devsecops-engine-tools 1.109.0__tar.gz → 1.110.1__tar.gz

{devsecops_engine_tools-1.109.0 → devsecops_engine_tools-1.110.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: devsecops-engine-tools
-Version: 1.109.0
+Version: 1.110.1
 Summary: Tool for DevSecOps strategy
 Home-page: https://github.com/bancolombia/devsecops-engine-tools
 Author: Bancolombia DevSecOps Team

{devsecops_engine_tools-1.109.0 → devsecops_engine_tools-1.110.1}/devsecops_engine_tools/engine_core/src/applications/runner_engine_core.py

@@ -232,6 +232,11 @@ def get_inputs_from_cli(args):
         default="false",
         help="Enable or disable context creation. Applies to engine_iac, engine_container and engine_dependencies. Default is false."
     )
+    parser.add_argument(
+        "--docker_address",
+        required=False,
+        help="Address of the Docker daemon to connect to."
+    )
 
     TOOLS = {
         "engine_iac": ["checkov", "kics", "kubescape"],
@@ -275,6 +280,7 @@ def get_inputs_from_cli(args):
         "image_to_scan": args.image_to_scan,
         "dast_file_path": args.dast_file_path,
         "context": args.context,
+        "docker_address": args.docker_address
     }
 
 

{devsecops_engine_tools-1.109.0 → devsecops_engine_tools-1.110.1}/devsecops_engine_tools/engine_sca/engine_container/src/domain/model/gateways/tool_gateway.py

@@ -3,5 +3,5 @@ from abc import ABCMeta, abstractmethod
 
 class ToolGateway(metaclass=ABCMeta):
     @abstractmethod
-    def run_tool_container_sca(self, dict_args, secret_tool, token_engine_container, scan_image, release, base_image, exclusions, generate_sbom, is_compressed_file=False):
+    def run_tool_container_sca(self, dict_args, secret_tool, token_engine_container, scan_image, release, base_image, exclusions, generate_sbom, docker_address, is_compressed_file=False):
         "run tool container sca"

{devsecops_engine_tools-1.109.0 → devsecops_engine_tools-1.110.1}/devsecops_engine_tools/engine_sca/engine_container/src/domain/usecases/container_sca_scan.py

@@ -25,6 +25,7 @@ class ContainerScaScan:
         exclusions,
         pipeline_name,
         context,
+        docker_address,
     ):
         self.tool_run = tool_run
         self.remote_config = remote_config
@@ -37,6 +38,7 @@ class ContainerScaScan:
         self.exclusions = exclusions
         self.pipeline_name = pipeline_name
         self.context = context
+        self.docker_address = docker_address
 
     def _is_compressed_file(self, image_to_scan):
         """Check if the input is a compressed file (tar, tar.gz, etc.)"""
@@ -114,6 +116,7 @@ class ContainerScaScan:
             base_image,
             self.exclusions,
             generate_sbom,
+            self.docker_address,
             is_compressed_file,
         )
         

{devsecops_engine_tools-1.109.0 → devsecops_engine_tools-1.110.1}/devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/driven_adapters/prisma_cloud/prisma_cloud_manager_scan.py

@@ -63,9 +63,9 @@ class PrismaCloudManagerScan(ToolGateway):
             raise ValueError(f"Error downloading twistcli: {e}")
 
     def scan_image(
-        self, file_path, image_name, result_file, remoteconfig, prisma_key
+        self, file_path, image_name, result_file, remoteconfig, prisma_key, docker_address
     ):
-        command = (
+        command = [
             file_path,
             "images",
             "scan",
@@ -75,11 +75,18 @@ class PrismaCloudManagerScan(ToolGateway):
             self._split_prisma_token(prisma_key)[0],
             "--password",
             self._split_prisma_token(prisma_key)[1],
+        ]
+
+        if docker_address:
+            command.extend(["--docker-address", docker_address])
+
+        command.extend([
             "--output-file",
             result_file,
             "--details",
             image_name,
-        )
+        ])
+
         try:
             subprocess.run(
                 command,
@@ -170,7 +177,7 @@ class PrismaCloudManagerScan(ToolGateway):
             raise ValueError("The string is not properly formatted. Make sure it contains a ':'.")
         
     def run_tool_container_sca(
-        self, remoteconfig, secret_tool, token_engine_container, image_name, result_file, base_image, exclusions, generate_sbom, is_compressed_file=False
+        self, remoteconfig, secret_tool, token_engine_container, image_name, result_file, base_image, exclusions, generate_sbom, docker_address, is_compressed_file=False
     ):
         if is_compressed_file:
             logger.warning("Prisma Cloud does not support compressed file scanning. Skipping.")
@@ -196,7 +203,8 @@ class PrismaCloudManagerScan(ToolGateway):
             image_name,
             result_file,
             remoteconfig,
-            prisma_key
+            prisma_key,
+            docker_address
         )
         if base_image:
             self._write_image_base(result_file, base_image, exclusions, remoteconfig)

{devsecops_engine_tools-1.109.0 → devsecops_engine_tools-1.110.1}/devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/entry_points/entry_point_tool.py

@@ -68,6 +68,7 @@ def init_engine_sca_rm(
             exclusions,
             pipeline_name,
             context=dict_args["context"],
+            docker_address=dict_args["docker_address"],
         )
         image_scanned, base_image, sbom_components = container_sca_scan.process()
         if image_scanned:

devsecops_engine_tools-1.110.1/devsecops_engine_tools/version.py

@@ -0,0 +1 @@
+version = '1.110.1'

{devsecops_engine_tools-1.109.0 → devsecops_engine_tools-1.110.1}/devsecops_engine_tools.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: devsecops-engine-tools
-Version: 1.109.0
+Version: 1.110.1
 Summary: Tool for DevSecOps strategy
 Home-page: https://github.com/bancolombia/devsecops-engine-tools
 Author: Bancolombia DevSecOps Team

devsecops_engine_tools-1.109.0/devsecops_engine_tools/version.py

@@ -1 +0,0 @@
-version = '1.109.0'