devsecops-engine-tools 1.14.3__py3-none-any.whl → 1.14.5__py3-none-any.whl

devsecops_engine_tools/engine_sast/engine_secret/src/domain/model/DeserializeConfigTool.py

@@ -12,3 +12,4 @@ class DeserializeConfigTool:
         self.enable_custom_rules = json_data[tool]["ENABLE_CUSTOM_RULES"]
         self.external_dir_owner = json_data[tool]["EXTERNAL_DIR_OWNER"]
         self.external_dir_repo = json_data[tool]["EXTERNAL_DIR_REPOSITORY"]
+        self.tool_version = json_data[tool]["VERSION"]

devsecops_engine_tools/engine_sast/engine_secret/src/domain/model/gateway/tool_gateway.py

@@ -3,7 +3,7 @@ from devsecops_engine_tools.engine_sast.engine_secret.src.domain.model.Deseriali
 
 class ToolGateway(metaclass=ABCMeta):
     @abstractmethod
-    def install_tool(self, agent_os: str, agent_temp_dir:str) -> any:
+    def install_tool(self, agent_os: str, agent_temp_dir:str, version: str) -> any:
         "install tool"
     @abstractmethod
     def run_tool_secret_scan(self,
@@ -13,5 +13,6 @@ class ToolGateway(metaclass=ABCMeta):
                             repository_name: str,
                             config_tool: DeserializeConfigTool,
                             secret_tool,
-                            secret_external_checks) -> str:
+                            secret_external_checks,
+                            agent_tem_dir:str) -> str:
         "run tool secret scan"

devsecops_engine_tools/engine_sast/engine_secret/src/domain/usecases/secret_scan.py

@@ -34,7 +34,7 @@ class SecretScan:
         file_path_findings = ""
         secret_external_checks=dict_args["token_external_checks"]
         if skip_tool == False:
-            self.tool_gateway.install_tool(self.devops_platform_gateway.get_variable("os"), self.devops_platform_gateway.get_variable("temp_directory"))
+            self.tool_gateway.install_tool(self.devops_platform_gateway.get_variable("os"), self.devops_platform_gateway.get_variable("temp_directory"), config_tool.tool_version)
             files_pullrequest = self.git_gateway.get_files_pull_request(
                 self.devops_platform_gateway.get_variable("path_directory"),
                 self.devops_platform_gateway.get_variable("target_branch"),
@@ -52,7 +52,8 @@ class SecretScan:
                     self.devops_platform_gateway.get_variable("repository"),
                     config_tool,
                     secret_tool,
-                    secret_external_checks)
+                    secret_external_checks,
+                    self.devops_platform_gateway.get_variable("temp_directory"))
             finding_list = self.tool_deserialize.get_list_vulnerability(
                 findings,
                 self.devops_platform_gateway.get_variable("os"),

devsecops_engine_tools/engine_sast/engine_secret/src/infrastructure/driven_adapters/trufflehog/trufflehog_run.py

@@ -19,26 +19,35 @@ result = []
 
 
 class TrufflehogRun(ToolGateway):
-    def install_tool(self, agent_os, agent_temp_dir) -> any:
+    def install_tool(self, agent_os, agent_temp_dir, tool_version) -> any:
         reg_exp_os = r"Windows"
         check_os = re.search(reg_exp_os, agent_os)
+        reg_exp_tool = fr"{tool_version}"
         if check_os:
-            self.run_install_win(agent_temp_dir)
+            command = f"{agent_temp_dir}/trufflehog.exe --version"
+            subprocess.run(command, shell=True)
+            result = subprocess.run(command, capture_output=True, shell=True)
+            output = result.stderr.strip()
+            check_tool = re.search(reg_exp_tool, output.decode("utf-8"))
+            if not check_tool:
+                self.run_install_win(agent_temp_dir, tool_version)
+                subprocess.run(command, shell=True)
         else:
             command = f"trufflehog --version"
+            subprocess.run(command, shell=True)
             result = subprocess.run(command, capture_output=True, shell=True)
             output = result.stderr.strip()
-            reg_exp = r"not found"
-            check_tool = re.search(reg_exp, output.decode("utf-8"))
-            if check_tool:
-                self.run_install()
+            check_tool = re.search(reg_exp_tool, output.decode("utf-8"))
+            if not check_tool:
+                self.run_install(tool_version)
+                subprocess.run(command, shell=True)
 
