conviso-cli 2.7.5__py3-none-any.whl → 2.7.7rc0__py3-none-any.whl

{conviso_cli-2.7.5.dist-info → conviso_cli-2.7.7rc0.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.2
 Name: conviso-cli
-Version: 2.7.5
+Version: 2.7.7rc0
 Maintainer: Conviso
 Maintainer-email: development@convisoappsec.com
 Project-URL: Source, https://github.com/convisoappsec/convisocli/

{conviso_cli-2.7.5.dist-info → conviso_cli-2.7.7rc0.dist-info}/RECORD

@@ -1,9 +1,9 @@
-conviso_cli-2.7.5.data/scripts/flow_bash_completer.sh,sha256=9q3HPuXq_FCUUV3IFGcOefsOLhPWatUkLY7txiBM7Uo,624
-conviso_cli-2.7.5.data/scripts/flow_fish_completer.fish,sha256=-wiuarawDJkms5N-rh99brIOzhy-ktsM1mi1ohQ3Mtg,147
-conviso_cli-2.7.5.data/scripts/flow_zsh_completer.sh,sha256=cAtTDGUs5sY4NAA7AjscmLWj0dbNZ9iZhLP6BTz6dEQ,844
+conviso_cli-2.7.7rc0.data/scripts/flow_bash_completer.sh,sha256=9q3HPuXq_FCUUV3IFGcOefsOLhPWatUkLY7txiBM7Uo,624
+conviso_cli-2.7.7rc0.data/scripts/flow_fish_completer.fish,sha256=-wiuarawDJkms5N-rh99brIOzhy-ktsM1mi1ohQ3Mtg,147
+conviso_cli-2.7.7rc0.data/scripts/flow_zsh_completer.sh,sha256=cAtTDGUs5sY4NAA7AjscmLWj0dbNZ9iZhLP6BTz6dEQ,844
 convisoappsec/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 convisoappsec/logger.py,sha256=aTNebqOau9nEadBySMTXtnbGkOkJ_q2kyFlX1mzizeg,1132
-convisoappsec/version.py,sha256=QEhHk7rIZjtv27FCBxLyNREA0fJeFCe9Yo7tvWc3xn0,22
+convisoappsec/version.py,sha256=St8S_YhrpnoUcQiwYuaMF9JuGvfQKqPNtIsj9dWcRQ4,27
 convisoappsec/common/__init__.py,sha256=QN7tV2C_jhTiWUrJHv2jbeq6ae3MssgLUWpQZwe8O2s,105
 convisoappsec/common/box.py,sha256=WTtPF3YWxkcdblPmFTzrzQlPPPUwVsDt2zoi6xFMy1U,7561
 convisoappsec/common/cleaner.py,sha256=Iy8BWCXj_v51oovcYzI_uhaJzLL-fCUyDxrbBglfwEs,2680
@@ -23,7 +23,7 @@ convisoappsec/flow/version_control_system_adapter.py,sha256=glkG2pEIPSwBEFAZPHlq
 convisoappsec/flow/graphql_api/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 convisoappsec/flow/graphql_api/beta/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 convisoappsec/flow/graphql_api/beta/client.py,sha256=PPisDsUjFriDCT2EpHNPvw7bD_qYwGArFErsWbpBgIk,502
-convisoappsec/flow/graphql_api/beta/resources_api.py,sha256=BKGVamCObXMxgK2ZVJLpUigwX7TNCBWyG9Mpti550wU,4339
+convisoappsec/flow/graphql_api/beta/resources_api.py,sha256=lCJSFNJrHqO-OyLgNPTPaY7QdwQg9xWN5SZbPREStSs,4344
 convisoappsec/flow/graphql_api/beta/models/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 convisoappsec/flow/graphql_api/beta/models/issues/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 convisoappsec/flow/graphql_api/beta/models/issues/container.py,sha256=-XJ5aA1ixd-QT-yNJwNdwxds_CkakEQDQxwbxFDiTj8,2392
@@ -35,15 +35,15 @@ convisoappsec/flow/graphql_api/beta/schemas/__init__.py,sha256=47DEQpj8HBSa-_TIm
 convisoappsec/flow/graphql_api/beta/schemas/mutations/__init__.py,sha256=zD9sJLO23bpMJn3NTY8C0_UAYEsnezKbldant_VQxoA,1119
