devsecops-engine-tools 1.174.2__tar.gz → 1.175.1__tar.gz

{devsecops_engine_tools-1.174.2 → devsecops_engine_tools-1.175.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: devsecops-engine-tools
-Version: 1.174.2
+Version: 1.175.1
 Summary: Tool for DevSecOps strategy
 Home-page: https://github.com/bancolombia/devsecops-engine-tools
 Author: Bancolombia DevSecOps Team

{devsecops_engine_tools-1.174.2 → devsecops_engine_tools-1.175.1}/devsecops_engine_tools/engine_core/src/domain/usecases/break_build.py

@@ -48,7 +48,9 @@ class BreakBuild:
                 findings_list, exclusions, args
             )
 
-            findings_excluded, findings_without_exclusions = self._filter_findings(findings_list, exclusions)
+            findings_excluded, findings_without_exclusions = self._filter_findings(
+                findings_list, exclusions, args
+            )
             scan_result["findings_excluded"] = [self._map_finding_excluded(item) for item in findings_excluded]
             
             vulnerabilities = [v for v in findings_without_exclusions if v.category == Category.VULNERABILITY]
@@ -60,7 +62,7 @@ class BreakBuild:
             self._handle_vulnerabilities(vulnerability_counts, vulnerabilities, threshold, warning_release, scan_result, args, manager)
             self._handle_cve_policy(vulnerabilities, threshold)
             self._handle_compliances(compliance_counts, compliances, threshold, warning_release, scan_result, args, manager)
-            self._handle_exclusions(findings_excluded, exclusions, manager)
+            self._handle_exclusions(findings_excluded, exclusions, manager, args)
         else:
             print(devops_platform_gateway.message("succeeded", "There are no findings"))
             print(devops_platform_gateway.result_pipeline("succeeded"))
@@ -93,20 +95,50 @@ class BreakBuild:
                             )
                         )
 
-    def _filter_findings(self, findings_list, exclusions):
+    def _filter_findings(self, findings_list, exclusions, args):
         findings_excluded_list = [
-            item for item in findings_list if any(
-                exclusion.id == item.id and
-                (exclusion.where in item.where or "all" in exclusion.where) and
-                (exclusion.severity == item.severity or exclusion.priority == item.priority.scale)
-                for exclusion in exclusions
-            )
+            item
+            for item in findings_list
+            if any(self._matches_exclusion(item, exclusion, args) for exclusion in exclusions)
         ]
         findings_without_exclusions_list = [
             v for v in findings_list if v not in findings_excluded_list
         ]
         return findings_excluded_list, findings_without_exclusions_list
 
+    @staticmethod
+    def _matches_exclusion(item, exclusion, args):
+        if exclusion.id != item.id:
+            return False
+        if exclusion.where not in item.where and "all" not in exclusion.where:
+            return False
+
+        finding_priority = item.priority.scale if item.priority else None
+        severity_match = BreakBuild._value_in_exclusion_list(
+            exclusion.severity, item.severity
+        )
+        priority_match = BreakBuild._value_in_exclusion_list(
+            exclusion.priority, finding_priority
+        )
+        if not severity_match and not priority_match:
+            return False
+
+        if args.get("module") == "engine_container" and exclusion.check_in_desc:
+            image_to_scan = args.get("image_to_scan", "")
+            if not image_to_scan or not any(
+                image_to_scan in image_name for image_name in exclusion.check_in_desc
+            ):
+                return False
+
+        return True
+
+    @staticmethod
+    def _value_in_exclusion_list(exclusion_value, finding_value):
+        if not exclusion_value or finding_value is None:
+            return False
+        values = [value.strip() for value in exclusion_value.split(",")]
+        return finding_value in values
+
     def _map_finding_excluded(self, item):
         return {
             "id": item.id,
@@ -276,7 +308,9 @@ class BreakBuild:
             print(devops_platform_gateway.message("succeeded", "There are no compliances issues"))
             print(devops_platform_gateway.result_pipeline("succeeded"))
 
