging.info('SAST Docker: SUCCESS !!!. Message: %s Scan Completed',tool_name)
 
                 else:    
@@ -327,7 +330,7 @@ def runImage(data=None,type=None):
             try:
                 Config.build_dir = Config.sast_build_dir
                 container= docker.containers.run(docker_image, command_line, volumes={Config.sast_build_dir: {
-                    'bind': data['bind'], 'mode': 'rw'}},user=userid,detach=detach)
+                    'bind': data['bind'], 'mode': 'rw'}},user=userid,detach=detach, remove=True)
 
                 #print(output_file,toolname,tool_id,scan_details_id)
                 logging.info('[SUCCESS]: %s Scan Completed',tool_name)
@@ -355,7 +358,7 @@ def runImage(data=None,type=None):
                 Config.build_dir = Config.sast_build_dir
                 logging.info('DAST Docker: Command for running the scan %s',command_line)
                 container= docker.containers.run(docker_image, command_line, volumes={Config.sast_build_dir: {
-                   'bind': data['bind'], 'mode': 'rw'}},user=userid,detach=detach)
+                   'bind': data['bind'], 'mode': 'rw'}},user=userid,detach=detach, remove=True)
 
                 #print(output_file,toolname,tool_id,scan_details_id)
                 logging.info('DAST Docker: SUCCESS!!! Message: %s Scan Completed',tool_name)
@@ -404,14 +407,14 @@ def runImage(data=None,type=None):
                     Config.build_dir = Config.sca_build_dir
                     command_line = "% s" % command_line.format(target = './'+target)
                     container_output = docker.containers.run(docker_image, command_line, volumes={Config.sca_build_dir: {
-                            'bind': data['bind']}}, user=uid)
+                            'bind': data['bind']}}, user=uid, remove=True)
                     logging.info('SCA Docker: SUCCESS!!! Message: %s Scan Completed',tool_name)
                 else:
                     target = Utils.remove_leading_slash(Config.sca_target)
                     Config.build_dir = Config.sca_build_dir
                     command_line = "% s" % command_line.format(target ='/src/'+target)
                     container_output = docker.containers.run(docker_image, command_line, volumes={Config.sca_build_dir: {
-                            'bind': data['bind']}}, user=uid)
+                            'bind': data['bind']}}, user=uid, remove=True)
                     logging.info('SCA Docker: SUCCESS!!! Message: %s Scan Completed',tool_name)
             else:
                 if Config.sca_ignore:
@@ -422,7 +425,7 @@ def runImage(data=None,type=None):
                         logging.info('SCA Docker:  Command ==> %s',command_line)
                 Config.build_dir = Config.sca_build_dir
                 container_output = docker.containers.run(docker_image, command_line, volumes={Config.sca_build_dir: {
-                        'bind': data['bind']}}, user=uid)
+                        'bind': data['bind']}}, user=uid, remove=True)
                 logging.info('SCA Docker: SUCCESS!!! Message: %s Scan Completed',tool_name)           
             Config.sca_message ='SCA scan completed'
             Config.sca_scan_status ='Completed'
@@ -474,7 +477,7 @@ def runImage(data=None,type=None):
             logging.info(f"CS Docker: command ==> {command_line}")    
             Config.build_dir = Config.con_scan_build_dir
             container_output = docker.containers.run(docker_image, command_line, volumes={Config.con_scan_build_dir: {
-                        'bind': data['bind']}}, user=uid)
+                        'bind': data['bind']}}, user=uid, remove=True)
             logging.info('CS Docker: SUCCESS!!! Message: %s Scan Completed',tool_name)
             Config.con_scan_message ='Container Scan completed'
             Config.con_scan_status ='Completed'
@@ -507,14 +510,15 @@ def runImage(data=None,type=None):
             Utils.logError(msg,str(e))    
         
     if type == 'sbom':
+        Config.sbom_output_file = output_file
         Utils.checkImageAlreadyExsist(docker_image)
         logging.info('Running %s',tool_name)
         