 convisoappsec/flow/graphql_api/beta/schemas/resolvers/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 convisoappsec/flow/graphql_api/v1/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-convisoappsec/flow/graphql_api/v1/client.py,sha256=bhtpYRWFiW8bvxScUwYKv7HamWAqNx_uckFDmrP42Po,1197
-convisoappsec/flow/graphql_api/v1/resources_api.py,sha256=aW3B9rxcX6tnduiwLiuZrDkV1UQPCj9PU5dyfZCKzIE,14887
+convisoappsec/flow/graphql_api/v1/client.py,sha256=IzmDdBdy5fSZzKqm1Ic9xEnI16WuDuyOcnm7wJ-NV3c,1308
+convisoappsec/flow/graphql_api/v1/resources_api.py,sha256=c8ujiXcUjZlk3vJSaMRIIvEOGe4kxXln01qRZYksxCg,15632
 convisoappsec/flow/graphql_api/v1/models/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 convisoappsec/flow/graphql_api/v1/models/asset.py,sha256=rhHgQKXaRheksCSc8neMWQwd-cKB-noPpeO423nKFUQ,430
 convisoappsec/flow/graphql_api/v1/models/issues.py,sha256=ZAM_aPwj20I7cApX1leCDVI8cX5LhcKAY1vkesNI_Ak,511
 convisoappsec/flow/graphql_api/v1/models/project.py,sha256=CDZlufsT-_iQIOgpOPAtdmcv0JvHWFd6TjcDIAj6w7c,972
 convisoappsec/flow/graphql_api/v1/schemas/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 convisoappsec/flow/graphql_api/v1/schemas/mutations/__init__.py,sha256=R9LgniQyj694h1MD7cn1-HJRDjI4PLiOrCmsqjp16ho,3251
-convisoappsec/flow/graphql_api/v1/schemas/resolvers/__init__.py,sha256=2jAgzA-8te6HyyV8RVAx0BnLDeZhFulZynbxm5JR8Sc,2713
+convisoappsec/flow/graphql_api/v1/schemas/resolvers/__init__.py,sha256=ip5JO_EdDPzyjifHXfjlJTlpPs901QN-T8_Oo5DMtbE,3025
 convisoappsec/flow/util/__init__.py,sha256=32E3AbPrBf0stKOzCIvz7BeWtBjAScIt7FNyERjN-p4,99
 convisoappsec/flow/util/ci_provider.py,sha256=VYDESwNFbtrRcWDtTEb8tYDN5qbnLksmQI_ntsciJ4I,2093
 convisoappsec/flow/util/source_code_compressor.py,sha256=b2iA8Exf8wVbxR1mnvwTbruDjdpYyVloUmSlyYLSJQU,508
@@ -99,29 +99,29 @@ convisoappsec/flowcli/findings/import_sarif/entrypoint.py,sha256=MIHi9ZWU2Jn2o7o
 convisoappsec/flowcli/iac/__init__.py,sha256=a3IZzSKpm987fMEliTECDeXO_Eduk7eg-aQzmaWvUXQ,47
 convisoappsec/flowcli/iac/dry_run.py,sha256=xvC0Wb2Sxl37yEjFaFMGcRvLJ4Q8evrNQoUXuahHtCg,2990
 convisoappsec/flowcli/iac/entrypoint.py,sha256=WMlSwHd7cLxhUfy643OquQhUHEy4yNf7s0K5bkrXYno,295
-convisoappsec/flowcli/iac/run.py,sha256=q-bndWtZb9xYE9U_4aMHcZ3WtgHyXQBqUkjHTk-hdwI,11071
+convisoappsec/flowcli/iac/run.py,sha256=H3zEYK1tRjt9unIUGWiiZ540YjcLAxdJrbX1QK7y_us,11199
 convisoappsec/flowcli/sast/__init__.py,sha256=S4O78eZGhgpT2lZY3GSUIUTQJB5a62uAVirEqbf4EQY,49
 convisoappsec/flowcli/sast/dry_run.py,sha256=lUi9LCfBlBjcAYm4v_Etl3raPZcTHVr5fVxGnB1eVSM,5787
 convisoappsec/flowcli/sast/entrypoint.py,sha256=XMu8WpZNwSujWOwbHUThk3JK_WtRWHau9kYD2ttjULY,300
 convisoappsec/flowcli/sast/run.py,sha256=7uX6K1VLASU8RnoCKNYIIqXSsNkF4JQ8OKhAG2CKjuI,16353
