devsecops-engine-tools 1.158.0__tar.gz → 1.159.0__tar.gz

{devsecops_engine_tools-1.158.0 → devsecops_engine_tools-1.159.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: devsecops-engine-tools
-Version: 1.158.0
+Version: 1.159.0
 Summary: Tool for DevSecOps strategy
 Home-page: https://github.com/bancolombia/devsecops-engine-tools
 Author: Bancolombia DevSecOps Team

devsecops_engine_tools-1.159.0/devsecops_engine_tools/engine_sca/engine_container/src/domain/usecases/set_input_core.py

@@ -0,0 +1,93 @@
+import re
+
+from devsecops_engine_tools.engine_core.src.domain.model.input_core import InputCore
+from devsecops_engine_tools.engine_core.src.domain.model.exclusions import Exclusions
+from devsecops_engine_tools.engine_core.src.domain.model.threshold import Threshold
+from devsecops_engine_tools.engine_utilities.utils.utils import Utils
+
+
+class SetInputCore:
+    def __init__(self, remote_config, exclusions, pipeline_name, tool, stage):
+        self.remote_config = remote_config
+        self.exclusions = exclusions
+        self.pipeline_name = pipeline_name
+        self.tool = tool
+        self.stage = stage
+
+    def _build_exclusions(self, items, base_image_list, filter_by_base_image):
+        list_exclusions = []
+        for item in items:
+            if filter_by_base_image:
+                key_image_exception = self.remote_config.get("GET_IMAGE_BASE", {}).get("LABEL_KEYS", {}).get("key_image_exception", None)
+                source_images = item.get(key_image_exception, [])
+                if source_images and not base_image_list:
+                    continue
+                if source_images and not any(img in source for img in base_image_list for source in source_images):
+                    continue
+
+            list_exclusions.append(
+                Exclusions(
+                    id=item.get("id", ""),
+                    where=item.get("where", ""),
+                    cve_id=item.get("cve_id", ""),
+                    create_date=item.get("create_date", ""),
+                    expired_date=item.get("expired_date", ""),
+                    severity=item.get("severity", ""),
+                    priority=item.get("priority", ""),
+                    hu=item.get("hu", ""),
+                    reason=item.get("reason", "DevSecOps policy"),
+                )
+            )
+        return list_exclusions
+
+    def get_exclusions(self, exclusions_data, pipeline_name, tool, base_image):
+        list_exclusions = []
+        base_image_list = base_image[0][0] if base_image else None
+        print("The base image used is:", base_image_list)
+        for key, value in exclusions_data.items():
+            if key not in {"All", pipeline_name} or not value.get(tool):
+                continue
+
+            list_exclusions.extend(
+                self._build_exclusions(value[tool], base_image_list, key == "All")
+            )
+
+        if pipeline_name not in exclusions_data:
+            for pattern, values in exclusions_data.get(
+                "BY_PATTERN_SEARCH", {}
+            ).items():
+                if re.match(pattern, pipeline_name, re.IGNORECASE):
+                    if values.get(tool):
+                        list_exclusions.extend(
+                            self._build_exclusions(values[tool], base_image_list, False)
+                        )
+                    break
+
+        return list_exclusions
+
+    def set_input_core(self, image_scanned,base_image):
+        """
+        Set the input core.
+
+        Returns:
+            dict: Input core.
+        """
+        return InputCore(
+            self.get_exclusions(
+                self.exclusions,
+                self.pipeline_name,
+                self.tool,
+                base_image
+            ),
+            Utils.update_threshold(
+                self,
+                Threshold(self.remote_config["THRESHOLD"]),
+                self.exclusions,
+                self.pipeline_name,
+            ),
+            image_scanned,
+            self.remote_config["MESSAGE_INFO_ENGINE_CONTAINER"],
+            self.pipeline_name,
+            self.pipeline_name,
+            self.stage.capitalize(),
+        )

{devsecops_engine_tools-1.158.0 → devsecops_engine_tools-1.159.0}/devsecops_engine_tools/engine_sca/engine_dependencies/src/domain/usecases/set_input_core.py

@@ -1,3 +1,5 @@
+import re
+
 from devsecops_engine_tools.engine_core.src.domain.model.input_core import InputCore
 from devsecops_engine_tools.engine_core.src.domain.model.threshold import Threshold
 from devsecops_engine_tools.engine_core.src.domain.model.exclusions import Exclusions
@@ -11,26 +13,38 @@ class SetInputCore:
         self.pipeline_name = pipeline_name
         self.tool = tool
 
