devsecops-engine-tools 1.29.0__py3-none-any.whl → 1.30.0__py3-none-any.whl

devsecops_engine_tools/engine_core/src/domain/model/exclusions.py

@@ -16,3 +16,4 @@ class Exclusions:
         self.vm_id_url = kwargs.get("vm_id_url", "")
         self.service = kwargs.get("service", "")
         self.tags = kwargs.get("tags", [])
+        self.check_in_desc = kwargs.get("x86.image.name", [])

devsecops_engine_tools/engine_risk/src/domain/usecases/break_build.py

@@ -124,7 +124,7 @@ class BreakBuild:
         print(f"Mitigated count: {mitigated}   Total count: {total}")
         remediation_rate_value = self._get_percentage(mitigated / total)
 
-        risk_threshold = self.threshold["REMEDIATION_RATE"]
+        risk_threshold = self._get_remediation_rate_threshold(total)
         self.remediation_rate = remediation_rate_value
 
         if remediation_rate_value >= (risk_threshold + 5):
@@ -151,6 +151,13 @@ class BreakBuild:
             )
             self.break_build = True
 
+    def _get_remediation_rate_threshold(self, total):
+        remediation_rate = self.threshold["REMEDIATION_RATE"]
+        for key in sorted(remediation_rate.keys(), key=lambda x: int(x) if x.isdigit() else float('inf')):
+            if key.isdigit() and total <= int(key):
+                return remediation_rate[key]
+        return remediation_rate["other"]
+
     def _get_percentage(self, decimal):
         return round(decimal * 100, 3)
 
@@ -186,14 +193,21 @@ class BreakBuild:
                     or (report.id and report.id == exclusion.id)
                     or (report.vm_id and exclusion.id in report.vm_id)
                 ) and ((exclusion.where in report.where) or (exclusion.where == "all")):
-                    exclude = True
-                    exclusion_copy = copy.deepcopy(exclusion)
-                    exclusion_copy.vm_id = report.vm_id
-                    exclusion_copy.vm_id_url = report.vm_id_url
-                    exclusion_copy.service = report.service
-                    exclusion_copy.tags = report.tags
-                    applied_exclusions.append(exclusion_copy)
-                    break
+                    if not exclusion.check_in_desc:
+                        exclude = True
+                    else:
+                        for item in exclusion.check_in_desc:
+                            if item in report.vul_description:
+                                exclude = True
+                                break
+                    if exclude:
+                        exclusion_copy = copy.deepcopy(exclusion)
+                        exclusion_copy.vm_id = report.vm_id
+                        exclusion_copy.vm_id_url = report.vm_id_url
+                        exclusion_copy.service = report.service
+                        exclusion_copy.tags = report.tags
+                        applied_exclusions.append(exclusion_copy)
+                        break
             if not exclude:
                 report.reason = "Remediation Rate"
                 filtered_reports.append(report)

devsecops_engine_tools/version.py

@@ -1 +1 @@
-version = '1.29.0'
+version = '1.30.0'

{devsecops_engine_tools-1.29.0.dist-info → devsecops_engine_tools-1.30.0.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: devsecops-engine-tools
-Version: 1.29.0
+Version: 1.30.0
 Summary: Tool for DevSecOps strategy
 Home-page: https://github.com/bancolombia/devsecops-engine-tools
 Author: Bancolombia DevSecOps Team

{devsecops_engine_tools-1.29.0.dist-info → devsecops_engine_tools-1.30.0.dist-info}/RECORD

