devsecops-engine-tools 1.17.0__py3-none-any.whl → 1.17.2__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.

This version of devsecops-engine-tools might be problematic. Click here for more details.

Files changed (10) hide show
  1. devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/printer_pretty_table/printer_pretty_table.py +2 -2
  2. devsecops_engine_tools/engine_risk/src/domain/usecases/handle_filters.py +2 -2
  3. devsecops_engine_tools/engine_sast/engine_secret/src/domain/model/DeserializeConfigTool.py +1 -0
  4. devsecops_engine_tools/engine_sast/engine_secret/src/infrastructure/driven_adapters/trufflehog/trufflehog_run.py +7 -5
  5. devsecops_engine_tools/version.py +1 -1
  6. {devsecops_engine_tools-1.17.0.dist-info → devsecops_engine_tools-1.17.2.dist-info}/METADATA +1 -1
  7. {devsecops_engine_tools-1.17.0.dist-info → devsecops_engine_tools-1.17.2.dist-info}/RECORD +10 -10
  8. {devsecops_engine_tools-1.17.0.dist-info → devsecops_engine_tools-1.17.2.dist-info}/WHEEL +0 -0
  9. {devsecops_engine_tools-1.17.0.dist-info → devsecops_engine_tools-1.17.2.dist-info}/entry_points.txt +0 -0
  10. {devsecops_engine_tools-1.17.0.dist-info → devsecops_engine_tools-1.17.2.dist-info}/top_level.txt +0 -0
devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/printer_pretty_table/printer_pretty_table.py CHANGED
@@ -90,8 +90,8 @@ class PrinterPrettyTable(PrinterTableGateway):
90
90
  if exclusions:
91
91
  headers = [
92
92
  "VM ID",
93
- "Tags",
94
93
  "Services",
94
+ "Tags",
95
95
  "Created Date",
96
96
  "Expired Date",
97
97
  "Reason",
@@ -102,8 +102,8 @@ class PrinterPrettyTable(PrinterTableGateway):
102
102
  for exclusion in exclusions:
103
103
  row_data = [
104
104
  self._check_spaces(exclusion["vm_id"]),
105
- ", ".join(exclusion["tags"]),
106
105
  self._check_spaces(exclusion["service"]),
106
+ ", ".join(exclusion["tags"]),
107
107
  format_date(exclusion["create_date"], "%d%m%Y", "%d/%m/%Y"),
108
108
  (
109
109
  format_date(exclusion["expired_date"], "%d%m%Y", "%d/%m/%Y")
devsecops_engine_tools/engine_risk/src/domain/usecases/handle_filters.py CHANGED
@@ -38,8 +38,8 @@ class HandleFilters:
38
38
  findings_map[key] = new_finding
39
39
  else:
40
40
  existing_finding.service = " ".join(combined_services)
41
- new_finding.vm_id = " ".join(combined_vm_ids)
42
- new_finding.vm_id_url = " ".join(combined_vm_id_urls)
41
+ existing_finding.vm_id = " ".join(combined_vm_ids)
42
+ existing_finding.vm_id_url = " ".join(combined_vm_id_urls)
43
43
  else:
44
44
  findings_map[key] = copy.deepcopy(finding)
45
45
 
devsecops_engine_tools/engine_sast/engine_secret/src/domain/model/DeserializeConfigTool.py CHANGED
@@ -13,3 +13,4 @@ class DeserializeConfigTool:
13
13
  self.external_dir_owner = json_data[tool]["EXTERNAL_DIR_OWNER"]
14
14
  self.external_dir_repo = json_data[tool]["EXTERNAL_DIR_REPOSITORY"]
15
15
  self.tool_version = json_data[tool]["VERSION"]
16
+ self.extradata_rules = json_data[tool]["RULES"]
devsecops_engine_tools/engine_sast/engine_secret/src/infrastructure/driven_adapters/trufflehog/trufflehog_run.py CHANGED
@@ -94,7 +94,7 @@ class TrufflehogRun(ToolGateway):
94
94
  [repository_name] * len(include_paths),
95
95
  [enable_custom_rules] * len(include_paths),
96
96
  )
97
- findings, file_findings = self.create_file(self.decode_output(results), agent_work_folder)
97
+ findings, file_findings = self.create_file(self.decode_output(results), agent_work_folder, config_tool)
98
98
  return findings, file_findings
99
99
 
