devsecops-engine-tools 1.10.0__py3-none-any.whl → 1.11.0__py3-none-any.whl

devsecops_engine_tools/engine_core/src/applications/runner_engine_core.py

@@ -77,6 +77,7 @@ def get_inputs_from_cli(args):
         choices=[
             "engine_iac",
             "engine_dast",
+            "engine_code",
             "engine_secret",
             "engine_dependencies",
             "engine_container",
@@ -91,7 +92,7 @@ def get_inputs_from_cli(args):
         "--folder_path",
         type=str,
         required=False,
-        help="Folder Path to scan, only apply engine_iac and engine_dependencies tools",
+        help="Folder Path to scan, only apply engine_iac, engine_code and engine_dependencies tools",
     )
     parser.add_argument(
         "-p",

devsecops_engine_tools/engine_core/src/domain/usecases/handle_scan.py

@@ -4,6 +4,9 @@ from devsecops_engine_tools.engine_sast.engine_iac.src.applications.runner_iac_s
 from devsecops_engine_tools.engine_sast.engine_secret.src.applications.runner_secret_scan import (
     runner_secret_scan,
 )
+from devsecops_engine_tools.engine_sast.engine_code.src.applications.runner_engine_code import (
+    runner_engine_code,
+)
 from devsecops_engine_tools.engine_core.src.domain.model.gateway.vulnerability_management_gateway import (
     VulnerabilityManagementGateway,
 )
@@ -117,6 +120,18 @@ class HandleScan:
             return findings_list, input_core
         elif "engine_dast" in dict_args["tool"]:
             print(MESSAGE_ENABLED)
+        elif "engine_code" in dict_args["tool"]:
+            findings_list, input_core = runner_engine_code(
+                dict_args, config_tool["ENGINE_CODE"]["TOOL"], self.devops_platform_gateway
+            )
+            if (
+                dict_args["use_vulnerability_management"] == "true"
+                and input_core.path_file_results
+            ):
+                self._use_vulnerability_management(
+                    config_tool, input_core, dict_args, secret_tool, env
+                )
+            return findings_list, input_core
         elif "engine_secret" in dict_args["tool"]:
             findings_list, input_core = runner_secret_scan(
                 dict_args,

devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/defect_dojo/defect_dojo.py

@@ -65,6 +65,7 @@ class DefectDojoPlatform(VulnerabilityManagementGateway):
                 "TRIVY": "Trivy Scan",
                 "KUBESCAPE": "Kubescape Scanner",
                 "KICS": "KICS Scanner",
+                "BEARER": "Bearer CLI"
             }
 
             if any(

devsecops_engine_tools/engine_sast/engine_code/src/applications/runner_engine_code.py

@@ -0,0 +1,31 @@
+from devsecops_engine_tools.engine_sast.engine_code.src.infrastructure.entry_points.entry_point_tool import (
+    init_engine_sast_code,
+)
+from devsecops_engine_tools.engine_sast.engine_code.src.infrastructure.driven_adapters.bearer.bearer_tool import (
+    BearerTool
+)
+from devsecops_engine_tools.engine_utilities.git_cli.infrastructure.git_run import (
+    GitRun
+)
+
+def runner_engine_code(dict_args, tool, devops_platform_gateway):
+    try:
+        tool_gateway = None
+        git_gateway = GitRun()
+        if (tool == "BEARER"):
+            tool_gateway = BearerTool()
+
+        return init_engine_sast_code(
+            devops_platform_gateway=devops_platform_gateway,
+            tool_gateway=tool_gateway,
+            dict_args=dict_args,
+            git_gateway=git_gateway,
+            tool=tool,
+        )
+
+    except Exception as e:
+        raise Exception(f"Error engine_code : {str(e)}")
+
+
+if __name__ == "__main__":
+    runner_engine_code()

devsecops_engine_tools/engine_sast/engine_code/src/domain/model/config_tool.py

@@ -0,0 +1,11 @@
+from devsecops_engine_tools.engine_core.src.domain.model.threshold import Threshold
+
+class ConfigTool:
+    def __init__(self, json_data, scope):
+        self.data = json_data
+        self.exclude_folder = self.data["EXCLUDE_FOLDER"]
+        self.ignore_search_pattern = self.data["IGNORE_SEARCH_PATTERN"]
+        self.target_branches = self.data["TARGET_BRANCHES"]
+        self.message_info_engine_code = self.data["MESSAGE_INFO_ENGINE_CODE"]
+        self.threshold = Threshold(self.data["THRESHOLD"])
+        self.scope_pipeline = scope

devsecops_engine_tools/engine_sast/engine_code/src/domain/model/gateways/tool_gateway.py

