devsecops-engine-tools 1.115.2__py3-none-any.whl → 1.116.1__py3-none-any.whl

devsecops_engine_tools/engine_core/src/applications/runner_engine_core.py

@@ -125,6 +125,7 @@ def get_inputs_from_cli(args):
             "engine_dependencies",
             "engine_container",
             "engine_risk",
+            "engine_function",
         ],
         type=str,
         required=True,
@@ -246,6 +247,7 @@ def get_inputs_from_cli(args):
         "engine_code": ["bearer", "kiuwan"],
         "engine_dast": ["nuclei"],
         "engine_risk": None,
+        "engine_function": ["prisma"],
     }
 
     args = parser.parse_args()

devsecops_engine_tools/engine_core/src/domain/usecases/handle_scan.py

@@ -36,6 +36,9 @@ from devsecops_engine_tools.engine_sca.engine_container.src.applications.runner_
 from devsecops_engine_tools.engine_sca.engine_dependencies.src.applications.runner_dependencies_scan import (
     runner_engine_dependencies,
 )
+from devsecops_engine_tools.engine_sca.engine_function.src.applications.runner_function_scan import (
+    runner_engine_function,
+)
 from devsecops_engine_tools.engine_dast.src.applications.runner_dast_scan import (
     runner_engine_dast,
 )
@@ -100,6 +103,22 @@ class HandleScan:
                 sbom_components,
             )
             return findings_list, input_core
+        elif "engine_function" in dict_args["module"]:
+            findings_list, input_core = runner_engine_function(
+                dict_args,
+                config_tool["ENGINE_FUNCTION"],
+                secret_tool,
+                self.devops_platform_gateway,
+                self.remote_config_source_gateway
+            )
+            self._use_vulnerability_management(
+                config_tool,
+                input_core,
+                dict_args,
+                secret_tool,
+                env
+            )
+            return findings_list, input_core
         elif "engine_dast" in dict_args["module"]:
             findings_list, input_core = runner_engine_dast(
                 dict_args,

devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/printer_pretty_table/printer_pretty_table.py

@@ -27,9 +27,7 @@ class PrinterPrettyTable(PrinterTableGateway):
                 finding.description,
                 finding.where,
             ]
-            if (finding.module == "engine_container") or (
-                finding.module == "engine_dependencies"
-            ):
+            if finding.module in ("engine_container", "engine_dependencies", "engine_function"):
                 row_data.append(finding.requirements)
             elif finding.module == "engine_code":
                 row_data.append(finding.cvss)
@@ -53,9 +51,8 @@ class PrinterPrettyTable(PrinterTableGateway):
         if (
             finding_list
             and (
-                (finding_list[0].module == "engine_container") 
-                or (finding_list[0].module == "engine_dependencies")
-                )
+                finding_list[0].module in ["engine_container","engine_dependencies", "engine_function"]
+            )
         ):
             headers = ["Severity", "ID", "Description", "Where", "Fixed in"]
         elif finding_list and finding_list[0].module == "engine_code":

devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/driven_adapters/prisma_cloud/prisma_cloud_manager_scan.py

@@ -1,10 +1,8 @@
-import stat
 import requests
 import os
 import subprocess
 import base64
 import json
-import platform
 from devsecops_engine_tools.engine_sca.engine_container.src.domain.model.gateways.tool_gateway import (
     ToolGateway,
 )
@@ -13,55 +11,18 @@ from devsecops_engine_tools.engine_utilities.sbom.deserealizator import (
 )
 from devsecops_engine_tools.engine_utilities.utils.logger_info import MyLogger
 from devsecops_engine_tools.engine_utilities import settings
+from devsecops_engine_tools.engine_utilities.twistcli_utils.twistcli_utils import download_twistcli
 
 logger = MyLogger.__call__(**settings.SETTING_LOGGER).get_logger()
 
 
 class PrismaCloudManagerScan(ToolGateway):
-    def download_twistcli(
-        self,
-        file_path,
-        prisma_key,
-        prisma_console_url,
-        prisma_api_version,
-    ):
-        
-        machine = platform.machine()
-        system = platform.system()
-
-        base_url = f"{prisma_console_url}/api/{prisma_api_version}/util"
-
-        os_mapping = {
-            "Linux": "twistcli",
-            "Windows": "windows/twistcli.exe",
-            "Darwin": "osx/twistcli",
-        }
-
-        url = f"{base_url}/{os_mapping[system]}"
-
-        if system == "Linux" and machine == "aarch64":
-            url = f"{base_url}/arm64/twistcli"
-        elif system == "Darwin" and machine == "aarch64":
-            url = f"{base_url}/osx/arm64/twistcli"
-
-        credentials = base64.b64encode(
-            prisma_key.encode()
-        ).decode()
-        headers = {"Authorization": f"Basic {credentials}"}
-        try:
-            response = requests.get(url, headers=headers)
-            response.raise_for_status()
-
-            with open(file_path, "wb") as file:
-                file.write(response.content)
-
-            os.chmod(file_path, stat.S_IRWXU)
-            logger.info(f"twistcli downloaded and saved to: {file_path}")
-            return 0
-
-        except Exception as e:
-            raise ValueError(f"Error downloading twistcli: {e}")
-
+    def download_twistcli(self, file_path, prisma_key, prisma_console_url, prisma_api_version) -> int:
+        """
+        Método de instancia separado (lo que usan los tests),
+        delega en el util compat 'basic' para no romper aserciones.
+        """
+        return download_twistcli(file_path, prisma_key, prisma_console_url, prisma_api_version)
     def scan_image(
         self, file_path, image_name, result_file, remoteconfig, prisma_key, docker_address
     ):
@@ -168,7 +129,6 @@ class PrismaCloudManagerScan(ToolGateway):
         except Exception as e:
             logger.error(f"Error generating SBOM: {e}")
 