         try:
-            Config.build_dir = Config.sbom_build_dir
+            Config.build_dir = Config.sbom_build_dir = os.getcwd()+'/'
             command_line = "% s" % command_line.format(target = 'src/')
             container_output = docker.containers.run(docker_image, command_line, volumes={Config.sbom_build_dir: {
-                        'bind': data['bind']}}, user=uid)
+                        'bind': data['bind']}}, user=uid, remove=True)
             logging.info('SBOM Docker: SUCCESS!!! Message: %s Scan Completed',tool_name)
             Config.sbom_message ='SBOM scan completed'
             Config.sbom_scan_status ='Completed'
@@ -555,7 +559,7 @@ def runImage(data=None,type=None):
             command_line = "% s" % command_line.format(target = os.path.join('/src',Utils.remove_leading_slash(Config.iac_scan_target)))   
             Config.build_dir = Config.iac_scan_build_dir
             container_output = docker.containers.run(docker_image, command_line, volumes={Config.iac_scan_build_dir: {
-                        'bind': data['bind']}}, user=uid)
+                        'bind': data['bind']}}, user=uid, remove=True)
             logging.info('IaC Docker: SUCCESS!!! Message: %s Scan Completed',tool_name)
             Config.iac_scan_message ='IaC Scan completed'
             Config.iac_scan_status ='Completed'
@@ -591,13 +595,62 @@ def runImage(data=None,type=None):
             logging.error('IaC Docker: Failed!!! Message: Error recorded while uploading the report %s',str(e))
             Config.iac_scan_message ='Error recorded while uploading the report of IaC Scan, Please check your directory for the files.'           ## need to change logic here -- MM
             msg = 'Error recorded while uploading the report'
-            Utils.logError(msg,str(e))    
+            Utils.logError(msg,str(e))
+            
+    if type == 'reachability' and Config.sbom_scan_status.lower() != "failed":
+        Utils.checkImageAlreadyExsist(docker_image)
+        logging.info('Running %s',tool_name)
+        
+        try:
+            command_line = "% s" % command_line.format(lang = Config.reachability_language)   
+            Config.build_dir = Config.reachability_build_dir = Config.sca_build_dir
+            container_output = docker.containers.run(docker_image, command_line, volumes={'/tmp': {'bind': '/tmp'},
+        f'{os.environ["HOME"]}': {'bind': os.environ["HOME"]},Config.reachability_build_dir: {
+                        'bind': data['bind'], 'mode': 'rw'}}, user=uid, remove=True)
+            logging.info('Reachability Docker: SUCCESS!!! Message: %s Scan Completed',tool_name)
+            reachables = Utils.reachability_analysis(f'{Config.sbom_build_dir}/{Config.sbom_output_file}',f'{Config.sca_build_dir}/{output_file}')
+            Config.reachability_message ='Reachability Completed'
+            Config.reachability_status ='Completed'
+        except errors.ContainerError as exc:
+            logging.error('Reachability Docker: Failed!!! Message: Some Error recorded while scanning %s',str(exc))
+            msg='\n The following error has been recorded while scanning IaC'
+            Config.reachability_status ='Failed'
+            Config.reachability_errors =f'{str(exc)}]'
+            Utils.logError(msg,str(exc))
+        
+        try:
+            if will_generate_output == 1:
+                logging.info('Reachability: Uploading %s to the server',output_file)
+                output_reachability = {
+                    'output_file': output_file,
+                    'output': reachables
+                }
+                if uploadReport(output_reachability,tool_name,tool_id,scan_details_id,'reachability'):
+                    Config.reachability_status ='Completed'
+                    Config.reachability_upload_status = 'Completed'
+                    Config.reachability_message ='Scan Completed'
+                else:
+                    Config.reachability_status ='Failed'
+                    Config.reachability_upload_status = 'Failed'
+                    Config.reachability_message ='Error occured while uploading the report, Please check the cli logs'
+            else:
+                logging.error('reachability: Failed!!! Message: Cant upload files to the server',tool_name)
+                Config.reachability_message ='Cant upload files to the server for reachability, Please check your directory If output file is present.'
+
+        except EnvironmentError as e:
+            logging.error('reachability: Failed!!! Message: Error recorded while uploading the report %s',str(e))
+            Config.reachability_message ='Error recorded while uploading the report of reachability, Please check your directory If output file is present.'           ## need to change logic here -- MM
+            msg = 'Error recorded while uploading the report'
+            Utils.logError(msg,str(e))
+    elif type == "reachability":
+        Config.reachability_status ='Failed'
+        Config.reachability_message ='Reachability: SBOM scan failed. Reachability analysis requires sbom file'    
         
 
 #### function to upload the test report to the server with other data -- MM ------------------------------------
 def uploadReport(filename,toolname,tool_id,scan_details_id,type):
     
-    logging.info('Uploading %s report with filename: %s', toolname,filename)
+    # logging.info('Uploading %s report with filename: %s', toolname,filename)
     if True:
         #build_dir = '/home/boxuser/box/trainingdata/repos/youtube-dl/'
         #print(Config.sast_build_dir+filename)
@@ -626,6 +679,9 @@ def uploadReport(filename,toolname,tool_id,scan_details_id,type):
             elif type =="iac":
                 message = Config.iac_scan_message
                 errors = Config.iac_scan_errors
+            elif type =="reachability":
+                message = Config.reachability_message
+                errors = Config.reachability_errors
         except:
             message = 'NA'
             errors = 'NA'
@@ -634,20 +690,29 @@ def uploadReport(filename,toolname,tool_id,scan_details_id,type):
 
 
         try:
-            logging.info('fetching the %s file from the directory %s',filename,Config.build_dir)
-            ##path = '/home/boxuser/box/Vuln-code/boman_njsscan.json'
-
-
-            # print(str(Config.build_dir))
-            # print(str(filename))
+            
+            if type == 'reachability':
+                path_reachability = Path(str(Config.sca_build_dir)) / str("app.atom")
+                data = filename['output']
+                path_bom  = Path(str(Config.sbom_build_dir)) / str("bom.json")
+                path = Path(str(Config.sca_build_dir)) / str(filename['output_file'])
+                logging.info('Uploading %s report with filename: %s', toolname,filename['output_file'])
+                
+            else:
+                logging.info('Uploading %s report with filename: %s', toolname,filename)
+                logging.info('fetching the %s file from the directory %s',filename,Config.build_dir)
+                ##path = '/home/boxuser/box/Vuln-code/boman_njsscan.json'
 
-            data_folder = Path(str(Config.build_dir))
 