@@ -0,0 +1,15 @@
+from abc import ABCMeta, abstractmethod
+from devsecops_engine_tools.engine_sast.engine_code.src.domain.model.config_tool import (
+    ConfigTool,
+)
+
+class ToolGateway(metaclass=ABCMeta):
+
+    @abstractmethod
+    def run_tool(self, 
+                 folder_to_scan: str,
+                 pull_request_files: list,
+                 agent_work_folder: str,
+                 repository: str,
+                 config_tool: ConfigTool):
+        "run code scan tool"

devsecops_engine_tools/engine_sast/engine_code/src/domain/usecases/code_scan.py

@@ -0,0 +1,123 @@
+import re
+from devsecops_engine_tools.engine_sast.engine_code.src.domain.model.gateways.tool_gateway import (
+    ToolGateway,
+)
+from devsecops_engine_tools.engine_core.src.domain.model.gateway.devops_platform_gateway import (
+    DevopsPlatformGateway,
+)
+from devsecops_engine_tools.engine_utilities.git_cli.model.gateway.git_gateway import (
+    GitGateway
+)
+from devsecops_engine_tools.engine_sast.engine_code.src.domain.model.config_tool import (
+    ConfigTool,
+)
+from devsecops_engine_tools.engine_core.src.domain.model.exclusions import Exclusions
+from devsecops_engine_tools.engine_core.src.domain.model.input_core import (
+    InputCore
+)
+from devsecops_engine_tools.engine_utilities.utils.logger_info import MyLogger
+from devsecops_engine_tools.engine_utilities import settings
+
+logger = MyLogger.__call__(**settings.SETTING_LOGGER).get_logger()
+
+
+class CodeScan:
+    def __init__(
+        self, tool_gateway: ToolGateway, devops_platform_gateway: DevopsPlatformGateway, git_gateway: GitGateway
+    ):
+        self.tool_gateway = tool_gateway
+        self.devops_platform_gateway = devops_platform_gateway
+        self.git_gateway = git_gateway
+
+    def set_config_tool(self, dict_args):
+        init_config_tool = self.devops_platform_gateway.get_remote_config(
+            dict_args["remote_config_repo"], 
+            "engine_sast/engine_code/ConfigTool.json"
+        )
+        scope_pipeline = self.devops_platform_gateway.get_variable(
+            "pipeline_name"
+        )
+        return ConfigTool(json_data=init_config_tool, scope=scope_pipeline)
+    
+    def get_pull_request_files(self, target_branches):
+        files_pullrequest = self.git_gateway.get_files_pull_request(
+            self.devops_platform_gateway.get_variable("path_directory"),
+            self.devops_platform_gateway.get_variable("target_branch"),
+            target_branches,
+            self.devops_platform_gateway.get_variable("source_branch"),
+            self.devops_platform_gateway.get_variable("access_token"),
+            self.devops_platform_gateway.get_variable("organization"),
+            self.devops_platform_gateway.get_variable("project_name"),
+            self.devops_platform_gateway.get_variable("repository"),
+            self.devops_platform_gateway.get_variable("repository_provider")
+            )
+        return files_pullrequest
+
+    def get_exclusions(self, dict_args, tool):
+        exclusions_data = self.devops_platform_gateway.get_remote_config(
+            dict_args["remote_config_repo"],
+            "engine_sast/engine_code/Exclusions.json"
+        )
+        list_exclusions = []
+        skip_tool = False
+        for pipeline, exclusions in exclusions_data.items():
+            if (pipeline == "All") or (pipeline == self.devops_platform_gateway.get_variable("pipeline_name")):
+                if exclusions.get("SKIP_TOOL", False):
+                    skip_tool = True
+                elif exclusions.get(tool, False):
+                    for exc in exclusions[tool]:
+                        exclusion = Exclusions(
+                            id=exc.get("id", ""),
+                            where=exc.get("where", ""),
+                            create_date=exc.get("create_date", ""),
+                            expired_date=exc.get("expired_date", ""),
+                            severity=exc.get("severity", ""),
+                            hu=exc.get("hu", ""),
+                            reason=exc.get("reason", "Risk acceptance"),
+                        )
+                        list_exclusions.append(exclusion)
+        return list_exclusions, skip_tool
+
+    def apply_exclude_path(self, exclude_folder, ignore_search_pattern, pull_request_file):
+        patterns = ignore_search_pattern
+        patterns.extend([rf"/{re.escape(folder)}//*" for folder in exclude_folder])
+        
+        for pattern in patterns:
+            if re.search(pattern, pull_request_file):
+                return True
+        return False
+
+    def process(self, dict_args, tool):
+        config_tool = self.set_config_tool(dict_args)
+        list_exclusions, skip_tool = self.get_exclusions(dict_args, tool)
+        findings_list, path_file_results = [], ""
+
+        if not skip_tool:
+            pull_request_files = []
+            if not dict_args["folder_path"]:
+                pull_request_files = self.get_pull_request_files(config_tool.target_branches)
+                pull_request_files = [pf for pf in pull_request_files 
+                                      if not self.apply_exclude_path(config_tool.exclude_folder, config_tool.ignore_search_pattern, pf)]
+
+            findings_list, path_file_results = self.tool_gateway.run_tool(
+                dict_args["folder_path"], 
+                pull_request_files,
+                self.devops_platform_gateway.get_variable("path_directory"),
+                self.devops_platform_gateway.get_variable("repository"),
+                config_tool
+            )
+
+        else:
+            print(f"Tool skipped by DevSecOps policy")
+            logger.info(f"Tool skipped by DevSecOps policy")
+
+        input_core = InputCore(
+            totalized_exclusions=list_exclusions,
+            threshold_defined=config_tool.threshold,
+            path_file_results=path_file_results,
+            custom_message_break_build=config_tool.message_info_engine_code,
+            scope_pipeline=config_tool.scope_pipeline,
+            stage_pipeline=self.devops_platform_gateway.get_variable("stage").capitalize(),
+        )
+
+        return findings_list, input_core

