cartography 0.112.0__py3-none-any.whl → 0.114.0__py3-none-any.whl

cartography/models/gcp/dns.py

@@ -0,0 +1,109 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.nodes import ExtraNodeLabels
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import OtherRelationships
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class GCPDNSZoneNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("id", extra_index=True)
+    name: PropertyRef = PropertyRef("name", extra_index=True)
+    dns_name: PropertyRef = PropertyRef("dns_name")
+    description: PropertyRef = PropertyRef("description")
+    visibility: PropertyRef = PropertyRef("visibility")
+    kind: PropertyRef = PropertyRef("kind")
+    nameservers: PropertyRef = PropertyRef("nameservers")
+    created_at: PropertyRef = PropertyRef("created_at")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class GCPDNSZoneToProjectRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:GCPProject)-[:RESOURCE]->(:GCPDNSZone)
+class GCPDNSZoneToProjectRel(CartographyRelSchema):
+    target_node_label: str = "GCPProject"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("PROJECT_ID", set_in_kwargs=True)}
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: GCPDNSZoneToProjectRelProperties = GCPDNSZoneToProjectRelProperties()
+
+
+@dataclass(frozen=True)
+class GCPDNSZoneSchema(CartographyNodeSchema):
+    label: str = "GCPDNSZone"
+    properties: GCPDNSZoneNodeProperties = GCPDNSZoneNodeProperties()
+    extra_node_labels: ExtraNodeLabels = ExtraNodeLabels(["DNSZone"])
+    sub_resource_relationship: GCPDNSZoneToProjectRel = GCPDNSZoneToProjectRel()
+
+
+@dataclass(frozen=True)
+class GCPRecordSetNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("id", extra_index=True)
+    name: PropertyRef = PropertyRef("name", extra_index=True)
+    type: PropertyRef = PropertyRef("type")
+    ttl: PropertyRef = PropertyRef("ttl")
+    data: PropertyRef = PropertyRef("data")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class GCPRecordSetToProjectRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:GCPProject)-[:RESOURCE]->(:GCPRecordSet)
+class GCPRecordSetToProjectRel(CartographyRelSchema):
+    target_node_label: str = "GCPProject"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("PROJECT_ID", set_in_kwargs=True)}
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: GCPRecordSetToProjectRelProperties = (
+        GCPRecordSetToProjectRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class GCPRecordSetToZoneRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:GCPDNSZone)-[:HAS_RECORD]->(:GCPRecordSet)
+class GCPRecordSetToZoneRel(CartographyRelSchema):
+    target_node_label: str = "GCPDNSZone"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("zone_id")}
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "HAS_RECORD"
+    properties: GCPRecordSetToZoneRelProperties = GCPRecordSetToZoneRelProperties()
+
+
+@dataclass(frozen=True)
+class GCPRecordSetSchema(CartographyNodeSchema):
+    label: str = "GCPRecordSet"
+    properties: GCPRecordSetNodeProperties = GCPRecordSetNodeProperties()
+    extra_node_labels: ExtraNodeLabels = ExtraNodeLabels(["DNSRecord"])
+    sub_resource_relationship: GCPRecordSetToProjectRel = GCPRecordSetToProjectRel()
+    other_relationships: OtherRelationships = OtherRelationships(
+        [
+            GCPRecordSetToZoneRel(),
+        ]
+    )

