devsecops-engine-tools 1.34.2__py3-none-any.whl → 1.36.0__py3-none-any.whl

devsecops_engine_tools/engine_core/src/applications/runner_engine_core.py

@@ -109,7 +109,7 @@ def get_inputs_from_cli(args):
         type=parse_choices({"all", "docker", "k8s", "cloudformation", "openapi", "terraform"}),
         required=False,
         default="all",
-        help="Platform to scan, only apply engine_iac tool",
+        help="Platform to scan, applies only to the engine_iac tool and it is possible to select several {all, docker, k8s, cloudformation, openapi, terraform}",
     )
     parser.add_argument(
         "--use_secrets_manager",
@@ -160,7 +160,7 @@ def get_inputs_from_cli(args):
     )
     parser.add_argument(
         "--xray_mode",
-        choices=["scan", "audit"],
+        choices=["scan", "audit","build-scan"],
         required=False,
         default="scan",
         help="Mode to execute xray, only apply engine_dependencies xray tool",

devsecops_engine_tools/engine_core/src/domain/model/exclusions.py

@@ -11,7 +11,7 @@ class Exclusions:
         self.expired_date = kwargs.get("expired_date", "")
         self.severity = kwargs.get("severity", "")
         self.hu = kwargs.get("hu", "")
-        self.reason = kwargs.get("reason", "Risk Accepted")
+        self.reason = kwargs.get("reason", "DevSecOps policy")
         self.vm_id = kwargs.get("vm_id", "")
         self.vm_id_url = kwargs.get("vm_id_url", "")
         self.service = kwargs.get("service", "")

devsecops_engine_tools/engine_core/src/domain/model/gateway/devops_platform_gateway.py

@@ -21,6 +21,10 @@ class DevopsPlatformGateway(metaclass=ABCMeta):
     @abstractmethod
     def get_base_compact_remote_config_url(self, remote_config_repo):
         "get_base_compact_remote_config_url"
+    
+    @abstractmethod
+    def get_build_pipeline_execution_url(self):
+        "get_build_pipeline_execution_url"
 
     @abstractmethod
     def get_variable(self, variable):

devsecops_engine_tools/engine_core/src/domain/model/gateway/vulnerability_management_gateway.py

@@ -37,3 +37,9 @@ class VulnerabilityManagementGateway(metaclass=ABCMeta):
         self, sbom_components, service, dict_args, secret_tool, config_tool
     ):
         "send_sbom_components"
+
+    @abstractmethod
+    def get_black_list(
+        self, dict_args, secret_tool, config_tool
+    ):
+        "get_black_list"

devsecops_engine_tools/engine_core/src/domain/usecases/break_build.py

@@ -1,5 +1,5 @@
 import sys
-import re
+from itertools import chain
 from dataclasses import dataclass
 from functools import reduce
 
@@ -54,7 +54,7 @@ class BreakBuild:
                         )
 
     def process(self, findings_list: "list[Finding]", input_core: InputCore, args: any):
-        sys.stdout.reconfigure(encoding='utf-8')
+        sys.stdout.reconfigure(encoding="utf-8")
         devops_platform_gateway = self.devops_platform_gateway
         printer_table_gateway = self.printer_table_gateway
         threshold = input_core.threshold_defined
@@ -241,9 +241,11 @@ class BreakBuild:
                         ),
                     )
                 )
-                
+
                 if devops_platform_gateway.get_variable("stage") == "build":
-                    print(devops_platform_gateway.result_pipeline("succeeded_with_issues"))
+                    print(
+                        devops_platform_gateway.result_pipeline("succeeded_with_issues")
+                    )
                 else:
                     print(devops_platform_gateway.result_pipeline("succeeded"))
 
@@ -267,7 +269,12 @@ class BreakBuild:
                 }
 
             ids_vulnerabilitites = list(
-                map(lambda x: x.id, vulnerabilities_without_exclusions_list)
+                chain.from_iterable(
+                    (
+                        [x.id, x.description] if x.tool == "XRAY" else [x.id]
+                        for x in vulnerabilities_without_exclusions_list
+                    )
+                )
             )
             ids_match = list(filter(lambda x: x in ids_vulnerabilitites, threshold.cve))
             if len(ids_match) > 0:
@@ -301,7 +308,11 @@ class BreakBuild:
                     status = "failed"
                 else:
                     if devops_platform_gateway.get_variable("stage") == "build":
-                        print(devops_platform_gateway.result_pipeline("succeeded_with_issues"))
+                        print(
+                            devops_platform_gateway.result_pipeline(
+                                "succeeded_with_issues"
+                            )
+                        )
                 scan_result["compliances"] = {
                     "threshold": {"critical": compliance_critical},
                     "status": status,
@@ -334,7 +345,10 @@ class BreakBuild:
                                 (
                                     elem.create_date
                                     for elem in exclusions
-                                    if elem.id == item.id and (elem.where in item.where or "all" in elem.where)
+                                    if elem.id == item.id
+                                    and (
+                                        elem.where in item.where or "all" in elem.where
+                                    )
                                 ),
                                 None,
                             ),
@@ -342,7 +356,10 @@ class BreakBuild:
                                 (
                                     elem.expired_date
                                     for elem in exclusions
-                                    if elem.id == item.id and (elem.where in item.where or "all" in elem.where)
+                                    if elem.id == item.id
+                                    and (
+                                        elem.where in item.where or "all" in elem.where
+                                    )
                                 ),
                                 None,
                             ),
@@ -350,7 +367,10 @@ class BreakBuild:
                                 (
                                     elem.reason
                                     for elem in exclusions
-                                    if elem.id == item.id and (elem.where in item.where or "all" in elem.where)
+                                    if elem.id == item.id
+                                    and (
+                                        elem.where in item.where or "all" in elem.where
+                                    )
                                 ),
                                 None,
                             ),
@@ -378,4 +398,4 @@ class BreakBuild:
                 custom_message,
             )
         )
-        return scan_result
+        return scan_result

