cycode 2.0.1.dev1__py3-none-any.whl → 2.0.1.dev3__py3-none-any.whl

cycode/__init__.py

@@ -1 +1 @@
-__version__ = '2.0.1.dev1'  # DON'T TOUCH. Placeholder. Will be filled automatically on poetry build from Git Tag
+__version__ = '2.0.1.dev3'  # DON'T TOUCH. Placeholder. Will be filled automatically on poetry build from Git Tag

cycode/cli/commands/scan/code_scanner.py

@@ -713,20 +713,26 @@ def exclude_irrelevant_detections(
 ) -> List[Detection]:
     relevant_detections = _exclude_detections_by_exclusions_configuration(detections, scan_type)
     relevant_detections = _exclude_detections_by_scan_type(relevant_detections, scan_type, command_scan_type)
-    return _exclude_detections_by_severity(relevant_detections, scan_type, severity_threshold)
+    return _exclude_detections_by_severity(relevant_detections, severity_threshold)
 
 
-def _exclude_detections_by_severity(
-    detections: List[Detection], scan_type: str, severity_threshold: str
-) -> List[Detection]:
-    if scan_type != consts.SCA_SCAN_TYPE or severity_threshold is None:
+def _exclude_detections_by_severity(detections: List[Detection], severity_threshold: str) -> List[Detection]:
+    if severity_threshold is None:
         return detections
 
     relevant_detections = []
     for detection in detections:
         severity = detection.detection_details.get('advisory_severity')
+        if not severity:
+            severity = detection.severity
+
         if _does_severity_match_severity_threshold(severity, severity_threshold):
             relevant_detections.append(detection)
+        else:
+            logger.debug(
+                'Going to ignore violations because they are below the severity threshold, %s',
+                {'severity': severity, 'severity_threshold': severity_threshold},
+            )
 
     return relevant_detections
 
@@ -861,10 +867,11 @@ def _generate_unique_id() -> UUID:
 
 def _does_severity_match_severity_threshold(severity: str, severity_threshold: str) -> bool:
     detection_severity_value = Severity.try_get_value(severity)
-    if detection_severity_value is None:
+    severity_threshold_value = Severity.try_get_value(severity_threshold)
+    if detection_severity_value is None or severity_threshold_value is None:
         return True
 
-    return detection_severity_value >= Severity.try_get_value(severity_threshold)
+    return detection_severity_value >= severity_threshold_value
 
 
 def _get_scan_result(

cycode/cli/commands/scan/scan_command.py

@@ -66,7 +66,7 @@ from cycode.cli.utils.get_api_client import get_scan_cycode_client
 @click.option(
     '--severity-threshold',
     default=None,
-    help='Show violations only for the specified level or higher (supported for SCA scan types only).',
+    help='Show violations only for the specified level or higher.',
     type=click.Choice([e.name for e in Severity]),
     required=False,
 )

cycode/cli/files_collector/sca/ruby/restore_ruby_dependencies.py

@@ -0,0 +1,25 @@
+import os
+from typing import List, Optional
+
+from cycode.cli.files_collector.sca.base_restore_dependencies import BaseRestoreDependencies
+from cycode.cli.models import Document
+
+RUBY_PROJECT_FILE_EXTENSIONS = ['Gemfile']
+RUBY_LOCK_FILE_NAME = 'Gemfile.lock'
+
+
+class RestoreRubyDependencies(BaseRestoreDependencies):
+    def is_project(self, document: Document) -> bool:
+        return any(document.path.endswith(ext) for ext in RUBY_PROJECT_FILE_EXTENSIONS)
+
+    def get_commands(self, manifest_file_path: str) -> List[List[str]]:
+        return [['bundle', '--quiet']]
+
+    def get_lock_file_name(self) -> str:
+        return RUBY_LOCK_FILE_NAME
+
+    def verify_restore_file_already_exist(self, restore_file_path: str) -> bool:
+        return os.path.isfile(restore_file_path)
+
+    def get_working_directory(self, document: Document) -> Optional[str]:
+        return os.path.dirname(document.absolute_path)

cycode/cli/files_collector/sca/sca_code_scanner.py

@@ -10,6 +10,7 @@ from cycode.cli.files_collector.sca.maven.restore_gradle_dependencies import Res
 from cycode.cli.files_collector.sca.maven.restore_maven_dependencies import RestoreMavenDependencies
 from cycode.cli.files_collector.sca.npm.restore_npm_dependencies import RestoreNpmDependencies
 from cycode.cli.files_collector.sca.nuget.restore_nuget_dependencies import RestoreNugetDependencies
+from cycode.cli.files_collector.sca.ruby.restore_ruby_dependencies import RestoreRubyDependencies
 from cycode.cli.files_collector.sca.sbt.restore_sbt_dependencies import RestoreSbtDependencies
 from cycode.cli.models import Document
 from cycode.cli.utils.git_proxy import git_proxy
@@ -138,6 +139,7 @@ def restore_handlers(context: click.Context, is_git_diff: bool) -> List[BaseRest
         RestoreGoDependencies(context, is_git_diff, BUILD_DEP_TREE_TIMEOUT),
         RestoreNugetDependencies(context, is_git_diff, BUILD_DEP_TREE_TIMEOUT),
         RestoreNpmDependencies(context, is_git_diff, BUILD_DEP_TREE_TIMEOUT),
+        RestoreRubyDependencies(context, is_git_diff, BUILD_DEP_TREE_TIMEOUT),
     ]
 