-    def _handle_exclusions(self, findings_excluded_list, exclusions, break_build_manager):
+    def _handle_exclusions(
+        self, findings_excluded_list, exclusions, break_build_manager, args
+    ):
         devops_platform_gateway = self.devops_platform_gateway
         printer_table_gateway = self.printer_table_gateway
         print()
@@ -285,9 +319,24 @@ class BreakBuild:
         if findings_excluded_list:
             exclusions_list = []
             for item in findings_excluded_list:
-                matching = next(
-                    (e for e in exclusions if e.id == item.id and (e.where in item.where or "all" in e.where) and (e.severity == item.severity or e.priority == item.priority.scale)),
-                    None
+                matching_exclusions = [
+                    exclusion
+                    for exclusion in exclusions
+                    if self._matches_exclusion(item, exclusion, args)
+                ]
+                image_exclusions = [
+                    exclusion
+                    for exclusion in matching_exclusions
+                    if exclusion.check_in_desc
+                ]
+                matching = max(
+                    image_exclusions or matching_exclusions,
+                    key=lambda exclusion: (
+                        datetime.strptime(exclusion.expired_date, "%d%m%Y")
+                        if exclusion.expired_date
+                        else datetime.min
+                    ),
+                    default=None,
                 )
                 if matching:
                     exclusions_list.append({

devsecops_engine_tools-1.175.1/devsecops_engine_tools/engine_sca/engine_container/src/domain/model/gateways/cross_approval_gateway.py

@@ -0,0 +1,7 @@
+from abc import ABCMeta, abstractmethod
+
+
+class CrossApprovalGateway(metaclass=ABCMeta):
+    @abstractmethod
+    def get_approved_exclusions(self, host: str, token: str):
+        """Get currently approved cross-approval exclusions."""

{devsecops_engine_tools-1.174.2 → devsecops_engine_tools-1.175.1}/devsecops_engine_tools/engine_sca/engine_container/src/domain/model/gateways/tool_gateway.py

@@ -7,7 +7,7 @@ if TYPE_CHECKING:
 
 class ToolGateway(metaclass=ABCMeta):
     @abstractmethod
-    def run_tool_container_sca(self, dict_args, secret_tool, token_engine_container, scan_image, release, base_image, exclusions, generate_sbom, docker_address, is_compressed_file=False):
+    def run_tool_container_sca(self, dict_args, secret_tool, token_engine_container, scan_image, release, base_image, exclusions, generate_sbom, docker_address, is_compressed_file=False, cross_approval_exclusions=None):
         "run tool container sca"
 
     @abstractmethod

{devsecops_engine_tools-1.174.2 → devsecops_engine_tools-1.175.1}/devsecops_engine_tools/engine_sca/engine_container/src/domain/usecases/container_sca_scan.py

@@ -26,6 +26,7 @@ class ContainerScaScan:
         pipeline_name,
         context,
         docker_address,
+        cross_approval_exclusions=None,
     ):
         self.tool_run = tool_run
         self.remote_config = remote_config
@@ -39,6 +40,7 @@ class ContainerScaScan:
         self.pipeline_name = pipeline_name
         self.context = context
         self.docker_address = docker_address
+        self.cross_approval_exclusions = cross_approval_exclusions or []
 
     def _is_compressed_file(self, image_to_scan):
         """Check if the input is a compressed file (tar, tar.gz, etc.)"""
@@ -92,6 +94,7 @@ class ContainerScaScan:
             generate_sbom,
             self.docker_address,
             is_compressed_file,
+            self.cross_approval_exclusions,
         )
         
         if not is_compressed_file:

devsecops_engine_tools-1.175.1/devsecops_engine_tools/engine_sca/engine_container/src/domain/usecases/get_cross_approval_exclusions.py