-            path = data_folder / str(filename)
-           
-            with open(path) as f: 
-                f.seek(0)
-                data = json.load(f)
+                # print(str(Config.build_dir))
+                # print(str(filename))
+                data_folder = Path(str(Config.build_dir))
+                path = data_folder / str(filename)
+                
+            
+                with open(path) as f: 
+                    f.seek(0)
+                    data = json.load(f)
 
 
         except EnvironmentError as e:
@@ -657,10 +722,24 @@ def uploadReport(filename,toolname,tool_id,scan_details_id,type):
             Utils.logError(msg,str(e))
             values = {'tool_name': toolname, 'time': time.time(),'scan_token':Config.scan_token, 'app_token':Config.app_token,'customer_token':Config.customer_token,'tool_id':tool_id,'scan_details_id':scan_details_id,"tool_results":None,"message":message,"errors":errors,"app_loc":Config.app_loc}
             url = Config.boman_url+"/api/app/upload" 
-        # with open(path) as f: 
-        #     file_obj = f
             r = requests.post(url,json=values)
-            return 0
+            return 0 
+        
+        try:
+            logging.info('Removing the result file')
+            if type != "sbom" and type != "reachability":
+                os.remove(path)
+            elif Config.reachability_present is not True and type == 'sbom':
+                os.remove(path)    
+            elif type == "reachability":
+                os.remove(path)
+                os.remove(Path(str(Config.sbom_build_dir))/Config.sbom_response[0]['output_file'])
+                os.remove(path_reachability)
+                os.remove(path_bom)
+                
+                
+        except Exception as e:
+            logging.error(f"unable to remove the file: {path} ---> Error: {e}")
 
         tool_output = json.dumps(data, ensure_ascii=False, indent=4)
     
@@ -674,7 +753,10 @@ def uploadReport(filename,toolname,tool_id,scan_details_id,type):
         r = requests.post(url,json=values)
         #print(r.status_code)
         if r.status_code == 200:
-            logging.info('[COMPLETED]: %s Report uploaded Successfully! Report Name: %s',toolname,filename)
+            if type == "reachability":
+                logging.info('[COMPLETED]: %s Report uploaded Successfully! Report Name: %s',toolname,filename["output_file"])
+            else:    
+                logging.info('[COMPLETED]: %s Report uploaded Successfully! Report Name: %s',toolname,filename)
             logging.info('Removing the result file')
             #os.remove(path)
             return 1
@@ -769,37 +851,51 @@ def exitFunction():
     customer_token =  Config.customer_token
 
     logging.info('Summary: Fetching Vulnerabilities reported by the tools')
-    url = Config.boman_url+"/api/vuln/get"
-    values = {'app_token':app_token, 'scan_token':scan_token, 'customer_token':customer_token}
-    try:
-        vuln = {"LOW":0,"MEDIUM":0,"HIGH":0,"CRITICAL":0}
-        x = requests.post(url,json=values)  
-
-
-        response = x.json()
-
-        if response['status'] == True:
-            logging.info('Summary: Analyzing the vulnerabilities found')
-            for data in response['data'] :
-                vuln[data['_id']] = data['count']
-
-            Config.low_count = vuln['LOW']
-            Config.medium_count = vuln['MEDIUM']
-            Config.high_count = vuln['HIGH']
-            Config.critical_count = vuln['CRITICAL'] 
+    
+    end_time = time.time() + Config.polling_time
+    while time.time() < end_time:
+        
+        url = Config.boman_url+"/api/vuln/get"
+        values = {'app_token':app_token, 'scan_token':scan_token, 'customer_token':customer_token}
+        try:
            
-            logging.info('Summary: Analyzing Vulnerabitlites Done')
-
-        else:
-            logging.info('Summary: Error Analyzing Vulnerabitlites.')
-
+            x = requests.post(url,json=values)  
+            response = x.json()
+            
+            if not Config.fail_build:
+                logging.info("Fail Build was not configured")
+                Utils.get_summary_of_vulns(response)
+                break
+            
+            if "ml_status" in response.keys():
+                if response["ml_status"] == True:
+                    logging.info("Poll Status: ML scan is Done. Collecting the summary")
+                    Utils.get_summary_of_vulns(response)
+                    break
+                else:
+                    logging.info("Poll status: Waiting for ML to complete......")
+                    time.sleep(Config.polling_frequency)
 
+        except requests.ConnectionError as e:
+            
+            logging.error(f"Connection Error: Can't connect to the Server, Please check your Internet connection. Error: {e}")
+            exit(1) #server/saas error
+            
+    else:
+        logging.warning("Poll Status: Polling time reached the limit. But ml scan has not commpleted. Try using --pollTime to increase the polling time")
+        url = Config.boman_url+"/api/vuln/get"
+        values = {'app_token':app_token, 'scan_token':scan_token, 'customer_token':customer_token}
+        try:
+           
+            x = requests.post(url,json=values)  
+            response = x.json()
+            
+            Utils.get_summary_of_vulns(response)
 
-    except requests.ConnectionError as e:
-        
-        logging.error(f"Connection Error: Can't connect to the Server, Please check your Internet connection. Error: {e}")
-        exit(1) #server/saas error
-    
+        except requests.ConnectionError as e:
+            
+            logging.error(f"Connection Error: Can't connect to the Server, Please check your Internet connection. Error: {e}")
+            exit(1) #server/saas error
 
 
 
@@ -861,7 +957,7 @@ def main():
 
     if Config.sast_present is True:
 
-        if Config.sast_lang != 'sonar':
+        if (Config.sast_lang != 'sonar') and (Config.sast_lang != 'semgrep-pro'):
 
             logging.info('SAST: Preparing SAST Scan')
             logging.info('SAST: Working directory is %s',Config.sast_build_dir)
@@ -881,9 +977,9 @@ def main():
                     runImage(data=data,type='SAST')
                     logging.info("SAST: Successfull !!!")
         else:
-            logging.warning('SAST: Configured with Sonar it will run on SaaS')
+            logging.warning(f'SAST: Configured with {Config.sast_lang} it will run on SaaS')
             Config.sast_scan_status = 'SUCCESS'
-            Config.sast_message = f'SAST Scan: Success. Sonar is configured and will run on SaaS'
+            Config.sast_message = f'SAST Scan: Success. {Config.sast_lang} is configured and will run on SaaS'
                 
 
     else:
@@ -919,7 +1015,7 @@ def main():
 
     
     if Config.sca_present is True:
-        if Config.sca_response[0]['tool'] != "SNYK":    
+        if Config.sca_response[0]['tool'] != "SNYK" and Config.sca_response[0]['tool'] != "Semgrep Pro":    
             logging.info('SCA: Preparing scan')
 
