conviso-cli 2.3.0.dev3__tar.gz → 2.3.0.dev5__tar.gz

{conviso-cli-2.3.0.dev3 → conviso-cli-2.3.0.dev5}/PKG-INFO

@@ -1,13 +1,13 @@
 Metadata-Version: 2.1
 Name: conviso-cli
-Version: 2.3.0.dev3
+Version: 2.3.0.dev5
 Summary: UNKNOWN
 Maintainer: Conviso
 Maintainer-email: development@convisoappsec.com
 License: UNKNOWN
 Project-URL: Source, https://github.com/convisoappsec/convisocli/
 Platform: UNKNOWN
-Requires-Python: >=3.8
+Requires-Python: >=3.9
 Description-Content-Type: text/markdown
 
 # CLI

{conviso-cli-2.3.0.dev3 → conviso-cli-2.3.0.dev5}/conviso_cli.egg-info/PKG-INFO

@@ -1,13 +1,13 @@
 Metadata-Version: 2.1
 Name: conviso-cli
-Version: 2.3.0.dev3
+Version: 2.3.0.dev5
 Summary: UNKNOWN
 Maintainer: Conviso
 Maintainer-email: development@convisoappsec.com
 License: UNKNOWN
 Project-URL: Source, https://github.com/convisoappsec/convisocli/
 Platform: UNKNOWN
-Requires-Python: >=3.8
+Requires-Python: >=3.9
 Description-Content-Type: text/markdown
 
 # CLI

{conviso-cli-2.3.0.dev3 → conviso-cli-2.3.0.dev5}/conviso_cli.egg-info/SOURCES.txt

@@ -66,6 +66,7 @@ convisoappsec/flowcli/__main__.py
 convisoappsec/flowcli/common.py
 convisoappsec/flowcli/context.py
 convisoappsec/flowcli/entrypoint.py
+convisoappsec/flowcli/environment_checker.py
 convisoappsec/flowcli/help_option.py
 convisoappsec/flowcli/requirements_verifier.py
 convisoappsec/flowcli/assets/__init__.py

conviso-cli-2.3.0.dev5/conviso_cli.egg-info/requires.txt

@@ -0,0 +1,13 @@
+GitPython==3.1.44
+click==8.1.8
+requests==2.32.3
+urllib3==2.3.0
+semantic-version==2.10.0
+docker==7.1.0
+PyYAML==6.0.2
+click-log==0.4.0
+transitions==0.9.2
+jsonschema==4.23.0
+giturlparse<=0.12.0
+jmespath==1.0.1
+setuptools==75.8.0

{conviso-cli-2.3.0.dev3 → conviso-cli-2.3.0.dev5}/convisoappsec/flow/graphql_api/v1/resources_api.py

@@ -240,6 +240,64 @@ class IssuesApi(object):
 
         return issues_stats
 
+    def send_issues_file(self, company_id, asset_id, file_path, api_key, vulnerability_type='SAST_FINDING',
+                         deploy_id=None, commit_ref=None):
+        """Send issues file to Conviso platform"""
+
+        url = self.__conviso_graphql_client.url
+
+        if not isinstance(vulnerability_type, list):
+            vulnerability_type = [vulnerability_type]
+
+        vulnerability_type = [v.upper() for v in vulnerability_type]
+
+        variables = {
+            "companyId": company_id,
+            "assetId": asset_id,
+            "vulnerabilityTypes": vulnerability_type,
+            "deployId": deploy_id,
+            "commitRef": commit_ref,
+            "file": None
+        }
+
+        operations = {
+            "query": mutations.IMPORT_FINDINGS,
+            "variables": variables
+        }
+
+        file_map = {"0": ["variables.file"]}
+
+        headers = {
+            'x-api-key': api_key,
+            "User-Agent": f"AST:{__version__}"
+        }
+
+        try:
+            with open(file_path, 'rb') as file:
+                files = {
+                    'operations': (None, json.dumps(operations), 'application/json'),
+                    'map': (None, json.dumps(file_map), 'application/json'),
+                    '0': (file_path, file, 'application/octet-stream')
+                }
+
+                response = requests.post(url, files=files, headers=headers)
+                response.raise_for_status()
+                json_response = response.json()
+
+                self._handle_graphql_errors(json_response)
+                return json_response.get('data')
+
+        except requests.RequestException as e:
+            raise Exception(f"GraphQL request failed: {e}")
+
+    @staticmethod
+    def _handle_graphql_errors(json_response):
+        """Handle GraphQL errors"""
+        errors = json_response.get('errors')
+        if errors:
+            error_messages = [error.get('message', 'Unknown error') for error in errors]
+            raise Exception(f"GraphQL request failed with errors: {', '.join(error_messages)}")
+
 
