boman-cli 2.6.6__tar.gz → 2.6.8__tar.gz

{boman_cli-2.6.6 → boman_cli-2.6.8}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: boman-cli
-Version: 2.6.6
+Version: 2.6.8
 Summary: CLI tool of boman.ai
 Home-page: https://boman.ai
 Author: Sumeru Software Solutions Pvt. Ltd.
@@ -86,6 +86,19 @@ Example: boman-cli -a run -zap_session_script ./session.js
 
 `boman-cli -a run -semgrep_token <value>`
 
+### Set cache when SBOM is failing due to cache error
+
+usage: `boman-cli -a run -at <project token> -ct <customer token> -std True`
+
+### Set non root mode when SAST is failing due to cache error
+
+usage: `boman-cli -a run -at <project token> -ct <customer token> -nrm True`
+
+### Set no enrichment SBOM when enriching SBOM is taking so much time then expected. The caveat is you will still get SBOM but it will not carry all the other details.
+
+usage: `boman-cli -a run -at <project token> -ct <customer token> -std True`
+
+
 
 
 
@@ -103,6 +116,12 @@ Example: boman-cli -a run -zap_session_script ./session.js
 
 # Release Notes:
 
+### 2.6.8
+- **new argument** - Do not enrich SBOM is now available for Jenkins and Non-Jenkins pipeline. Use `-nes True`at end of the command to enable this feature
+
+### 2.6.7
+- **new argument** - Non root mode now available for Jenkins and Non-Jenkins pipeline. Use `-nrm True`at end of the command to enable this mode
+
 ### 2.6.6
 - **Rule Deprication** - Depricating generic rule (Trojan Horse)
 

{boman_cli-2.6.6 → boman_cli-2.6.8}/README.md

@@ -64,6 +64,19 @@ Example: boman-cli -a run -zap_session_script ./session.js
 
 `boman-cli -a run -semgrep_token <value>`
 
+### Set cache when SBOM is failing due to cache error
+
+usage: `boman-cli -a run -at <project token> -ct <customer token> -std True`
+
+### Set non root mode when SAST is failing due to cache error
+
+usage: `boman-cli -a run -at <project token> -ct <customer token> -nrm True`
+
+### Set no enrichment SBOM when enriching SBOM is taking so much time then expected. The caveat is you will still get SBOM but it will not carry all the other details.
+
+usage: `boman-cli -a run -at <project token> -ct <customer token> -std True`
+
+
 
 
 
@@ -81,6 +94,12 @@ Example: boman-cli -a run -zap_session_script ./session.js
 
 # Release Notes:
 
+### 2.6.8
+- **new argument** - Do not enrich SBOM is now available for Jenkins and Non-Jenkins pipeline. Use `-nes True`at end of the command to enable this feature
+
+### 2.6.7
+- **new argument** - Non root mode now available for Jenkins and Non-Jenkins pipeline. Use `-nrm True`at end of the command to enable this mode
+
 ### 2.6.6
 - **Rule Deprication** - Depricating generic rule (Trojan Horse)
 

{boman_cli-2.6.6 → boman_cli-2.6.8}/boman_cli.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: boman-cli
-Version: 2.6.6
+Version: 2.6.8
 Summary: CLI tool of boman.ai
 Home-page: https://boman.ai
 Author: Sumeru Software Solutions Pvt. Ltd.
@@ -86,6 +86,19 @@ Example: boman-cli -a run -zap_session_script ./session.js
 
 `boman-cli -a run -semgrep_token <value>`
 
+### Set cache when SBOM is failing due to cache error
+
+usage: `boman-cli -a run -at <project token> -ct <customer token> -std True`
+
+### Set non root mode when SAST is failing due to cache error
+
+usage: `boman-cli -a run -at <project token> -ct <customer token> -nrm True`
+
+### Set no enrichment SBOM when enriching SBOM is taking so much time then expected. The caveat is you will still get SBOM but it will not carry all the other details.
+
+usage: `boman-cli -a run -at <project token> -ct <customer token> -std True`
+
+
 