-    def run_install(self):
-        command = f"curl -sSfL https://raw.githubusercontent.com/trufflesecurity/trufflehog/main/scripts/install.sh | sh -s -- -b /usr/local/bin"
-        subprocess.run(command, capture_output=True, shell=True)
+    def run_install(self, tool_version):
+        command = f"curl -sSfL https://raw.githubusercontent.com/trufflesecurity/trufflehog/main/scripts/install.sh | sh -s -- -b /usr/local/bin v{tool_version}"
+        res = subprocess.run(command, capture_output=True, shell=True)
 
-    def run_install_win(self, agent_temp_dir):
-        command_complete = f"powershell -Command [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; [Net.ServicePointManager]::SecurityProtocol; New-Item -Path {agent_temp_dir} -ItemType Directory -Force; Invoke-WebRequest -Uri 'https://raw.githubusercontent.com/trufflesecurity/trufflehog/main/scripts/install.sh' -OutFile {agent_temp_dir}\install_trufflehog.sh; bash {agent_temp_dir}\install_trufflehog.sh -b C:/Trufflehog/bin; $env:Path += ';C:/Trufflehog/bin'; C:/Trufflehog/bin/trufflehog.exe --version"
+    def run_install_win(self, agent_temp_dir, tool_version):
+        command_complete = f"powershell -Command [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; [Net.ServicePointManager]::SecurityProtocol; New-Item -Path {agent_temp_dir} -ItemType Directory -Force; Invoke-WebRequest -Uri 'https://github.com/trufflesecurity/trufflehog/releases/download/v{tool_version}/trufflehog_{tool_version}_windows_amd64.tar.gz' -OutFile {agent_temp_dir}/trufflehog.tar.gz -UseBasicParsing; tar -xzf {agent_temp_dir}/trufflehog.tar.gz -C {agent_temp_dir}; Remove-Item {agent_temp_dir}/trufflehog.tar.gz; $env:Path += '; + {agent_temp_dir}'; & {agent_temp_dir}/trufflehog.exe --version"
         process = subprocess.Popen(
             command_complete, stdout=subprocess.PIPE, stderr=subprocess.PIPE, shell=True
         )
@@ -52,15 +61,16 @@ class TrufflehogRun(ToolGateway):
         repository_name,
         config_tool,
         secret_tool,
-        secret_external_checks
+        secret_external_checks,
+        agent_temp_dir
     ):
         trufflehog_command = "trufflehog"
         if "Windows" in agent_os:
-            trufflehog_command = "C:/Trufflehog/bin/trufflehog.exe"
+            trufflehog_command = f"{agent_temp_dir}/trufflehog.exe"
         with open(f"{agent_work_folder}/excludedPath.txt", "w") as file:
             file.write("\n".join(config_tool.exclude_path))
         exclude_path = f"{agent_work_folder}/excludedPath.txt"
-        include_paths = self.config_include_path(files_commits, agent_work_folder)
+        include_paths = self.config_include_path(files_commits, agent_work_folder, agent_os)
         enable_custom_rules = config_tool.enable_custom_rules.lower()
         secret = None
         
@@ -87,7 +97,7 @@ class TrufflehogRun(ToolGateway):
         findings, file_findings = self.create_file(self.decode_output(results), agent_work_folder)
         return  findings, file_findings
 
-    def config_include_path(self, files, agent_work_folder):
+    def config_include_path(self, files, agent_work_folder, agent_os):
         chunks = []
         if len(files) != 0:
             chunk_size = (len(files) + 3) // 4
@@ -102,6 +112,8 @@ class TrufflehogRun(ToolGateway):
             include_paths.append(file_path)
             with open(file_path, "w") as file:
                 for file_pr_path in chunk:
+                    if "Windows" in agent_os:
+                        file_pr_path = str(file_pr_path).replace("/","\\\\")
                     file.write(f"{file_pr_path.strip()}\n")
         return include_paths
 