devsecops_engine_tools/engine_sast/engine_code/src/infrastructure/driven_adapters/bearer/bearer_deserealizator.py

@@ -0,0 +1,49 @@
+from devsecops_engine_tools.engine_core.src.domain.model.finding import (
+    Category,
+    Finding,
+)
+from datetime import datetime
+from dataclasses import dataclass
+import json
+import re
+
+@dataclass
+class BearerDeserealizator:
+    @classmethod
+    def get_list_finding(cls,
+                         scan_result_path,
+                         agent_work_folder) -> "list[Finding]":
+        findings = []
+        with open(scan_result_path, encoding='utf-8') as arc:
+            try:
+                data = json.load(arc)
+                severity = list(data.keys())
+            except:
+                return findings
+            
+            description_pattern = r"(?<=## Description\n)(.*?)(?=##)"
+
+            for sev in severity:
+                vulnerabilities = data[sev]
+                for vul in vulnerabilities:
+                    description = re.search(description_pattern, vul["description"], flags=re.DOTALL).group(1).strip()
+                    chunks = [description[i : i + 70] for i in range(0, len(description), 70)]
+                    formatted_description = "\n".join(chunks) + "\n"
+
+                    finding = Finding(
+                        id=vul["id"],
+                        cvss="",
+                        where=vul["full_filename"].replace(agent_work_folder, "").replace("/copy_files_bearer", ""),
+                        description=formatted_description,
+                        severity=sev.lower(),
+                        identification_date=datetime.now().strftime("%d%m%Y"),
+                        published_date_cve=None,
+                        module="engine_code",
+                        category=Category.VULNERABILITY,
+                        requirements="",
+                        tool="Bearer"
+                    )
+                    findings.append(finding)
+        
+        return findings
+        

devsecops_engine_tools/engine_sast/engine_code/src/infrastructure/driven_adapters/bearer/bearer_tool.py