             
@@ -932,33 +1028,36 @@ def main():
                     runImage(data=data,type='SCA')
                     logging.info("SCA: Successfull !!!")
         else:
-            logging.warning('SCA: Configured with SNYK it will run on SaaS')
+            logging.warning(f"SCA: Configured with {Config.sca_response[0]['tool']} it will run on SaaS")
             Config.sca_scan_status = 'SUCCESS'
-            Config.sca_message = f'SCA Scan: Success. SNYK is configured and will run on SaaS'        
+            Config.sca_message = f"SCA Scan: Success. {Config.sca_response[0]['tool']} is configured and will run on SaaS"        
     else:
         logging.info('SCA: Ignoring scan. Message: Not Configured')
         
     if Config.secret_scan_present == True:
-
-        if Utils.isGitDirectory(Config.sast_build_dir):
-            logging.info('Secret Scan: Preparing Scan')
-            for data in Config.secret_scan_response:
-                initSecertScan(Config.sast_build_dir,data=Config.secret_scan_response)
-                logging.info("Secret Scan: Successfull !!!")
-                
+        if Config.secret_scan_response[0]['tool'] != "Semgrep Pro":
+            if Utils.isGitDirectory(Config.sast_build_dir):
+                logging.info('Secret Scan: Preparing Scan')
+                for data in Config.secret_scan_response:
+                    initSecertScan(Config.sast_build_dir,data=Config.secret_scan_response)
+                    logging.info("Secret Scan: Successfull !!!")
+            else:
+                logging.error('Secret Scan: Failed !!!. Message: The Directory is not Git directory %s',Config.sast_build_dir)
+                data=Config.secret_scan_response
+                tool_name = data[0]['tool']
+                file_name = data[0]['output_file']
+                tool_id = data[0]['tool_id']
+                scan_details_id = data[0]['scan_details_id']
+                uploadReport(file_name,tool_name,tool_id,scan_details_id,'SS')
+                Config.secret_scan_status = 'Failed'
+                Config.secret_scan_upload_status ='NA'
+                Config.secret_scan_errors = "Secret Scan: Failed !!!. Message: The Directory is not Git directory %s"
+                Config.secret_scan_message = f'Secret Scan: Failed. The Directory is not Git directory {Config.sast_build_dir}'
+                logging.warning('Secret Scan: Ignoring scan')
         else:
-            logging.error('Secret Scan: Failed !!!. Message: The Directory is not Git directory %s',Config.sast_build_dir)
-            data=Config.secret_scan_response
-            tool_name = data[0]['tool']
-            file_name = data[0]['output_file']
-            tool_id = data[0]['tool_id']
-            scan_details_id = data[0]['scan_details_id']
-            uploadReport(file_name,tool_name,tool_id,scan_details_id,'SS')
-            Config.secret_scan_status = 'Failed'
-            Config.secret_scan_upload_status ='NA'
-            Config.secret_scan_errors = "Secret Scan: Failed !!!. Message: The Directory is not Git directory %s"
-            Config.secret_scan_message = f'Secret Scan: Failed. The Directory is not Git directory {Config.sast_build_dir}'
-            logging.warning('Secret Scan: Ignoring scan')
+            logging.warning(f"Secret Scan: Configured with {Config.secret_scan_response[0]['tool']} it will run on SaaS")
+            Config.secret_scan_status ='SUCCESS'
+            Config.secret_scan_message =f"Secret Scan: Success. {Config.secret_scan_response[0]['tool']} is configured and will run on SaaS"
     else:
         logging.warning('Secret Scan: Ignoring scan. Message: Not Configured')
         
@@ -1012,7 +1111,16 @@ def main():
             Config.iac_scan_message = f'IaC Scan: Success. SNYK is configured and will run on SaaS'
     else:
         logging.warning('IaC: Ignoring scan. Message: Not Configured')
-    
+        
+    if Config.reachability_present is True:
+        logging.info("Reachability: Preparing requirements")
+        
+        for data in Config.reachability_response:
+            Utils.copy_contents(f'{Config.sbom_build_dir}/{Config.sbom_output_file}',f'{Config.sca_build_dir}/bom.json')
+            runImage(data=data,type='reachability')
+    else:
+        logging.warning('Reachability: Ignoring. Message: Not Configured')
+        
     exitFunction()
     return 1
 
@@ -1033,6 +1141,8 @@ def default():
     parser.add_argument('-zap_session_script','--zap_custom_session_script',default='session_management.js',help="Pass the file name if you have any custom zap session script file name. eg:custom-script.js")
     # parser.add_argument('-uid','--user_id',default='1000:1000',help="[internal] Pass the custom userid:groupid incase the lingu detec function is failed")
     parser.add_argument('-semgrep_token','--semgrepToken',default='No',help="Pass the semgrep community token here")
+    parser.add_argument('-pot','--pollTime',default=60,help="Polling Time. Min : 30s, Max: 5min, Default : 1min. Format: input the time in seconds eg: 1min => 60 ")
+    parser.add_argument('-pof','--pollFrequency',default=10,help="Polling Frequency. Min : 5s, Max: 1min, Default : 10s. Format: input the time in seconds eg: 1min => 60 ")
     args = parser.parse_args()
 