@@ -0,0 +1,50 @@
+from devsecops_engine_tools.engine_core.src.domain.model.exclusions import Exclusions
+from devsecops_engine_tools.engine_sca.engine_container.src.domain.model.gateways.cross_approval_gateway import (
+    CrossApprovalGateway,
+)
+
+
+class GetCrossApprovalExclusions:
+    def __init__(self, cross_approval_gateway: CrossApprovalGateway):
+        self.cross_approval_gateway = cross_approval_gateway
+
+    def execute(self, remote_config, dict_args, secret_tool, host_defect_dojo=None):
+        config = remote_config.get("CROSS_APPROVAL_EXCLUSIONS", {})
+        if not config.get("ENABLED", False):
+            return []
+
+        if not host_defect_dojo:
+            raise ValueError(
+                "CROSS_APPROVAL_EXCLUSIONS is enabled but "
+                "VULNERABILITY_MANAGER.DEFECT_DOJO.HOST_DEFECT_DOJO is not configured"
+            )
+
+        secret_tool = secret_tool or {}
+        token = dict_args.get("token_vulnerability_management") or secret_tool.get(
+            "token_defect_dojo"
+        )
+        if not token:
+            raise ValueError(
+                "CROSS_APPROVAL_EXCLUSIONS is enabled but Defect Dojo token is missing"
+            )
+
+        exclusions = self.cross_approval_gateway.get_approved_exclusions(
+            host_defect_dojo, token
+        )
+        return [
+            Exclusions(
+                id=exclusion.id or exclusion.cve_id,
+                where=exclusion.where or "all",
+                cve_id=exclusion.cve_id,
+                create_date=exclusion.create_date,
+                expired_date=exclusion.expired_date,
+                severity=exclusion.severity,
+                priority=exclusion.priority,
+                hu=exclusion.hu,
+                reason=exclusion.reason or "Defect Dojo cross-approval",
+                **{"x86.image.name": exclusion.component.values},
+            )
+            for exclusion in exclusions
+            if exclusion.component.type.lower() == "image"
+            and exclusion.component.values
+        ]

{devsecops_engine_tools-1.174.2 → devsecops_engine_tools-1.175.1}/devsecops_engine_tools/engine_sca/engine_container/src/domain/usecases/set_input_core.py

@@ -7,12 +7,21 @@ from devsecops_engine_tools.engine_utilities.utils.utils import Utils
 
 
 class SetInputCore:
-    def __init__(self, remote_config, exclusions, pipeline_name, tool, stage):
+    def __init__(
+        self,
+        remote_config,
+        exclusions,
+        pipeline_name,
+        tool,
+        stage,
+        cross_approval_exclusions=None,
+    ):
         self.remote_config = remote_config
         self.exclusions = exclusions
         self.pipeline_name = pipeline_name
         self.tool = tool
         self.stage = stage
+        self.cross_approval_exclusions = cross_approval_exclusions or []
 
     def _build_exclusions(self, items, base_image_list, filter_by_base_image):
         list_exclusions = []
@@ -63,6 +72,7 @@ class SetInputCore:
                         )
                     break
 
+        list_exclusions.extend(self.cross_approval_exclusions)
         return list_exclusions
 
     def set_input_core(self, image_scanned,base_image):

devsecops_engine_tools-1.175.1/devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/driven_adapters/defect_dojo/cross_approval_adapter.py

@@ -0,0 +1,11 @@
+from devsecops_engine_tools.engine_sca.engine_container.src.domain.model.gateways.cross_approval_gateway import (
+    CrossApprovalGateway,
+)
+from devsecops_engine_tools.engine_utilities.defect_dojo import CrossApprovalRequest
+from devsecops_engine_tools.engine_utilities.utils.session_manager import SessionManager
+
+
+class DefectDojoCrossApprovalAdapter(CrossApprovalGateway):
+    def get_approved_exclusions(self, host: str, token: str):
+        session = SessionManager(token, host)
+        return CrossApprovalRequest.get_approved_exclusions(session)

{devsecops_engine_tools-1.174.2 → devsecops_engine_tools-1.175.1}/devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/driven_adapters/prisma_cloud/prisma_cloud_manager_scan.py

