boman-cli 2.6.6__tar.gz → 2.6.7__tar.gz

{boman_cli-2.6.6 → boman_cli-2.6.7}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: boman-cli
-Version: 2.6.6
+Version: 2.6.7
 Summary: CLI tool of boman.ai
 Home-page: https://boman.ai
 Author: Sumeru Software Solutions Pvt. Ltd.

{boman_cli-2.6.6 → boman_cli-2.6.7}/boman_cli.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: boman-cli
-Version: 2.6.6
+Version: 2.6.7
 Summary: CLI tool of boman.ai
 Home-page: https://boman.ai
 Author: Sumeru Software Solutions Pvt. Ltd.

{boman_cli-2.6.6 → boman_cli-2.6.7}/bomancli/Config.py

@@ -121,7 +121,7 @@ class Config:
 
     log_level = "INFO"
 
-    version = 'v2.6.6'
+    version = 'v2.6.7'
 
     boman_config_file = 'boman.yaml'
     
@@ -240,4 +240,8 @@ class Config:
     
     # common for trivy container and sbom scan
     set_cache_dir = False
-    cache_dir = " --cache-dir /tmp/.trivycache"
+    cache_dir = " --cache-dir /tmp/.trivycache"
+    
+    non_root_mode = False
+    home="HOME=/tmp"
+    xdg_cache_home="XDG_CACHE_HOME=/tmp/.cache"

{boman_cli-2.6.6 → boman_cli-2.6.7}/bomancli/main.py

@@ -196,8 +196,15 @@ def runImage(data=None,type=None):
 
                     logging.info('SAST Docker: Preparing %s scan for non jenkins env with %s user ', tool_name ,userid)
                     Config.build_dir = Config.sast_build_dir
-                    container_output = docker.containers.run(docker_image, command_line, volumes={Config.sast_build_dir: {
-                                'bind': data['bind']}},user=userid,detach=detach,environment=env_var,remove=True)          
+                    if Config.non_root_mode:
+                        env_var.append(Config.home)
+                        env_var.append(Config.xdg_cache_home)
+                        logging.info('SAST Docker: Non-root mode is enabled for the scans')
+                        container_output = docker.containers.run(docker_image,command_line,volumes={Config.sast_build_dir: {'bind': data['bind']}},user=userid,
+                        working_dir="/tmp",detach=detach,environment=env_var,remove=True)                        
+                    else:
+                        container_output = docker.containers.run(docker_image, command_line, volumes={Config.sast_build_dir: {
+                                    'bind': data['bind']}},user=userid,detach=detach,environment=env_var,remove=True)          
                     logging.info('SAST Docker: SUCCESS !!!. Message: %s Scan Completed',tool_name)
                 logging.info('SAST Docker: Deleting custom opengrep rules from the build directory')
                 shutil.rmtree('malware_rules')
@@ -1301,6 +1308,7 @@ def default():
     parser.add_argument('-pot','--pollTime',default=100,help="Polling Time. Min : 30s, Max: 5min, Default : 1min. Format: input the time in seconds eg: 1min => 60 ")
     parser.add_argument('-pof','--pollFrequency',default=10,help="Polling Frequency. Min : 5s, Max: 1min, Default : 10s. Format: input the time in seconds eg: 1min => 60 ")
     parser.add_argument('-std','--setCacheDir',default=False,help="Set the cache directory for the scan. Set true if you use jenkins cicd")
+    parser.add_argument('-nrm','--nonRootMode',default=False,help="Set the non-root mode for the scan. Set true if you use jenkins cicd")
     args = parser.parse_args()
 
     # if len(sys.args) == 1:
@@ -1328,6 +1336,11 @@ def default():
     else:
         Config.set_cache_dir = False
 
+    if args.nonRootMode:
+        Config.non_root_mode = True
+    else:
+        Config.non_root_mode = False
+
     # lingu user id set
     if args.semgrepToken == 'No':
         ##logging.info('jenkins is choosen')

{boman_cli-2.6.6 → boman_cli-2.6.7}/setup.cfg

@@ -1,6 +1,6 @@
 [metadata]
 environment = prod
-version = 2.6.6
+version = 2.6.7
 name = boman-cli
 saas_base_url = 
 https = //dashboard.boman.ai/