100
100
  def config_include_path(self, files, agent_work_folder, agent_os):
@@ -128,8 +128,8 @@ class TrufflehogRun(ToolGateway):
128
128
  ):
129
129
  command = f"{trufflehog_command} filesystem {agent_work_folder + '/' + repository_name} --include-paths {include_path} --exclude-paths {exclude_path} --no-verification --no-update --json"
130
130
 
131
- if enable_custom_rules == "true":
132
- command = command.replace("--no-verification --json", "--config /tmp/rules/trufflehog/custom-rules.yaml --no-verification --no-update --json")
131
+ if str(enable_custom_rules).lower() == "true":
132
+ command = command.replace("--no-verification --no-update --json", "--config /tmp/rules/trufflehog/custom-rules.yaml --no-verification --no-update --json")
133
133
 
134
134
  result = subprocess.run(command, capture_output=True, shell=True, text=True, encoding='utf-8')
135
135
  return result.stdout.strip()
@@ -144,7 +144,7 @@ class TrufflehogRun(ToolGateway):
144
144
  result.append(json_obj)
145
145
  return result
146
146
 
147
- def create_file(self, findings, agent_work_folder):
147
+ def create_file(self, findings, agent_work_folder, config_tool):
148
148
  file_findings = os.path.join(agent_work_folder, "secret_scan_result.json")
149
149
  with open(file_findings, "w") as file:
150
150
  for find in findings:
@@ -152,7 +152,9 @@ class TrufflehogRun(ToolGateway):
152
152
  original_where = original_where.replace("\\", "/")
153
153
  where_text = original_where.replace(agent_work_folder, "")
154
154
  find["SourceMetadata"]["Data"]["Filesystem"]["file"] = where_text
155
- find["Id"] = "MISSCONFIGURATION_SCANNING" if "exposure" in find["Raw"] else "SECRET_SCANNING"
155
+ find["Id"] = "MISCONFIGURATION_SCANNING" if "exposure" in find["Raw"] else "SECRET_SCANNING"
156
+ find["References"] = config_tool.extradata_rules[find["Id"]]["References"] if "SECRET_SCANNING" not in find["Id"] else "N.A"
157
+ find["Mitigation"] = config_tool.extradata_rules[find["Id"]]["Mitigation"] if "SECRET_SCANNING" not in find["Id"] else "N.A"
156
158
  json_str = json.dumps(find)
157
159
  file.write(json_str + '\n')
158
160
  return findings, file_findings
devsecops_engine_tools/version.py CHANGED
@@ -1 +1 @@
1
- version = '1.17.0'
1
+ version = '1.17.2'
{devsecops_engine_tools-1.17.0.dist-info → devsecops_engine_tools-1.17.2.dist-info}/METADATA RENAMED
@@ -1,6 +1,6 @@
1
1
  Metadata-Version: 2.1
2
2
  Name: devsecops-engine-tools
3
- Version: 1.17.0
3
+ Version: 1.17.2
4
4
  Summary: Tool for DevSecOps strategy
5
5
  Home-page: https://github.com/bancolombia/devsecops-engine-tools
6
6
  Author: Bancolombia DevSecOps Team
{devsecops_engine_tools-1.17.0.dist-info → devsecops_engine_tools-1.17.2.dist-info}/RECORD RENAMED
@@ -1,5 +1,5 @@
1
1
  devsecops_engine_tools/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
2
- devsecops_engine_tools/version.py,sha256=MzQoSPABd45fuiVSL0Hxyz3S5B7-9HeNc1g4a1oKlOY,19
2
+ devsecops_engine_tools/version.py,sha256=GWviKvQASZWsVAWHRPw2NpxbNJAtfIWp_bVsDLr3rOM,19
3
3
  devsecops_engine_tools/engine_core/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
4
4
  devsecops_engine_tools/engine_core/src/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
5
5