@@ -132,14 +132,34 @@ class PrismaCloudManagerScan(ToolGateway):
                         time.sleep(retry_delay)
         return False
 
-    def _write_image_base(self, result_file, base_image, exclusions_data, remoteconfig):
+    def _write_image_base(
+        self,
+        result_file,
+        base_image,
+        exclusions_data,
+        remoteconfig,
+        cross_approval_exclusions=None,
+    ):
         try:
             with open(result_file, "r") as file:
                 data = json.load(file)
 
-            prisma_exclusions = exclusions_data.get("All", {}).get("PRISMA", [])
+            prisma_exclusions = list(
+                exclusions_data.get("All", {}).get("PRISMA", [])
+            )
             base_image_list = base_image[0][0] if base_image and base_image[0][0] else []
-            key_image_exception = remoteconfig.get("GET_IMAGE_BASE", {}).get("LABEL_KEYS", {}).get("key_image_exception", None)
+            key_image_exception = (
+                remoteconfig.get("GET_IMAGE_BASE", {})
+                .get("LABEL_KEYS", {})
+                .get("key_image_exception", "x86.image.name")
+            )
+            for exclusion in cross_approval_exclusions or []:
+                prisma_exclusions.append(
+                    {
+                        "id": exclusion.id,
+                        key_image_exception: exclusion.check_in_desc,
+                    }
+                )
 
             modified = self._apply_base_image_exclusions(
                 data, prisma_exclusions, base_image_list, key_image_exception
@@ -270,7 +290,18 @@ class PrismaCloudManagerScan(ToolGateway):
         return file_path
 
     def run_tool_container_sca(
-        self, remoteconfig, secret_tool, token_engine_container, image_name, result_file, base_image, exclusions, generate_sbom, docker_address, is_compressed_file=False
+        self,
+        remoteconfig,
+        secret_tool,
+        token_engine_container,
+        image_name,
+        result_file,
+        base_image,
+        exclusions,
+        generate_sbom,
+        docker_address,
+        is_compressed_file=False,
+        cross_approval_exclusions=None,
     ):
 
         prisma_key = (
@@ -289,7 +320,13 @@ class PrismaCloudManagerScan(ToolGateway):
             is_compressed_file
         )
         if base_image:
-            self._write_image_base(result_file, base_image, exclusions, remoteconfig)
+            self._write_image_base(
+                result_file,
+                base_image,
+                exclusions,
+                remoteconfig,
+                cross_approval_exclusions,
+            )
         if generate_sbom:
             sbom_components = self._generate_sbom(
                 image_scanned,

{devsecops_engine_tools-1.174.2 → devsecops_engine_tools-1.175.1}/devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/driven_adapters/trivy_tool/trivy_manager_scan.py

@@ -96,7 +96,7 @@ class TrivyScan(ToolGateway):
         except Exception as e:
             logger.error(f"Unexpected error generating SBOM: {e}")
 
-    def run_tool_container_sca(self, remoteconfig, secret_tool, token_engine_container, image_name, result_file, base_image, exclusions, generate_sbom, docker_address, is_compressed_file=False):
+    def run_tool_container_sca(self, remoteconfig, secret_tool, token_engine_container, image_name, result_file, base_image, exclusions, generate_sbom, docker_address, is_compressed_file=False, cross_approval_exclusions=None):
         trivy_version = remoteconfig["TRIVY"]["TRIVY_VERSION"]
         vuln_type = remoteconfig["TRIVY"].get("VULN_TYPE", "all").lower()
         vuln_type = vuln_type if vuln_type in ["os", "library"] else "os,library"

{devsecops_engine_tools-1.174.2 → devsecops_engine_tools-1.175.1}/devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/entry_points/entry_point_tool.py