+    def _build_exclusions(self, items):
+        return [
+            Exclusions(
+                id=item.get("id", ""),
+                where=item.get("where", ""),
+                cve_id=item.get("cve_id", ""),
+                create_date=item.get("create_date", ""),
+                expired_date=item.get("expired_date", ""),
+                severity=item.get("severity", ""),
+                priority=item.get("priority", ""),
+                hu=item.get("hu", ""),
+                reason=item.get("reason", "DevSecOps policy"),
+            )
+            for item in items
+        ]
+
     def get_exclusions(self, exclusions_data, pipeline_name, tool):
         list_exclusions = []
         for key, value in exclusions_data.items():
             if (key == "All") or (key == pipeline_name):
                 if value.get(tool, 0):
-                    exclusions = [
-                        Exclusions(
-                            id=item.get("id", ""),
-                            where=item.get("where", ""),
-                            cve_id=item.get("cve_id", ""),
-                            create_date=item.get("create_date", ""),
-                            expired_date=item.get("expired_date", ""),
-                            severity=item.get("severity", ""),
-                            priority=item.get("priority", ""),
-                            hu=item.get("hu", ""),
-                            reason=item.get("reason", "DevSecOps policy"),
-                        )
-                        for item in value[tool]
-                    ]
-                    list_exclusions.extend(exclusions)
+                    list_exclusions.extend(self._build_exclusions(value[tool]))
+
+        if pipeline_name not in exclusions_data:
+            for pattern, values in exclusions_data.get(
+                "BY_PATTERN_SEARCH", {}
+            ).items():
+                if re.match(pattern, pipeline_name, re.IGNORECASE):
+                    if values.get(tool, 0):
+                        list_exclusions.extend(self._build_exclusions(values[tool]))
+                    break
+
         return list_exclusions
 
     def set_input_core(self, dependencies_scanned):

{devsecops_engine_tools-1.158.0 → devsecops_engine_tools-1.159.0}/devsecops_engine_tools/engine_utilities/utils/utils.py

@@ -138,7 +138,7 @@ class Utils:
         search_patterns = exclusions_data.get("BY_PATTERN_SEARCH", {})
         
         match_pattern = next(
-            (v["THRESHOLD"]
+            (v.get("THRESHOLD")
             for pattern, v in search_patterns.items()
             if re.match(pattern, pipeline_name, re.IGNORECASE)),
             None

devsecops_engine_tools-1.159.0/devsecops_engine_tools/version.py

@@ -0,0 +1 @@
+version = '1.159.0'

{devsecops_engine_tools-1.158.0 → devsecops_engine_tools-1.159.0}/devsecops_engine_tools.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: devsecops-engine-tools
-Version: 1.158.0
+Version: 1.159.0
 Summary: Tool for DevSecOps strategy
 Home-page: https://github.com/bancolombia/devsecops-engine-tools
 Author: Bancolombia DevSecOps Team

devsecops_engine_tools-1.158.0/devsecops_engine_tools/engine_sca/engine_container/src/domain/usecases/set_input_core.py

@@ -1,73 +0,0 @@
-from devsecops_engine_tools.engine_core.src.domain.model.input_core import InputCore
-from devsecops_engine_tools.engine_core.src.domain.model.exclusions import Exclusions
-from devsecops_engine_tools.engine_core.src.domain.model.threshold import Threshold
-from devsecops_engine_tools.engine_utilities.utils.utils import Utils
-
-
-class SetInputCore:
-    def __init__(self, remote_config, exclusions, pipeline_name, tool, stage):
-        self.remote_config = remote_config
-        self.exclusions = exclusions
-        self.pipeline_name = pipeline_name
-        self.tool = tool
-        self.stage = stage
-
-    def get_exclusions(self, exclusions_data, pipeline_name, tool, base_image):
-        list_exclusions = []
-        base_image_list = base_image[0][0] if base_image else None
-        print("The base image used is:", base_image_list)
-        for key, value in exclusions_data.items():
-            if key not in {"All", pipeline_name} or not value.get(tool):
-                continue
-
-            for item in value[tool]:
-                if key == "All":
-                    key_image_exception = self.remote_config.get("GET_IMAGE_BASE", {}).get("LABEL_KEYS", {}).get("key_image_exception", None)
-                    source_images = item.get(key_image_exception, [])
-                    if source_images and not base_image_list:
-                        continue
-                    if source_images and not any(img in source for img in base_image_list for source in source_images):
-                        continue
-                    
-                list_exclusions.append(
-                    Exclusions(
-                        id=item.get("id", ""),
-                        where=item.get("where", ""),
-                        cve_id=item.get("cve_id", ""),
-                        create_date=item.get("create_date", ""),
-                        expired_date=item.get("expired_date", ""),
-                        severity=item.get("severity", ""),
-                        priority=item.get("priority", ""),
-                        hu=item.get("hu", ""),
-                        reason=item.get("reason", "DevSecOps policy"),
-                    )
-                )
-
-        return list_exclusions
-
-    def set_input_core(self, image_scanned,base_image):
-        """
-        Set the input core.
-
-        Returns:
-            dict: Input core.
-        """
-        return InputCore(
-            self.get_exclusions(
-                self.exclusions,
-                self.pipeline_name,
-                self.tool,
-                base_image
-            ),
-            Utils.update_threshold(
-                self,
-                Threshold(self.remote_config["THRESHOLD"]),
-                self.exclusions,
-                self.pipeline_name,
-            ),
-            image_scanned,
-            self.remote_config["MESSAGE_INFO_ENGINE_CONTAINER"],
-            self.pipeline_name,
-            self.pipeline_name,
-            self.stage.capitalize(),
-        )

devsecops_engine_tools-1.158.0/devsecops_engine_tools/version.py

@@ -1 +0,0 @@
-version = '1.158.0'