devsecops-engine-tools 1.135.0__tar.gz → 1.136.0__tar.gz

{devsecops_engine_tools-1.135.0 → devsecops_engine_tools-1.136.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: devsecops-engine-tools
-Version: 1.135.0
+Version: 1.136.0
 Summary: Tool for DevSecOps strategy
 Home-page: https://github.com/bancolombia/devsecops-engine-tools
 Author: Bancolombia DevSecOps Team

{devsecops_engine_tools-1.135.0 → devsecops_engine_tools-1.136.0}/devsecops_engine_tools/engine_core/src/domain/model/report.py

@@ -18,12 +18,10 @@ class Report:
         self.risk_score = kwargs.get("risk_score", "")
         self.created = kwargs.get("created", "")
         self.publish_date = kwargs.get("publish_date", "")
-        self.last_reviewed = kwargs.get("last_reviewed", "")
         self.last_status_update = kwargs.get("last_status_update", "")
         self.accepted_risks = kwargs.get("accepted_risks", "")
         self.transfer_finding = kwargs.get("transfer_finding", "")
         self.epss_score = kwargs.get("epss_score", "")
-        self.epss_percentile = kwargs.get("epss_percentile", "")
         self.mitigated = kwargs.get("mitigated", "")
         self.vul_description = kwargs.get("vul_description", "")
         self.risk_accepted = kwargs.get("risk_accepted", "")

{devsecops_engine_tools-1.135.0 → devsecops_engine_tools-1.136.0}/devsecops_engine_tools/engine_core/src/domain/usecases/handle_risk.py

@@ -49,9 +49,9 @@ class HandleRisk:
                 remote_config,
             )
         except ExceptionGettingFindings as e:
-            logger.error(
-                "Error getting finding list in handle risk: {0}".format(str(e))
-            )
+            error_msg = f"Cannot retrieve findings from VM for service '{service}': {str(e)}"
+            logger.error(error_msg)
+            raise RuntimeError(error_msg) from e
 
     def _filter_engagements(self, engagements, service, initial_services, risk_config):
         filtered_engagements = []

{devsecops_engine_tools-1.135.0 → devsecops_engine_tools-1.136.0}/devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/defect_dojo/defect_dojo.py

@@ -375,6 +375,7 @@ class DefectDojoPlatform(VulnerabilityManagementGateway):
                     "LIMITS_QUERY"
                 ],
                 "duplicate": "false",
+                "fields": "id,vulnerability_ids,vuln_id_from_tool,component_name,component_version,endpoints,file_path,tags,severity,age,active,risk_status,created,publish_date,last_status_update,accepted_risks,transfer_finding,epss_score,is_mitigated,description,risk_accepted,false_p,out_of_scope,service,unique_id_from_tool,priority,priority_classification",
             }
             max_retries = config_tool["VULNERABILITY_MANAGER"]["DEFECT_DOJO"][
                 "MAX_RETRIES_QUERY"
@@ -419,9 +420,7 @@ class DefectDojoPlatform(VulnerabilityManagementGateway):
             return all_findings, all_exclusions
 
         except Exception as ex:
-            raise ExceptionGettingFindings(
-                f"Error getting all findings with the following error: {str(ex)}"
-            )
+            raise ExceptionGettingFindings(ex)
 
     def get_active_engagements(
         self, engagement_name, dict_args, secret_tool, config_tool
@@ -784,32 +783,39 @@ class DefectDojoPlatform(VulnerabilityManagementGateway):
                 return date_fn(matching_finding.create_date), date_fn(matching_finding.expiration_date)
             return date_fn(None), date_fn(None)
 