@@ -7,6 +7,12 @@ from devsecops_engine_tools.engine_sca.engine_container.src.domain.usecases.hand
 from devsecops_engine_tools.engine_sca.engine_container.src.domain.usecases.set_input_core import (
     SetInputCore,
 )
+from devsecops_engine_tools.engine_sca.engine_container.src.domain.usecases.get_cross_approval_exclusions import (
+    GetCrossApprovalExclusions,
+)
+from devsecops_engine_tools.engine_sca.engine_container.src.infrastructure.driven_adapters.defect_dojo.cross_approval_adapter import (
+    DefectDojoCrossApprovalAdapter,
+)
 from devsecops_engine_tools.engine_utilities.utils.logger_info import MyLogger
 from devsecops_engine_tools.engine_utilities import settings
 import re
@@ -54,8 +60,21 @@ def init_engine_sca_rm(
     base_image = None
     sbom_components = None
     deseralized = []
-    input_core = SetInputCore(remote_config, exclusions, pipeline_name, tool, stage)
+    cross_approval_exclusions = []
     if scan_flag and not (skip_flag):
+        host_defect_dojo = None
+        if remote_config.get("CROSS_APPROVAL_EXCLUSIONS", {}).get("ENABLED", False):
+            core_config_tool = remote_config_source_gateway.get_remote_config(
+                dict_args["remote_config_repo"],
+                "engine_core/ConfigTool.json",
+                dict_args["remote_config_branch"],
+            )
+            host_defect_dojo = core_config_tool.get("VULNERABILITY_MANAGER", {}).get(
+                "DEFECT_DOJO", {}
+            ).get("HOST_DEFECT_DOJO")
+        cross_approval_exclusions = GetCrossApprovalExclusions(
+            DefectDojoCrossApprovalAdapter()
+        ).execute(remote_config, dict_args, secret_tool, host_defect_dojo)
         container_sca_scan = ContainerScaScan(
             tool_run,
             remote_config,
@@ -69,6 +88,7 @@ def init_engine_sca_rm(
             pipeline_name,
             context=dict_args["context"],
             docker_address=dict_args["docker_address"],
+            cross_approval_exclusions=cross_approval_exclusions,
         )
         image_scanned, base_image, sbom_components = container_sca_scan.process()
         if image_scanned:
@@ -78,6 +98,14 @@ def init_engine_sca_rm(
         dict_args["send_metrics"] = "false"
         dict_args["use_vulnerability_management"] = "false"
 
+    input_core = SetInputCore(
+        remote_config,
+        exclusions,
+        pipeline_name,
+        tool,
+        stage,
+        cross_approval_exclusions,
+    )
     core_input = input_core.set_input_core(image_scanned, base_image)
 
     return deseralized, core_input, sbom_components

{devsecops_engine_tools-1.174.2 → devsecops_engine_tools-1.175.1}/devsecops_engine_tools/engine_utilities/defect_dojo/__init__.py

@@ -7,4 +7,5 @@ from .applications.engagement import Engagement
 from .applications.product import Product
 from .applications.component import Component
 from .applications.finding_exclusion import FindingExclusion
+from .applications.cross_approval_request import CrossApprovalRequest
 from .applications.long_risk_acceptance import LongRiskAcceptance

devsecops_engine_tools-1.175.1/devsecops_engine_tools/engine_utilities/defect_dojo/applications/cross_approval_request.py

@@ -0,0 +1,14 @@
+from devsecops_engine_tools.engine_utilities.defect_dojo.domain.user_case.cross_approval_request import (
+    CrossApprovalRequestUserCase,
+)
+from devsecops_engine_tools.engine_utilities.defect_dojo.infraestructure.driver_adapters.cross_approval_request import (
+    CrossApprovalRequestRestConsumer,
+)
+
+
+class CrossApprovalRequest:
+    @staticmethod
+    def get_approved_exclusions(session):
+        rest_cross_approval_request = CrossApprovalRequestRestConsumer(session=session)
+        use_case = CrossApprovalRequestUserCase(rest_cross_approval_request)
+        return use_case.execute()

devsecops_engine_tools-1.175.1/devsecops_engine_tools/engine_utilities/defect_dojo/domain/models/cross_approval_request.py