-
     def _split_prisma_token(self, prisma_key):
         try:
             access_prisma, token_prisma = prisma_key.split(":")

devsecops_engine_tools/engine_sca/engine_function/src/applications/runner_function_scan.py

@@ -0,0 +1,32 @@
+from devsecops_engine_tools.engine_sca.engine_function.src.infrastructure.entry_points.entry_point_tool import (
+    init_engine_sca_rm,
+)
+from devsecops_engine_tools.engine_sca.engine_function.src.infrastructure.driven_adapters.prisma_cloud.prisma_cloud_manager_scan import (
+    PrismaCloudManagerScan,
+)
+from devsecops_engine_tools.engine_sca.engine_function.src.infrastructure.driven_adapters.prisma_cloud.prisma_deserialize_output import (
+    PrismaDeserealizator,
+)
+
+
+def runner_engine_function(dict_args, config_tool, secret_tool, tool_remote, remote_config_source_gateway):
+    try:
+        if config_tool["TOOL"].lower() == "prisma":
+            tool_run = PrismaCloudManagerScan(config_tool, dict_args)
+            tool_deseralizator = PrismaDeserealizator()
+        return init_engine_sca_rm(
+            tool_run,
+            tool_remote,
+            remote_config_source_gateway,
+            tool_deseralizator,
+            dict_args,
+            secret_tool,
+            config_tool,
+        )
+
+    except Exception as e:
+        raise Exception(f"Error SCAN engine function : {str(e)}")
+
+
+if __name__ == "__main__":
+    runner_engine_function()

devsecops_engine_tools/engine_sca/engine_function/src/domain/model/gateways/deserealizator_gateway.py

@@ -0,0 +1,8 @@
+from abc import ABCMeta, abstractmethod
+from devsecops_engine_tools.engine_core.src.domain.model.finding import Finding
+
+
+class DeseralizatorGateway(metaclass=ABCMeta):
+    @abstractmethod
+    def get_list_findings(self, results_scan_list: list) -> "list[Finding]":
+        "Deseralizator"

devsecops_engine_tools/engine_sca/engine_function/src/domain/model/gateways/tool_gateway.py

@@ -0,0 +1,13 @@
+from abc import ABCMeta, abstractmethod
+
+
+class ToolGateway(metaclass=ABCMeta):
+    @abstractmethod
+    def run_tool_function_sca(
+        self,
+        dict_args,
+        token:str=None,
+        skip_flag:bool=None,
+    ) -> str:
+        
+        "run tool function sca"

devsecops_engine_tools/engine_sca/engine_function/src/domain/usecases/function_sca_scan.py

@@ -0,0 +1,71 @@
+from devsecops_engine_tools.engine_core.src.domain.model.gateway.devops_platform_gateway import (
+    DevopsPlatformGateway,
+)
+from devsecops_engine_tools.engine_sca.engine_function.src.domain.model.gateways.tool_gateway import (
+    ToolGateway,
+)
+from devsecops_engine_tools.engine_sca.engine_function.src.domain.model.gateways.deserealizator_gateway import (
+    DeseralizatorGateway,
+)
+
+
+class FunctionScaScan:
+    def __init__(
+        self,
+        tool_run: ToolGateway,
+        remote_config,
+        tool_remote: DevopsPlatformGateway,
+        tool_deseralizator: DeseralizatorGateway,
+        dict_args,
+        secret_tool,
+        token_engine_container
+    ):
+        self.tool_run = tool_run
+        self.remote_config = remote_config
+        self.tool_remote = tool_remote
+        self.tool_deseralizator = tool_deseralizator
+        self.dict_args = dict_args
+        self.secret_tool = secret_tool
+        self.token_engine_container = token_engine_container
+
+    def get_remote_config(self, file_path):
+        """
+        Get remote configuration.
+
+        Returns:
+            dict: Remote configuration.
+        """
+        return self.tool_remote.get_remote_config(self.dict_args["remote_config_repo"], file_path, self.dict_args["remote_config_branch"])
+
+
+    def get_variable(self, variable):
+        """
+        Get variable.
+
+        Returns:
+            dict: Remote variable.
+        """
+        return self.tool_remote.get_variable(variable)
+
+    def process(self):
+        """
+        Process SCA scanning.
+
+        Returns:
+            dict: SCA scanning results.
+        """
+
+        return self.tool_run.run_tool_function_sca(
+            self.get_remote_config("engine_sca/engine_function/ConfigTool.json"),
+            self.secret_tool,
+            self.token_engine_container,
+        )
+
+    def deseralizator(self, function_scanned):
+        """
+        Process the results deserializer.
+
+        Returns:
+            list: Deserialized list of findings.
+        """
+        return self.tool_deseralizator.get_list_findings(function_scanned)

devsecops_engine_tools/engine_sca/engine_function/src/domain/usecases/handle_remote_config_patterns.py