 class DeploysApi(object):
     """ Class for deploys resources """
@@ -320,19 +378,18 @@ class DeploysApi(object):
             raise Exception("GraphQL request failed with errors.")
 
 
-class SbomApi(object):
-    """ Class for sbom file resources """
+class BaseApi:
+    """ Base class for handling file uploads to Conviso platform """
 
     def __init__(self, conviso_graphql_client):
         self._conviso_graphql_client = conviso_graphql_client
 
-    def send_sbom_file(self, company_id, asset_id, file_path, api_key):
-        """ Send SBOM file to Conviso platform """
-
+    def send_file(self, company_id, asset_id, file_path, api_key, mutation):
+        """ Generic method for sending a file """
         url = self._conviso_graphql_client.url
 
         operations = {
-            "query": mutations.IMPORT_SBOM,
+            "query": mutation,
             "variables": {
                 "companyId": company_id,
                 "assetId": asset_id,
@@ -340,41 +397,50 @@ class SbomApi(object):
             }
         }
 
-        file_map = {
-            "0": ["variables.file"]
-        }
+        file_map = {"0": ["variables.file"]}
 
-        with open(file_path, 'rb') as sbom_file:
+        with open(file_path, 'rb') as file:
             files = {
                 'operations': (None, json.dumps(operations), 'application/json'),
                 'map': (None, json.dumps(file_map), 'application/json'),
-                '0': (file_path, sbom_file, 'application/octet-stream')
+                '0': (file_path, file, 'application/octet-stream')
             }
 
             headers = {
-                'x-api-key': f'{api_key}',
-                "User-Agent": "AST:{version}".format(version=__version__)
+                'x-api-key': api_key,
+                "User-Agent": f"AST:{__version__}"
             }
 
             response = requests.post(url, files=files, headers=headers)
-
             response.raise_for_status()
             json_response = response.json()
 
             self._handle_graphql_errors(json_response)
-
             return json_response.get('data')
 
     @staticmethod
     def _handle_graphql_errors(json_response):
         """ Handle GraphQL errors """
         if 'errors' in json_response:
-            errors = json_response['errors']
-            for error in errors:
+            for error in json_response['errors']:
                 print(f"GraphQL Error: {error.get('message')}")
             raise Exception("GraphQL request failed with errors.")
 
 
+class SbomApi(BaseApi):
+    """ Class for SBOM file resources """
+
+    def send_sbom_file(self, company_id, asset_id, file_path, api_key):
+        return self.send_file(company_id, asset_id, file_path, api_key, mutations.IMPORT_SBOM)
+
+
+class ContainerApi(BaseApi):
+    """ Class for container finding file resources """
+
+    def send_container_file(self, company_id, asset_id, file_path, api_key):
+        return self.send_file(company_id, asset_id, file_path, api_key, mutations.IMPORT_CONTAINER)
+
+
 class LogAstError(object):
     """ Class to send AST errors to Conviso Platform """
     def __init__(self, conviso_graphql_client):
@@ -402,57 +468,3 @@ class LogAstError(object):
         )
 