 
 
@@ -103,6 +116,12 @@ Example: boman-cli -a run -zap_session_script ./session.js
 
 # Release Notes:
 
+### 2.6.8
+- **new argument** - Do not enrich SBOM is now available for Jenkins and Non-Jenkins pipeline. Use `-nes True`at end of the command to enable this feature
+
+### 2.6.7
+- **new argument** - Non root mode now available for Jenkins and Non-Jenkins pipeline. Use `-nrm True`at end of the command to enable this mode
+
 ### 2.6.6
 - **Rule Deprication** - Depricating generic rule (Trojan Horse)
 

{boman_cli-2.6.6 → boman_cli-2.6.8}/bomancli/Config.py

@@ -121,7 +121,7 @@ class Config:
 
     log_level = "INFO"
 
-    version = 'v2.6.6'
+    version = 'v2.6.8'
 
     boman_config_file = 'boman.yaml'
     
@@ -240,4 +240,10 @@ class Config:
     
     # common for trivy container and sbom scan
     set_cache_dir = False
-    cache_dir = " --cache-dir /tmp/.trivycache"
+    cache_dir = " --cache-dir /tmp/.trivycache"
+    
+    non_root_mode = False
+    home="HOME=/tmp"
+    xdg_cache_home="XDG_CACHE_HOME=/tmp/.cache"
+    
+    no_enrichment_sbom = False

{boman_cli-2.6.6 → boman_cli-2.6.8}/bomancli/main.py

@@ -196,8 +196,15 @@ def runImage(data=None,type=None):
 
                     logging.info('SAST Docker: Preparing %s scan for non jenkins env with %s user ', tool_name ,userid)
                     Config.build_dir = Config.sast_build_dir
-                    container_output = docker.containers.run(docker_image, command_line, volumes={Config.sast_build_dir: {
-                                'bind': data['bind']}},user=userid,detach=detach,environment=env_var,remove=True)          
+                    if Config.non_root_mode:
+                        env_var.append(Config.home)
+                        env_var.append(Config.xdg_cache_home)
+                        logging.info('SAST Docker: Non-root mode is enabled for the scans')
+                        container_output = docker.containers.run(docker_image,command_line,volumes={Config.sast_build_dir: {'bind': data['bind']}},user=userid,
+                        working_dir="/tmp",detach=detach,environment=env_var,remove=True)                        
+                    else:
+                        container_output = docker.containers.run(docker_image, command_line, volumes={Config.sast_build_dir: {
+                                    'bind': data['bind']}},user=userid,detach=detach,environment=env_var,remove=True)          
                     logging.info('SAST Docker: SUCCESS !!!. Message: %s Scan Completed',tool_name)
                 logging.info('SAST Docker: Deleting custom opengrep rules from the build directory')
                 shutil.rmtree('malware_rules')
@@ -602,58 +609,63 @@ def runImage(data=None,type=None):
             logging.info('SBOM Docker: SUCCESS!!! Message: %s Scan Completed',tool_name)
             Config.sbom_message ='SBOM scan completed'
             Config.sbom_scan_status ='Completed'
+            
+            if not Config.no_enrichment_sbom:
 
-            ##running reachability before sbom upload
+                ##running reachability before sbom upload
 
 
-               #this part i removed since, reachabitlity bug has tobe solved later 
+                #this part i removed since, reachabitlity bug has tobe solved later 
 
-             #### sbom entrich part starts here
+                #### sbom entrich part starts here
 
 
-            # Load SBOM (generated by Trivy or Syft)
-                  # Load SBOM (generated by Trivy or Syft)
-            enricher = SBOMEnricher(Config.sbom_output_file)
+                # Load SBOM (generated by Trivy or Syft)
+                    # Load SBOM (generated by Trivy or Syft)
+                enricher = SBOMEnricher(Config.sbom_output_file)
 
-            # Enrich with additional fields
-            enriched_data = enricher.enrich_components()
+                # Enrich with additional fields
+                enriched_data = enricher.enrich_components()
 