@@ -0,0 +1,73 @@
+import re
+
+class HandleRemoteConfigPatterns:
+    def __init__(self, remote_config, exclusions, pipeline_name):
+        self.remote_config = remote_config
+        self.exclusions = exclusions
+        self.pipeline_name = pipeline_name
+
+    def get_remote_config(self, file_path):
+        """
+        Get remote configuration
+        Return: dict: Remote configuration
+        """
+        return self.tool_remote.get_remote_config(
+            self.dict_args["remote_config_repo"], file_path, self.dict_args["remote_config_branch"]
+        )
+
+    def get_variable(self, variable):
+        """
+        Get variable.
+
+        Returns:
+            dict: Remote variable.
+        """
+        return self.tool_remote.get_variable(variable)
+    
+    def handle_skip_tool(self, exclusions, pipeline_name):
+        """
+        Handle skip tool.
+
+        Return: bool: True -> skip tool, False -> not skip tool.
+        """
+        if (pipeline_name in exclusions) and (
+            exclusions[pipeline_name].get("SKIP_TOOL", 0)
+        ):
+            return True
+        else:
+            return False
+
+    def process_handle_skip_tool(self):
+        """
+        Process handle skip tool.
+
+        Return: bool: True -> skip tool, False -> not skip tool.
+        """
+        return self.handle_skip_tool(
+            self.get_remote_config("engine_sca/engine_function/Exclusions.json"),
+            self.get_variable("pipeline_name"),
+        )
+    
+    def ignore_analysis_pattern(self):
+        """
+        Handle analysis pattern.
+        Return: bool: False -> not scan, True -> scan.
+        """
+        ignore = self.remote_config["IGNORE_SEARCH_PATTERN"]
+        if re.match(ignore, self.pipeline_name, re.IGNORECASE):
+            return False
+        else:
+            return True
+
+    def skip_from_exclusion(self):
+        """
+        Handle skip tool.
+
+        Return: bool: True -> skip tool, False -> not skip tool.
+        """
+        if (self.pipeline_name in self.exclusions) and (
+            self.exclusions[self.pipeline_name].get("SKIP_TOOL", 0)
+        ):
+            return True
+        else:
+            return False

devsecops_engine_tools/engine_sca/engine_function/src/domain/usecases/set_input_core.py

@@ -0,0 +1,76 @@
+from devsecops_engine_tools.engine_core.src.domain.model.input_core import InputCore
+from devsecops_engine_tools.engine_core.src.domain.model.threshold import Threshold
+from devsecops_engine_tools.engine_core.src.domain.model.gateway.devops_platform_gateway import (
+    DevopsPlatformGateway,
+)
+from devsecops_engine_tools.engine_core.src.domain.model.exclusions import Exclusions
+
+
+class SetInputCore:
+    def __init__(self, tool_remote: DevopsPlatformGateway, dict_args, config_tool):
+        self.tool_remote = tool_remote
+        self.dict_args = dict_args
+        self.config_tool = config_tool
+
+    def get_remote_config(self, file_path):
+        """
+        Get remote configuration.
+
+        Returns:
+            dict: Remote configuration.
+        """
+        return self.tool_remote.get_remote_config(self.dict_args["remote_config_repo"], file_path)
+
+    def get_variable(self, variable):
+        """
+        Get variable.
+
+        Returns:
+            dict: Remote variable.
+        """
+        return self.tool_remote.get_variable(variable)
+
+    def get_exclusions(self, exclusions_data, pipeline_name, tool):
+        list_exclusions = []
+        for key, value in exclusions_data.items():
+            if (key == "All") or (key == pipeline_name):
+                if value.get(tool, 0):
+                    exclusions = [
+                        Exclusions(
+                            id=item.get("id", ""),
+                            where=item.get("where", ""),
+                            cve_id=item.get("cve_id", ""),
+                            create_date=item.get("create_date", ""),
+                            expired_date=item.get("expired_date", ""),
+                            severity=item.get("severity", ""),
+                            hu=item.get("hu", ""),
+                            reason=item.get("reason", "DevSecOps policy"),
+                        )
+                        for item in value[tool]
+                    ]
+                    list_exclusions.extend(exclusions)
+        return list_exclusions
+
+    def set_input_core(self):
+        """
+        Set the input core.
+
+        Returns:
+            dict: Input core.
+        """        
+        
+        return InputCore(
+            self.get_exclusions(
+                self.get_remote_config("engine_sca/engine_function/Exclusions.json"),
+                self.get_variable("pipeline_name"),
+                self.config_tool["TOOL"],
+            ),
+            Threshold(
+                self.get_remote_config("engine_sca/engine_function/ConfigTool.json")["THRESHOLD"]
+            ),
+            None,
+            self.get_remote_config("engine_sca/engine_function/ConfigTool.json")["MESSAGE_INFO_ENGINE_FUNCTION"],
+            self.get_variable("pipeline_name"),
+            self.get_variable("pipeline_name"),
+            self.get_variable("stage"),
+        )

devsecops_engine_tools/engine_sca/engine_function/src/infrastructure/driven_adapters/prisma_cloud/prisma_cloud_manager_scan.py