 convisoappsec/flowcli/sbom/__init__.py,sha256=qzwiPWniK41Y41XvJJhxtRZguHrSSenb57lhy64KnSc,49
 convisoappsec/flowcli/sbom/entrypoint.py,sha256=ax2WL5BtCu24NeZYe6zzCVZ2ujlviXkvtY7PZihlz3s,263
-convisoappsec/flowcli/sbom/generate.py,sha256=Oke4JX4vARqpsMlGC2cPye_LMapIMRDyZv2W14hoD8g,7170
+convisoappsec/flowcli/sbom/generate.py,sha256=YEhl4fVRXRscSApTMkTynyka3ygsVgJD7vhUHipUp18,7190
 convisoappsec/flowcli/sca/__init__.py,sha256=xnVoxwbpe4LrEemmWJ6svr3zdpo9S4kEIvM4HVRsLX8,47
 convisoappsec/flowcli/sca/dry_run.py,sha256=fZ_tgc1k8Mn1JMznFWyi_CExR-gpLHLHwQ2erNldnHY,3438
 convisoappsec/flowcli/sca/entrypoint.py,sha256=yEAANSG2fcD3HctUWebhx_win3CW-1Q2CO1i-ZIBUCk,295
 convisoappsec/flowcli/sca/run.py,sha256=FWnTHgMgnIRvJSpMIkFcb6YMtvWEjEpKJyXEkjAZpA4,16725
 convisoappsec/flowcli/vulnerability/__init__.py,sha256=c18E0J1KfZBBqpv8XGxF5dv7dxCDquFkjGkdnvFDSYI,67
-convisoappsec/flowcli/vulnerability/assert_security_rules.py,sha256=j7VcondMeZSRxWz118aWS9qUSGdvsq4Mg-_9UXp8Dyw,6075
-convisoappsec/flowcli/vulnerability/container_vulnerability_manager.py,sha256=EkJhbUm1DTP14mIg_ZC4SKFSlvTtfPpSpNAMWPkwrsc,6897
+convisoappsec/flowcli/vulnerability/assert_security_rules.py,sha256=y_56aAfcuzt8nfMTXl5i8MLE6oqMrAK0UGk-gY6el7I,8154
+convisoappsec/flowcli/vulnerability/container_vulnerability_manager.py,sha256=Xos_7MHg2X1ZYcW0CKFsKWw5hZ7rVj5l_6aRcIVyytk,6952
 convisoappsec/flowcli/vulnerability/entrypoint.py,sha256=WsQkEJSbb9CwPm_deUtata9omEYYcaZnssYKTAybtjA,386
 convisoappsec/flowcli/vulnerability/rules_schema.json,sha256=OBkj9RMXltGoJYsyPqOsrJDfcyrQDlQHk9b5i9rMhoc,948
 convisoappsec/flowcli/vulnerability/run.py,sha256=6flmvr55cKxj-duX3w4PAFwJgC5AJ0NYJ9Zk3FZHFII,17144
 convisoappsec/sast/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 convisoappsec/sast/decision.py,sha256=d7dcNr9yZMzyccpFS_peAmDo0ZtfsE1qXDdYrvCux2U,1025
 convisoappsec/sast/sastbox.py,sha256=hXZLiYh_F3f6yd1ydPYVOMKg-tNOQOZiBvKmWyedagI,11031
-conviso_cli-2.7.5.dist-info/METADATA,sha256=uFke607R2BjTbEjXfQ0DRSf9uUfVQgj9vaxDLenbqDk,2370
-conviso_cli-2.7.5.dist-info/WHEEL,sha256=In9FTNxeP60KnTkGw7wk6mJPYd_dQSjEZmXdBdMCI-8,91
-conviso_cli-2.7.5.dist-info/entry_points.txt,sha256=0IvamweR_V0uG4O5Fo9NpVHTHfpZRwUE9kn7KEVZ668,109
-conviso_cli-2.7.5.dist-info/top_level.txt,sha256=ju5r0RSCF1HA7m9JOG10jrQS4SnqQEJzl6-YMCxbSl4,14
-conviso_cli-2.7.5.dist-info/RECORD,,
+conviso_cli-2.7.7rc0.dist-info/METADATA,sha256=cXEOIH0XuXpr6BR7m2MgEQyevoTWn8q_grjbhBhHP48,2373
+conviso_cli-2.7.7rc0.dist-info/WHEEL,sha256=In9FTNxeP60KnTkGw7wk6mJPYd_dQSjEZmXdBdMCI-8,91
+conviso_cli-2.7.7rc0.dist-info/entry_points.txt,sha256=0IvamweR_V0uG4O5Fo9NpVHTHfpZRwUE9kn7KEVZ668,109
+conviso_cli-2.7.7rc0.dist-info/top_level.txt,sha256=ju5r0RSCF1HA7m9JOG10jrQS4SnqQEJzl6-YMCxbSl4,14
+conviso_cli-2.7.7rc0.dist-info/RECORD,,