@@ -119,7 +131,7 @@ class TrufflehogRun(ToolGateway):
         if enable_custom_rules == "true":
             command = command.replace("--no-verification --json", "--config /tmp/rules/trufflehog/custom-rules.yaml --no-verification --json")
 
-        result = subprocess.run(command, capture_output=True, shell=True, text=True)
+        result = subprocess.run(command, capture_output=True, shell=True, text=True, encoding='utf-8')
         return result.stdout.strip()
 
     def decode_output(self, results):

devsecops_engine_tools/version.py

@@ -1 +1 @@
-version = '1.14.3'
+version = '1.14.5'

{devsecops_engine_tools-1.14.3.dist-info → devsecops_engine_tools-1.14.5.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: devsecops-engine-tools
-Version: 1.14.3
+Version: 1.14.5
 Summary: Tool for DevSecOps strategy
 Home-page: https://github.com/bancolombia/devsecops-engine-tools
 Author: Bancolombia DevSecOps Team

{devsecops_engine_tools-1.14.3.dist-info → devsecops_engine_tools-1.14.5.dist-info}/RECORD

@@ -1,5 +1,5 @@
 devsecops_engine_tools/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-devsecops_engine_tools/version.py,sha256=jCNgTy1lUd0XCm0S_zNPP0-rl8thm2OZhsp51ajMVYc,19
+devsecops_engine_tools/version.py,sha256=uy9W6zekNl77FZXiSrRUy8V36yn8DOoa_1rPXxHTEwE,19
 devsecops_engine_tools/engine_core/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_core/src/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_core/src/applications/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
@@ -140,19 +140,19 @@ devsecops_engine_tools/engine_sast/engine_secret/src/applications/runner_secret_
 devsecops_engine_tools/engine_sast/engine_secret/src/deployment/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_sast/engine_secret/src/deployment/infrastructure/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_sast/engine_secret/src/domain/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-devsecops_engine_tools/engine_sast/engine_secret/src/domain/model/DeserializeConfigTool.py,sha256=BSRubkd0WGZbhHleFl4PIPLScCTTUI8KnXO6B_xsyeo,828
+devsecops_engine_tools/engine_sast/engine_secret/src/domain/model/DeserializeConfigTool.py,sha256=2YXBnWA3DGiEKNpRMgVk2CmgOFfJPzDbgexXHjJpaBU,884
 devsecops_engine_tools/engine_sast/engine_secret/src/domain/model/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_sast/engine_secret/src/domain/model/gateway/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_sast/engine_secret/src/domain/model/gateway/gateway_deserealizator.py,sha256=4fYPengHW3K0uVP6wHgOiNu-gRb08m78E7QZayZ2LC4,441
-devsecops_engine_tools/engine_sast/engine_secret/src/domain/model/gateway/tool_gateway.py,sha256=KncnzIAmjmnt3qNWiRY0bnEvk_L68V16xQIILsWjhUg,778
+devsecops_engine_tools/engine_sast/engine_secret/src/domain/model/gateway/tool_gateway.py,sha256=0KIesfLrmRqRId9r-domGjca4oLNyDzSI4jajjjX_Qo,840
 devsecops_engine_tools/engine_sast/engine_secret/src/domain/usecases/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-devsecops_engine_tools/engine_sast/engine_secret/src/domain/usecases/secret_scan.py,sha256=oo1_vnrWagU1u6W9-xA_3OrviFNgzucT2phzcWwE7zw,4249
