devsecops-engine-tools 1.111.0__tar.gz → 1.113.0__tar.gz

{devsecops_engine_tools-1.111.0 → devsecops_engine_tools-1.113.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: devsecops-engine-tools
-Version: 1.111.0
+Version: 1.113.0
 Summary: Tool for DevSecOps strategy
 Home-page: https://github.com/bancolombia/devsecops-engine-tools
 Author: Bancolombia DevSecOps Team

{devsecops_engine_tools-1.111.0 → devsecops_engine_tools-1.113.0}/devsecops_engine_tools/engine_core/src/applications/runner_engine_core.py

@@ -147,7 +147,7 @@ def get_inputs_from_cli(args):
     parser.add_argument(
         "-p",
         "--platform",
-        type=parse_choices({"all", "docker", "k8s", "cloudformation", "openapi", "terraform"}),
+        type=parse_choices({"all", "docker", "k8s", "cloudformation", "openapi", "terraform","serverless"}),
         required=False,
         default="all",
         help="Platform to scan, applies only to the engine_iac tool and it is possible to select several {all, docker, k8s, cloudformation, openapi, terraform}",

{devsecops_engine_tools-1.111.0 → devsecops_engine_tools-1.113.0}/devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/cdxgen/cdxgen.py

@@ -30,6 +30,7 @@ class CdxGen(SbomManagerGateway):
             exclude_types = config["CDXGEN"].get("EXCLUDE_TYPES", [])
             exclude_paths = config["CDXGEN"].get("EXCLUDE_PATHS", [])
             recurse = config["CDXGEN"].get("RECURSE", True)
+            install_deps = config["CDXGEN"].get("INSTALL_DEPENDENCIES", True)
             debug_pipelines = config["CDXGEN"].get("DEBUG_PIPELINES", [])
             
             enable_debug = service_name in debug_pipelines if debug_pipelines else False
@@ -62,13 +63,13 @@ class CdxGen(SbomManagerGateway):
                 logger.warning(f"{os_platform} is not supported.")
                 return None
 
-            result_sbom = self._run_cdxgen(command_prefix, artifact, service_name, exclude_types, exclude_paths, recurse, enable_debug)
+            result_sbom = self._run_cdxgen(command_prefix, artifact, service_name, exclude_types, exclude_paths, recurse, install_deps, enable_debug)
             return get_list_component(result_sbom, config["CDXGEN"]["OUTPUT_FORMAT"])
         except Exception as e:
             logger.error(f"Error generating SBOM: {e}")
             return None
 
-    def _run_cdxgen(self, command_prefix, artifact, service_name, exclude_types, exclude_paths, recurse, enable_debug=False):
+    def _run_cdxgen(self, command_prefix, artifact, service_name, exclude_types, exclude_paths, recurse, install_deps, enable_debug=False):
         result_file = f"{service_name}_SBOM.json"
         command = [
             command_prefix,
@@ -93,6 +94,11 @@ class CdxGen(SbomManagerGateway):
             command.append(
                 "--no-recurse"
             )
+        
+        if not install_deps:
+            command.append(
+                "--install-deps false"
+            )
 
         try:
             result = subprocess.run(

{devsecops_engine_tools-1.111.0 → devsecops_engine_tools-1.113.0}/devsecops_engine_tools/engine_sast/engine_iac/src/infrastructure/driven_adapters/checkov/checkov_tool.py

@@ -41,6 +41,7 @@ class CheckovTool(ToolGateway):
         "RULES_CLOUDFORMATION": "cloudformation",
         "RULES_OPENAPI": "openapi",
         "RULES_TERRAFORM": "terraform",
+        "RULES_SERVERLESS": "serverless",
     }
     framework_external_checks = [
         "RULES_K8S",
@@ -48,6 +49,7 @@ class CheckovTool(ToolGateway):
         "RULES_DOCKER",
         "RULES_OPENAPI",
         "RULES_TERRAFORM",
+        "RULES_SERVERLESS",
     ]
 
     def run_tool(

{devsecops_engine_tools-1.111.0 → devsecops_engine_tools-1.113.0}/devsecops_engine_tools/engine_sast/engine_iac/src/infrastructure/helpers/file_generator_tool.py

@@ -38,7 +38,7 @@ def generate_file_from_tool(tool, result_list, rules_doc, config_tool):
 
                 file_name = "results.json"
                 results_data = {
-                    "check_type": "Dockerfile, Kubernetes and CloudFormation",
+                    "check_type": "Dockerfile, Kubernetes, CloudFormation and Serverless",
                     "results": {
                         "failed_checks": all_failed_checks,
                     },

devsecops_engine_tools-1.113.0/devsecops_engine_tools/version.py

@@ -0,0 +1 @@
+version = '1.113.0'

{devsecops_engine_tools-1.111.0 → devsecops_engine_tools-1.113.0}/devsecops_engine_tools.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: devsecops-engine-tools
-Version: 1.111.0
+Version: 1.113.0
 Summary: Tool for DevSecOps strategy
 Home-page: https://github.com/bancolombia/devsecops-engine-tools
 Author: Bancolombia DevSecOps Team

devsecops_engine_tools-1.111.0/devsecops_engine_tools/version.py

@@ -1 +0,0 @@
-version = '1.111.0'