convisoappsec/flow/graphql_api/beta/resources_api.py

@@ -117,7 +117,7 @@ class IssuesAPI(object):
 
         return issues
 
-    def update_issue_status(self, issue_id, status, reason, control_sync_status_id):
+    def update_issue_status(self, issue_id, status, reason, control_sync_status_id=None):
         """ Update issue status on conviso platform """
 
         graphql_variables = {

convisoappsec/flow/graphql_api/v1/client.py

@@ -1,6 +1,6 @@
 from convisoappsec.common.graphql.low_client import GraphQLClient
 from convisoappsec.flow.graphql_api.v1.resources_api import AssetsAPI, CompaniesApi, IssuesApi, DeploysApi, \
-    SbomApi, LogAstError, ContainerApi, ControlSyncStatus
+    SbomApi, LogAstError, ContainerApi, ControlSyncStatus, SecurityGateApi
 
 
 class ConvisoGraphQLClient():
@@ -44,3 +44,7 @@ class ConvisoGraphQLClient():
     @property
     def control_sync_status(self):
         return ControlSyncStatus(self.__low_client)
+
+    @property
+    def security_gate(self):
+        return SecurityGateApi(self.__low_client)

convisoappsec/flow/graphql_api/v1/resources_api.py

@@ -487,3 +487,31 @@ class ControlSyncStatus:
         )
 
         return result
+
+
+class SecurityGateApi(object):
+    """ To operations on Security Gate resources in Conviso Platform. """
+
+    def __init__(self, conviso_graphql_client):
+        self.__conviso_graphql_client = conviso_graphql_client
+
+    def run_security_gate(self, asset_id):
+        """ Execute security gate check for an asset using platform rules """
+
+        graphql_variables = {
+            'assetId': str(asset_id)
+        }
+
+        graphql_body_response = self.__conviso_graphql_client.execute(
+            resolvers.SECURITY_GATE_RUN,
+            graphql_variables
+        )
+
+        expected_path = 'securityGateRun'
+
+        result = jmespath.search(
+            expected_path,
+            graphql_body_response,
+        )
+
+        return result

convisoappsec/flow/graphql_api/v1/schemas/resolvers/__init__.py

@@ -177,4 +177,23 @@ query GetDeploysByAsset(
     }
   }
 }
+"""
+
+SECURITY_GATE_RUN = """
+query SecurityGateRun($assetId: ID!) {
+  securityGateRun(assetId: $assetId) {
+    asset {
+      id
+      name
+    }
+    executionDate
+    reason {
+      low { limit count }
+      medium { limit count }
+      high { limit count }
+      critical { limit count }
+    }
+    status
+  }
+}
 """

convisoappsec/flowcli/iac/run.py

@@ -181,6 +181,8 @@ def deploy_results_to_conviso(
                 except ResponseError as error:
                     if error.code == 'RECORD_NOT_UNIQUE':
                         continue
+                    elif error.code == "Record not found" or "Record not found" in str(error):
+                        continue
                     else:
                         retry_handler = RetryHandler(
                             flow_context=flow_context, company_id=company_id, asset_id=asset_id