@@ -0,0 +1,175 @@
+import os
+import glob
+import subprocess
+import re
+from devsecops_engine_tools.engine_sca.engine_function.src.domain.model.gateways.tool_gateway import (
+    ToolGateway,
+)
+from devsecops_engine_tools.engine_utilities.utils.logger_info import MyLogger
+from devsecops_engine_tools.engine_utilities import settings
+from devsecops_engine_tools.engine_utilities.twistcli_utils.twistcli_utils import download_twistcli
+
+
+
+logger = MyLogger.__call__(**settings.SETTING_LOGGER).get_logger()
+
+
+class PrismaCloudManagerScan:
+    def __init__(
+        self,
+        tool_run: ToolGateway,
+        dict_args
+    ):
+        self.tool_run = tool_run
+        self.dict_args = dict_args
+
+    def run_tool_function_sca(
+        self, 
+        remoteconfig, 
+        secret_tool,
+        token_engine_container,
+    ):
+        prisma_key = (
+            f"{secret_tool['access_prisma']}:{secret_tool['token_prisma']}" if secret_tool else token_engine_container
+        )
+        file_path = os.path.join(
+            os.getcwd(), remoteconfig["PRISMA_CLOUD"]["TWISTCLI_PATH"]
+        )
+        if not os.path.exists(file_path):
+            self.download_twistcli(
+                file_path,
+                prisma_key,
+                remoteconfig["PRISMA_CLOUD"]["PRISMA_CONSOLE_URL"],
+                remoteconfig["PRISMA_CLOUD"]["PRISMA_API_VERSION"],
+            )
+        folder_path = self.dict_args["folder_path"]
+        function_scan = self._scan_function(
+            file_path,
+            folder_path,
+            remoteconfig,
+            prisma_key,
+        )
+
+        return function_scan
+
+    def _split_prisma_token(self, prisma_key):
+        try:
+            access_prisma, token_prisma = prisma_key.split(":")
+            return access_prisma, token_prisma
+        except ValueError:
+            raise ValueError("The string is not properly formatted. Make sure it contains a ':'.")
+
+    def _scan_function(self, file_path, folder_path, remoteconfig, prisma_key):
+        function_path = glob.glob(os.path.join(folder_path, "*.zip"))
+        if not function_path:
+            print("No .zip file found [Scanning skipped]")
+            return None
+        zip_name = os.path.basename(function_path[0])
+        command = (
+            file_path,
+            "serverless",
+            "scan",
+            "--address",
+            remoteconfig["PRISMA_CLOUD"]["PRISMA_CONSOLE_URL"],
+            "--user",
+            self._split_prisma_token(prisma_key)[0],
+            "--password",
+            self._split_prisma_token(prisma_key)[1],
+            "--details",
+            function_path[0],
+        )
+        try:
+            result = subprocess.run(
+                command,
+                check=True,
+                stdout=subprocess.PIPE,
+                stderr=subprocess.PIPE,
+                text=True,
+                errors="replace"
+            )
+            print(f"The function {zip_name} was scanned")
+            result = self._parse_scan_results(result.stdout)
+            return result
+
+        except subprocess.CalledProcessError as e:
+            logger.error(
+                f"Error during function scan of {zip_name}"
+                f"\n errorcode: {e.returncode}"
+                f"\n output: {e.output}"
+            )
+    def download_twistcli(self, file_path, prisma_key, prisma_console_url, prisma_api_version) -> int:
+        """
+        Método de instancia separado (lo que usan los tests),
+        delega en el util compat 'basic' para no romper aserciones.
+        """
+        return download_twistcli(file_path, prisma_key, prisma_console_url, prisma_api_version)
+
+    def _parse_scan_results(self, stdout: str) -> dict:
+        def extract_dist(pattern: str) -> dict:
+            match = re.search(pattern, stdout)
+            return {
+                "critical": int(match.group(2)),
+                "high": int(match.group(3)),
+                "medium": int(match.group(4)),
+                "low": int(match.group(5)),
+                "total": int(match.group(1))
+            } if match else {}
+
+        def clean_text(text) -> str:
+            cleaned_text = text.replace('\x1b[0m', '')
+            cleaned_text = cleaned_text.replace('\x1b[91;1m', '')
+            cleaned_text = cleaned_text.replace('\x1b[33;1m','')
+            return cleaned_text
+
+        def extract_table() -> list:
+            lines = stdout.splitlines()
+            table_start = [i for i, line in enumerate(lines) if 'CVE-' in line]
+            table_data = []
+            if table_start:
+                i = table_start[0]
+                while i < len(lines):
+                    if "CVE-" in lines[i]:
+                        row = lines[i]
+                        desc_lines = []
+                        i += 1
+                        while i < len(lines) and not lines[i].strip().startswith("| CVE-") and not "+---" in lines[i]:
+                            desc_lines.append(lines[i])
+                            i += 1
+                        full_row = row + "\n" + "\n".join(desc_lines)
+                        table_data.append(full_row)
+                    else:
+                        i += 1
+
+            vulnerabilities = []
+            for row in table_data:
+                parts = [x.strip() for x in row.split("|")[1:-1]]
+                if len(parts) >= 9:
+                    vuln = {
+                        "id": clean_text(parts[0]),
+                        "severity": clean_text(parts[1]),
+                        "cvss": float(clean_text(parts[2])) if parts[2] else 0.0,
+                        "packageName": clean_text(parts[3]),
+                        "packageVersion": clean_text(parts[4]),
+                        "status": clean_text(parts[5]),
+                        "publishedDate": clean_text(parts[6]),
+                        "discoveredDate": clean_text(parts[7]),
+                        "description": clean_text(parts[8]).replace("u00a0", " ").strip(" .") + "..."
+                    }
+                    vulnerabilities.append(vuln)
+            return vulnerabilities
+
+        name_match = re.search(r"Scan results for: function (.+?)\s", stdout)
+        function_name = name_match.group(1) if name_match else "unknown.zip"
+
+        return {
+            "results": [
+                {
+                    "name": function_name,
+                    "complianceDistribution": extract_dist(r"Compliance found for function .*?: total - (\d+), critical - (\d+), high - (\d+), medium - (\d+), low - (\d+)"),
+                    "complianceScanPassed": "Compliance threshold check results: PASS" in stdout,
+                    "vulnerabilities": extract_table(),
+                    "vulnerabilityDistribution": extract_dist(r"Vulnerabilities found for function .*?: total - (\d+), critical - (\d+), high - (\d+), medium - (\d+), low - (\d+)"),
+                    "vulnerabilityScanPassed": "Vulnerability threshold check results: PASS" in stdout
+                }
+            ]
+        }