     # if len(sys.args) == 1:
@@ -1128,6 +1238,24 @@ def default():
     else:
         logging.error(f"Authorization Config: Failed !!!, Exit Code: 4 (Misconfiguration/Validation). The {Config.boman_config_file} file is not found and tokens were not found in cli arguments as well")
         exit(4) #validation error
+        
+        
+    if (args.pollTime >= 30) and  (args.pollTime <= 300):   
+        Config.polling_time = args.pollTime
+        logging.info(f"Configuring polling time to {Config.polling_time}s")
+    else:
+        logging.info(f"Resorting to default polling time {Config.polling_time}s")
+        
+    if (args.pollFrequency >= 5) and  (args.pollFrequency <= 60):   
+        Config.polling_frequency = args.pollFrequency
+        logging.info(f"Configuring polling frequency to {Config.polling_frequency}s")
+    else:
+        logging.info(f"Resorting to default polling frequency {Config.polling_frequency}s")
+            
+    
+    if args.failBuild != "pass":
+        Config.fail_build = True
+                
 ## auth method args validation
 
     # if args.custom_dast_auth_config == True:
@@ -1140,13 +1268,13 @@ def default():
     #             exit(4)    
 
 
-        if Config.zap_custom_auth_method == 'form':
-            if Config.custom_zap_plan_present :
-                Config.dast_auth_present == True
-                Config.custom_zap_plan_present = True
-            else:
-                logging.error('Zap auth method "form" needs plan file')
-                exit(4)
+    #     if Config.zap_custom_auth_method == 'form':
+    #         if Config.custom_zap_plan_present :
+    #             Config.dast_auth_present == True
+    #             Config.custom_zap_plan_present = True
+    #         else:
+    #             logging.error('Zap auth method "form" needs plan file')
+    #             exit(4)
     
 
 
@@ -1172,30 +1300,35 @@ def default():
             if args.failBuild == 'fail':
                 total_vuln = Config.high_count + Config.medium_count + Config.low_count + Config.critical_count
                 if total_vuln > 0:
+                    logging.warning(f"Failing the build as {args.failBuild} is configured in failBuild argument. Boman has found {total_vuln} vulnerabilities")
                     exit(-1)
                 else:
                     exit(0)    
 
             elif args.failBuild == 'high':
                 if Config.high_count > 0 or Config.critical_count > 0:
+                    logging.warning(f"Failing the build as {args.failBuild} is configured in failBuild argument. Boman has found {Config.high_count} {args.failBuild} vulnerabilities")
                     exit(-1)
                 else:
                     exit(0)     
 
             elif args.failBuild == 'medium':
                 if Config.medium_count > 0 or Config.high_count > 0:
+                    logging.warning(f"Failing the build as {args.failBuild} is configured in failBuild argument. Boman has found {Config.medium_count} {args.failBuild} vulnerabilities")
                     exit(-1)
                 else:
                     exit(0)    
 
             elif args.failBuild == 'low':
                 if Config.low_count > 0 or Config.medium_count > 0 or Config.high_count > 0:
+                    logging.warning(f"Failing the build as {args.failBuild} is configured in failBuild argument. Boman has found {Config.low_count} {args.failBuild} vulnerabilities")
                     exit(-1)
                 else:
                     exit(0)  
 
             elif args.failBuild == 'critical':
                 if Config.critical_count > 0:
+                    logging.warning(f"Failing the build as {args.failBuild} is configured in failBuild argument. Boman has found {Config.critical_count} {args.failBuild} vulnerabilities")
                     exit(-1)
                 else:
                     exit(0)                     