 

cycode/cli/models.py

@@ -43,6 +43,7 @@ class Severity(Enum):
 
     @staticmethod
     def try_get_value(name: str) -> any:
+        name = name.upper()
         if name not in Severity.__members__:
             return None
 

{cycode-2.0.1.dev1.dist-info → cycode-2.0.1.dev3.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: cycode
-Version: 2.0.1.dev1
+Version: 2.0.1.dev3
 Summary: Boost security in your dev lifecycle via SAST, SCA, Secrets & IaC scanning.
 Home-page: https://github.com/cycodehq/cycode-cli
 License: MIT
@@ -327,7 +327,7 @@ The Cycode CLI application offers several types of scans so that you can choose
 | `--client-id TEXT`                                         | Specify a Cycode client ID for this specific scan execution                                                                                                                                                                                             |
 | `--show-secret BOOLEAN`                                    | Show secrets in plain text. See [Show/Hide Secrets](#showhide-secrets) section for more details.                                                                                                                                                        |
 | `--soft-fail BOOLEAN`                                      | Run scan without failing, always return a non-error status code. See [Soft Fail](#soft-fail) section for more details.                                                                                                                                  |
-| `--severity-threshold [INFO\|LOW\|MEDIUM\|HIGH\|CRITICAL]` | Show only violations at the specified level or higher (supported for the SCA scan type only).                                                                                                                                                           |
+| `--severity-threshold [INFO\|LOW\|MEDIUM\|HIGH\|CRITICAL]` | Show only violations at the specified level or higher.                                                                                                                                                                                                  |
 | `--sca-scan`                                               | Specify the SCA scan you wish to execute (`package-vulnerabilities`/`license-compliance`). The default is both                                                                                                                                          |
 | `--monitor`                                                | When specified, the scan results will be recorded in the knowledge graph. Please note that when working in `monitor` mode, the knowledge graph will not be updated as a result of SCM events (Push, Repo creation). (Supported for SCA scan type only). |
 | `--report`                                                 | When specified, a violations report will be generated. A URL link to the report will be printed as an output to the command execution                                                                                                                   |