devsecops_engine_tools/engine_sca/engine_function/src/infrastructure/driven_adapters/prisma_cloud/prisma_deserialize_output.py

@@ -0,0 +1,59 @@
+from devsecops_engine_tools.engine_sca.engine_function.src.domain.model.gateways.deserealizator_gateway import (
+    DeseralizatorGateway,
+)
+from devsecops_engine_tools.engine_core.src.domain.model.finding import (
+    Finding,
+    Category,
+)
+from datetime import datetime
+from dataclasses import dataclass
+
+@dataclass
+class PrismaDeserealizator(DeseralizatorGateway):
+    def get_list_findings(self, function_scanned: dict) -> "list[Finding]":
+        if function_scanned is None:
+            return function_scanned
+
+        list_open_vulnerabilities = []
+        SEVERITY_MAP = {
+            "unimportant": "low",
+            "unassigned": "low",
+            "negligible": "low",
+            "not yet assigned": "low",
+            "low": "low",
+            "medium": "medium",
+            "moderate": "medium",
+            "high": "high",
+            "important": "high",
+            "critical": "critical",
+        }
+        vuls_data = function_scanned["results"][0]["vulnerabilities"]
+
+        if len(vuls_data) > 0:
+            vulnerabilities = [
+                Finding(
+                    id=vul.get("id", ""),
+                    cvss=float(vul.get("cvss", 0.0)),
+                    where=vul.get("packageName", "")
+                    + ":"
+                    + vul.get("packageVersion", ""),
+                    description=vul.get("description", "")[:150],
+                    severity=SEVERITY_MAP.get(vul.get("severity", ""), ""),
+                    identification_date=vul.get("discoveredDate", ""),
+                    published_date_cve=vul.get("publishedDate", "").replace(
+                        "Z", "+00:00"
+                    ),
+                    module="engine_function",
+                    category=Category.VULNERABILITY,
+                    requirements=vul.get("status", ""),
+                    tool="PrismaCloud",
+                )
+                for vul in vuls_data
+            ]
+        else:
+            vulnerabilities = []
+
+        # Add the Vulnerability instances to the list
+        list_open_vulnerabilities.extend(vulnerabilities)
+
+        return list_open_vulnerabilities

devsecops_engine_tools/engine_sca/engine_function/src/infrastructure/entry_points/entry_point_tool.py

@@ -0,0 +1,61 @@
+import re
+from devsecops_engine_tools.engine_sca.engine_function.src.domain.usecases.function_sca_scan import (
+    FunctionScaScan,
+)
+from devsecops_engine_tools.engine_sca.engine_function.src.domain.usecases.handle_remote_config_patterns import (
+    HandleRemoteConfigPatterns,
+)
+from devsecops_engine_tools.engine_sca.engine_function.src.domain.usecases.set_input_core import (
+    SetInputCore,
+)
+
+
+def init_engine_sca_rm(
+    tool_run,
+    tool_remote,
+    remote_config_source_gateway,
+    tool_deseralizator,
+    dict_args,
+    secret_tool,
+    config_tool,
+):
+    remote_config = remote_config_source_gateway.get_remote_config(
+        dict_args["remote_config_repo"],
+        "engine_sca/engine_function/ConfigTool.json",
+        dict_args["remote_config_branch"],
+    )
+    exclusions = remote_config_source_gateway.get_remote_config(
+        dict_args["remote_config_repo"],
+        "engine_sca/engine_function/Exclusions.json",
+        dict_args["remote_config_branch"],
+    )
+    pipeline_name = tool_remote.get_variable("pipeline_name")
+    regex_clean = remote_config.get("REGEX_CLEAN_END_PIPELINE_NAME")
+    if regex_clean:
+        pattern = re.compile(regex_clean)
+        match = pattern.match(pipeline_name)
+        if match:
+            pipeline_name= match.group(1)
+    handle_remote_config_patterns = HandleRemoteConfigPatterns(
+        remote_config, exclusions, pipeline_name
+    )
+    skip_flag = handle_remote_config_patterns.skip_from_exclusion()
+    scan_flag = handle_remote_config_patterns.ignore_analysis_pattern()
+    if scan_flag and not (skip_flag):
+        function_sca_scan = FunctionScaScan(
+            tool_run,
+            remote_config,
+            tool_remote,
+            tool_deseralizator,
+            dict_args,
+            secret_tool,
+            dict_args["token_engine_container"],
+        )
+    else:
+        print("Tool skipped by DevSecOps policy")
+        dict_args["send_metrics"] = "false"
+        dict_args["use_vulnerability_management"] = "false"
+    input_core = SetInputCore(tool_remote, dict_args, config_tool)
+    function_scan = function_sca_scan.process()
+
+    return function_sca_scan.deseralizator(function_scan), input_core.set_input_core()