@@ -0,0 +1,126 @@
+import subprocess
+import yaml
+import shutil
+import os
+import json
+import concurrent.futures
+from devsecops_engine_tools.engine_sast.engine_code.src.domain.model.gateways.tool_gateway import (
+    ToolGateway,
+)
+from devsecops_engine_tools.engine_sast.engine_code.src.infrastructure.driven_adapters.bearer.bearer_deserealizator import (
+    BearerDeserealizator,
+)
+
+class BearerTool(ToolGateway):
+
+    BEARER_TOOL = "BEARER"
+    MAX_RETRY = 5
+
+    def install_tool(self):        
+        command = f"bearer version"
+        result = subprocess.run(
+            command, 
+            capture_output=True, 
+            shell=True
+        )
+
+        if result.returncode != 0:
+            command = f"curl -sfL https://raw.githubusercontent.com/Bearer/bearer/main/contrib/install.sh | sh -s -- -b /usr/local/bin"
+
+            for num_try in range(self.MAX_RETRY):
+                result = subprocess.run(
+                    command,
+                    stdout=subprocess.PIPE,
+                    stderr=subprocess.PIPE,
+                    shell=True
+                )
+
+                if result.returncode == 0: break
+                if num_try == self.MAX_RETRY - 1: 
+                    raise Exception(f"Error installing Bearer tool.")
+
+    def config_data(self, agent_work_folder):
+        data = {
+            "report": {
+                "output": f"{agent_work_folder}/bearer-scan.json",
+                "format": "json",
+                "report": "security",
+                "severity": "critical,high,medium,low"
+            },
+            "scan": {
+                "disable-domain-resolution": True,
+                "domain-resolution-timeout": "3s",
+                "exit-code": 0,
+                "scanner": ["sast"]
+            },
+        }
+        return data
+
+    def create_config_file(self, agent_work_folder):
+        with open(
+            f"{agent_work_folder}/bearer.yml",
+            "w",
+        ) as file:
+            yaml.dump(self.config_data(agent_work_folder), file, default_flow_style=False)
+            file.close()
+
+    def copy_file(self, pull_file, agent_work_folder, repository, path_to_scan):
+        path = f"{agent_work_folder}/{repository}/{pull_file}"
+        destination_path = os.path.join(path_to_scan, f"{repository}/{pull_file}")
+        os.makedirs(os.path.dirname(destination_path), exist_ok=True)
+        shutil.copy2(path, destination_path)
+
+    def scan_path(self, path, agent_work_folder):
+        command = f"bearer scan {path} --config-file {agent_work_folder}/bearer.yml"
+        subprocess.run(
+            command,
+            check=True,
+            stdout=subprocess.PIPE,
+            stderr=subprocess.PIPE,
+            shell=True
+        )
+        findings = BearerDeserealizator.get_list_finding(
+            f"{agent_work_folder}/bearer-scan.json", agent_work_folder
+        )
+
+        return findings
+
+    def format_scan_file(self, scan_result_path, agent_work_folder):
+        with open(scan_result_path, encoding='utf-8') as arc:
+            try:
+                data = json.load(arc)
+                severity = list(data.keys())
+                for sev in severity:
+                    for vul in data[sev]:
+                        if "snippet" not in vul.keys(): vul["snippet"] = ""
+            except:
+                data = {}
+
+        with open(f"{agent_work_folder}/bearer-scan-vul-man.json", "w") as file:
+            json.dump(data, file)
+            file.close()
+        return f"{agent_work_folder}/bearer-scan-vul-man.json"
+
+    def run_tool(self, folder_to_scan, pull_request_files, agent_work_folder, repository, config_tool):
+        self.install_tool()
+
+        number_threads = config_tool.data[self.BEARER_TOOL]["NUMBER_THREADS"]
+        scan_result_path = f"{agent_work_folder}/bearer-scan.json"
+        self.create_config_file(agent_work_folder)
+
+        if folder_to_scan:
+            path_to_scan = folder_to_scan
+        else:
+            path_to_scan = f"{agent_work_folder}/copy_files_bearer"
+            os.makedirs(path_to_scan, exist_ok=True)
+            with concurrent.futures.ThreadPoolExecutor(max_workers=number_threads) as executor:
+                futures = [
+                    executor.submit(self.copy_file, pull_file, agent_work_folder, repository, path_to_scan)
+                    for pull_file in pull_request_files
+                ]
+                for future in futures: future.result() 
+
+        findings = self.scan_path(path_to_scan, agent_work_folder)
+        scan_result_path_formatted = self.format_scan_file(scan_result_path, agent_work_folder)
+
+        return findings, scan_result_path_formatted

devsecops_engine_tools/engine_sast/engine_code/src/infrastructure/entry_points/entry_point_tool.py

@@ -0,0 +1,6 @@
+from devsecops_engine_tools.engine_sast.engine_code.src.domain.usecases.code_scan import (
+    CodeScan,
+)
+
+def init_engine_sast_code(devops_platform_gateway, tool_gateway, dict_args, git_gateway, tool):
+    return CodeScan(tool_gateway, devops_platform_gateway, git_gateway).process(dict_args, tool)

devsecops_engine_tools/engine_sast/engine_secret/src/applications/runner_secret_scan.py

@@ -7,7 +7,7 @@ from devsecops_engine_tools.engine_sast.engine_secret.src.infrastructure.driven_
 from devsecops_engine_tools.engine_sast.engine_secret.src.infrastructure.driven_adapters.trufflehog.trufflehog_deserealizator import (
     SecretScanDeserealizator
     )
-from devsecops_engine_tools.engine_sast.engine_secret.src.infrastructure.driven_adapters.git_cli.git_run import (
+from devsecops_engine_tools.engine_utilities.git_cli.infrastructure.git_run import (
     GitRun
     )
 

devsecops_engine_tools/engine_sast/engine_secret/src/domain/usecases/secret_scan.py

@@ -11,7 +11,7 @@ from devsecops_engine_tools.engine_sast.engine_secret.src.domain.model.gateway.g
 from devsecops_engine_tools.engine_core.src.domain.model.gateway.devops_platform_gateway import (
     DevopsPlatformGateway,
 )
-from devsecops_engine_tools.engine_sast.engine_secret.src.domain.model.gateway.git_gateway import (
+from devsecops_engine_tools.engine_utilities.git_cli.model.gateway.git_gateway import (
     GitGateway
 )
 

devsecops_engine_tools/engine_utilities/defect_dojo/domain/serializers/import_scan.py

@@ -19,6 +19,7 @@ list_scan_type = [
     "AWS Security Hub Scan",
     "Azure Security Center Recommendations Scan",
     "Bandit Scan",
+    "Bearer CLI",
     "BlackDuck API",
     "Blackduck Component Risk",
     "Blackduck Hub Scan",

devsecops_engine_tools/{engine_sast/engine_secret/src/infrastructure/driven_adapters/git_cli → engine_utilities/git_cli/infrastructure}/git_run.py