  devsecops_engine_tools/engine_core/src/applications/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
@@ -40,7 +40,7 @@ devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/defect_doj
40
40
  devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/github/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
41
41
  devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/github/github_actions.py,sha256=pxlgjhX4-Dssn-XHKK8AdCOj6Ry6VcQtoDf5q8CxTks,3731
42
42
  devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/printer_pretty_table/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
43
- devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/printer_pretty_table/printer_pretty_table.py,sha256=P0oavy_3AMbuRx5kPPiM2_LopVXqHK4Hz4Lb2UNfr-4,5369
43
+ devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/printer_pretty_table/printer_pretty_table.py,sha256=NkXu7JYoCHXIx0HzHl4DhdLGEpocPMIqs2L0ADS-RcI,5369
44
44
  devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/printer_rich_table/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
45
45
  devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/printer_rich_table/printer_rich_table.py,sha256=LPr3xSv0I7ENEdu1xj8ve5PXzpUohs7hbQvHjDSaUuE,3028
46
46
  devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/runtime_local/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
@@ -76,7 +76,7 @@ devsecops_engine_tools/engine_risk/src/domain/usecases/__init__.py,sha256=47DEQp
76
76
  devsecops_engine_tools/engine_risk/src/domain/usecases/add_data.py,sha256=4wqDj-q7hJfJscvrbMDcy7tONqxdxl-CSl_TWTRUGKA,402
77
77
  devsecops_engine_tools/engine_risk/src/domain/usecases/break_build.py,sha256=TSZTXR8raKA1906dFl-Cv3J711iGUcBQmx82Jw6mF_M,11847
78
78
  devsecops_engine_tools/engine_risk/src/domain/usecases/get_exclusions.py,sha256=o4vMpmgt5q1BsaWpGZWdCHPVs1CFyj-P3TrgOSEBcqM,2327
79
- devsecops_engine_tools/engine_risk/src/domain/usecases/handle_filters.py,sha256=1yJKPzh64gu67g_pLyr7V8Ahzs3KK8tncigPzKWMX7Q,3533
79
+ devsecops_engine_tools/engine_risk/src/domain/usecases/handle_filters.py,sha256=JmeBtO6CMufjYSRpGQU1kPZoW3PnXwVXnl33LSIU3n8,3543
80
80
  devsecops_engine_tools/engine_risk/src/infrastructure/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
81
81
  devsecops_engine_tools/engine_risk/src/infrastructure/driven_adapters/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
82
82
  devsecops_engine_tools/engine_risk/src/infrastructure/driven_adapters/first_csv/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
@@ -142,7 +142,7 @@ devsecops_engine_tools/engine_sast/engine_secret/src/applications/runner_secret_
142
142
  devsecops_engine_tools/engine_sast/engine_secret/src/deployment/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
143
143
  devsecops_engine_tools/engine_sast/engine_secret/src/deployment/infrastructure/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
144
144
  devsecops_engine_tools/engine_sast/engine_secret/src/domain/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
145
- devsecops_engine_tools/engine_sast/engine_secret/src/domain/model/DeserializeConfigTool.py,sha256=2YXBnWA3DGiEKNpRMgVk2CmgOFfJPzDbgexXHjJpaBU,884
145
+ devsecops_engine_tools/engine_sast/engine_secret/src/domain/model/DeserializeConfigTool.py,sha256=vwV7OoH943fQvwSgoKqLnnB8XcuMwQsebrIXvQIgiTs,941