@@ -1,5 +1,5 @@
 devsecops_engine_tools/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-devsecops_engine_tools/version.py,sha256=wg_QVK2wfflu7K-VtAdkp8l2grshyyflO_mGq4un7YM,19
+devsecops_engine_tools/version.py,sha256=oo1yHf1CRi6O5E5xy2YzgfrX7VxG1rFcHuyXmWu_iPQ,19
 devsecops_engine_tools/engine_core/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_core/src/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_core/src/applications/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
@@ -10,7 +10,7 @@ devsecops_engine_tools/engine_core/src/domain/__init__.py,sha256=47DEQpj8HBSa-_T
 devsecops_engine_tools/engine_core/src/domain/model/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_core/src/domain/model/component.py,sha256=_rWtP0v_lyOZ4s5FGZc0rOJ3eh4AAWuGMaXzSYBcZMU,94
 devsecops_engine_tools/engine_core/src/domain/model/customs_exceptions.py,sha256=YLeOj4O7kNsUx8RD6pwBQdFLYbkm7Eh-F-ohZ3jFGbs,599
-devsecops_engine_tools/engine_core/src/domain/model/exclusions.py,sha256=W9DXUWI7rGJWRHEulnUY5ybdJK2wknG4zY7CbTtSyfc,689
+devsecops_engine_tools/engine_core/src/domain/model/exclusions.py,sha256=RjFKIpGVuntnvFZ6GlOYODrChKsUcWxPVQLGeGOeqfo,751
 devsecops_engine_tools/engine_core/src/domain/model/finding.py,sha256=MntDksQuPt1L-1Ww3nK7NbMLfVwRjxPGCN_oHYXbbWk,383
 devsecops_engine_tools/engine_core/src/domain/model/input_core.py,sha256=hc1WMzCwsGxnrlvvk84S5iNYJRDQWbaQP9MwR3N7tVM,422
 devsecops_engine_tools/engine_core/src/domain/model/level_compliance.py,sha256=ntn_UWqHc6sT5g_LozBdjdewTQxFsp7Kt8M0xqw-k_o,98
@@ -78,7 +78,7 @@ devsecops_engine_tools/engine_risk/src/domain/model/gateways/__init__.py,sha256=
 devsecops_engine_tools/engine_risk/src/domain/model/gateways/add_epss_gateway.py,sha256=cTm4QSxiaUt7ETCdXWZxKEus8pmEDA3e9k5b39SLDDE,178
 devsecops_engine_tools/engine_risk/src/domain/usecases/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_risk/src/domain/usecases/add_data.py,sha256=4wqDj-q7hJfJscvrbMDcy7tONqxdxl-CSl_TWTRUGKA,402
-devsecops_engine_tools/engine_risk/src/domain/usecases/break_build.py,sha256=BS4oRY0-ZK59xaVxMHxyEs4IRxLSq_lkjvYwH2BmgtE,11814
+devsecops_engine_tools/engine_risk/src/domain/usecases/break_build.py,sha256=qE9giBOR19rI7W084uE0OoPHpYGwKq0yRm4Tz6R10vw,12536
 devsecops_engine_tools/engine_risk/src/domain/usecases/check_threshold.py,sha256=VYdmcbAuNNvdHCegRfvza7YJ8FHbFNyDosrKJrMW93I,765
 devsecops_engine_tools/engine_risk/src/domain/usecases/get_exclusions.py,sha256=1ekBmLK36R3ddkQ40s8teAYvaldG8hnVsacXnWdkKrg,2460
 devsecops_engine_tools/engine_risk/src/domain/usecases/handle_filters.py,sha256=JmeBtO6CMufjYSRpGQU1kPZoW3PnXwVXnl33LSIU3n8,3543
@@ -317,8 +317,8 @@ devsecops_engine_tools/engine_utilities/utils/name_conversion.py,sha256=ADJrRGax
 devsecops_engine_tools/engine_utilities/utils/printers.py,sha256=amYAr9YQfYgR6jK9a2l26z3oovFPQ3FAKmhq6BKhEBA,623
 devsecops_engine_tools/engine_utilities/utils/session_manager.py,sha256=Z0fdhB3r-dxU0nGSD9zW_B4r2Qol1rUnUCkhFR0U-HQ,487
 devsecops_engine_tools/engine_utilities/utils/utils.py,sha256=_yaXWHN1pi2xFFKg0yKbb4fsK_ZRv7Dk_9N1FtPS72k,5964
-devsecops_engine_tools-1.29.0.dist-info/METADATA,sha256=MQ2s8CDwgIBVyBnTzaQsWzuCGE5wkyq05DR_7JL4eyo,11162
-devsecops_engine_tools-1.29.0.dist-info/WHEEL,sha256=R0nc6qTxuoLk7ShA2_Y-UWkN8ZdfDBG2B6Eqpz2WXbs,91
-devsecops_engine_tools-1.29.0.dist-info/entry_points.txt,sha256=MHCTFFs9bdNKo6YcWCcBW2_8X6yTisgLOlmVx-V8Rxc,276
-devsecops_engine_tools-1.29.0.dist-info/top_level.txt,sha256=ge6y0X_xBAU1aG3EMWFtl9djbVyg5BxuSp2r2Lg6EQU,23
-devsecops_engine_tools-1.29.0.dist-info/RECORD,,
+devsecops_engine_tools-1.30.0.dist-info/METADATA,sha256=YCHin9RlQq1V5L9TsTPhA6crFm6sOnguyxtqofW8Kqs,11162
+devsecops_engine_tools-1.30.0.dist-info/WHEEL,sha256=R0nc6qTxuoLk7ShA2_Y-UWkN8ZdfDBG2B6Eqpz2WXbs,91
+devsecops_engine_tools-1.30.0.dist-info/entry_points.txt,sha256=MHCTFFs9bdNKo6YcWCcBW2_8X6yTisgLOlmVx-V8Rxc,276
+devsecops_engine_tools-1.30.0.dist-info/top_level.txt,sha256=ge6y0X_xBAU1aG3EMWFtl9djbVyg5BxuSp2r2Lg6EQU,23
+devsecops_engine_tools-1.30.0.dist-info/RECORD,,