devsecops-engine-tools 1.34.0__py3-none-any.whl → 1.34.2__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.

This version of devsecops-engine-tools might be problematic. Click here for more details.

Files changed (11) hide show
  1. devsecops_engine_tools/engine_sast/engine_secret/src/domain/model/gateway/tool_gateway.py +2 -1
  2. devsecops_engine_tools/engine_sast/engine_secret/src/domain/usecases/secret_scan.py +2 -1
  3. devsecops_engine_tools/engine_sast/engine_secret/src/infrastructure/driven_adapters/gitleaks/gitleaks_tool.py +2 -1
  4. devsecops_engine_tools/engine_sast/engine_secret/src/infrastructure/driven_adapters/trufflehog/trufflehog_run.py +8 -5
  5. devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/driven_adapters/prisma_cloud/prisma_cloud_manager_scan.py +2 -0
  6. devsecops_engine_tools/version.py +1 -1
  7. {devsecops_engine_tools-1.34.0.dist-info → devsecops_engine_tools-1.34.2.dist-info}/METADATA +1 -1
  8. {devsecops_engine_tools-1.34.0.dist-info → devsecops_engine_tools-1.34.2.dist-info}/RECORD +11 -11
  9. {devsecops_engine_tools-1.34.0.dist-info → devsecops_engine_tools-1.34.2.dist-info}/WHEEL +0 -0
  10. {devsecops_engine_tools-1.34.0.dist-info → devsecops_engine_tools-1.34.2.dist-info}/entry_points.txt +0 -0
  11. {devsecops_engine_tools-1.34.0.dist-info → devsecops_engine_tools-1.34.2.dist-info}/top_level.txt +0 -0
devsecops_engine_tools/engine_sast/engine_secret/src/domain/model/gateway/tool_gateway.py CHANGED
@@ -14,5 +14,6 @@ class ToolGateway(metaclass=ABCMeta):
14
14
  secret_tool,
15
15
  secret_external_checks,
16
16
  agent_tem_dir:str,
17
- tool) -> str:
17
+ tool,
18
+ folder_path) -> str:
18
19
  "run tool secret scan"
devsecops_engine_tools/engine_sast/engine_secret/src/domain/usecases/secret_scan.py CHANGED
@@ -54,7 +54,8 @@ class SecretScan:
54
54
  secret_tool,
55
55
  secret_external_checks,
56
56
  self.devops_platform_gateway.get_variable("temp_directory"),
57
- tool)
57
+ tool,
58
+ dict_args["folder_path"])
58
59
  finding_list = self.tool_deserialize.get_list_vulnerability(
59
60
  findings,
60
61
  self.devops_platform_gateway.get_variable("os"),
devsecops_engine_tools/engine_sast/engine_secret/src/infrastructure/driven_adapters/gitleaks/gitleaks_tool.py CHANGED
@@ -92,7 +92,8 @@ class GitleaksTool(ToolGateway):
92
92
  secret_tool, # For external checks
93
93
  secret_external_checks, # For external checks
94
94
  agent_temp_dir,
95
- tool
95
+ tool,
96
+ folder_path = None
96
97
  ):
97
98
  command = [self._COMMAND, "dir"]
98
99
  finding_path = os.path.join(agent_work_folder, "gitleaks_report.json")
devsecops_engine_tools/engine_sast/engine_secret/src/infrastructure/driven_adapters/trufflehog/trufflehog_run.py CHANGED
@@ -62,7 +62,8 @@ class TrufflehogRun(ToolGateway):
62
62
  secret_tool,
63
63
  secret_external_checks,
64
64
  agent_temp_dir,
65
- tool
65
+ tool,
66
+ folder_path
66
67
  ):
67
68
  trufflehog_command = "trufflehog"
68
69
  if "Windows" in agent_os:
@@ -84,7 +85,8 @@ class TrufflehogRun(ToolGateway):
84
85
  include_paths,
85
86
  [repository_name] * len(include_paths),