         return success
-
-class ContainerApi(object):
-    """ Class for container finding file resources """
-
-    def __init__(self, conviso_graphql_client):
-        self._conviso_graphql_client = conviso_graphql_client
-
-    def send_container_file(self, company_id, asset_id, file_path, api_key):
-        """ Send Container file to Conviso platform """
-
-        url = self._conviso_graphql_client.url
-
-        operations = {
-            "query": mutations.IMPORT_CONTAINER,
-            "variables": {
-                "companyId": company_id,
-                "assetId": asset_id,
-                "file": None
-            }
-        }
-
-        file_map = {
-            "0": ["variables.file"]
-        }
-
-        with open(file_path, 'rb') as container_file:
-            files = {
-                'operations': (None, json.dumps(operations), 'application/json'),
-                'map': (None, json.dumps(file_map), 'application/json'),
-                '0': (file_path, container_file, 'application/octet-stream')
-            }
-
-            headers = {
-                'x-api-key': f'{api_key}',
-                "User-Agent": "AST:{version}".format(version=__version__)
-            }
-
-            response = requests.post(url, files=files, headers=headers)
-
-            response.raise_for_status()
-            json_response = response.json()
-
-            self._handle_graphql_errors(json_response)
-
-            return json_response.get('data')
-
-    @staticmethod
-    def _handle_graphql_errors(json_response):
-        """ Handle GraphQL errors """
-        if 'errors' in json_response:
-            errors = json_response['errors']
-            for error in errors:
-                print(f"GraphQL Error: {error.get('message')}")
-            raise Exception("GraphQL request failed with errors.")

{conviso-cli-2.3.0.dev3 → conviso-cli-2.3.0.dev5}/convisoappsec/flow/graphql_api/v1/schemas/mutations/__init__.py

@@ -171,3 +171,27 @@ mutation (
   }
 }
 """
+
+IMPORT_FINDINGS = """
+mutation (
+  $file: Upload!,
+  $assetId: ID!,
+  $companyId: ID!
+  $vulnerabilityTypes: [Issue!]!
+  $deployId: ID
+  $commitRef: String
+) {
+  importAstFindingsFile(
+    input: {
+      file: $file,
+      assetId: $assetId,
+      companyId: $companyId,
+      vulnerabilityTypes: $vulnerabilityTypes,
+      deployId: $deployId,
+      commitRef: $commitRef
+    }
+  ) {
+    success
+  }
+}
+"""

{conviso-cli-2.3.0.dev3 → conviso-cli-2.3.0.dev5}/convisoappsec/flowcli/ast/entrypoint.py

@@ -163,6 +163,9 @@ def perform_deploy(context, flow_context, prepared_context):
     try:
         LOGGER.info("Creating new deploy...")
         created_deploy = values.invoke(context)
+
+        if created_deploy is None:
+            raise CreateDeployException("Deploy not created.")
         try:
             conviso_api = flow_context.create_conviso_graphql_client()
             api_key = flow_context.key
@@ -227,10 +230,7 @@ def perform_deploy(context, flow_context, prepared_context):
                 ast_log=full_trace
             )
 
-        if created_deploy:
-            return created_deploy
-
-        raise CreateDeployException("Deploy not created.")
+        return created_deploy
 
     except CreateDeployException as err:
         raise PerformDeployException(err)

{conviso-cli-2.3.0.dev3 → conviso-cli-2.3.0.dev5}/convisoappsec/flowcli/container/run.py

@@ -91,8 +91,8 @@ def run(
             debug_message(f"Context after being prepared: {prepared_context.params}")
 
         params_to_copy = [
-            'asset_id', 'send_to_flow', 'asset_name', 'vulnerability_auto_close', 'project_code', 'repository_dir',
-            'company_id'
+            'asset_id', 'send_to_flow', 'asset_name', 'vulnerability_auto_close',
+            'project_code', 'repository_dir', 'company_id'
         ]
 
         for param_name in params_to_copy:

{conviso-cli-2.3.0.dev3 → conviso-cli-2.3.0.dev5}/convisoappsec/flowcli/entrypoint.py

@@ -23,15 +23,6 @@ from .container import container
 
 click_log.basic_config(LOGGER)
 
-
-def api_url_autocompletion(*args, **kargs):
-    return [
-        api.PRODUCTION_API_URL,
-        api.STAGING_API_URL,
-        api.DEVELOPMENT_API_URL,
-    ]
-
-
 @click.group()
 @click_log.simple_verbosity_option(LOGGER, '-l', '--verbosity')
 @click.option(
@@ -48,7 +39,6 @@ def api_url_autocompletion(*args, **kargs):
     envvar=("CONVISO_API_URL", "FLOW_API_URL"),
     default=api.DEFAULT_API_URL,
     show_default=True,
-    autocompletion=api_url_autocompletion,
     help='The api url to access Conviso Platform resources.',
 )
 @click.option(

conviso-cli-2.3.0.dev5/convisoappsec/flowcli/environment_checker.py

@@ -0,0 +1,45 @@
+import os
+import platform
+import subprocess
+
+class EnvironmentChecker:
+    """
+    A class to check the system environment for required software and services.
+    """
+
+    def __init__(self):
+        self.checks = {}
+
+    def _run_command(self, command, check_running=False):
+        """Helper function to run shell commands and capture output/errors."""
+        try:
+            process = subprocess.run(command, capture_output=True, text=True, check=not check_running)
+            if check_running:
+                return process.returncode == 0, "", ""
+            return process.returncode == 0, process.stdout.strip(), process.stderr.strip()
+        except FileNotFoundError:
+            return False, "", "Command not found"
+        except subprocess.CalledProcessError as e:
+            return False, "", e.stderr.strip()
+
+    def check_docker(self):
+        """Checks if Docker is installed and the daemon is running."""
+        installed, _, _ = self._run_command(["docker", "--version"])
+        running, _, _ = self._run_command(["docker", "info"], check_running=True)
+        self.checks["docker_installed"] = installed
+        self.checks["docker_running"] = running
+        return installed and running
+
+    def run_all_checks(self):
+        """Runs all checks and prints a summary."""
+        self.check_docker()
+
+        print("Environment Check Summary:")
+        for check, result in self.checks.items():
+            if "version" in check:
+                print(f"- {check.replace('_',' ').title()}: {result}")
+            else:
+                status = "OK" if result else "FAILED"
+                print(f"- {check.replace('_',' ').title()}: {status}")
+
+        return all(self.checks.values())

{conviso-cli-2.3.0.dev3 → conviso-cli-2.3.0.dev5}/convisoappsec/flowcli/iac/run.py

@@ -109,13 +109,11 @@ def run(context, flow_context, project_code, asset_id, company_id, repository_di
       This command will perform IAC analysis at the source code. The analysis
       results can be reported or not to flow application.
     """
-    context.params['company_id'] = company_id if company_id is not None else None
-
     if not from_ast:
         prepared_context = RequirementsVerifier.prepare_context(clone(context))
 
         params_to_copy = [
-            'project_code', 'asset_id', 'repository_dir', 'send_to_flow',
+            'project_code', 'asset_id', 'company_id', 'repository_dir', 'send_to_flow',
             'deploy_id', 'scanner_timeout', 'parallel_workers', 'experimental'
         ]
 

{conviso-cli-2.3.0.dev3 → conviso-cli-2.3.0.dev5}/convisoappsec/flowcli/requirements_verifier.py

@@ -92,6 +92,8 @@ class RequirementsVerifier:
     @staticmethod
     def create_asset_with_custom_name(context, company_id, asset_name):
         """ Create an asset with custom name pass with a custom name """
+        if not asset_name or not asset_name.strip():  # Check for None or blank string
+            raise ValueError("Asset name cannot be None or blank.")
 
         # we need to verify if already has an asset with the name provided.
         # because graphql will return an error if already has.