146
146
  devsecops_engine_tools/engine_sast/engine_secret/src/domain/model/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
147
147
  devsecops_engine_tools/engine_sast/engine_secret/src/domain/model/gateway/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
148
148
  devsecops_engine_tools/engine_sast/engine_secret/src/domain/model/gateway/gateway_deserealizator.py,sha256=4fYPengHW3K0uVP6wHgOiNu-gRb08m78E7QZayZ2LC4,441
@@ -154,7 +154,7 @@ devsecops_engine_tools/engine_sast/engine_secret/src/infrastructure/__init__.py,
154
154
  devsecops_engine_tools/engine_sast/engine_secret/src/infrastructure/driven_adapters/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
155
155
  devsecops_engine_tools/engine_sast/engine_secret/src/infrastructure/driven_adapters/trufflehog/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
156
156
  devsecops_engine_tools/engine_sast/engine_secret/src/infrastructure/driven_adapters/trufflehog/trufflehog_deserealizator.py,sha256=mrSqPrkMiikxQ_uY-rF2I8QvicsOMdMBzTC8CTV3Wk8,2392
157
- devsecops_engine_tools/engine_sast/engine_secret/src/infrastructure/driven_adapters/trufflehog/trufflehog_run.py,sha256=Q8KKDu-rFBxmsMnqRRtYMhO3u6e3Uumj61msKQDHVLs,8196
157
+ devsecops_engine_tools/engine_sast/engine_secret/src/infrastructure/driven_adapters/trufflehog/trufflehog_run.py,sha256=GcO8r_LjIjhPlyiUujAM23AK2ks1xl6hy3owyNXk5WI,8530
158
158
  devsecops_engine_tools/engine_sast/engine_secret/src/infrastructure/entry_points/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
159
159
  devsecops_engine_tools/engine_sast/engine_secret/src/infrastructure/entry_points/entry_point_tool.py,sha256=NiA5-pRL6-tMuOa2Al-wIYq3uIMFBQrJd0w7ur16kgs,1049
160
160
  devsecops_engine_tools/engine_sca/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
@@ -307,8 +307,8 @@ devsecops_engine_tools/engine_utilities/utils/name_conversion.py,sha256=ADJrRGax
307
307
  devsecops_engine_tools/engine_utilities/utils/printers.py,sha256=amYAr9YQfYgR6jK9a2l26z3oovFPQ3FAKmhq6BKhEBA,623
308
308
  devsecops_engine_tools/engine_utilities/utils/session_manager.py,sha256=yNtlT-8Legz1sHbGPH8LNYjL-LgDUE0zXG2rYjiab7U,290
309
309
  devsecops_engine_tools/engine_utilities/utils/utils.py,sha256=r_mng-OVWeqQyy6yIFsCeJrvH81VUPI3o1zdJO0JS0I,397
310
- devsecops_engine_tools-1.17.0.dist-info/METADATA,sha256=f-E-4AUfAQIKU1HUjIVKBd_d5X4IcETjUTl1BFIOlKA,10895
311
- devsecops_engine_tools-1.17.0.dist-info/WHEEL,sha256=R0nc6qTxuoLk7ShA2_Y-UWkN8ZdfDBG2B6Eqpz2WXbs,91
312
- devsecops_engine_tools-1.17.0.dist-info/entry_points.txt,sha256=MHCTFFs9bdNKo6YcWCcBW2_8X6yTisgLOlmVx-V8Rxc,276
313
- devsecops_engine_tools-1.17.0.dist-info/top_level.txt,sha256=ge6y0X_xBAU1aG3EMWFtl9djbVyg5BxuSp2r2Lg6EQU,23
314
- devsecops_engine_tools-1.17.0.dist-info/RECORD,,
310
+ devsecops_engine_tools-1.17.2.dist-info/METADATA,sha256=EDNN6AEiILSIufgYNAwpDPVFImYnzpogN0DgzHfeFBI,10895
311
+ devsecops_engine_tools-1.17.2.dist-info/WHEEL,sha256=R0nc6qTxuoLk7ShA2_Y-UWkN8ZdfDBG2B6Eqpz2WXbs,91
312
+ devsecops_engine_tools-1.17.2.dist-info/entry_points.txt,sha256=MHCTFFs9bdNKo6YcWCcBW2_8X6yTisgLOlmVx-V8Rxc,276
313
+ devsecops_engine_tools-1.17.2.dist-info/top_level.txt,sha256=ge6y0X_xBAU1aG3EMWFtl9djbVyg5BxuSp2r2Lg6EQU,23
314
+ devsecops_engine_tools-1.17.2.dist-info/RECORD,,