86
87
  [enable_custom_rules] * len(include_paths),
87
- [agent_os] * len(include_paths)
88
+ [agent_os] * len(include_paths),
89
+ [folder_path] * len(include_paths)
88
90
  )
89
91
  findings, file_findings = self.create_file(self.decode_output(results), agent_work_folder, config_tool, tool)
90
92
  return findings, file_findings
@@ -117,10 +119,11 @@ class TrufflehogRun(ToolGateway):
117
119
  include_path,
118
120
  repository_name,
119
121
  enable_custom_rules,
120
- agent_os
122
+ agent_os,
123
+ folder_path
121
124
  ):
122
- command = f"{trufflehog_command} filesystem {agent_work_folder + '/' + repository_name} --include-paths {include_path} --exclude-paths {exclude_path} --no-verification --no-update --json"
123
-
125
+ path = agent_work_folder if folder_path is not None else f"{agent_work_folder}/{repository_name}"
126
+ command = f"{trufflehog_command} filesystem {path} --include-paths {include_path} --exclude-paths {exclude_path} --no-verification --no-update --json"
124
127
  if enable_custom_rules:
125
128
  command = command.replace("--no-verification --no-update --json", f"--config {agent_work_folder}//rules//trufflehog//custom-rules.yaml --no-verification --no-update --json" if "Windows" in agent_os else
126
129
  "/tmp/rules/trufflehog/custom-rules.yaml --no-verification --no-update --json" if "Linux" in agent_os else
devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/driven_adapters/prisma_cloud/prisma_cloud_manager_scan.py CHANGED
@@ -69,6 +69,8 @@ class PrismaCloudManagerScan(ToolGateway):
69
69
  stdout=subprocess.PIPE,
70
70
  stderr=subprocess.PIPE,
71
71
  text=True,
72
+ encoding="utf-8",
73
+ errors="replace",
72
74
  )
73
75
  print(f"The image {image_name} was scanned")
74
76
  return result_file
devsecops_engine_tools/version.py CHANGED
@@ -1 +1 @@
1
- version = '1.34.0'
1
+ version = '1.34.2'
{devsecops_engine_tools-1.34.0.dist-info → devsecops_engine_tools-1.34.2.dist-info}/METADATA RENAMED
@@ -1,6 +1,6 @@
1
1
  Metadata-Version: 2.1
2
2
  Name: devsecops-engine-tools
3
- Version: 1.34.0
3
+ Version: 1.34.2
4
4
  Summary: Tool for DevSecOps strategy
5
5
  Home-page: https://github.com/bancolombia/devsecops-engine-tools
6
6
  Author: Bancolombia DevSecOps Team
{devsecops_engine_tools-1.34.0.dist-info → devsecops_engine_tools-1.34.2.dist-info}/RECORD RENAMED
@@ -1,5 +1,5 @@
1
1
  devsecops_engine_tools/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
2
- devsecops_engine_tools/version.py,sha256=GX9p1uQ5pMzl5fxTcEjUuh508LFzTFrl8YQ3typxofg,19
2
+ devsecops_engine_tools/version.py,sha256=XA03ECOqqJtcmIpgpHepRa7DJloMuNIy1neCOor7Fbw,19
3
3
  devsecops_engine_tools/engine_core/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
4
4
  devsecops_engine_tools/engine_core/src/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
5
5
  devsecops_engine_tools/engine_core/src/applications/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
@@ -173,18 +173,18 @@ devsecops_engine_tools/engine_sast/engine_secret/src/domain/__init__.py,sha256=4
173
173
  devsecops_engine_tools/engine_sast/engine_secret/src/domain/model/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