@@ -0,0 +1,43 @@
+import dataclasses
+from typing import List, Optional
+
+from devsecops_engine_tools.engine_utilities.utils.dataclass_classmethod import (
+    FromDictMixin,
+)
+
+
+@dataclasses.dataclass
+class CrossApprovalComponent(FromDictMixin):
+    type: str = ""
+    values: List[str] = dataclasses.field(default_factory=list)
+
+
+@dataclasses.dataclass
+class CrossApprovalExclusion(FromDictMixin):
+    id: str = ""
+    where: str = ""
+    create_date: str = ""
+    expired_date: str = ""
+    expired_at: Optional[str] = None
+    severity: str = ""
+    priority: str = ""
+    hu: str = ""
+    reason: str = ""
+    cve_id: str = ""
+    component: CrossApprovalComponent = dataclasses.field(
+        default_factory=CrossApprovalComponent
+    )
+
+
+@dataclasses.dataclass
+class CrossApprovalRequest(FromDictMixin):
+    status: str = ""
+    exclusions: List[CrossApprovalExclusion] = dataclasses.field(default_factory=list)
+
+
+@dataclasses.dataclass
+class CrossApprovalRequestList(FromDictMixin):
+    count: int = 0
+    next: Optional[str] = None
+    previous: Optional[str] = None
+    results: List[CrossApprovalRequest] = dataclasses.field(default_factory=list)

devsecops_engine_tools-1.175.1/devsecops_engine_tools/engine_utilities/defect_dojo/domain/user_case/cross_approval_request.py

@@ -0,0 +1,34 @@
+from datetime import date, datetime
+
+from devsecops_engine_tools.engine_utilities.defect_dojo.domain.models.cross_approval_request import (
+    CrossApprovalRequestList,
+)
+from devsecops_engine_tools.engine_utilities.defect_dojo.infraestructure.driver_adapters.cross_approval_request import (
+    CrossApprovalRequestRestConsumer,
+)
+
+
+class CrossApprovalRequestUserCase:
+    def __init__(self, rest_cross_approval_request: CrossApprovalRequestRestConsumer):
+        self.__rest_cross_approval_request = rest_cross_approval_request
+
+    def execute(self):
+        response = self.__rest_cross_approval_request.get_cross_approval_requests()
+        return [
+            exclusion
+            for request in response.results
+            for exclusion in request.exclusions
+            if self._is_current(exclusion.expired_at, exclusion.expired_date)
+        ]
+
+    @staticmethod
+    def _is_current(expired_at, expired_date):
+        if expired_at:
+            return False
+        if not expired_date:
+            return True
+        try:
+            expiration_date = datetime.strptime(expired_date, "%d%m%Y").date()
+        except ValueError:
+            return False
+        return expiration_date >= date.today()

{devsecops_engine_tools-1.174.2 → devsecops_engine_tools-1.175.1}/devsecops_engine_tools/engine_utilities/defect_dojo/infraestructure/driver_adapters/cmdb.py

@@ -123,10 +123,18 @@ class CmdbRestConsumer:
         data_map = self.mapping_cmdb(data)
         logger.debug(data_map)
         cmdb_object = Cmdb.from_dict(data_map)
-        if cmdb_object.codigo_app is None:
-            cmdb_object.codigo_app = request.code_app
-        else:
+        has_codigo_app = (
+            cmdb_object.codigo_app is not None
+            and str(cmdb_object.codigo_app).strip() != ""
+        )
+
+        if has_codigo_app:
             request.code_app = cmdb_object.codigo_app
+        else:
+            if not request.code_app:
+                request.code_app = "Orphan_Product"
+            if not cmdb_object.product_name:
+                cmdb_object.product_name = request.code_app
         return cmdb_object
 
     def initialize_cmdb_object(self, request: ImportScanRequest) -> Cmdb:

devsecops_engine_tools-1.175.1/devsecops_engine_tools/engine_utilities/defect_dojo/infraestructure/driver_adapters/cross_approval_request.py