{boman-cli-2.4.7 → boman_cli-2.4.8}/bomancli/templates/template_plan.yaml

@@ -1,139 +1,139 @@
----
-env:
-  contexts:
-    - name: "Boman Authenticated Scan"
-      urls:
-        - "https://demo.testfire.net/"
-      authentication:
-        method: "form"
-        parameters: # May include any required for scripts. All of the parameters support vars except for the port
-          loginPageUrl: "https://demo.testfire.net/login.jsp"
-          loginRequestUrl: "https://demo.testfire.net/doLogin"
-          loginRequestBody: "uid={%username%}&passw={%password%}&btnSubmit=Login"
-        verification:
-          method: "both" # String, one of 'response', 'request', 'both', 'poll'
-          loggedOutRegex: ".*Sign In.*" # String, regex pattern for determining if logged
-      sessionManagement:
-        method: ""
-        parameters:
-          script: ""
-          scriptEngine: ""
-      users: # List of one or more users available to use for authentication
-        - name: "demoadmin" # String, the name to be used by the jobs
-          credentials: # List of user credentials - may include any required for scripts
-            username: "admin" # String, the username to use when authenticating, vars supported
-            password: "admin"
-      includePaths: []
-      excludePaths: []
-      technology:
-        exclude:
-          - "C"
-          - "ASP"
-          - "IBM DB2"
-          - "PHP"
-          - "CouchDB"
-          - "XML"
-          - "Microsoft SQL Server"
-          - "JSP/Servlet"
-          - "Firebird"
-          - "MongoDB"
-          - "HypersonicSQL"
-          - "SAP MaxDB"
-          - "Ruby"
-          - "SCM"
-          - "WS"
-          - "Microsoft Access"
-          - "Sybase"
-          - "Python"
-  parameters:
-    failOnError: true
-    failOnWarning: false
-    progressToStdout: true
-  vars: {}
-jobs:
-  - parameters:
-      scanOnlyInScope: true
-      enableTags: false
-      disableAllRules: false
-    rules: []
-    name: "passiveScan-config"
-    type: "passiveScan-config"
-  - parameters:
-      context: "Demo testfire"
-      user: "demoadmin"
-      url: "https://demo.testfire.net"
-      maxDuration: 1
-      maxDepth: 2
-      maxChildren: 0
-    name: "spider"
-    type: "spider"
-    tests:
-      - onFail: "INFO"
-        statistic: "automation.spider.urls.added"
-        site: ""
-        operator: ">="
-        value: 100
-        name: "At least 100 URLs found"
-        type: "stats"
-      - name: "spider logged in" # Name of the test, optional
-        type: stats # Specifies that the test is of type 'stats'
-        statistic: "stats.auth.success" # Name of an integer / long statistic
-        operator: ">=" # One of '==', '!=', '>=', '>', '<', '<='
-        value: 2 # Value to compare statistic against
-        onFail: "info"
-      - name: "spider failed" # Name of the test, optional
-        type: stats # Specifies that the test is of type 'stats'
-        statistic: "stats.auth.failure" # Name of an integer / long statisti
-        operator: ">=" # One of '==', '!=', '>=', '>', '<', '<='
-        value: 2 # Value to compare statistic against
-        onFail: "info"
-  - parameters: {}
-    name: "passiveScan-wait"
-    type: "passiveScan-wait"
-  - parameters:
-      context: "Demo testfire"
-      user: "demoadmin"
-      policy: ""
-      maxRuleDurationInMins: 0
-      maxScanDurationInMins: 5
-      maxAlertsPerRule: 0
-    policyDefinition:
-      defaultStrength: "medium"
-      defaultThreshold: "medium"
-      rules: []
-    tests:
-      - name: "spider logged in" # Name of the test, optional
-        type: stats # Specifies that the test is of type 'stats'
-        statistic: "stats.auth.success" # Name of an integer / long statistic
-        operator: ">=" # One of '==', '!=', '>=', '>', '<', '<='
-        value: 2 # Value to compare statistic against
-        onFail: "info"
-      - name: "spider failed" # Name of the test, optional
-        type: stats # Specifies that the test is of type 'stats'
-        statistic: "stats.auth.failure" # Name of an integer / long statisti
-        operator: ">=" # One of '==', '!=', '>=', '>', '<', '<='
-        value: 2 # Value to compare statistic against
-        onFail: "info"
-    name: "activeScan"
-    type: "activeScan"
-  - parameters:
-      template: "traditional-json"
-      reportDir: ""
-      reportFile: ""
-      reportTitle: "Boman_Scanning_Report"
-      reportDescription: ""
-      displayReport: false
-    risks:
-      - "info"
-      - "low"
-      - "medium"
-      - "high"
-    confidences:
-      - "falsepositive"
-      - "low"
-      - "medium"
-      - "high"
-      - "confirmed"
-    sites: []
-    name: "report"
-    type: "report"
+---
+env:
+  contexts:
+    - name: "Boman Authenticated Scan"
+      urls:
+        - "https://demo.testfire.net/"
+      authentication:
+        method: "form"
+        parameters: # May include any required for scripts. All of the parameters support vars except for the port
+          loginPageUrl: "https://demo.testfire.net/login.jsp"
+          loginRequestUrl: "https://demo.testfire.net/doLogin"
+          loginRequestBody: "uid={%username%}&passw={%password%}&btnSubmit=Login"
+        verification:
+          method: "both" # String, one of 'response', 'request', 'both', 'poll'
+          loggedOutRegex: ".*Sign In.*" # String, regex pattern for determining if logged
+      sessionManagement:
+        method: ""
+        parameters:
+          script: ""
+          scriptEngine: ""
+      users: # List of one or more users available to use for authentication
+        - name: "demoadmin" # String, the name to be used by the jobs
+          credentials: # List of user credentials - may include any required for scripts
+            username: "admin" # String, the username to use when authenticating, vars supported
+            password: "admin"
+      includePaths: []
+      excludePaths: []
+      technology:
+        exclude:
+          - "C"
+          - "ASP"
+          - "IBM DB2"
+          - "PHP"
+          - "CouchDB"
+          - "XML"
+          - "Microsoft SQL Server"
+          - "JSP/Servlet"
+          - "Firebird"
+          - "MongoDB"
+          - "HypersonicSQL"
+          - "SAP MaxDB"
+          - "Ruby"
+          - "SCM"
+          - "WS"
+          - "Microsoft Access"
+          - "Sybase"
+          - "Python"
+  parameters:
+    failOnError: true
+    failOnWarning: false
+    progressToStdout: true
+  vars: {}
+jobs:
+  - parameters:
+      scanOnlyInScope: true
+      enableTags: false
+      disableAllRules: false
+    rules: []
+    name: "passiveScan-config"
+    type: "passiveScan-config"
+  - parameters:
+      context: "Demo testfire"
+      user: "demoadmin"
+      url: "https://demo.testfire.net"
+      maxDuration: 1
+      maxDepth: 2
+      maxChildren: 0
+    name: "spider"
+    type: "spider"
+    tests:
+      - onFail: "INFO"
+        statistic: "automation.spider.urls.added"
+        site: ""
+        operator: ">="
+        value: 100
+        name: "At least 100 URLs found"
+        type: "stats"
+      - name: "spider logged in" # Name of the test, optional
+        type: stats # Specifies that the test is of type 'stats'
+        statistic: "stats.auth.success" # Name of an integer / long statistic
+        operator: ">=" # One of '==', '!=', '>=', '>', '<', '<='
+        value: 2 # Value to compare statistic against
+        onFail: "info"
+      - name: "spider failed" # Name of the test, optional
+        type: stats # Specifies that the test is of type 'stats'
+        statistic: "stats.auth.failure" # Name of an integer / long statisti
+        operator: ">=" # One of '==', '!=', '>=', '>', '<', '<='
+        value: 2 # Value to compare statistic against
+        onFail: "info"
+  - parameters: {}
+    name: "passiveScan-wait"
+    type: "passiveScan-wait"
+  - parameters:
+      context: "Demo testfire"
+      user: "demoadmin"
+      policy: ""
+      maxRuleDurationInMins: 0
+      maxScanDurationInMins: 5
+      maxAlertsPerRule: 0
+    policyDefinition:
+      defaultStrength: "medium"
+      defaultThreshold: "medium"
+      rules: []
+    tests:
+      - name: "spider logged in" # Name of the test, optional
+        type: stats # Specifies that the test is of type 'stats'
+        statistic: "stats.auth.success" # Name of an integer / long statistic
+        operator: ">=" # One of '==', '!=', '>=', '>', '<', '<='
+        value: 2 # Value to compare statistic against
+        onFail: "info"
+      - name: "spider failed" # Name of the test, optional
+        type: stats # Specifies that the test is of type 'stats'
+        statistic: "stats.auth.failure" # Name of an integer / long statisti
+        operator: ">=" # One of '==', '!=', '>=', '>', '<', '<='
+        value: 2 # Value to compare statistic against
+        onFail: "info"
+    name: "activeScan"
+    type: "activeScan"
+  - parameters:
+      template: "traditional-json"
+      reportDir: ""
+      reportFile: ""
+      reportTitle: "Boman_Scanning_Report"
+      reportDescription: ""
+      displayReport: false
+    risks:
+      - "info"
+      - "low"
+      - "medium"
+      - "high"
+    confidences:
+      - "falsepositive"
+      - "low"
+      - "medium"
+      - "high"
+      - "confirmed"
+    sites: []
+    name: "report"
+    type: "report"