@@ -2,7 +2,7 @@ from dataclasses import dataclass
 import os
 import subprocess
 from urllib.parse import quote
-from devsecops_engine_tools.engine_sast.engine_secret.src.domain.model.gateway.git_gateway import GitGateway
+from devsecops_engine_tools.engine_utilities.git_cli.model.gateway.git_gateway import GitGateway
 
 from devsecops_engine_tools.engine_utilities.utils.logger_info import MyLogger
 from devsecops_engine_tools.engine_utilities import settings

devsecops_engine_tools/version.py

@@ -1 +1 @@
-version = '1.10.0'
+version = '1.11.0'

{devsecops_engine_tools-1.10.0.dist-info → devsecops_engine_tools-1.11.0.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: devsecops-engine-tools
-Version: 1.10.0
+Version: 1.11.0
 Summary: Tool for DevSecOps strategy
 Home-page: https://github.com/bancolombia/devsecops-engine-tools
 Author: Bancolombia DevSecOps Team
@@ -67,7 +67,7 @@ pip3 install devsecops-engine-tools
 ### Scan running - flags (CLI)
 
 ```bash
-devsecops-engine-tools --platform_devops ["local","azure","github"] --remote_config_repo ["remote_config_repo"] --tool ["engine_iac", "engine_dast", "engine_secret", "engine_dependencies", "engine_container", "engine_risk"] --folder_path ["Folder path scan engine_iac"] --platform ["k8s","cloudformation","docker", "openapi"] --use_secrets_manager ["false", "true"] --use_vulnerability_management ["false", "true"] --send_metrics ["false", "true"] --token_cmdb ["token_cmdb"] --token_vulnerability_management ["token_vulnerability_management"] --token_engine_container ["token_engine_container"] --token_engine_dependencies ["token_engine_dependencies"] --token_external_checks ["token_external_checks"] --xray_mode ["scan", "audit"] --image_to_scan ["image_to_scan"]
+devsecops-engine-tools --platform_devops ["local","azure","github"] --remote_config_repo ["remote_config_repo"] --tool ["engine_iac", "engine_dast", "engine_secret", "engine_dependencies", "engine_container", "engine_risk", "engine_code"] --folder_path ["Folder path scan engine_iac, engine_code and engine_dependencies"] --platform ["k8s","cloudformation","docker", "openapi"] --use_secrets_manager ["false", "true"] --use_vulnerability_management ["false", "true"] --send_metrics ["false", "true"] --token_cmdb ["token_cmdb"] --token_vulnerability_management ["token_vulnerability_management"] --token_engine_container ["token_engine_container"] --token_engine_dependencies ["token_engine_dependencies"] --token_external_checks ["token_external_checks"] --xray_mode ["scan", "audit"] --image_to_scan ["image_to_scan"]
 ```
 
 ### Structure Remote Config
@@ -85,6 +85,9 @@ devsecops-engine-tools --platform_devops ["local","azure","github"] --remote_con
    ┃   ┗ 📜Exclusions.json
    ┃ ┗ 📂engine_secret
    ┃   ┗ 📜ConfigTool.json
+   ┃ ┗ 📂engine_code
+   ┃   ┗ 📜ConfigTool.json
+   ┃   ┗ 📜Exclusions.json
    ┣ 📂engine_sca
    ┃ ┗ 📂engine_container
    ┃   ┗ 📜ConfigTool.json
@@ -145,6 +148,11 @@ devsecops-engine-tools --platform_devops ["local","azure","github"] --remote_con
     <td><a href="https://jfrog.com/help/r/get-started-with-the-jfrog-platform/jfrog-xray">XRAY</a></td>
     <td>Paid</td>
   </tr>
+  <tr>
+    <td>ENGINE_CODE</td>
+    <td><a href="https://docs.bearer.com/quickstart/">BEARER</a></td>
+    <td>Free</td>
+  </tr>
 </table>
 
 ### Scan running sample (CLI) - Local

{devsecops_engine_tools-1.10.0.dist-info → devsecops_engine_tools-1.11.0.dist-info}/RECORD