cartography/models/gcp/gke.py

@@ -0,0 +1,69 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class GCPGKEClusterNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("id", extra_index=True)
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+    name: PropertyRef = PropertyRef("name")
+    self_link: PropertyRef = PropertyRef("self_link")
+    description: PropertyRef = PropertyRef("description")
+    logging_service: PropertyRef = PropertyRef("logging_service")
+    monitoring_service: PropertyRef = PropertyRef("monitoring_service")
+    network: PropertyRef = PropertyRef("network")
+    subnetwork: PropertyRef = PropertyRef("subnetwork")
+    cluster_ipv4cidr: PropertyRef = PropertyRef("cluster_ipv4cidr")
+    zone: PropertyRef = PropertyRef("zone")
+    location: PropertyRef = PropertyRef("location")
+    endpoint: PropertyRef = PropertyRef("endpoint")
+    initial_version: PropertyRef = PropertyRef("initial_version")
+    current_master_version: PropertyRef = PropertyRef("current_master_version")
+    status: PropertyRef = PropertyRef("status")
+    services_ipv4cidr: PropertyRef = PropertyRef("services_ipv4cidr")
+    database_encryption: PropertyRef = PropertyRef("database_encryption")
+    network_policy: PropertyRef = PropertyRef("network_policy")
+    master_authorized_networks: PropertyRef = PropertyRef("master_authorized_networks")
+    legacy_abac: PropertyRef = PropertyRef("legacy_abac")
+    shielded_nodes: PropertyRef = PropertyRef("shielded_nodes")
+    private_nodes: PropertyRef = PropertyRef("private_nodes")
+    private_endpoint_enabled: PropertyRef = PropertyRef("private_endpoint_enabled")
+    private_endpoint: PropertyRef = PropertyRef("private_endpoint")
+    public_endpoint: PropertyRef = PropertyRef("public_endpoint")
+    masterauth_username: PropertyRef = PropertyRef("masterauth_username")
+    masterauth_password: PropertyRef = PropertyRef("masterauth_password")
+    created_at: PropertyRef = PropertyRef("created_at")
+
+
+@dataclass(frozen=True)
+class GCPGKEClusterToProjectRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:GCPProject)-[:RESOURCE]->(:GKECluster)
+class GCPGKEClusterToProjectRel(CartographyRelSchema):
+    target_node_label: str = "GCPProject"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("PROJECT_ID", set_in_kwargs=True)}
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: GCPGKEClusterToProjectRelProperties = (
+        GCPGKEClusterToProjectRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class GCPGKEClusterSchema(CartographyNodeSchema):
+    label: str = "GKECluster"
+    properties: GCPGKEClusterNodeProperties = GCPGKEClusterNodeProperties()
+    sub_resource_relationship: GCPGKEClusterToProjectRel = GCPGKEClusterToProjectRel()

cartography/models/gcp/iam.py

@@ -4,6 +4,7 @@ from dataclasses import dataclass
 from cartography.models.core.common import PropertyRef
 from cartography.models.core.nodes import CartographyNodeProperties
 from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.nodes import ExtraNodeLabels
 from cartography.models.core.relationships import CartographyRelProperties
 from cartography.models.core.relationships import CartographyRelSchema
 from cartography.models.core.relationships import LinkDirection
@@ -61,6 +62,8 @@ class GCPServiceAccountSchema(CartographyNodeSchema):
     label: str = "GCPServiceAccount"
     properties: GCPServiceAccountNodeProperties = GCPServiceAccountNodeProperties()
     sub_resource_relationship: GCPPrincipalToProject = GCPPrincipalToProject()
+    # Service accounts are principals; add shared label for cross-module queries
+    extra_node_labels: ExtraNodeLabels = ExtraNodeLabels(["GCPPrincipal"])
 
 
 @dataclass(frozen=True)