{boman-cli-2.4.7 → boman_cli-2.4.8}/bomancli/utils.py

@@ -270,6 +270,7 @@ def showSummary():
     logging.info('----------------------------------------')
     logging.info('-------- Vulnerabilities Found ---------')
     logging.info('HIGH : %s | MEDIUM : %s | LOW : %s ', Config.high_count, Config.medium_count, Config.low_count)
+    logging.warning("The HIGH, MEDIUM and LOW counts are derived after excluding False Postive, Accepted Risk, Not Applicable and Muted Vulnerabilities")
     logging.info('----------------------------------------')
     logging.info('----------------------------------------')
     logging.info('-------- SAST STATUS ---------')
@@ -1034,3 +1035,104 @@ def copy_file(source_path, dest_path):
             return True 
             
         return False  # Source file not found
+    
+def reachability_support_check(language):
+    if language in Config.supported_languages_reachability:
+        return language
+    elif language == "nodejs":
+        return "js"
+    return False
+
+
+def reachability_analysis(bom_file, reachable_slices_file):
+    """Find and print reachable libraries by matching purls."""
+ 
+    # Load the SBOM and reachable slice JSON files
+ 
+    sbom_data = load_json(bom_file)
+ 
+    reachable_slice_data = load_json(reachable_slices_file)
+ 
+    # print(sbom_data)
+ 
+   # Extract purls from SBOM
+ 
+    sbom_purls = {}
+ 
+    for component in sbom_data.get("components", []):
+ 
+        purl = component.get("purl")
+ 
+        if purl:
+            # print(purl)
+            if purl not in sbom_purls.keys():
+                
+                package_name = component.get("name")
+                package_version = component.get("version")
+                            
+                if package_name and package_version:
+                    sbom_purls[purl] = f'{package_name}@{package_version}'
+                else:
+                    sbom_purls[purl] = f'{package_name}'
+            
+ 
+  
+ 
+    # Check for matches in the reachable slice file
+    reachable_packages = []
+    reachable_dict = {}
+    for reachable in reachable_slice_data.get("reachables", []):
+        # print(reachable)
+        for purl in reachable.get("purls", []):
+            # print(purl)
+            if purl in sbom_purls.keys():
+                
+                if purl in reachable_dict.keys():
+                    
+                    reachable_dict[purl].append(reachable.get("flows",[]))
+                
+                else:
+                    reachable_dict[purl] = []
+ 
+    # print(reachable_dict.keys())
+    for key in reachable_dict.keys():
+        reachable_packages.append({
+            "package":sbom_purls[key],
+            "purl":key,
+            "flows": reachable_dict[key]
+        })
+    return reachable_packages
+
+def load_json(file_path):
+ 
+    """Load a JSON file."""
+ 
+    with open(file_path, "r") as f:
+ 
+        return json.load(f)
+    
+def copy_contents(source,destination):
+
+    # Copy the file
+    with open(source, 'rb') as src_file:
+        with open(destination, 'wb') as dest_file:
+            dest_file.write(src_file.read())
+
+    logging.info(f"File copied from {source} to {destination}")
+    
+def get_summary_of_vulns(response):
+    vuln = {"LOW":0,"MEDIUM":0,"HIGH":0,"CRITICAL":0}
+    if response['status'] == True:
+        logging.info('Summary: Analyzing the vulnerabilities found')
+        for data in response['data'] :
+            vuln[data['_id']] = data['count']
+
+        Config.low_count = vuln['LOW']
+        Config.medium_count = vuln['MEDIUM']
+        Config.high_count = vuln['HIGH']
+        Config.critical_count = vuln['CRITICAL'] 
+            
+        logging.info('Summary: Analyzing Vulnerabitlites Done')
+
+    else:
+        logging.info('Summary: Error Analyzing Vulnerabitlites.')