devsecops_engine_tools/engine_utilities/twistcli_utils/twistcli_utils.py

@@ -0,0 +1,44 @@
+# tools/devsecops_engine_tools/engine_utilities/twistcli_utils/twistcli_utils.py
+import os
+import stat
+import base64
+import platform
+import logging
+import requests
+
+logger = logging.getLogger(__name__)
+
+def download_twistcli(file_path: str, prisma_key: str, prisma_console_url: str, prisma_api_version: str) -> int:
+    machine = platform.machine()
+    system = platform.system()
+
+    base_url = f"{prisma_console_url}/api/{prisma_api_version}/util"
+
+    os_mapping = {
+        "Linux": "twistcli",
+        "Windows": "windows/twistcli.exe",
+        "Darwin": "osx/twistcli",
+    }
+
+    url = f"{base_url}/{os_mapping.get(system, 'twistcli')}"
+
+    if system == "Linux" and machine == "aarch64":
+        url = f"{base_url}/arm64/twistcli"
+    elif system == "Darwin" and machine == "aarch64":
+        url = f"{base_url}/osx/arm64/twistcli"
+
+    credentials = base64.b64encode(prisma_key.encode()).decode()
+    headers = {"Authorization": f"Basic {credentials}"}
+
+    try:
+        resp = requests.get(url, headers=headers)
+        resp.raise_for_status()
+
+        with open(file_path, "wb") as fh:
+            fh.write(resp.content)
+
+        os.chmod(file_path, stat.S_IRWXU)
+        logger.info("twistcli downloaded and saved to: %s", file_path)
+        return 0
+    except Exception as e:
+        raise ValueError(f"Error downloading twistcli: {e}")

devsecops_engine_tools/version.py

@@ -1 +1 @@
-version = '1.115.2'
+version = '1.116.1'

{devsecops_engine_tools-1.115.2.dist-info → devsecops_engine_tools-1.116.1.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: devsecops-engine-tools
-Version: 1.115.2
+Version: 1.116.1
 Summary: Tool for DevSecOps strategy
 Home-page: https://github.com/bancolombia/devsecops-engine-tools
 Author: Bancolombia DevSecOps Team

{devsecops_engine_tools-1.115.2.dist-info → devsecops_engine_tools-1.116.1.dist-info}/RECORD