@@ -1,9 +1,9 @@
 devsecops_engine_tools/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-devsecops_engine_tools/version.py,sha256=5H7xqbTnK7k_EDE3MhXlLZ1a9ctpUU9VbxHmmWHzLnY,18
+devsecops_engine_tools/version.py,sha256=vNVSMk6LLy4q2IXG0QROcXdPY5PUVMXo9bzJHL-fZiU,19
 devsecops_engine_tools/engine_core/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_core/src/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_core/src/applications/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-devsecops_engine_tools/engine_core/src/applications/runner_engine_core.py,sha256=aUlH8Tf-sNOdAhw_2rRfGt0v8T01x6PyPhLdLHtPVnA,7139
+devsecops_engine_tools/engine_core/src/applications/runner_engine_core.py,sha256=r4XhvElDN8DSkEEWSZ9nMi1V5j1hRDON0Y6rnRMT7-w,7179
 devsecops_engine_tools/engine_core/src/deployment/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_core/src/deployment/infrastructure/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_core/src/domain/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
@@ -27,7 +27,7 @@ devsecops_engine_tools/engine_core/src/domain/model/gateway/vulnerability_manage
 devsecops_engine_tools/engine_core/src/domain/usecases/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_core/src/domain/usecases/break_build.py,sha256=JP-i5SFaMN7Yi4uDCe_AE1kJ197g1IJGcwQdq-RYbk4,16198
 devsecops_engine_tools/engine_core/src/domain/usecases/handle_risk.py,sha256=Au_ZXqwDi3CbVpQWAd29oruDAcZ1RX4e7OABSa_aRyA,7093
-devsecops_engine_tools/engine_core/src/domain/usecases/handle_scan.py,sha256=aaVK0InUKPIPiWMofTPSOWvJU07WUXyDl14MVO8Y9t8,6337
+devsecops_engine_tools/engine_core/src/domain/usecases/handle_scan.py,sha256=T1NIik_mrV1sSF-2yc5QXFJxaiOkXXNsRciObfOcvP4,7012
 devsecops_engine_tools/engine_core/src/domain/usecases/metrics_manager.py,sha256=Xi0iNnPrFgqd2cBdAA5E_tgouhxs-BTo016aolnGgv8,2413
 devsecops_engine_tools/engine_core/src/infrastructure/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
@@ -37,7 +37,7 @@ devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/aws/secret
 devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/azure/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/azure/azure_devops.py,sha256=blI4ZrquRE4y6DJ7N2YRx1nL0wrAXvdpx0fLSUf5qwA,4831
 devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/defect_dojo/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/defect_dojo/defect_dojo.py,sha256=oeaUC7GaWAjd6u8lFiTn0gdI7t7MWWzz3KpnJnF2cSE,16458
+devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/defect_dojo/defect_dojo.py,sha256=BAk_rLQzZ9qV7fVTXQUMEw_7Sfn1iQ9ciIw2j9felxQ,16497
 devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/github/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/github/github_actions.py,sha256=pxlgjhX4-Dssn-XHKK8AdCOj6Ry6VcQtoDf5q8CxTks,3731
 devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/printer_pretty_table/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
@@ -84,6 +84,27 @@ devsecops_engine_tools/engine_risk/src/infrastructure/entry_points/__init__.py,s
 devsecops_engine_tools/engine_risk/src/infrastructure/entry_points/entry_point_risk.py,sha256=HlWPr8Mg7kjnDGDmYqJRk-dJk-V8qDhtB08uUXBPVdw,3399
 devsecops_engine_tools/engine_risk/src/infrastructure/helpers/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_sast/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+devsecops_engine_tools/engine_sast/engine_code/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+devsecops_engine_tools/engine_sast/engine_code/src/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+devsecops_engine_tools/engine_sast/engine_code/src/applications/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+devsecops_engine_tools/engine_sast/engine_code/src/applications/runner_engine_code.py,sha256=7lYVWfDQO2qCeYZ3WbscoHZCO7-DAuOXYViFODx3zlc,956
+devsecops_engine_tools/engine_sast/engine_code/src/deployment/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+devsecops_engine_tools/engine_sast/engine_code/src/deployment/infrastructure/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+devsecops_engine_tools/engine_sast/engine_code/src/domain/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+devsecops_engine_tools/engine_sast/engine_code/src/domain/model/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+devsecops_engine_tools/engine_sast/engine_code/src/domain/model/config_tool.py,sha256=5OCRuGgebgtw_NxIh3bLuD5G_d0MV7cc6NH7xuzhPBw,537