174
174
  devsecops_engine_tools/engine_sast/engine_secret/src/domain/model/gateway/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
175
175
  devsecops_engine_tools/engine_sast/engine_secret/src/domain/model/gateway/gateway_deserealizator.py,sha256=4fYPengHW3K0uVP6wHgOiNu-gRb08m78E7QZayZ2LC4,441
176
- devsecops_engine_tools/engine_sast/engine_secret/src/domain/model/gateway/tool_gateway.py,sha256=Ow6CpzKoUhZzLl2hAlWW7vn-of1TTdamemLqhgxZvkg,729
176
+ devsecops_engine_tools/engine_sast/engine_secret/src/domain/model/gateway/tool_gateway.py,sha256=VMhjJFEXxFT7tqY3m2c384IhBRjCk7YMZ-DKs9lHivA,771
177
177
  devsecops_engine_tools/engine_sast/engine_secret/src/domain/usecases/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
178
- devsecops_engine_tools/engine_sast/engine_secret/src/domain/usecases/secret_scan.py,sha256=MZveRxMAE3x8aTuqaePsQYD7PDuh0I4_EKPnHKsEkYI,4481
178
+ devsecops_engine_tools/engine_sast/engine_secret/src/domain/usecases/secret_scan.py,sha256=pziX0qZ5Ac4QDcJLxLLdpm5XBIRTjOFp8D_LEU_MdQk,4528
179
179
  devsecops_engine_tools/engine_sast/engine_secret/src/domain/usecases/set_input_core.py,sha256=VbpiXDHIGeFAGHWb6FBR1axRvh5R2vCOzeYsDkQoHAE,3189
180
180
  devsecops_engine_tools/engine_sast/engine_secret/src/infrastructure/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
181
181
  devsecops_engine_tools/engine_sast/engine_secret/src/infrastructure/driven_adapters/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
182
182
  devsecops_engine_tools/engine_sast/engine_secret/src/infrastructure/driven_adapters/gitleaks/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
183
183
  devsecops_engine_tools/engine_sast/engine_secret/src/infrastructure/driven_adapters/gitleaks/gitleaks_deserealizator.py,sha256=IERIxeHhtQj0npBoL4_qb2mRlNgEUjg603DqGA49RQ4,1617
184
- devsecops_engine_tools/engine_sast/engine_secret/src/infrastructure/driven_adapters/gitleaks/gitleaks_tool.py,sha256=FTkxlZu9PSX53wri7I0zN6iNdbXEioEvjmLm_ZqxUiM,5978
184
+ devsecops_engine_tools/engine_sast/engine_secret/src/infrastructure/driven_adapters/gitleaks/gitleaks_tool.py,sha256=tSsX5gtv_EzMYnhTzpRdxXT__eiqWELj1hS61N5t5ek,6006
185
185
  devsecops_engine_tools/engine_sast/engine_secret/src/infrastructure/driven_adapters/trufflehog/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
186
186
  devsecops_engine_tools/engine_sast/engine_secret/src/infrastructure/driven_adapters/trufflehog/trufflehog_deserealizator.py,sha256=mrSqPrkMiikxQ_uY-rF2I8QvicsOMdMBzTC8CTV3Wk8,2392
187
- devsecops_engine_tools/engine_sast/engine_secret/src/infrastructure/driven_adapters/trufflehog/trufflehog_run.py,sha256=TnGnbwBOiPiFoeCP7-vswi-Y_yjtJJ2D2W9XYaA4ZGs,7938
187
+ devsecops_engine_tools/engine_sast/engine_secret/src/infrastructure/driven_adapters/trufflehog/trufflehog_run.py,sha256=6QUE1DMiTcX46TRK_K8zx89ugpmoKNqyin6wSb2DUwM,8103
188
188
  devsecops_engine_tools/engine_sast/engine_secret/src/infrastructure/entry_points/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
189
189