@@ -1,9 +1,9 @@
 devsecops_engine_tools/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-devsecops_engine_tools/version.py,sha256=G0FaCPC9BsNo6rIbflyFI_gSlVpN5Z4gG3VYTTSKWaY,20
+devsecops_engine_tools/version.py,sha256=7JkAWunAxlTrOsrHQoxSGbRen6fwMohUIdsQ-egEUik,20
 devsecops_engine_tools/engine_core/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_core/src/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_core/src/applications/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-devsecops_engine_tools/engine_core/src/applications/runner_engine_core.py,sha256=SZwFPlpNNlfQTDZiDgB1Vy4qY323aSjFh5p0RTeVEvs,11343
+devsecops_engine_tools/engine_core/src/applications/runner_engine_core.py,sha256=Z5s0yezXAL2TqgBKIGJta_kEUTPM9A3qFdm7ymbKlEg,11413
 devsecops_engine_tools/engine_core/src/deployment/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_core/src/deployment/infrastructure/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_core/src/domain/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
@@ -28,7 +28,7 @@ devsecops_engine_tools/engine_core/src/domain/model/gateway/vulnerability_manage
 devsecops_engine_tools/engine_core/src/domain/usecases/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_core/src/domain/usecases/break_build.py,sha256=XAhykpsiRRIWfDy6Z3VDIMLExIev1bQbRHKFVF_f9cg,12176
 devsecops_engine_tools/engine_core/src/domain/usecases/handle_risk.py,sha256=_vTTHOKBHsWQFPmL4j41fMonp6DLu8U4FCylDsw5-1Q,10053
-devsecops_engine_tools/engine_core/src/domain/usecases/handle_scan.py,sha256=ML5FscQMlkEexAq3srivpjn2VQkJVsxHApZ5_I8T8Fg,11761
+devsecops_engine_tools/engine_core/src/domain/usecases/handle_scan.py,sha256=78uXAfVs1soYvuZUJQNOYIl283mshwmyM_QA24BvROk,12466
 devsecops_engine_tools/engine_core/src/domain/usecases/metrics_manager.py,sha256=xfaGrDf9rnN32qG_zOD9NN-a62reqQ5KOd2bP6xoRnw,2417
 devsecops_engine_tools/engine_core/src/infrastructure/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
@@ -44,7 +44,7 @@ devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/defect_doj
 devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/github/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/github/github_actions.py,sha256=Mt3ejrNHhkk8HIhQunMDnSW8Sn-65-yyXHGrFpaN744,4649
 devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/printer_pretty_table/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/printer_pretty_table/printer_pretty_table.py,sha256=0p-7HTT6FtW5DpJyGAauYLM1Oso4hPgKLFnLqXNPjbo,5724
+devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/printer_pretty_table/printer_pretty_table.py,sha256=bzY0jNR1nlGn08UNIQ2OOvDMscKKgdxJ25sRdCF376Y,5658
 devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/printer_rich_table/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/printer_rich_table/printer_rich_table.py,sha256=LPr3xSv0I7ENEdu1xj8ve5PXzpUohs7hbQvHjDSaUuE,3028
 devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/runtime_local/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
@@ -226,7 +226,7 @@ devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/driven_ada
 devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/driven_adapters/docker/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/driven_adapters/docker/docker_images.py,sha256=SbPuZbhIIIN2w84iTZ8eOChwjqOt8jXIe5rEjEgvb9g,6365
 devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/driven_adapters/prisma_cloud/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/driven_adapters/prisma_cloud/prisma_cloud_manager_scan.py,sha256=o0QfawD1p2D9emIXarXyl3pgecAAdOc8Fai-EW_QYoA,8030
+devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/driven_adapters/prisma_cloud/prisma_cloud_manager_scan.py,sha256=kQyKQlfw_43tZKBplqjO6dS4vkuEP4WmeRbtZbCdsqw,7106
 devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/driven_adapters/prisma_cloud/prisma_deserialize_output.py,sha256=FXb0jUReJVUdZq_H_Zz-gCueMmWf0AwMiwJB-Ceqv2A,2695
 devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/driven_adapters/trivy_tool/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/driven_adapters/trivy_tool/trivy_manager_scan.py,sha256=r4_f-18fVgZelonjfxQ-9bsHVOzhI8LUxlu5A0UUuaw,3855
@@ -263,6 +263,29 @@ devsecops_engine_tools/engine_sca/engine_dependencies/src/infrastructure/entry_p
 devsecops_engine_tools/engine_sca/engine_dependencies/src/infrastructure/entry_points/entry_point_tool.py,sha256=aXK8sDJ9RMy3WwNiZuxFeYNRTAxG-klPD3XvE4yNROE,3940
 devsecops_engine_tools/engine_sca/engine_dependencies/src/infrastructure/helpers/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_sca/engine_dependencies/src/infrastructure/helpers/get_artifacts.py,sha256=ECczGxi-neekJAJkMBaRCE_1NTqmcv-5tB90F3GKz7w,5234
+devsecops_engine_tools/engine_sca/engine_function/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+devsecops_engine_tools/engine_sca/engine_function/src/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+devsecops_engine_tools/engine_sca/engine_function/src/applications/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+devsecops_engine_tools/engine_sca/engine_function/src/applications/runner_function_scan.py,sha256=AN7XCaAzaSTJ_q8T3l6AF6orQh57tubIkkp9O7xpnJ8,1161
