devsecops-engine-tools 1.106.1__tar.gz → 1.108.0__tar.gz

{devsecops_engine_tools-1.106.1 → devsecops_engine_tools-1.108.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: devsecops-engine-tools
-Version: 1.106.1
+Version: 1.108.0
 Summary: Tool for DevSecOps strategy
 Home-page: https://github.com/bancolombia/devsecops-engine-tools
 Author: Bancolombia DevSecOps Team

{devsecops_engine_tools-1.106.1 → devsecops_engine_tools-1.108.0}/devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/cdxgen/cdxgen.py

@@ -27,7 +27,8 @@ class CdxGen(SbomManagerGateway):
         try:
             cdxgen_version = config["CDXGEN"]["CDXGEN_VERSION"]
             slim = "-slim" if config["CDXGEN"]["SLIM_BINARY"] else ""
-            exclude_types = config["CDXGEN"].get("EXCLUDE_TYPES", "")
+            exclude_types = config["CDXGEN"].get("EXCLUDE_TYPES", [])
+            exclude_paths = config["CDXGEN"].get("EXCLUDE_PATHS", [])
             recurse = config["CDXGEN"].get("RECURSE", True)
             debug_pipelines = config["CDXGEN"].get("DEBUG_PIPELINES", [])
             
@@ -61,13 +62,13 @@ class CdxGen(SbomManagerGateway):
                 logger.warning(f"{os_platform} is not supported.")
                 return None
 
-            result_sbom = self._run_cdxgen(command_prefix, artifact, service_name, exclude_types, recurse, enable_debug)
+            result_sbom = self._run_cdxgen(command_prefix, artifact, service_name, exclude_types, exclude_paths, recurse, enable_debug)
             return get_list_component(result_sbom, config["CDXGEN"]["OUTPUT_FORMAT"])
         except Exception as e:
             logger.error(f"Error generating SBOM: {e}")
             return None
 
-    def _run_cdxgen(self, command_prefix, artifact, service_name, exclude_types, recurse, enable_debug=False):
+    def _run_cdxgen(self, command_prefix, artifact, service_name, exclude_types, exclude_paths, recurse, enable_debug=False):
         result_file = f"{service_name}_SBOM.json"
         command = [
             command_prefix,
@@ -77,9 +78,16 @@ class CdxGen(SbomManagerGateway):
         ]
 
         if exclude_types:
-            command.extend(
-                ["--exclude-type", exclude_types]
-            )
+            for ex in exclude_types:
+                command.extend(
+                    ["--exclude-type", ex]
+                )
+
+        if exclude_paths:
+            for ex in exclude_paths:
+                command.extend(
+                    ["--exclude", ex]
+                )
         
         if not recurse:
             command.append(

{devsecops_engine_tools-1.106.1 → devsecops_engine_tools-1.108.0}/devsecops_engine_tools/engine_sast/engine_secret/src/infrastructure/driven_adapters/trufflehog/trufflehog_run.py

@@ -79,6 +79,8 @@ class TrufflehogRun(ToolGateway):
         exclude_detectors = config_tool[tool]["EXCLUDE_DETECTORS"]
         if exclude_detectors:
             exclude_detectors = ",".join(exclude_detectors)
+        filter_entropy = config_tool[tool].get("FILTER_ENTROPY")
+
 
         with concurrent.futures.ThreadPoolExecutor(max_workers=config_tool[tool]["NUMBER_THREADS"]) as executor:
             results = executor.map(
@@ -91,7 +93,8 @@ class TrufflehogRun(ToolGateway):
                 [enable_custom_rules] * len(include_paths),
                 [agent_os] * len(include_paths),
                 [folder_path] * len(include_paths),
-                [exclude_detectors] * len(include_paths)
+                [exclude_detectors] * len(include_paths),
+                [filter_entropy] * len(include_paths)
             )
         findings, file_findings = self.create_file(self.decode_output(results), path, config_tool, tool)
         return  findings, file_findings
@@ -129,18 +132,23 @@ class TrufflehogRun(ToolGateway):
         enable_custom_rules,
         agent_os,
         folder_path,
-        exclude_detectors
+        exclude_detectors,
+        filter_entropy
     ):
         path_folder = folder_path if folder_path is not None else f"{path}/{repository_name}"
         command = f"{trufflehog_command} filesystem {path_folder} --include-paths {include_path} --exclude-paths {exclude_path} --no-verification --no-update --json"
+        
         if enable_custom_rules:
             command = command.replace("--no-verification --no-update --json", f"--config {path}//rules//trufflehog//custom-rules.yaml --no-verification --no-update --json" if "Windows" in agent_os else
                                       f"--config {path}/rules/trufflehog/custom-rules.yaml --no-verification --no-update --json" if "Linux" or "Darwin" in agent_os else
-                                      "--no-verification --no-update --json")
+                                      "--no-verification --no-update --json")  
             
         if exclude_detectors:
             command = f"{command} --exclude-detectors {exclude_detectors}"
             
+        if filter_entropy:
+            command = f"{command} --filter-entropy={filter_entropy}"
+
         result = subprocess.run(command, capture_output=True, shell=True, text=True, encoding='utf-8')
         return result.stdout.strip()
 

devsecops_engine_tools-1.108.0/devsecops_engine_tools/version.py

@@ -0,0 +1 @@
+version = '1.108.0'

{devsecops_engine_tools-1.106.1 → devsecops_engine_tools-1.108.0}/devsecops_engine_tools.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: devsecops-engine-tools
-Version: 1.106.1
+Version: 1.108.0
 Summary: Tool for DevSecOps strategy
 Home-page: https://github.com/bancolombia/devsecops-engine-tools
 Author: Bancolombia DevSecOps Team

devsecops_engine_tools-1.106.1/devsecops_engine_tools/version.py

@@ -1 +0,0 @@
-version = '1.106.1'