contentctl 5.0.0a0__py3-none-any.whl → 5.0.0a3__py3-none-any.whl

contentctl/objects/baseline.py

@@ -1,10 +1,16 @@
-
 from __future__ import annotations
-from typing import Annotated, List,Any, TYPE_CHECKING
+from typing import Annotated, List, Any, TYPE_CHECKING
+
 if TYPE_CHECKING:
     from contentctl.input.director import DirectorOutputDto
 
-from pydantic import field_validator, ValidationInfo, Field, model_serializer, computed_field
+from pydantic import (
+    field_validator,
+    ValidationInfo,
+    Field,
+    model_serializer,
+    computed_field,
+)
 from contentctl.objects.deployment import Deployment
 from contentctl.objects.security_content_object import SecurityContentObject
 from contentctl.objects.enums import DataModel
@@ -13,11 +19,15 @@ from contentctl.objects.baseline_tags import BaselineTags
 from contentctl.objects.config import CustomApp
 
 from contentctl.objects.lookup import Lookup
-from contentctl.objects.constants import CONTENTCTL_MAX_SEARCH_NAME_LENGTH,CONTENTCTL_BASELINE_STANZA_NAME_FORMAT_TEMPLATE
+from contentctl.objects.constants import (
+    CONTENTCTL_MAX_SEARCH_NAME_LENGTH,
+    CONTENTCTL_BASELINE_STANZA_NAME_FORMAT_TEMPLATE,
+)
+
 
 class Baseline(SecurityContentObject):
-    name:str = Field(...,max_length=CONTENTCTL_MAX_SEARCH_NAME_LENGTH)
-    type: Annotated[str,Field(pattern="^Baseline$")] = Field(...)
+    name: str = Field(..., max_length=CONTENTCTL_MAX_SEARCH_NAME_LENGTH)
+    type: Annotated[str, Field(pattern="^Baseline$")] = Field(...)
     search: str = Field(..., min_length=4)
     how_to_implement: str = Field(..., min_length=4)
     known_false_positives: str = Field(..., min_length=4)
@@ -26,30 +36,31 @@ class Baseline(SecurityContentObject):
     # enrichment
     deployment: Deployment = Field({})
 
-
-    @field_validator('lookups', mode="before")
+    @field_validator("lookups", mode="before")
     @classmethod
-    def getBaselineLookups(cls, v:list[str], info:ValidationInfo) -> list[Lookup]:
-        '''
+    def getBaselineLookups(cls, v: list[str], info: ValidationInfo) -> list[Lookup]:
+        """
         This function has been copied and renamed from the Detection_Abstract class
-        '''
-        director:DirectorOutputDto = info.context.get("output_dto",None)
-        search: str | None = info.data.get("search",None)
+        """
+        director: DirectorOutputDto = info.context.get("output_dto", None)
+        search: str | None = info.data.get("search", None)
         if search is None:
             raise ValueError("Search was None - is this file missing the search field?")
-        
+
         lookups = Lookup.get_lookups(search, director)
         return lookups
 
-    def get_conf_stanza_name(self, app:CustomApp)->str:
-        stanza_name = CONTENTCTL_BASELINE_STANZA_NAME_FORMAT_TEMPLATE.format(app_label=app.label, detection_name=self.name)
+    def get_conf_stanza_name(self, app: CustomApp) -> str:
+        stanza_name = CONTENTCTL_BASELINE_STANZA_NAME_FORMAT_TEMPLATE.format(
+            app_label=app.label, detection_name=self.name
+        )
         self.check_conf_stanza_max_length(stanza_name)
         return stanza_name
 
     @field_validator("deployment", mode="before")
-    def getDeployment(cls, v:Any, info:ValidationInfo)->Deployment:
-        return Deployment.getDeployment(v,info)
-    
+    def getDeployment(cls, v: Any, info: ValidationInfo) -> Deployment:
+        return Deployment.getDeployment(v, info)
+
     @computed_field
     @property
     def datamodel(self) -> List[DataModel]:
@@ -57,21 +68,21 @@ class Baseline(SecurityContentObject):
 
     @model_serializer
     def serialize_model(self):
-        #Call serializer for parent
+        # Call serializer for parent
         super_fields = super().serialize_model()
-        
-        #All fields custom to this model
-        model= {
+
+        # All fields custom to this model
+        model = {
             "tags": self.tags.model_dump(),
             "type": self.type,
             "search": self.search,
-            "how_to_implement":self.how_to_implement,
-            "known_false_positives":self.known_false_positives,
+            "how_to_implement": self.how_to_implement,
+            "known_false_positives": self.known_false_positives,
             "datamodel": self.datamodel,
         }
-        
-        #Combine fields from this model with fields from parent
+
+        # Combine fields from this model with fields from parent
         super_fields.update(model)
-        
-        #return the model
-        return super_fields
+
+        # return the model
+        return super_fields

contentctl/objects/baseline_tags.py

@@ -1,5 +1,12 @@
 from __future__ import annotations
-from pydantic import BaseModel, Field, field_validator, ValidationInfo, model_serializer, ConfigDict
+from pydantic import (
+    BaseModel,
+    Field,
+    field_validator,
+    ValidationInfo,
+    model_serializer,
+    ConfigDict,
+)
 from typing import List, Any, Union
 
 from contentctl.objects.story import Story
@@ -8,35 +15,35 @@ from contentctl.objects.enums import SecurityContentProductName
 from contentctl.objects.enums import SecurityDomain
 
 
-
-
-
 class BaselineTags(BaseModel):
     model_config = ConfigDict(extra="forbid")
     analytic_story: list[Story] = Field(...)
-    #deployment: Deployment = Field('SET_IN_GET_DEPLOYMENT_FUNCTION')
+    # deployment: Deployment = Field('SET_IN_GET_DEPLOYMENT_FUNCTION')
     # TODO (#223): can we remove str from the possible types here?
-    detections: List[Union[Detection,str]] = Field(...)
-    product: List[SecurityContentProductName] = Field(...,min_length=1)
+    detections: List[Union[Detection, str]] = Field(...)
+    product: List[SecurityContentProductName] = Field(..., min_length=1)
     security_domain: SecurityDomain = Field(...)
 
+    @field_validator("analytic_story", mode="before")
+    def getStories(cls, v: Any, info: ValidationInfo) -> List[Story]:
+        return Story.mapNamesToSecurityContentObjects(
+            v, info.context.get("output_dto", None)
+        )
 
-    @field_validator("analytic_story",mode="before")
-    def getStories(cls, v:Any, info:ValidationInfo)->List[Story]:
-        return Story.mapNamesToSecurityContentObjects(v, info.context.get("output_dto",None))
-    
-    
     @model_serializer
-    def serialize_model(self):    
-        #All fields custom to this model
-        model= {
+    def serialize_model(self):
+        # All fields custom to this model
+        model = {
             "analytic_story": [story.name for story in self.analytic_story],
-            "detections": [detection.name for detection in self.detections if isinstance(detection,Detection)],
+            "detections": [
+                detection.name
+                for detection in self.detections
+                if isinstance(detection, Detection)
+            ],
             "product": self.product,
-            "security_domain":self.security_domain,
-            "deployments": None
+            "security_domain": self.security_domain,
+            "deployments": None,
         }
-        
-        
-        #return the model
-        return model
+
+        # return the model
+        return model