+devsecops_engine_tools/engine_sca/engine_function/src/deployment/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+devsecops_engine_tools/engine_sca/engine_function/src/deployment/infrastructure/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+devsecops_engine_tools/engine_sca/engine_function/src/domain/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+devsecops_engine_tools/engine_sca/engine_function/src/domain/model/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+devsecops_engine_tools/engine_sca/engine_function/src/domain/model/gateways/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+devsecops_engine_tools/engine_sca/engine_function/src/domain/model/gateways/deserealizator_gateway.py,sha256=sE7-GnNSNLWbA1H0mvTwXmxcOJXl8uvw-0hxMyX4oMc,290
+devsecops_engine_tools/engine_sca/engine_function/src/domain/model/gateways/tool_gateway.py,sha256=Pg7YCTRKUCrb1RCXRbfWPrOepjeHC_V912tMvxdEMhQ,272
+devsecops_engine_tools/engine_sca/engine_function/src/domain/usecases/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+devsecops_engine_tools/engine_sca/engine_function/src/domain/usecases/function_sca_scan.py,sha256=s2Fw2hS4wSYd77w0NkV88L_Hx6iFc_qiaeaHwaxpquo,2078
+devsecops_engine_tools/engine_sca/engine_function/src/domain/usecases/handle_remote_config_patterns.py,sha256=JGjtREInEadXCRskhFnlvTqYeDkGNAePR478e_A6JBw,2130
+devsecops_engine_tools/engine_sca/engine_function/src/domain/usecases/set_input_core.py,sha256=h18O2bNba2wOQNoqjBrxf2Z9HLlDrzdxFOQkJ5Bo-QU,2864
+devsecops_engine_tools/engine_sca/engine_function/src/infrastructure/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+devsecops_engine_tools/engine_sca/engine_function/src/infrastructure/driven_adapters/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+devsecops_engine_tools/engine_sca/engine_function/src/infrastructure/driven_adapters/prisma_cloud/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+devsecops_engine_tools/engine_sca/engine_function/src/infrastructure/driven_adapters/prisma_cloud/prisma_cloud_manager_scan.py,sha256=sKHshGZZ3RxNrlzw-3MpHeWYarLb8KVTpyqJ6AkfUZM,6937
+devsecops_engine_tools/engine_sca/engine_function/src/infrastructure/driven_adapters/prisma_cloud/prisma_deserialize_output.py,sha256=ZmTV4-7M5VX-pjruvcnzrAeuOJrdqzoZnvPtyN-oGRI,2126
+devsecops_engine_tools/engine_sca/engine_function/src/infrastructure/entry_points/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+devsecops_engine_tools/engine_sca/engine_function/src/infrastructure/entry_points/entry_point_tool.py,sha256=rW-TaEMZB5tXD8pUiNNg4HV8mYxgqYjIsyXfYJcN6T4,2210
+devsecops_engine_tools/engine_sca/engine_function/src/infrastructure/helpers/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_utilities/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_utilities/settings.py,sha256=CPnDndwVeRgQNml3HVzvytVruDd8dTd1ICHbkMDSgTM,2144
 devsecops_engine_tools/engine_utilities/azuredevops/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
@@ -374,6 +397,8 @@ devsecops_engine_tools/engine_utilities/trivy_utils/infrastructure/__init__.py,s
 devsecops_engine_tools/engine_utilities/trivy_utils/infrastructure/driven_adapters/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_utilities/trivy_utils/infrastructure/driven_adapters/trivy_deserialize_output.py,sha256=Y2X4B9qgNRn1GdRfDHv-rb-v7dNP2Aifmqzq7R3BZFA,5512
 devsecops_engine_tools/engine_utilities/trivy_utils/infrastructure/driven_adapters/trivy_manager_scan_utils.py,sha256=9bUT0V-EFhdik8aNuGTI2i4OnT1YvFT7s7xu5M5sejM,2888
+devsecops_engine_tools/engine_utilities/twistcli_utils/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+devsecops_engine_tools/engine_utilities/twistcli_utils/twistcli_utils.py,sha256=OzgLbt6HIdx87Lm_4qS6s84mkHc_UcGb9DKRo5C9dr4,1351
 devsecops_engine_tools/engine_utilities/utils/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_utilities/utils/api_error.py,sha256=yRbad5gNUHh5nALBKkRDi-d98JPmqAhw-QJEGW4psrw,528
 devsecops_engine_tools/engine_utilities/utils/dataclass_classmethod.py,sha256=S-w6pybVKlyVBhV3HE3IGDvO4ByXxiVePP1JaMnISgM,4302
@@ -383,8 +408,8 @@ devsecops_engine_tools/engine_utilities/utils/name_conversion.py,sha256=ADJrRGax
 devsecops_engine_tools/engine_utilities/utils/printers.py,sha256=amYAr9YQfYgR6jK9a2l26z3oovFPQ3FAKmhq6BKhEBA,623
 devsecops_engine_tools/engine_utilities/utils/session_manager.py,sha256=Z0fdhB3r-dxU0nGSD9zW_B4r2Qol1rUnUCkhFR0U-HQ,487
 devsecops_engine_tools/engine_utilities/utils/utils.py,sha256=HCjS900TBoNcHrC4LaiP-Kf9frVdtagF130qOUgnO2M,6757
-devsecops_engine_tools-1.115.2.dist-info/METADATA,sha256=WsgwnYL8DfGejyuZ2zb962MvO_sR9kX0wErPrPAFWFE,3429
-devsecops_engine_tools-1.115.2.dist-info/WHEEL,sha256=lTU6B6eIfYoiQJTZNc-fyaR6BpL6ehTzU3xGYxn2n8k,91
-devsecops_engine_tools-1.115.2.dist-info/entry_points.txt,sha256=OWAww5aBsGeMv0kWhSgVNB0ySKKpYuJd4dly0ikFPkc,283
-devsecops_engine_tools-1.115.2.dist-info/top_level.txt,sha256=ge6y0X_xBAU1aG3EMWFtl9djbVyg5BxuSp2r2Lg6EQU,23
-devsecops_engine_tools-1.115.2.dist-info/RECORD,,
+devsecops_engine_tools-1.116.1.dist-info/METADATA,sha256=82r4HO801zvv99mFWa_nYtQ4DvVe3vnh3cvPc0Nhh6A,3429
+devsecops_engine_tools-1.116.1.dist-info/WHEEL,sha256=lTU6B6eIfYoiQJTZNc-fyaR6BpL6ehTzU3xGYxn2n8k,91
+devsecops_engine_tools-1.116.1.dist-info/entry_points.txt,sha256=OWAww5aBsGeMv0kWhSgVNB0ySKKpYuJd4dly0ikFPkc,283
+devsecops_engine_tools-1.116.1.dist-info/top_level.txt,sha256=ge6y0X_xBAU1aG3EMWFtl9djbVyg5BxuSp2r2Lg6EQU,23
+devsecops_engine_tools-1.116.1.dist-info/RECORD,,