PyPI - devsecops-engine-tools - Versions diffs - 1.144.0__tar.gz → 1.144.2__tar.gz - Mend

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: devsecops-engine-tools
-Version: 1.144.0
+Version: 1.144.2
 Summary: Tool for DevSecOps strategy
 Home-page: https://github.com/bancolombia/devsecops-engine-tools
 Author: Bancolombia DevSecOps Team
@@ -29,7 +29,7 @@ Requires-Dist: rich==14.1.0
 Requires-Dist: cpe==1.3.1
 Requires-Dist: packageurl-python==0.13.4
 Requires-Dist: ruamel.yaml==0.18.15
-Requires-Dist: Authlib==1.6.7
+Requires-Dist: Authlib==1.6.9
 Requires-Dist: PyJWT==2.12.0
 Requires-Dist: sympy==1.14.0
 Requires-Dist: urllib3==2.6.3

@@ -138,12 +138,10 @@ class ContextExtractionManager(ContextExtractionGateway):
         self._risk_score_gateway.get_risk_score(findings_for_priority, config_tool, module_name)
         # Update context objects with calculated priorities
+        # Store only the scale as a string for all modules
         for context_item, finding in zip(context_list, findings_for_priority):
             if finding.priority:
-                context_item.priority = {
-                    "score": finding.priority.score,
-                    "scale": finding.priority.scale
-                }
+                context_item.priority = finding.priority.scale
     def _print_context(self, module_name: str, context_list: List) -> None:
         context_key = self._context_key_mapping.get(module_name, f"{module_name}_context")

@@ -13,4 +13,4 @@ class ContextIac:
     description: str
     module: str
     tool: str
-    priority: Optional[dict] = field(default=None)
+    priority: Optional[str] = field(default=None)

@@ -144,14 +144,7 @@ class CheckovTool(ToolGateway):
                 context_iac_list.append(context_iac)
-            print("===== BEGIN CONTEXT OUTPUT =====")
-            print(
-                json.dumps(
-                    {"iac_context": [obj.__dict__ for obj in context_iac_list]},
-                    indent=4,
-                )
-            )
-            print("===== END CONTEXT OUTPUT =====")
+            return context_iac_list
     def _retryable_install_package(self, package: str, version: str) -> bool:
         MAX_RETRIES = 3

@@ -22,4 +22,4 @@ class ContextContainer:
     last_modified_date: Optional[str]
     references: Optional[List[str]]
     source_tool: str
-    priority: Optional[dict] = field(default=None)
+    priority: Optional[str] = field(default=None)

@@ -13,6 +13,7 @@ from devsecops_engine_tools.engine_utilities.twistcli_utils.twistcli_utils impor
 logger = MyLogger.__call__(**settings.SETTING_LOGGER).get_logger()
+ANSI_ESCAPE_RE = re.compile(r"\x1B\[[0-?]*[ -/]*[@-~]")
 class PrismaCloudManagerScan:
@@ -165,10 +166,8 @@ class PrismaCloudManagerScan:
             } if match else {}
         def clean_text(text) -> str:
-            cleaned_text = text.replace('\x1b[0m', '')
-            cleaned_text = cleaned_text.replace('\x1b[91;1m', '')
-            cleaned_text = cleaned_text.replace('\x1b[33;1m','')
-            return cleaned_text
+            cleaned_text = ANSI_ESCAPE_RE.sub("", str(text))
+            return cleaned_text.strip()
         def extract_table() -> list:
             lines = stdout.splitlines()

@@ -7,6 +7,9 @@ from devsecops_engine_tools.engine_core.src.domain.model.finding import (
 )
 from datetime import datetime
 from dataclasses import dataclass
+import re
+ANSI_ESCAPE_RE = re.compile(r"\x1B\[[0-?]*[ -/]*[@-~]")
 @dataclass
 class PrismaDeserealizator(DeseralizatorGateway):
@@ -29,6 +32,10 @@ class PrismaDeserealizator(DeseralizatorGateway):
         }
         vuls_data = function_scanned["results"][0]["vulnerabilities"]
+        def normalize_severity(value: str) -> str:
+            clean_value = ANSI_ESCAPE_RE.sub("", str(value or "")).strip().lower()
+            return SEVERITY_MAP.get(clean_value, "")
         if len(vuls_data) > 0:
             vulnerabilities = [
                 Finding(
@@ -38,7 +45,7 @@ class PrismaDeserealizator(DeseralizatorGateway):
                     + ":"
                     + vul.get("packageVersion", ""),
                     description=vul.get("description", "")[:150],
-                    severity=SEVERITY_MAP.get(vul.get("severity", ""), ""),
+                    severity=normalize_severity(vul.get("severity", "")),
                     identification_date=vul.get("discoveredDate", ""),
                     published_date_cve=vul.get("publishedDate", "").replace(
                         "Z", "+00:00"

	@@ -0,0 +1 @@
1	+ version = '1.144.2'

	@@ -1 +0,0 @@
1	- version = '1.144.0'

devsecops-engine-tools 1.144.0__tar.gz → 1.144.2__tar.gz