+devsecops_engine_tools/engine_sast/engine_code/src/domain/model/gateways/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+devsecops_engine_tools/engine_sast/engine_code/src/domain/model/gateways/tool_gateway.py,sha256=kseBXn2SzCaFNJLghY9bTOCVvD2v5t7DKcfxgSmvBc0,459
+devsecops_engine_tools/engine_sast/engine_code/src/domain/usecases/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+devsecops_engine_tools/engine_sast/engine_code/src/domain/usecases/code_scan.py,sha256=7J9fcMEWM0p8x2S3Q9mSSRDPMXQbp71LxdURb94KxQ0,5530
+devsecops_engine_tools/engine_sast/engine_code/src/infrastructure/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+devsecops_engine_tools/engine_sast/engine_code/src/infrastructure/driven_adapters/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+devsecops_engine_tools/engine_sast/engine_code/src/infrastructure/driven_adapters/bearer/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+devsecops_engine_tools/engine_sast/engine_code/src/infrastructure/driven_adapters/bearer/bearer_deserealizator.py,sha256=GaCTIfbgvMLLhdPhC2RR5qyY6zoYrltJ4LVaN18668s,1858
+devsecops_engine_tools/engine_sast/engine_code/src/infrastructure/driven_adapters/bearer/bearer_tool.py,sha256=ZAp3_ep0Gtzz53PXki9grw6c1M1FAR5pOCAkGTavvDg,4611
+devsecops_engine_tools/engine_sast/engine_code/src/infrastructure/entry_points/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+devsecops_engine_tools/engine_sast/engine_code/src/infrastructure/entry_points/entry_point_tool.py,sha256=MSwHPApIz2-7j2uuhfO_Rg5rTzOAbGiRHbSjZHplB14,301
+devsecops_engine_tools/engine_sast/engine_code/src/infrastructure/helpers/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_sast/engine_iac/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_sast/engine_iac/src/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_sast/engine_iac/src/applications/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
@@ -116,7 +137,7 @@ devsecops_engine_tools/engine_sast/engine_iac/src/infrastructure/helpers/file_ge
 devsecops_engine_tools/engine_sast/engine_secret/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_sast/engine_secret/src/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_sast/engine_secret/src/applications/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-devsecops_engine_tools/engine_sast/engine_secret/src/applications/runner_secret_scan.py,sha256=gIVkizsy0L_MMGX49_EhzeKowXSBMIu4z1UBX2YKCLk,1370
+devsecops_engine_tools/engine_sast/engine_secret/src/applications/runner_secret_scan.py,sha256=yMzDoT6EpCVeuI-BLs0YfvAWcuWKWnSPoWSawdL_Cxk,1341
 devsecops_engine_tools/engine_sast/engine_secret/src/deployment/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_sast/engine_secret/src/deployment/infrastructure/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_sast/engine_secret/src/domain/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
@@ -124,15 +145,12 @@ devsecops_engine_tools/engine_sast/engine_secret/src/domain/model/DeserializeCon
 devsecops_engine_tools/engine_sast/engine_secret/src/domain/model/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_sast/engine_secret/src/domain/model/gateway/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_sast/engine_secret/src/domain/model/gateway/gateway_deserealizator.py,sha256=4fYPengHW3K0uVP6wHgOiNu-gRb08m78E7QZayZ2LC4,441
-devsecops_engine_tools/engine_sast/engine_secret/src/domain/model/gateway/git_gateway.py,sha256=x6LFK8wZuVix-ZCBdBQTzvjQi59nZYVrSOTatCOQbxc,638
 devsecops_engine_tools/engine_sast/engine_secret/src/domain/model/gateway/tool_gateway.py,sha256=juharYjy__KyB0fFCbU30k_aLd_9cQgsoCMeodq9ebA,593
 devsecops_engine_tools/engine_sast/engine_secret/src/domain/usecases/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-devsecops_engine_tools/engine_sast/engine_secret/src/domain/usecases/secret_scan.py,sha256=9DAX-3cJB5JmK7ZV3s0NQlGLMaPBiP7UbCOJ8OYlH3A,3916
+devsecops_engine_tools/engine_sast/engine_secret/src/domain/usecases/secret_scan.py,sha256=lxvqAtn3TD9xe-VYeVarlRbdG8eWpP5AtoMA0u8hqJI,3904
 devsecops_engine_tools/engine_sast/engine_secret/src/domain/usecases/set_input_core.py,sha256=k0LZd9PJpqEDns6DLYRGu9DzpRZeFsxAnowcjP5Rml4,2838
 devsecops_engine_tools/engine_sast/engine_secret/src/infrastructure/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_sast/engine_secret/src/infrastructure/driven_adapters/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-devsecops_engine_tools/engine_sast/engine_secret/src/infrastructure/driven_adapters/git_cli/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-devsecops_engine_tools/engine_sast/engine_secret/src/infrastructure/driven_adapters/git_cli/git_run.py,sha256=ZCPsII6lkUutRJ3MdjD2vTc1lq6DgvHHMtXoaiIadk4,3844