cartography/models/gcp/storage/bucket.py

@@ -0,0 +1,119 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import OtherRelationships
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class GCPBucketNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("id", extra_index=True)
+    # Preserve legacy field for compatibility with existing queries
+    bucket_id: PropertyRef = PropertyRef("bucket_id")
+    project_number: PropertyRef = PropertyRef("project_number")
+    self_link: PropertyRef = PropertyRef("self_link")
+    kind: PropertyRef = PropertyRef("kind")
+    location: PropertyRef = PropertyRef("location")
+    location_type: PropertyRef = PropertyRef("location_type")
+    meta_generation: PropertyRef = PropertyRef("meta_generation")
+    storage_class: PropertyRef = PropertyRef("storage_class")
+    time_created: PropertyRef = PropertyRef("time_created")
+    retention_period: PropertyRef = PropertyRef("retention_period")
+    iam_config_bucket_policy_only: PropertyRef = PropertyRef(
+        "iam_config_bucket_policy_only"
+    )
+    owner_entity: PropertyRef = PropertyRef("owner_entity")
+    owner_entity_id: PropertyRef = PropertyRef("owner_entity_id")
+    versioning_enabled: PropertyRef = PropertyRef("versioning_enabled")
+    log_bucket: PropertyRef = PropertyRef("log_bucket")
+    requester_pays: PropertyRef = PropertyRef("requester_pays")
+    default_kms_key_name: PropertyRef = PropertyRef("default_kms_key_name")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class GCPBucketToProjectRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:GCPProject)-[:RESOURCE]->(:GCPBucket)
+class GCPBucketToProjectRel(CartographyRelSchema):
+    target_node_label: str = "GCPProject"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("PROJECT_ID", set_in_kwargs=True)}
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: GCPBucketToProjectRelProperties = GCPBucketToProjectRelProperties()
+
+
+@dataclass(frozen=True)
+class GCPBucketSchema(CartographyNodeSchema):
+    label: str = "GCPBucket"
+    properties: GCPBucketNodeProperties = GCPBucketNodeProperties()
+    sub_resource_relationship: GCPBucketToProjectRel = GCPBucketToProjectRel()
+
+
+@dataclass(frozen=True)
+class GCPBucketLabelNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("id", extra_index=True)
+    key: PropertyRef = PropertyRef("key", extra_index=True)
+    value: PropertyRef = PropertyRef("value")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class GCPBucketLabelToProjectRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:GCPProject)-[:RESOURCE]->(:GCPBucketLabel)
+class GCPBucketLabelToProjectRel(CartographyRelSchema):
+    target_node_label: str = "GCPProject"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("PROJECT_ID", set_in_kwargs=True)}
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: GCPBucketLabelToProjectRelProperties = (
+        GCPBucketLabelToProjectRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class GCPBucketLabelToBucketRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:GCPBucket)-[:LABELED]->(:GCPBucketLabel)
+class GCPBucketLabelToBucketRel(CartographyRelSchema):
+    target_node_label: str = "GCPBucket"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("bucket_id")}
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "LABELED"
+    properties: GCPBucketLabelToBucketRelProperties = (
+        GCPBucketLabelToBucketRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class GCPBucketLabelSchema(CartographyNodeSchema):
+    label: str = "GCPBucketLabel"
+    properties: GCPBucketLabelNodeProperties = GCPBucketLabelNodeProperties()
+    sub_resource_relationship: GCPBucketLabelToProjectRel = GCPBucketLabelToProjectRel()
+    other_relationships: OtherRelationships = OtherRelationships(
+        [
+            GCPBucketLabelToBucketRel(),
+        ]
+    )

cartography/models/github/commits.py

@@ -0,0 +1,63 @@
+"""
+Data model for GitHub commit tracking, specifically for tracking which GitHubUsers have committed
+to which GitHubRepositories in the last 30 days.
+
+This uses MatchLinks to connect existing GitHubUser nodes to GitHubRepository nodes based on
+commit data from a separate GitHub API call.
+"""
+
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_source_node_matcher
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import SourceNodeMatcher
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class GitHubUserCommittedToRepoRelProperties(CartographyRelProperties):
+    """
+    Properties for the COMMITTED_TO relationship between GitHubUser and GitHubRepository.
+    """
+
+    # Required for all MatchLinks
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+    _sub_resource_label: PropertyRef = PropertyRef(
+        "_sub_resource_label", set_in_kwargs=True
+    )
+    _sub_resource_id: PropertyRef = PropertyRef("_sub_resource_id", set_in_kwargs=True)
+
+    # Rich relationship properties
+    commit_count: PropertyRef = PropertyRef("commit_count")
+    last_commit_date: PropertyRef = PropertyRef("last_commit_date")
+    first_commit_date: PropertyRef = PropertyRef("first_commit_date")
+
+
+@dataclass(frozen=True)
+class GitHubUserCommittedToRepoRel(CartographyRelSchema):
+    """
+    MatchLink schema for connecting GitHubUser nodes to GitHubRepository nodes
+    based on commits in the last 30 days.
+    """
+
+    target_node_label: str = "GitHubRepository"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {
+            "id": PropertyRef("repo_url"),
+        }
+    )
+    source_node_label: str = "GitHubUser"
+    source_node_matcher: SourceNodeMatcher = make_source_node_matcher(
+        {
+            "id": PropertyRef("user_url"),
+        }
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "COMMITTED_TO"
+    properties: GitHubUserCommittedToRepoRelProperties = (
+        GitHubUserCommittedToRepoRelProperties()
+    )