convisoappsec/flowcli/sbom/generate.py

@@ -182,7 +182,7 @@ def generate(context, flow_context, asset_id, company_id, repository_dir, send_t
                 stderr=subprocess.DEVNULL
             )
             command = [f"./conviso/syft scan {repository_dir} -o cyclonedx-json={file_name} "
-                       f"--select-catalogers '{','.join(catalogers)}'"]
+                       f"--select-catalogers '{','.join(catalogers)}' --exclude ./conviso"]
 
             subprocess.run(command, shell=True, check=True, capture_output=True)
 

convisoappsec/flowcli/vulnerability/assert_security_rules.py

@@ -43,7 +43,8 @@ click_log.basic_config(logger)
     '--rules-file',
     'rules_file',
     type=click.File('r'),
-    required=True
+    required=False,
+    help="Path to local YAML rules file. If not provided, uses platform-configured rules."
 )
 @click.option(
     '--asset-name',
@@ -66,6 +67,12 @@ def assert_security_rules(
         company_id = company[0]['id']
 
     try:
+        # If no rules file provided, use platform rules (default behavior)
+        if not rules_file:
+            run_platform_security_gate(flow_context, asset_id)
+            return
+
+        # Otherwise use local rules file
         rules = yaml.load(
             rules_file,
             Loader=yaml.Loader
@@ -149,6 +156,60 @@ def tolerated_days_by_severity(rules):
     return days_by_severity
 
 
+def run_platform_security_gate(flow_context, asset_id):
+    """Execute security gate using platform-configured rules."""
+    conviso_api = flow_context.create_conviso_graphql_client()
+
+    click.secho(
+        '💬 Running security gate with platform rules...',
+        bold=True
+    )
+
+    result = conviso_api.security_gate.run_security_gate(asset_id)
+
+    if result is None:
+        raise click.ClickException(
+            'Failed to execute security gate on platform. No result returned.'
+        )
+
+    asset_info = result.get('asset', {})
+    asset_name = asset_info.get('name', 'Unknown')
+    status = result.get('status')
+    reason = result.get('reason', {})
+    execution_date = result.get('executionDate', 'Unknown')
+
+    click.secho(
+        f'💬 Security Gate Result for Asset: {asset_name} (ID: {asset_id})',
+        bold=True
+    )
+    click.echo(f'   Execution Date: {execution_date}')
+    click.echo('')
+
+    # Display severity counts
+    click.secho('   Severity Summary:', bold=True)
+    for severity in ['critical', 'high', 'medium', 'low']:
+        severity_data = reason.get(severity) if reason else None
+        if severity_data is None:
+            click.echo(f'   ⚪ {severity.upper()}: N/A (not configured)')
+            continue
+        limit = severity_data.get('limit', 'N/A')
+        count = severity_data.get('count', 0)
+        status_icon = '❌' if limit != 'N/A' and count > limit else '✅'
+        click.echo(f'   {status_icon} {severity.upper()}: {count}/{limit}')
+
+    click.echo('')
+
+    if status == 'FAIL':
+        raise click.ClickException(
+            f'Security gate FAILED. Vulnerabilities exceed configured limits.'
+        )
+
+    click.secho(
+        f'✅ Security gate PASSED.',
+        bold=True
+    )
+
+
 def __raise_if_gate_locked(response):
     if response['locked']:
         click.secho('💬 Vulnerabilities summary...', bold=True)

convisoappsec/flowcli/vulnerability/container_vulnerability_manager.py

@@ -152,10 +152,11 @@ def fetch_and_merge_conviso_issues(context, flow_context):
 
         total_pages = issues_from_cp['metadata']['totalPages']
         issues_collection = issues_from_cp['collection']
+        valid_sources = ['conviso_scanner', 'conviso_ast']
 
         issues_collection = [
             item for item in issues_collection
-            if item.get('scanSource') == 'conviso_scanner'
+            if item.get('scanSource') in valid_sources
         ]
         container_issues = [
             item for item in issues_collection

convisoappsec/version.py

@@ -1 +1 @@
-__version__ = '2.7.5'
+__version__ = '2.7.7-rc.0'