devsecops-engine-tools 1.13.3__tar.gz → 1.14.0__tar.gz

{devsecops_engine_tools-1.13.3 → devsecops_engine_tools-1.14.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: devsecops-engine-tools
-Version: 1.13.3
+Version: 1.14.0
 Summary: Tool for DevSecOps strategy
 Home-page: https://github.com/bancolombia/devsecops-engine-tools
 Author: Bancolombia DevSecOps Team

{devsecops_engine_tools-1.13.3 → devsecops_engine_tools-1.14.0}/devsecops_engine_tools/engine_core/src/domain/usecases/handle_risk.py

@@ -51,9 +51,7 @@ class HandleRisk:
                 "Error getting finding list in handle risk: {0}".format(str(e))
             )
 
-    def _filter_engagements(
-        self, engagements, service, endings_to_exclude, risk_config
-    ):
+    def _filter_engagements(self, engagements, service, risk_config):
         filtered_engagements = []
         min_word_length = risk_config["HANDLE_SERVICE_NAME"]["MIN_WORD_LENGTH"]
         words = [
@@ -65,21 +63,22 @@ class HandleRisk:
         ]
         check_words_regex = risk_config["HANDLE_SERVICE_NAME"]["REGEX_CHECK_WORDS"]
         min_word_amount = risk_config["HANDLE_SERVICE_NAME"]["MIN_WORD_AMOUNT"]
+        endings = risk_config["HANDLE_SERVICE_NAME"]["CHECK_ENDING"]
 
         for engagement in engagements:
-            if service.lower() in engagement.name.lower():
+            if service.lower() == engagement.name.lower():
                 filtered_engagements += [engagement.name]
             elif re.search(check_words_regex, engagement.name.lower()) and (
                 sum(1 for word in words if word.lower() in engagement.name.lower())
                 >= min_word_amount
             ):
                 filtered_engagements += [engagement.name]
-        if endings_to_exclude:
-            filtered_engagements = [
-                engagement
-                for engagement in filtered_engagements
-                if not any(engagement.endswith(ending) for ending in endings_to_exclude)
-            ]
+            elif endings:
+                if any(
+                    (service.lower() + ending.lower() == engagement.name.lower())
+                    for ending in endings
+                ):
+                    filtered_engagements += [engagement.name]
 
         return filtered_engagements
 
@@ -144,16 +143,10 @@ class HandleRisk:
         service_list = []
 
         if risk_config["HANDLE_SERVICE_NAME"]["ENABLED"].lower() == "true":
-            exclusive_endings = risk_config["HANDLE_SERVICE_NAME"]["EXCLUSIVE_ENDING"]
-            endings_to_exclude = [
-                ending
-                for ending in exclusive_endings
-                if not pipeline_name.endswith(ending)
-            ]
             service = next(
                 (
                     pipeline_name.replace(ending, "")
-                    for ending in exclusive_endings
+                    for ending in risk_config["HANDLE_SERVICE_NAME"]["CHECK_ENDING"]
                     if pipeline_name.endswith(ending)
                 ),
                 pipeline_name,
@@ -171,7 +164,7 @@ class HandleRisk:
                     service_code, dict_args, secret_tool, remote_config
                 )
                 service_list += self._filter_engagements(
-                    engagements, service, endings_to_exclude, risk_config
+                    engagements, service, risk_config
                 )
 
         service_list += [service]

{devsecops_engine_tools-1.13.3 → devsecops_engine_tools-1.14.0}/devsecops_engine_tools/engine_risk/src/domain/usecases/break_build.py

@@ -244,7 +244,10 @@ class BreakBuild:
                 report.risk_score = round(
                     remote_config["WEIGHTS"]["severity"].get(report.severity.lower(), 0)
                     + remote_config["WEIGHTS"]["epss_score"] * report.epss_score
-                    + remote_config["WEIGHTS"]["age"] * report.age
+                    + min(
+                        remote_config["WEIGHTS"]["age"] * report.age,
+                        remote_config["WEIGHTS"]["max_age"],
+                    )
                     + sum(
                         remote_config["WEIGHTS"]["tags"].get(tag, 0)
                         for tag in report.tags

devsecops_engine_tools-1.14.0/devsecops_engine_tools/version.py

@@ -0,0 +1 @@
+version = '1.14.0'

{devsecops_engine_tools-1.13.3 → devsecops_engine_tools-1.14.0}/devsecops_engine_tools.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: devsecops-engine-tools
-Version: 1.13.3
+Version: 1.14.0
 Summary: Tool for DevSecOps strategy
 Home-page: https://github.com/bancolombia/devsecops-engine-tools
 Author: Bancolombia DevSecOps Team

devsecops_engine_tools-1.13.3/devsecops_engine_tools/version.py

@@ -1 +0,0 @@
-version = '1.13.3'