devsecops-engine-tools 1.29.0__tar.gz → 1.30.1__tar.gz

{devsecops_engine_tools-1.29.0 → devsecops_engine_tools-1.30.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: devsecops-engine-tools
-Version: 1.29.0
+Version: 1.30.1
 Summary: Tool for DevSecOps strategy
 Home-page: https://github.com/bancolombia/devsecops-engine-tools
 Author: Bancolombia DevSecOps Team

{devsecops_engine_tools-1.29.0 → devsecops_engine_tools-1.30.1}/devsecops_engine_tools/engine_core/src/domain/model/exclusions.py

@@ -16,3 +16,4 @@ class Exclusions:
         self.vm_id_url = kwargs.get("vm_id_url", "")
         self.service = kwargs.get("service", "")
         self.tags = kwargs.get("tags", [])
+        self.check_in_desc = kwargs.get("x86.image.name", [])

{devsecops_engine_tools-1.29.0 → devsecops_engine_tools-1.30.1}/devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/defect_dojo/defect_dojo.py

@@ -549,7 +549,7 @@ class DefectDojoPlatform(VulnerabilityManagementGateway):
         create_date, expired_date = self._date_reason_based(finding, date_fn, reason)
 
         return Exclusions(
-            id=finding.vuln_id_from_tool if finding.vuln_id_from_tool else finding.vulnerability_ids[0]["vulnerability_id"],
+            id=finding.vuln_id_from_tool if finding.vuln_id_from_tool else finding.id[0]["vulnerability_id"],
             where=self._get_where(finding, tool),
             create_date=create_date,
             expired_date=expired_date,

{devsecops_engine_tools-1.29.0 → devsecops_engine_tools-1.30.1}/devsecops_engine_tools/engine_risk/src/domain/usecases/break_build.py

@@ -124,7 +124,7 @@ class BreakBuild:
         print(f"Mitigated count: {mitigated}   Total count: {total}")
         remediation_rate_value = self._get_percentage(mitigated / total)
 
-        risk_threshold = self.threshold["REMEDIATION_RATE"]
+        risk_threshold = self._get_remediation_rate_threshold(total)
         self.remediation_rate = remediation_rate_value
 
         if remediation_rate_value >= (risk_threshold + 5):
@@ -151,6 +151,13 @@ class BreakBuild:
             )
             self.break_build = True
 
+    def _get_remediation_rate_threshold(self, total):
+        remediation_rate = self.threshold["REMEDIATION_RATE"]
+        for key in sorted(remediation_rate.keys(), key=lambda x: int(x) if x.isdigit() else float('inf')):
+            if key.isdigit() and total <= int(key):
+                return remediation_rate[key]
+        return remediation_rate["other"]
+
     def _get_percentage(self, decimal):
         return round(decimal * 100, 3)
 
@@ -186,14 +193,21 @@ class BreakBuild:
                     or (report.id and report.id == exclusion.id)
                     or (report.vm_id and exclusion.id in report.vm_id)
                 ) and ((exclusion.where in report.where) or (exclusion.where == "all")):
-                    exclude = True
-                    exclusion_copy = copy.deepcopy(exclusion)
-                    exclusion_copy.vm_id = report.vm_id
-                    exclusion_copy.vm_id_url = report.vm_id_url
-                    exclusion_copy.service = report.service
-                    exclusion_copy.tags = report.tags
-                    applied_exclusions.append(exclusion_copy)
-                    break
+                    if not exclusion.check_in_desc:
+                        exclude = True
+                    else:
+                        for item in exclusion.check_in_desc:
+                            if item in report.vul_description:
+                                exclude = True
+                                break
+                    if exclude:
+                        exclusion_copy = copy.deepcopy(exclusion)
+                        exclusion_copy.vm_id = report.vm_id
+                        exclusion_copy.vm_id_url = report.vm_id_url
+                        exclusion_copy.service = report.service
+                        exclusion_copy.tags = report.tags
+                        applied_exclusions.append(exclusion_copy)
+                        break
             if not exclude:
                 report.reason = "Remediation Rate"
                 filtered_reports.append(report)

devsecops_engine_tools-1.30.1/devsecops_engine_tools/version.py

@@ -0,0 +1 @@
+version = '1.30.1'

{devsecops_engine_tools-1.29.0 → devsecops_engine_tools-1.30.1}/devsecops_engine_tools.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: devsecops-engine-tools
-Version: 1.29.0
+Version: 1.30.1
 Summary: Tool for DevSecOps strategy
 Home-page: https://github.com/bancolombia/devsecops-engine-tools
 Author: Bancolombia DevSecOps Team

devsecops_engine_tools-1.29.0/devsecops_engine_tools/version.py

@@ -1 +0,0 @@
-version = '1.29.0'