@@ -0,0 +1,55 @@
+from urllib.parse import urljoin
+
+from devsecops_engine_tools.engine_utilities.defect_dojo.domain.models.cross_approval_request import (
+    CrossApprovalRequestList,
+)
+from devsecops_engine_tools.engine_utilities.defect_dojo.infraestructure.driver_adapters.settings.settings import (
+    VERIFY_CERTIFICATE,
+)
+from devsecops_engine_tools.engine_utilities.settings import SETTING_LOGGER
+from devsecops_engine_tools.engine_utilities.utils.api_error import ApiError
+from devsecops_engine_tools.engine_utilities.utils.logger_info import MyLogger
+from devsecops_engine_tools.engine_utilities.utils.session_manager import SessionManager
+
+logger = MyLogger.__call__(**SETTING_LOGGER).get_logger()
+
+
+class CrossApprovalRequestRestConsumer:
+    def __init__(self, session: SessionManager):
+        self.__token = session._token
+        self.__host = session._host
+        self.__session = session._instance
+
+    def get_cross_approval_requests(self) -> CrossApprovalRequestList:
+        url = f"{self.__host}/api/v2/crossapproval_requests/"
+        headers = {
+            "Authorization": f"Token {self.__token}",
+            "Accept": "application/json",
+        }
+        params = {"status": "approved"}
+        try:
+            response = self.__session.get(
+                url, headers=headers, params=params, verify=VERIFY_CERTIFICATE
+            )
+            if response.status_code != 200:
+                raise ApiError(response.json())
+
+            response_data = response.json()
+            requests = CrossApprovalRequestList.from_dict(response_data)
+            while response_data.get("next"):
+                next_url = urljoin(url, response_data["next"])
+                response = self.__session.get(
+                    next_url, headers=headers, verify=VERIFY_CERTIFICATE
+                )
+                if response.status_code != 200:
+                    raise ApiError(response.json())
+                response_data = response.json()
+                requests.results.extend(
+                    CrossApprovalRequestList.from_dict(response_data).results
+                )
+            return requests
+        except Exception as error:
+            logger.error("Error getting cross approval requests: %s", error)
+            if isinstance(error, ApiError):
+                raise
+            raise ApiError(error) from error

devsecops_engine_tools-1.175.1/devsecops_engine_tools/version.py

@@ -0,0 +1 @@
+version = '1.175.1'

{devsecops_engine_tools-1.174.2 → devsecops_engine_tools-1.175.1}/devsecops_engine_tools.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: devsecops-engine-tools
-Version: 1.174.2
+Version: 1.175.1
 Summary: Tool for DevSecOps strategy
 Home-page: https://github.com/bancolombia/devsecops-engine-tools
 Author: Bancolombia DevSecOps Team

{devsecops_engine_tools-1.174.2 → devsecops_engine_tools-1.175.1}/devsecops_engine_tools.egg-info/SOURCES.txt