+devsecops_engine_tools/engine_sast/engine_secret/src/domain/usecases/secret_scan.py,sha256=unTB8GwpW45Mv0F4QBcUaVndovT0DdQjJKuFBiNCDhI,4357
 devsecops_engine_tools/engine_sast/engine_secret/src/domain/usecases/set_input_core.py,sha256=k0LZd9PJpqEDns6DLYRGu9DzpRZeFsxAnowcjP5Rml4,2838
 devsecops_engine_tools/engine_sast/engine_secret/src/infrastructure/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_sast/engine_secret/src/infrastructure/driven_adapters/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_sast/engine_secret/src/infrastructure/driven_adapters/trufflehog/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_sast/engine_secret/src/infrastructure/driven_adapters/trufflehog/trufflehog_deserealizator.py,sha256=mrSqPrkMiikxQ_uY-rF2I8QvicsOMdMBzTC8CTV3Wk8,2392
-devsecops_engine_tools/engine_sast/engine_secret/src/infrastructure/driven_adapters/trufflehog/trufflehog_run.py,sha256=bJCl2u0QuMOFi8vxmlb2e3PlrjQCg0ayf6IAV1tmMBI,7268
+devsecops_engine_tools/engine_sast/engine_secret/src/infrastructure/driven_adapters/trufflehog/trufflehog_run.py,sha256=ALM9UNfXc2La9TbhCxJmO7yzxWCBk8ncZp_eLWMwz58,8172
 devsecops_engine_tools/engine_sast/engine_secret/src/infrastructure/entry_points/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_sast/engine_secret/src/infrastructure/entry_points/entry_point_tool.py,sha256=NiA5-pRL6-tMuOa2Al-wIYq3uIMFBQrJd0w7ur16kgs,1049
 devsecops_engine_tools/engine_sca/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
@@ -287,8 +287,8 @@ devsecops_engine_tools/engine_utilities/utils/name_conversion.py,sha256=ADJrRGax
 devsecops_engine_tools/engine_utilities/utils/printers.py,sha256=amYAr9YQfYgR6jK9a2l26z3oovFPQ3FAKmhq6BKhEBA,623
 devsecops_engine_tools/engine_utilities/utils/session_manager.py,sha256=yNtlT-8Legz1sHbGPH8LNYjL-LgDUE0zXG2rYjiab7U,290
 devsecops_engine_tools/engine_utilities/utils/utils.py,sha256=esLnDBxP9MQBvV8noVohTrdWSVuljTKRpZgrn2kaD_c,192
-devsecops_engine_tools-1.14.3.dist-info/METADATA,sha256=i8mY2GA8BKQKwpU8dB17DMJZdTbxYEzNq5XVlINm7z4,10854
-devsecops_engine_tools-1.14.3.dist-info/WHEEL,sha256=R0nc6qTxuoLk7ShA2_Y-UWkN8ZdfDBG2B6Eqpz2WXbs,91
-devsecops_engine_tools-1.14.3.dist-info/entry_points.txt,sha256=9IjXF_7Zpgowq_SY6OSmsA9vZze18a8_AeHwkQVrgKk,131
-devsecops_engine_tools-1.14.3.dist-info/top_level.txt,sha256=ge6y0X_xBAU1aG3EMWFtl9djbVyg5BxuSp2r2Lg6EQU,23
-devsecops_engine_tools-1.14.3.dist-info/RECORD,,
+devsecops_engine_tools-1.14.5.dist-info/METADATA,sha256=zQrb0gaGCqcXqGJVqBrYoNAeY9CAODIC45JoEm9YkpM,10854
+devsecops_engine_tools-1.14.5.dist-info/WHEEL,sha256=R0nc6qTxuoLk7ShA2_Y-UWkN8ZdfDBG2B6Eqpz2WXbs,91
+devsecops_engine_tools-1.14.5.dist-info/entry_points.txt,sha256=9IjXF_7Zpgowq_SY6OSmsA9vZze18a8_AeHwkQVrgKk,131
+devsecops_engine_tools-1.14.5.dist-info/top_level.txt,sha256=ge6y0X_xBAU1aG3EMWFtl9djbVyg5BxuSp2r2Lg6EQU,23
+devsecops_engine_tools-1.14.5.dist-info/RECORD,,