devsecops-engine-tools 1.106.0__tar.gz → 1.107.0__tar.gz

{devsecops_engine_tools-1.106.0 → devsecops_engine_tools-1.107.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: devsecops-engine-tools
-Version: 1.106.0
+Version: 1.107.0
 Summary: Tool for DevSecOps strategy
 Home-page: https://github.com/bancolombia/devsecops-engine-tools
 Author: Bancolombia DevSecOps Team

{devsecops_engine_tools-1.106.0 → devsecops_engine_tools-1.107.0}/devsecops_engine_tools/engine_sast/engine_secret/src/infrastructure/driven_adapters/trufflehog/trufflehog_run.py

@@ -79,6 +79,8 @@ class TrufflehogRun(ToolGateway):
         exclude_detectors = config_tool[tool]["EXCLUDE_DETECTORS"]
         if exclude_detectors:
             exclude_detectors = ",".join(exclude_detectors)
+        filter_entropy = config_tool[tool].get("FILTER_ENTROPY")
+
 
         with concurrent.futures.ThreadPoolExecutor(max_workers=config_tool[tool]["NUMBER_THREADS"]) as executor:
             results = executor.map(
@@ -91,7 +93,8 @@ class TrufflehogRun(ToolGateway):
                 [enable_custom_rules] * len(include_paths),
                 [agent_os] * len(include_paths),
                 [folder_path] * len(include_paths),
-                [exclude_detectors] * len(include_paths)
+                [exclude_detectors] * len(include_paths),
+                [filter_entropy] * len(include_paths)
             )
         findings, file_findings = self.create_file(self.decode_output(results), path, config_tool, tool)
         return  findings, file_findings
@@ -129,18 +132,23 @@ class TrufflehogRun(ToolGateway):
         enable_custom_rules,
         agent_os,
         folder_path,
-        exclude_detectors
+        exclude_detectors,
+        filter_entropy
     ):
         path_folder = folder_path if folder_path is not None else f"{path}/{repository_name}"
         command = f"{trufflehog_command} filesystem {path_folder} --include-paths {include_path} --exclude-paths {exclude_path} --no-verification --no-update --json"
+        
         if enable_custom_rules:
             command = command.replace("--no-verification --no-update --json", f"--config {path}//rules//trufflehog//custom-rules.yaml --no-verification --no-update --json" if "Windows" in agent_os else
                                       f"--config {path}/rules/trufflehog/custom-rules.yaml --no-verification --no-update --json" if "Linux" or "Darwin" in agent_os else
-                                      "--no-verification --no-update --json")
+                                      "--no-verification --no-update --json")  
             
         if exclude_detectors:
             command = f"{command} --exclude-detectors {exclude_detectors}"
             
+        if filter_entropy:
+            command = f"{command} --filter-entropy={filter_entropy}"
+
         result = subprocess.run(command, capture_output=True, shell=True, text=True, encoding='utf-8')
         return result.stdout.strip()
 

{devsecops_engine_tools-1.106.0 → devsecops_engine_tools-1.107.0}/devsecops_engine_tools/engine_utilities/trivy_utils/infrastructure/driven_adapters/trivy_deserialize_output.py

@@ -21,36 +21,40 @@ class TrivyDeserializator(DeseralizatorGateway):
         with open(image_scanned, "rb") as file:
             image_object = file.read()
             json_data = json.loads(image_object)
-            vulnerabilities_data = json_data.get("Results", [{}])[0].get("Vulnerabilities", [])
-            vulnerabilities = [
-                Finding(
-                    id=vul.get("VulnerabilityID", ""),
-                    cvss=str(
-                        next(
-                            (
-                                v["V3Score"]
-                                for v in vul["CVSS"].values()
-                                if "V3Score" in v
-                            ),
-                            None,
-                        )
-                    ),
-                    where=vul.get("PkgName", "")
-                    + ":"
-                    + vul.get("InstalledVersion", ""),
-                    description=vul.get("Description", "").replace("\n", "")[:150],
-                    severity=vul.get("Severity", "").lower(),
-                    identification_date=datetime.now().strftime("%Y-%m-%dT%H:%M:%S%z"),
-                    published_date_cve=self._check_date_format(vul),
-                    module=module,
-                    category=Category.VULNERABILITY,
-                    requirements=vul.get("FixedVersion") or vul.get("Status", ""),
-                    tool="Trivy",
-                )
-                for vul in vulnerabilities_data
-                if vul.get("CVSS") and vul.get("PublishedDate")
-            ]
-            list_open_vulnerabilities.extend(vulnerabilities)
+            results = json_data.get("Results", [{}])
+
+            for result in results:
+                vulnerabilities_data = result.get("Vulnerabilities", [])
+                vulnerabilities = [
+                    Finding(
+                        id=vul.get("VulnerabilityID", ""),
+                        cvss=str(
+                            next(
+                                (
+                                    v["V3Score"]
+                                    for v in vul["CVSS"].values()
+                                    if "V3Score" in v
+                                ),
+                                None,
+                            )
+                        ),
+                        where=vul.get("PkgName", "")
+                        + ":"
+                        + vul.get("InstalledVersion", ""),
+                        description=vul.get("Description", "").replace("\n", "")[:150],
+                        severity=vul.get("Severity", "").lower(),
+                        identification_date=datetime.now().strftime("%Y-%m-%dT%H:%M:%S%z"),
+                        published_date_cve=self._check_date_format(vul),
+                        module=module,
+                        category=Category.VULNERABILITY,
+                        requirements=vul.get("FixedVersion") or vul.get("Status", ""),
+                        tool="Trivy",
+                    )
+                    for vul in vulnerabilities_data
+                    if vul.get("CVSS") and vul.get("PublishedDate")
+                ]
+                list_open_vulnerabilities.extend(vulnerabilities)
+        
         return list_open_vulnerabilities
 
     def get_container_context_from_results(

devsecops_engine_tools-1.107.0/devsecops_engine_tools/version.py

@@ -0,0 +1 @@
+version = '1.107.0'

{devsecops_engine_tools-1.106.0 → devsecops_engine_tools-1.107.0}/devsecops_engine_tools.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: devsecops-engine-tools
-Version: 1.106.0
+Version: 1.107.0
 Summary: Tool for DevSecOps strategy
 Home-page: https://github.com/bancolombia/devsecops-engine-tools
 Author: Bancolombia DevSecOps Team

devsecops_engine_tools-1.106.0/devsecops_engine_tools/version.py

@@ -1 +0,0 @@
-version = '1.106.0'