@@ -236,15 +236,19 @@ devsecops_engine_tools/engine_sca/engine_container/src/domain/__init__.py
 devsecops_engine_tools/engine_sca/engine_container/src/domain/model/__init__.py
 devsecops_engine_tools/engine_sca/engine_container/src/domain/model/context_container.py
 devsecops_engine_tools/engine_sca/engine_container/src/domain/model/gateways/__init__.py
+devsecops_engine_tools/engine_sca/engine_container/src/domain/model/gateways/cross_approval_gateway.py
 devsecops_engine_tools/engine_sca/engine_container/src/domain/model/gateways/deserealizator_gateway.py
 devsecops_engine_tools/engine_sca/engine_container/src/domain/model/gateways/images_gateway.py
 devsecops_engine_tools/engine_sca/engine_container/src/domain/model/gateways/tool_gateway.py
 devsecops_engine_tools/engine_sca/engine_container/src/domain/usecases/__init__.py
 devsecops_engine_tools/engine_sca/engine_container/src/domain/usecases/container_sca_scan.py
+devsecops_engine_tools/engine_sca/engine_container/src/domain/usecases/get_cross_approval_exclusions.py
 devsecops_engine_tools/engine_sca/engine_container/src/domain/usecases/handle_remote_config_patterns.py
 devsecops_engine_tools/engine_sca/engine_container/src/domain/usecases/set_input_core.py
 devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/__init__.py
 devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/driven_adapters/__init__.py
+devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/driven_adapters/defect_dojo/__init__.py
+devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/driven_adapters/defect_dojo/cross_approval_adapter.py
 devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/driven_adapters/docker/__init__.py
 devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/driven_adapters/docker/docker_images.py
 devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/driven_adapters/prisma_cloud/__init__.py
@@ -351,6 +355,7 @@ devsecops_engine_tools/engine_utilities/defect_dojo/__init__.py
 devsecops_engine_tools/engine_utilities/defect_dojo/applications/__init__.py
 devsecops_engine_tools/engine_utilities/defect_dojo/applications/component.py
 devsecops_engine_tools/engine_utilities/defect_dojo/applications/connect.py
+devsecops_engine_tools/engine_utilities/defect_dojo/applications/cross_approval_request.py
 devsecops_engine_tools/engine_utilities/defect_dojo/applications/defect_dojo.py
 devsecops_engine_tools/engine_utilities/defect_dojo/applications/engagement.py
 devsecops_engine_tools/engine_utilities/defect_dojo/applications/finding.py
@@ -361,6 +366,7 @@ devsecops_engine_tools/engine_utilities/defect_dojo/domain/__init__.py
 devsecops_engine_tools/engine_utilities/defect_dojo/domain/models/__init__.py
 devsecops_engine_tools/engine_utilities/defect_dojo/domain/models/cmdb.py
 devsecops_engine_tools/engine_utilities/defect_dojo/domain/models/component.py
+devsecops_engine_tools/engine_utilities/defect_dojo/domain/models/cross_approval_request.py
 devsecops_engine_tools/engine_utilities/defect_dojo/domain/models/engagement.py
 devsecops_engine_tools/engine_utilities/defect_dojo/domain/models/finding.py
 devsecops_engine_tools/engine_utilities/defect_dojo/domain/models/finding_exclusion.py
@@ -379,6 +385,7 @@ devsecops_engine_tools/engine_utilities/defect_dojo/domain/serializers/import_sc
 devsecops_engine_tools/engine_utilities/defect_dojo/domain/user_case/__init__.py
 devsecops_engine_tools/engine_utilities/defect_dojo/domain/user_case/cmdb.py
 devsecops_engine_tools/engine_utilities/defect_dojo/domain/user_case/component.py
+devsecops_engine_tools/engine_utilities/defect_dojo/domain/user_case/cross_approval_request.py
 devsecops_engine_tools/engine_utilities/defect_dojo/domain/user_case/engagement.py
 devsecops_engine_tools/engine_utilities/defect_dojo/domain/user_case/finding.py
 devsecops_engine_tools/engine_utilities/defect_dojo/domain/user_case/finding_exclusion.py
@@ -389,6 +396,7 @@ devsecops_engine_tools/engine_utilities/defect_dojo/infraestructure/__init__.py
 devsecops_engine_tools/engine_utilities/defect_dojo/infraestructure/driver_adapters/__init__.py
 devsecops_engine_tools/engine_utilities/defect_dojo/infraestructure/driver_adapters/cmdb.py
 devsecops_engine_tools/engine_utilities/defect_dojo/infraestructure/driver_adapters/component.py
+devsecops_engine_tools/engine_utilities/defect_dojo/infraestructure/driver_adapters/cross_approval_request.py
 devsecops_engine_tools/engine_utilities/defect_dojo/infraestructure/driver_adapters/engagement.py
 devsecops_engine_tools/engine_utilities/defect_dojo/infraestructure/driver_adapters/finding.py
 devsecops_engine_tools/engine_utilities/defect_dojo/infraestructure/driver_adapters/finding_exclusion.py

devsecops_engine_tools-1.174.2/devsecops_engine_tools/version.py

@@ -1 +0,0 @@
-version = '1.174.2'