{cycode-2.0.1.dev1.dist-info → cycode-2.0.1.dev3.dist-info}/RECORD

@@ -1,4 +1,4 @@
-cycode/__init__.py,sha256=gyg84mcCrIaPIKLkXSKyb_3V373s044FebAsbSg659s,114
+cycode/__init__.py,sha256=WIKoL2XY1z5jcr2GXtp1ikkC7nZTKxUFKUuFktIudZs,114
 cycode/cli/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 cycode/cli/commands/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 cycode/cli/commands/auth/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
@@ -21,7 +21,7 @@ cycode/cli/commands/report/sbom/repository_url/repository_url_command.py,sha256=
 cycode/cli/commands/report/sbom/sbom_command.py,sha256=akjbxFcArXW6tnGBXJWTpPjMr28pNmJZGLD7UxKeW6Y,2431
 cycode/cli/commands/report/sbom/sbom_report_file.py,sha256=fr3HMSr6lppeI3OgYADDWlWD8ij2edN1gmpUOPmeTN0,1533
 cycode/cli/commands/scan/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-cycode/cli/commands/scan/code_scanner.py,sha256=BJ-UedY_A2VXZv4tV0pXvlC4gswg7OLBOPeNvVbkLeU,39858
+cycode/cli/commands/scan/code_scanner.py,sha256=83AwOIP4duebolkuzMR4dXMwTzzI7YnRYRACJeaY0ng,40180
 cycode/cli/commands/scan/commit_history/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 cycode/cli/commands/scan/commit_history/commit_history_command.py,sha256=Yr1MAcrTYvYxdjAFBuvovWs3B5wBFv-N4lZRox_gXDE,1062
 cycode/cli/commands/scan/path/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
@@ -35,7 +35,7 @@ cycode/cli/commands/scan/repository/repository_command.py,sha256=xH6PPXweenHOll7
 cycode/cli/commands/scan/scan_ci/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 cycode/cli/commands/scan/scan_ci/ci_integrations.py,sha256=bbttv1pI8C2jQWtvt_mzypFEVi2iTI9TV0xfeIgrs5M,1588
 cycode/cli/commands/scan/scan_ci/scan_ci_command.py,sha256=wTjNt06gWgNoehg1ueHf9eAXseGE8pUb6wL1_vrIU5w,622
-cycode/cli/commands/scan/scan_command.py,sha256=n7QJ5vRHO_fXfUKZt8ndq2BAkweK-OJnunD8MPYAYuE,5192
+cycode/cli/commands/scan/scan_command.py,sha256=NaTxREAbsWUsY-TTHt62kiIVM0_qgNwb_LDKFCrLgFg,5156
 cycode/cli/commands/status/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 cycode/cli/commands/status/status_command.py,sha256=DlIHHLv7CgmlXd6Kn9p26VF0TfRUmhGKLFc3FUEPQOo,4295
 cycode/cli/commands/version/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
@@ -66,12 +66,14 @@ cycode/cli/files_collector/sca/npm/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQe
 cycode/cli/files_collector/sca/npm/restore_npm_dependencies.py,sha256=-HSuuRNyGZRCVL3GCm0WXGoE7ovTHCGJXr7nnzVjwko,1428
 cycode/cli/files_collector/sca/nuget/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 cycode/cli/files_collector/sca/nuget/restore_nuget_dependencies.py,sha256=sbtNnbg-K3-9HsC59YXBxcX3EGZNOAMS8H-6SKYyPpk,1029
+cycode/cli/files_collector/sca/ruby/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+cycode/cli/files_collector/sca/ruby/restore_ruby_dependencies.py,sha256=AaQhRmd9Hsvr5t9MIZ4baKpV6Q5HrIHVe0XnL_MPaMk,908
 cycode/cli/files_collector/sca/sbt/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 cycode/cli/files_collector/sca/sbt/restore_sbt_dependencies.py,sha256=hlRoQWEFbap2UYiVdK6HOeWi0Zn3l2Az2A4yWdnnyI0,923
-cycode/cli/files_collector/sca/sca_code_scanner.py,sha256=GJR5f13hD-KH6WsaYNrwnnQoduxbFMW226BjJpSXFJQ,6968
+cycode/cli/files_collector/sca/sca_code_scanner.py,sha256=E5cIBdjwrL2Exy7U6r9HiZX-ex86QeX7LCkDK2km2Sc,7145
 cycode/cli/files_collector/zip_documents.py,sha256=64ovgvzG7399bPWIg_g0T3KebSuFpRXZaxBTeNdJ17k,1873
 cycode/cli/main.py,sha256=TWZxfs7nu-zSm1YU4H801T_u16xeV3S-gZcb4gSSD24,387
-cycode/cli/models.py,sha256=AlrXIVwggkiRmQVme33RohNP_fGFIAp0DVlzzsB2eQA,2273
+cycode/cli/models.py,sha256=y869G4jKPy81SPX9L3VM7gk7Kydw8XeejAGd4DJA-cw,2301
 cycode/cli/printers/__init__.py,sha256=ALwAXSZy2lNXWC3NfCIxf8K0F6eFrbZa9PLZwPINi5E,93
 cycode/cli/printers/console_printer.py,sha256=EmztKipDc8e9SE16b7ZCpPDN5FH2j6lksY82j2dz_DY,2496
 cycode/cli/printers/json_printer.py,sha256=r6SMAi16xFwpAB-q-tSHi1yrF3RQy_ZWeU4ZTXhRfLs,2511
@@ -118,8 +120,8 @@ cycode/cyclient/models.py,sha256=5ka8hfIoO1wJMcaUXogdiaSJCgKdcwXIVIH-dNhIS9E,142
 cycode/cyclient/report_client.py,sha256=sNLOm64oaONz-TUBs6fpFfbb7RfxALPS6YBqadMo2-8,3971
 cycode/cyclient/scan_client.py,sha256=jISrjksprxGm0aKEqIS8hIhIHW86WBi5HfTiDTQjDg0,13879
 cycode/cyclient/scan_config_base.py,sha256=sM69JOIt6Y0zFT-kp0KXSBjG8ViKl2Y2y6Fh95-57io,1642
-cycode-2.0.1.dev1.dist-info/LICENCE,sha256=2Wx4N6mD_4xB7-E3hPkZ3MPhpJy__k_I8MaCSO-PDRo,1068
-cycode-2.0.1.dev1.dist-info/METADATA,sha256=fB0PxWSe1_yrg5CimE0tBHy9eCrycofVEBQUtvX8Q_0,45698
-cycode-2.0.1.dev1.dist-info/WHEEL,sha256=sP946D7jFCHeNz5Iq4fL4Lu-PrWrFsgfLXbbkciIZwg,88
-cycode-2.0.1.dev1.dist-info/entry_points.txt,sha256=GKZlS6LtUdABDPd7-o9bwNSI5gYQnyA3qGrFFQKt3Vc,51
-cycode-2.0.1.dev1.dist-info/RECORD,,
+cycode-2.0.1.dev3.dist-info/LICENCE,sha256=2Wx4N6mD_4xB7-E3hPkZ3MPhpJy__k_I8MaCSO-PDRo,1068
+cycode-2.0.1.dev3.dist-info/METADATA,sha256=pPMkp5MjYmDoHJ6OfpeiyPx8xWfJpjDLfJx-pwg1vB0,45698
+cycode-2.0.1.dev3.dist-info/WHEEL,sha256=sP946D7jFCHeNz5Iq4fL4Lu-PrWrFsgfLXbbkciIZwg,88
+cycode-2.0.1.dev3.dist-info/entry_points.txt,sha256=GKZlS6LtUdABDPd7-o9bwNSI5gYQnyA3qGrFFQKt3Vc,51
+cycode-2.0.1.dev3.dist-info/RECORD,,