 devsecops_engine_tools/engine_sast/engine_secret/src/infrastructure/driven_adapters/trufflehog/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_sast/engine_secret/src/infrastructure/driven_adapters/trufflehog/trufflehog_deserealizator.py,sha256=WpFFswOmP38cLvfZHCrPDiRtdwH86n1CqVNS3K4s6uA,1968
 devsecops_engine_tools/engine_sast/engine_secret/src/infrastructure/driven_adapters/trufflehog/trufflehog_run.py,sha256=cvCSKTDN-4oL9H5EZF_-WrP5bNamFt0WfeCwaMO_Nfo,5345
@@ -221,7 +239,7 @@ devsecops_engine_tools/engine_utilities/defect_dojo/domain/request_objects/findi
 devsecops_engine_tools/engine_utilities/defect_dojo/domain/request_objects/import_scan.py,sha256=Y1ewQ-9wM287MSEraT4myG1RDl4LjmeqansR3-Exn7U,4974
 devsecops_engine_tools/engine_utilities/defect_dojo/domain/serializers/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_utilities/defect_dojo/domain/serializers/finding.py,sha256=HNkA_sHSMfQKAcZht-rRPdwm0eHYK2wxM6u61_bl2uE,5233
-devsecops_engine_tools/engine_utilities/defect_dojo/domain/serializers/import_scan.py,sha256=VyV1LzeJDk51RYXz8EiweLHccpsuwTY3hTkAnkscX2E,7211
+devsecops_engine_tools/engine_utilities/defect_dojo/domain/serializers/import_scan.py,sha256=q8Zu8zQWFTWFkQnt4xqU4bZO7ojdVbdtAIfEqrfAB2c,7230
 devsecops_engine_tools/engine_utilities/defect_dojo/domain/user_case/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_utilities/defect_dojo/domain/user_case/cmdb.py,sha256=BUOdvP39bEMQ6Unr2hB28eljVGU2Uv8dDEkzRyEJgyQ,2650
 devsecops_engine_tools/engine_utilities/defect_dojo/domain/user_case/engagement.py,sha256=SVX-weFRPT3DK7w6IBrLuWS4L6vboMuZtwXAQmIHfEE,406
@@ -239,6 +257,12 @@ devsecops_engine_tools/engine_utilities/defect_dojo/infraestructure/driver_adapt
 devsecops_engine_tools/engine_utilities/defect_dojo/infraestructure/driver_adapters/settings/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_utilities/defect_dojo/infraestructure/driver_adapters/settings/settings.py,sha256=5ni59GuAHT-avpWNc4FSedVpoFRTGRNzjQJkAXpWv6c,28
 devsecops_engine_tools/engine_utilities/defect_dojo/infraestructure/repository/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+devsecops_engine_tools/engine_utilities/git_cli/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+devsecops_engine_tools/engine_utilities/git_cli/infrastructure/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+devsecops_engine_tools/engine_utilities/git_cli/infrastructure/git_run.py,sha256=TI_u-A7PBaH4Lb9KYpBazdGVQBVh4INiA9JeMJDTDjc,3832
+devsecops_engine_tools/engine_utilities/git_cli/model/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+devsecops_engine_tools/engine_utilities/git_cli/model/gateway/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+devsecops_engine_tools/engine_utilities/git_cli/model/gateway/git_gateway.py,sha256=x6LFK8wZuVix-ZCBdBQTzvjQi59nZYVrSOTatCOQbxc,638
 devsecops_engine_tools/engine_utilities/github/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_utilities/github/infrastructure/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_utilities/github/infrastructure/github_api.py,sha256=AURk8GGAkNuHCqTEsiS6UxClL_YYJoqtBrWGBSYgWO4,2436
@@ -257,8 +281,8 @@ devsecops_engine_tools/engine_utilities/utils/logger_info.py,sha256=4Mz8Bwlm9Mku
 devsecops_engine_tools/engine_utilities/utils/name_conversion.py,sha256=ADJrRGaxYSDe0ZRh6VHRf53H4sXPcb-vNP_i81PUn3I,307
 devsecops_engine_tools/engine_utilities/utils/printers.py,sha256=amYAr9YQfYgR6jK9a2l26z3oovFPQ3FAKmhq6BKhEBA,623
 devsecops_engine_tools/engine_utilities/utils/session_manager.py,sha256=yNtlT-8Legz1sHbGPH8LNYjL-LgDUE0zXG2rYjiab7U,290
-devsecops_engine_tools-1.10.0.dist-info/METADATA,sha256=i1DYyX4fqcU3tXKZAwqq2Il7NFTYSZmfngLm23nrem4,10444
-devsecops_engine_tools-1.10.0.dist-info/WHEEL,sha256=R0nc6qTxuoLk7ShA2_Y-UWkN8ZdfDBG2B6Eqpz2WXbs,91
-devsecops_engine_tools-1.10.0.dist-info/entry_points.txt,sha256=9IjXF_7Zpgowq_SY6OSmsA9vZze18a8_AeHwkQVrgKk,131
-devsecops_engine_tools-1.10.0.dist-info/top_level.txt,sha256=ge6y0X_xBAU1aG3EMWFtl9djbVyg5BxuSp2r2Lg6EQU,23
-devsecops_engine_tools-1.10.0.dist-info/RECORD,,
+devsecops_engine_tools-1.11.0.dist-info/METADATA,sha256=9lTa2SzugeQLrSAvuKM_gbF63ohK7mzsfX6yNzQ65lY,10717
+devsecops_engine_tools-1.11.0.dist-info/WHEEL,sha256=R0nc6qTxuoLk7ShA2_Y-UWkN8ZdfDBG2B6Eqpz2WXbs,91
+devsecops_engine_tools-1.11.0.dist-info/entry_points.txt,sha256=9IjXF_7Zpgowq_SY6OSmsA9vZze18a8_AeHwkQVrgKk,131
+devsecops_engine_tools-1.11.0.dist-info/top_level.txt,sha256=ge6y0X_xBAU1aG3EMWFtl9djbVyg5BxuSp2r2Lg6EQU,23
+devsecops_engine_tools-1.11.0.dist-info/RECORD,,