-            # Save final SBOM
-            enricher.save_sbom('sbom_enriched.json')
+                # Save final SBOM
+                enricher.save_sbom('sbom_enriched.json')
 
-            #print(Config.sbom_output_file)
-            
+                #print(Config.sbom_output_file)
+                
 
-            output_file = 'sbom_enriched.json'
+                output_file = 'sbom_enriched.json'
 
-            logging.info('Enrichment done %s',output_file)
+                logging.info('Enrichment done %s',output_file)
 
 
-            
-            sbom_output_file = output_file
-            csv_file = Config.hssc_output_file
-            #generating sbom more data
+                
+                sbom_output_file = output_file
+                csv_file = Config.hssc_output_file
+                #generating sbom more data
 
 
-            #i should run the heisenger
-            
-            logging.info('Running SSC check on the repo')
+                #i should run the heisenger
+                
+                logging.info('Running SSC check on the repo')
 
 
-            
-            try:
-                Utils.runheisenberg(sbom_output_file) #docker of hsc
-            except e:
-                logging.info('Some error occured while Running HSC on the repo')
-                exit(6)    
-            
-            logging.info('Enrichment with more data is going to happen %s',Config.sbom_output_file)  
+                
+                try:
+                    Utils.runheisenberg(sbom_output_file) #docker of hsc
+                except e:
+                    logging.info('Some error occured while Running HSC on the repo')
+                    exit(6)    
+                
+                logging.info('Enrichment with more data is going to happen %s',Config.sbom_output_file)  
 
-            enricher.run_heisenberg(sbom_output_file, csv_file)
+                enricher.run_heisenberg(sbom_output_file, csv_file)
 
-            logging.info('Enrichment done %s',Config.sbom_output_file)
-            ##exit(-1)
-            
+                logging.info('Enrichment done %s',Config.sbom_output_file)
+                ##exit(-1)
+            else:
+                logging.info('SBOM Docker: Enrichment is disabled for SBOM, skipping enrichment step')
+                logging.info('SBOM Docker: SBOM scan completed without enrichment %s',output_file)
+                
         except errors.ContainerError as exc:
            logging.error('SBOM Docker: Failed!!! Message: Some Error recorded while scanning %s',str(exc))
            msg='\n The following error has been recorded while scanning sca'
@@ -1301,6 +1313,8 @@ def default():
     parser.add_argument('-pot','--pollTime',default=100,help="Polling Time. Min : 30s, Max: 5min, Default : 1min. Format: input the time in seconds eg: 1min => 60 ")
     parser.add_argument('-pof','--pollFrequency',default=10,help="Polling Frequency. Min : 5s, Max: 1min, Default : 10s. Format: input the time in seconds eg: 1min => 60 ")
     parser.add_argument('-std','--setCacheDir',default=False,help="Set the cache directory for the scan. Set true if you use jenkins cicd")
+    parser.add_argument('-nrm','--nonRootMode',default=False,help="Set the non-root mode for the scan. Set true if you use jenkins cicd")
+    parser.add_argument('-nes','--noEnrichmentSBOM',default=False,help="Set the no enrichment for SBOM scan. Set true if you want to skip the enrichment of SBOM scan")
     args = parser.parse_args()
 
     # if len(sys.args) == 1:
@@ -1328,6 +1342,14 @@ def default():
     else:
         Config.set_cache_dir = False
 
+    if args.nonRootMode:
+        Config.non_root_mode = True
+    else:
+        Config.non_root_mode = False
+
+    if args.noEnrichmentSBOM:
+        Config.no_enrichment_sbom = True
+
     # lingu user id set
     if args.semgrepToken == 'No':
         ##logging.info('jenkins is choosen')

{boman_cli-2.6.6 → boman_cli-2.6.8}/setup.cfg

@@ -1,6 +1,6 @@
 [metadata]
 environment = prod
-version = 2.6.6
+version = 2.6.8
 name = boman-cli
 saas_base_url = 
 https = //dashboard.boman.ai/