{boman-cli-2.4.7 → boman_cli-2.4.8}/bomancli/validation.py

@@ -365,7 +365,19 @@ def tool_configuration_validation():
                 Config.scan_name = json_response['data']['scan_name']
                 Config.con_scan_response = json_response['data']['cs']
                 Config.sbom_response = json_response['data']['sbom']
-                Config.iac_scan_response = json_response['data']['iac']  
+                Config.iac_scan_response = json_response['data']['iac']
+                
+                if 'reachability' in json_response['data'].keys():
+                    Config.reachability_response = json_response['data']['reachability']
+                    if 'code_language' in json_response.keys():
+                        Config.reachability_language = json_response['code_language']
+                        Config.reachability_present = True
+                    else:
+                        Config.reachability_present = False
+                        logging.warning("Reachability: Not Configured!!!! Message: Code language was not found on JSON Response")
+                else:
+                    Config.reachability_present = False
+                    logging.warning("Reachability: Not Configured!!!! Message: Tool configuration data was not found on JSON Response")
 
 
                 # if Config.json_response['data']['advanced_zap_auth']:
@@ -411,19 +423,19 @@ def tool_configuration_validation():
         logging.error(f'Tool Config: Failed!!! exit code: 4(CONFIG ERROR) Message: SaaS CONFIGURATION ERROR: {ke}')
         exit(4) #configuration error
             
-    Config.sast_build_dir = Config.sca_build_dir = Config.con_scan_build_dir = Config.sbom_build_dir = Config.iac_scan_build_dir = os.getcwd()+'/'
+    Config.sast_build_dir = Config.sca_build_dir = Config.con_scan_build_dir = Config.sbom_build_dir = Config.iac_scan_build_dir = Config.reachability_build_dir = os.getcwd()+'/'
     
     try:
         if Config.sast_present:
-            if Config.sast_response[0]['lang'] != "sonar":
+            if (Config.sast_response[0]['lang'] != "sonar") and (Config.sast_response[0]['lang'] != "semgrep-pro"):
                 Config.sast_message = 'SAST is properly configured'
                 Config.sast_ignore = True if Config.sast_configuration['ignore_files'].lower() == "true" else False
                 Config.sast_target = Config.sast_configuration['target']
                 Config.sast_lang = "semgrep"
                 Config.sast_ignore_folders_and_files = Config.sast_configuration['sast_ignore_file_data']
             else:
-                Config.sast_lang = "sonar"
-                logging.warning('Tool Config: SAST was properly configured on SaaS. It will be running Sonar from SaaS')
+                Config.sast_lang = Config.sast_response[0]['lang']
+                logging.warning(f'Tool Config: SAST was properly configured on SaaS. It will be running {Config.sast_lang} from SaaS')
         else:
             Config.sast_message = 'SAST was not properly configured on SaaS'
             logging.warning('Tool Config: SAST was not properly configured on SaaS')
@@ -472,7 +484,11 @@ def tool_configuration_validation():
         
     try:
         if Config.secret_scan_present:
-            Config.secret_scan_message = 'Secret Scan is properly configured'
+            if Config.secret_scan_response[0]['tool'] != "Semgrep Pro":
+                Config.secret_scan_message = 'Secret Scan is properly configured'
+            else:
+                Config.secret_scan_lang = Config.secret_scan_response[0]['tool'].lower()
+                logging.warning(f"Tool Config: Secret Scan was properly configured on SaaS. It will be running {Config.secret_scan_response[0]['tool']} from SaaS")
         else:
             Config.secret_scan_message = 'Secret Scan was not properly configured on SaaS'
             logging.warning('Tool Config: Secret Scan was not properly configured on SaaS')
@@ -483,11 +499,17 @@ def tool_configuration_validation():
         
     try:
         if Config.sca_present:
-            if Config.sca_response[0]['tool'] != "SNYK":
+            if Config.sca_response[0]['tool'] != "SNYK" and Config.sca_response[0]['tool'] != "Semgrep Pro":
                 Config.sca_message = 'SCA is properly configured'
+                if Config.reachability_present:
+                    if Utils.reachability_support_check(Config.reachability_language):
+                        Config.reachability_language = Utils.reachability_support_check(Config.reachability_language)
+                        Config.sbom_present = True
+                    else:
+                        Config.reachability_present = False                   
             else:
-                Config.sca_lang = "snyk"
-                logging.warning('Tool Config: SCA was properly configured on SaaS. It will be running SNYK from SaaS')
+                Config.sca_lang = Config.sca_response[0]['tool'].lower()
+                logging.warning(f"Tool Config: SCA was properly configured on SaaS. It will be running {Config.sca_response[0]['tool']} from SaaS")
 
         else:
             Config.sca_message = 'SCA was not properly configured on SaaS'

{boman-cli-2.4.7 → boman_cli-2.4.8}/setup.cfg

@@ -1,8 +1,9 @@
 [metadata]
 environment = prod
-version = 2.4.7
+version = 2.4.8
 name = boman-cli
-saas_base_url = https://dashboard.boman.ai/
+saas_base_url = 
+https = //dashboard.boman.ai/
 
 [egg_info]
 tag_build = 

{boman-cli-2.4.7 → boman_cli-2.4.8}/boman_cli.egg-info/requires.txt

@@ -1,6 +1,6 @@
-coloredlogs<=15.0.1
 docker<=7.0.0
-pyfiglet<=1.0.2
-pyyaml
 requests<=2.31.0
+pyyaml
+coloredlogs<=15.0.1
 xmltodict<=0.13.0
+pyfiglet<=1.0.2