  devsecops_engine_tools/engine_sast/engine_secret/src/infrastructure/entry_points/entry_point_tool.py,sha256=N5fiG2r5FoxcDdZ12D5hrkeqnu8eRILtxYLq3aj_LfY,1090
190
190
  devsecops_engine_tools/engine_sca/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
@@ -209,7 +209,7 @@ devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/driven_ada
209
209
  devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/driven_adapters/docker/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
210
210
  devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/driven_adapters/docker/docker_images.py,sha256=kJfJbbsHgwmN1NWJ0lb4HhWNcadaFuSnLzr5xUV7QoM,1857
211
211
  devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/driven_adapters/prisma_cloud/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
212
- devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/driven_adapters/prisma_cloud/prisma_cloud_manager_scan.py,sha256=C4We_sIE-hO2z0udrPDAQMT7o0kRtYRoZFZ8nNHoudA,6688
212
+ devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/driven_adapters/prisma_cloud/prisma_cloud_manager_scan.py,sha256=tf33YFYB47th4Zu0WtWpsrAm5I6_xCON4yOwFacTQLA,6758
213
213
  devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/driven_adapters/prisma_cloud/prisma_deserialize_output.py,sha256=oK0NKuPODm38qDgQjf6w40lfNG6NFJS43p5k44wDoMA,2562
214
214
  devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/driven_adapters/trivy_tool/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
215
215
  devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/driven_adapters/trivy_tool/trivy_deserialize_output.py,sha256=LGqnO10Zt-0-TxUW6F1S46jVktlIwxWSYATKSVblCWI,2535
@@ -347,8 +347,8 @@ devsecops_engine_tools/engine_utilities/utils/name_conversion.py,sha256=ADJrRGax
347
347
  devsecops_engine_tools/engine_utilities/utils/printers.py,sha256=amYAr9YQfYgR6jK9a2l26z3oovFPQ3FAKmhq6BKhEBA,623
348
348
  devsecops_engine_tools/engine_utilities/utils/session_manager.py,sha256=Z0fdhB3r-dxU0nGSD9zW_B4r2Qol1rUnUCkhFR0U-HQ,487
349
349
  devsecops_engine_tools/engine_utilities/utils/utils.py,sha256=XFap4yOK7ItLWsqbwDhvLd7NpDhs7i-UGJAMD6jjd7w,6687
350
- devsecops_engine_tools-1.34.0.dist-info/METADATA,sha256=kKt7j0H8HxuPAFBVW5lCEgGPWUwKW0Ep1OkUqrJqyG4,11592
351
- devsecops_engine_tools-1.34.0.dist-info/WHEEL,sha256=R0nc6qTxuoLk7ShA2_Y-UWkN8ZdfDBG2B6Eqpz2WXbs,91
352
- devsecops_engine_tools-1.34.0.dist-info/entry_points.txt,sha256=MHCTFFs9bdNKo6YcWCcBW2_8X6yTisgLOlmVx-V8Rxc,276
353
- devsecops_engine_tools-1.34.0.dist-info/top_level.txt,sha256=ge6y0X_xBAU1aG3EMWFtl9djbVyg5BxuSp2r2Lg6EQU,23
354
- devsecops_engine_tools-1.34.0.dist-info/RECORD,,
350
+ devsecops_engine_tools-1.34.2.dist-info/METADATA,sha256=dnbvW0U-q_wJeK1UC1uLD16vjnbYeAI7_Oo-cOCQ_L8,11592
351
+ devsecops_engine_tools-1.34.2.dist-info/WHEEL,sha256=R0nc6qTxuoLk7ShA2_Y-UWkN8ZdfDBG2B6Eqpz2WXbs,91
352
+ devsecops_engine_tools-1.34.2.dist-info/entry_points.txt,sha256=MHCTFFs9bdNKo6YcWCcBW2_8X6yTisgLOlmVx-V8Rxc,276
353
+ devsecops_engine_tools-1.34.2.dist-info/top_level.txt,sha256=ge6y0X_xBAU1aG3EMWFtl9djbVyg5BxuSp2r2Lg6EQU,23
354
+ devsecops_engine_tools-1.34.2.dist-info/RECORD,,