{cartography-0.112.0.dist-info → cartography-0.114.0.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: cartography
-Version: 0.112.0
+Version: 0.114.0
 Summary: Explore assets and their relationships across your technical infrastructure.
 Maintainer: Cartography Contributors
 License-Expression: Apache-2.0
@@ -25,7 +25,7 @@ Requires-Dist: backoff>=2.1.2
 Requires-Dist: boto3>=1.15.1
 Requires-Dist: botocore>=1.18.1
 Requires-Dist: dnspython>=1.15.0
-Requires-Dist: neo4j>=4.4.4
+Requires-Dist: neo4j>=5.28.2
 Requires-Dist: policyuniverse>=1.1.0.0
 Requires-Dist: google-api-python-client>=1.7.8
 Requires-Dist: google-auth>=2.37.0
@@ -42,6 +42,7 @@ Requires-Dist: azure-cli-core>=2.26.0
 Requires-Dist: azure-mgmt-compute>=5.0.0
 Requires-Dist: azure-mgmt-resource>=10.2.0
 Requires-Dist: azure-mgmt-cosmosdb>=6.0.0
+Requires-Dist: azure-mgmt-web>=7.0.0
 Requires-Dist: msrestazure>=0.6.4
 Requires-Dist: azure-mgmt-storage>=16.0.0
 Requires-Dist: azure-mgmt-sql<=1.0.0
@@ -55,6 +56,7 @@ Requires-Dist: xmltodict
 Requires-Dist: duo-client
 Requires-Dist: cloudflare<5.0.0,>=4.1.0
 Requires-Dist: scaleway>=2.9.0
+Requires-Dist: google-cloud-resource-manager>=1.14.2
 Dynamic: license-file
 
 ![Cartography](docs/root/images/logo-horizontal.png)
@@ -95,10 +97,10 @@ You can learn more about the story behind Cartography in our [presentation at BS
 - [Keycloak](https://cartography-cncf.github.io/cartography/modules/keycloak/index.html) - Realms, Users, Groups, Roles, Scopes, Clients, IdentityProviders, Authentication Flows, Authentication Executions, Organizations, Organization Domains
 - [Kubernetes](https://cartography-cncf.github.io/cartography/modules/kubernetes/index.html) - Cluster, Namespace, Service, Pod, Container, ServiceAccount, Role, RoleBinding, ClusterRole, ClusterRoleBinding, OIDCProvider
 - [Lastpass](https://cartography-cncf.github.io/cartography/modules/lastpass/index.html) - users
-- [Microsoft Azure](https://cartography-cncf.github.io/cartography/modules/azure/index.html) -  CosmosDB, SQL, Storage, Virtual Machine
-- [Microsoft Entra ID](https://cartography-cncf.github.io/cartography/modules/entra/index.html) -  Users
+- [Microsoft Azure](https://cartography-cncf.github.io/cartography/modules/azure/index.html) - App Service, CosmosDB, Functions, SQL, Storage, Virtual Machine
+- [Microsoft Entra ID](https://cartography-cncf.github.io/cartography/modules/entra/index.html) -  Users, Groups, Applications, OUs, App Roles, federation to AWS Identity Center
 - [NIST CVE](https://cartography-cncf.github.io/cartography/modules/cve/index.html) - Common Vulnerabilities and Exposures (CVE) data from NIST database
-- [Okta](https://cartography-cncf.github.io/cartography/modules/okta/index.html) - users, groups, organizations, roles, applications, factors, trusted origins, reply URIs
+- [Okta](https://cartography-cncf.github.io/cartography/modules/okta/index.html) - users, groups, organizations, roles, applications, factors, trusted origins, reply URIs, federation to AWS roles, federation to AWS Identity Center
 - [OpenAI](https://cartography-cncf.github.io/cartography/modules/openai/index.html) - Organization, AdminApiKey, User, Project, ServiceAccount, ApiKey
 - [Oracle Cloud Infrastructure](https://cartography-cncf.github.io/cartography/modules/oci/index.html) - IAM
 - [PagerDuty](https://cartography-cncf.github.io/cartography/modules/pagerduty/index.html) - Users, teams, services, schedules, escalation policies, integrations, vendors