-        reason_to_dates = {
-            self.FALSE_POSITIVE: lambda: (
-                date_fn(finding.last_status_update),
-                date_fn(None),
-            ),
-            self.OUT_OF_SCOPE: lambda: (
-                date_fn(finding.last_status_update),
-                date_fn(None),
-            ),
-            self.TRANSFERRED_FINDING: lambda: (
-                date_fn(finding.transfer_finding.date),
-                date_fn(finding.transfer_finding.expiration_date),
-            ),
-            self.RISK_ACCEPTED: lambda: (
-                date_fn(finding.accepted_risks[-1]["created"]),
-                date_fn(finding.accepted_risks[-1]["expiration_date"]),
-            ),
-            self.ON_WHITELIST: lambda: get_dates_from_whitelist(
-                get_vuln_id(finding, tool), kwargs.get("white_list", [])
-            ),
-        }
+        try:
+            reason_to_dates = {
+                self.FALSE_POSITIVE: lambda: (
+                    date_fn(finding.last_status_update),
+                    date_fn(None),
+                ),
+                self.OUT_OF_SCOPE: lambda: (
+                    date_fn(finding.last_status_update),
+                    date_fn(None),
+                ),
+                self.TRANSFERRED_FINDING: lambda: (
+                    date_fn(finding.transfer_finding.date),
+                    date_fn(finding.transfer_finding.expiration_date),
+                ),
+                self.RISK_ACCEPTED: lambda: (
+                    date_fn(finding.accepted_risks[-1]["created"]),
+                    date_fn(finding.accepted_risks[-1]["expiration_date"]),
+                ),
+                self.ON_WHITELIST: lambda: get_dates_from_whitelist(
+                    get_vuln_id(finding, tool), kwargs.get("white_list", [])
+                ),
+            }
 
-        create_date, expired_date = reason_to_dates.get(
-            reason, lambda: (date_fn(None), date_fn(None))
-        )()
-        return create_date, expired_date
+            create_date, expired_date = reason_to_dates.get(
+                reason, lambda: (date_fn(None), date_fn(None))
+            )()
+            return create_date, expired_date
+            
+        except Exception as e:
+            finding_id = finding.vm_id if tool == "engine_risk" else get_vuln_id(finding, tool)
+            error_msg = f"Error processing dates for reason '{reason}' of finding '{finding_id}': {str(e)}"
+            logger.error(error_msg)
+            raise RuntimeError(error_msg)
 
     def _create_exclusion(self, finding, date_fn, tool, reason, **kwargs):
         create_date, expired_date = self._date_reason_based(
@@ -862,7 +868,6 @@ class DefectDojoPlatform(VulnerabilityManagementGateway):
             vm_id_url=f"{host_dd}/finding/{finding.id}",
             id=finding.vulnerability_ids,
             vuln_id_from_tool=finding.vuln_id_from_tool,
-            status=finding.display_status,
             component_name=finding.component_name,
             component_version=finding.component_version,
             file_path=finding.file_path,
@@ -875,12 +880,10 @@ class DefectDojoPlatform(VulnerabilityManagementGateway):
             risk_status=finding.risk_status,
             created=finding.created,
             publish_date=finding.publish_date,
-            last_reviewed=finding.last_reviewed,
             last_status_update=finding.last_status_update,
             accepted_risks=finding.accepted_risks,
             transfer_finding=finding.transfer_finding,
             epss_score=finding.epss_score,
-            epss_percentile=finding.epss_percentile,
             mitigated=finding.is_mitigated,
             vul_description=finding.description,
             risk_accepted=finding.risk_accepted,

devsecops_engine_tools-1.136.0/devsecops_engine_tools/version.py

@@ -0,0 +1 @@
+version = '1.136.0'

{devsecops_engine_tools-1.135.0 → devsecops_engine_tools-1.136.0}/devsecops_engine_tools.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: devsecops-engine-tools
-Version: 1.135.0
+Version: 1.136.0
 Summary: Tool for DevSecOps strategy
 Home-page: https://github.com/bancolombia/devsecops-engine-tools
 Author: Bancolombia DevSecOps Team

devsecops_engine_tools-1.135.0/devsecops_engine_tools/version.py

@@ -1 +0,0 @@
-version = '1.135.0'