devsecops_engine_tools/engine_core/src/domain/usecases/handle_scan.py

@@ -37,7 +37,7 @@ from devsecops_engine_tools.engine_sca.engine_dependencies.src.applications.runn
     runner_engine_dependencies,
 )
 from devsecops_engine_tools.engine_dast.src.applications.runner_dast_scan import (
-    runner_engine_dast
+    runner_engine_dast,
 )
 from devsecops_engine_tools.engine_core.src.infrastructure.helpers.util import (
     define_env,
@@ -47,8 +47,6 @@ from devsecops_engine_tools.engine_utilities import settings
 
 logger = MyLogger.__call__(**settings.SETTING_LOGGER).get_logger()
 
-MESSAGE_ENABLED = "not yet enabled"
-
 
 class HandleScan:
     def __init__(
@@ -104,7 +102,7 @@ class HandleScan:
                 dict_args,
                 config_tool["ENGINE_DAST"],
                 secret_tool,
-                self.devops_platform_gateway
+                self.devops_platform_gateway,
             )
             self._use_vulnerability_management(
                 config_tool, input_core, dict_args, secret_tool, env
@@ -133,48 +131,16 @@ class HandleScan:
             return findings_list, input_core
         elif "engine_dependencies" in dict_args["tool"]:
             findings_list, input_core, sbom_components = runner_engine_dependencies(
-                dict_args, config_tool, secret_tool, self.devops_platform_gateway, self.sbom_tool_gateway
-            )
-            self._use_vulnerability_management(
-                config_tool,
-                input_core,
                 dict_args,
+                config_tool,
                 secret_tool,
-                env,
-                sbom_components
+                self.devops_platform_gateway,
+                self.sbom_tool_gateway,
             )
-            return findings_list, input_core
-
-    def _define_threshold_quality_vuln(
-        self, input_core: InputCore, dict_args, secret_tool, config_tool
-    ):
-        quality_vulnerability_management = (
-            input_core.threshold_defined.quality_vulnerability_management
-        )
-        if quality_vulnerability_management:
-            product_type = self.vulnerability_management.get_product_type_service(
-                input_core.scope_pipeline, dict_args, secret_tool, config_tool
+            self._use_vulnerability_management(
+                config_tool, input_core, dict_args, secret_tool, env, sbom_components
             )
-            if product_type:
-                pt_name = product_type.name
-                apply_qualitypt = next(
-                    filter(
-                        lambda qapt: pt_name in qapt,
-                        quality_vulnerability_management["PTS"],
-                    ),
-                    None,
-                )
-                if apply_qualitypt:
-                    pt_info = apply_qualitypt[pt_name]
-                    pt_profile = pt_info["PROFILE"]
-                    pt_apps = pt_info["APPS"]
-
-                    input_core.threshold_defined.vulnerability = (
-                        LevelVulnerability(quality_vulnerability_management[pt_profile])
-                        if pt_apps == "ALL"
-                        or any(map(lambda pd: pd in input_core.scope_pipeline, pt_apps))
-                        else input_core.threshold_defined.vulnerability
-                    )
+            return findings_list, input_core
 
     def _use_vulnerability_management(
         self,
@@ -207,9 +173,15 @@ class HandleScan:
                             self.devops_platform_gateway.get_variable("branch_tag"),
                             self.devops_platform_gateway.get_variable("commit_hash"),
                             env,
-                            self.devops_platform_gateway.get_variable("vm_product_type_name"),
-                            self.devops_platform_gateway.get_variable("vm_product_name"),
-                            self.devops_platform_gateway.get_variable("vm_product_description"),
+                            self.devops_platform_gateway.get_variable(
+                                "vm_product_type_name"
+                            ),
+                            self.devops_platform_gateway.get_variable(
+                                "vm_product_name"
+                            ),
+                            self.devops_platform_gateway.get_variable(
+                                "vm_product_description"
+                            ),
                         )
                     )
 
@@ -222,6 +194,10 @@ class HandleScan:
                             config_tool,
                         )
 
+                self._update_threshold_cve(
+                    input_core, dict_args, secret_tool, config_tool
+                )
+
                 self._define_threshold_quality_vuln(
                     input_core, dict_args, secret_tool, config_tool
                 )
@@ -239,3 +215,43 @@ class HandleScan:
                 )
             except ExceptionFindingsExcepted as ex2:
                 logger.error(str(ex2))
+
+    def _update_threshold_cve(
+        self, input_core: InputCore, dict_args, secret_tool, config_tool
+    ):
+        input_core.threshold_defined.cve.extend(
+            self.vulnerability_management.get_black_list(
+                dict_args, secret_tool, config_tool
+            )
+        )
+
+    def _define_threshold_quality_vuln(
+        self, input_core: InputCore, dict_args, secret_tool, config_tool
+    ):
+        quality_vulnerability_management = (
+            input_core.threshold_defined.quality_vulnerability_management
+        )
+        if quality_vulnerability_management:
+            product_type = self.vulnerability_management.get_product_type_service(
+                input_core.scope_pipeline, dict_args, secret_tool, config_tool
+            )
+            if product_type:
+                pt_name = product_type.name
+                apply_qualitypt = next(
+                    filter(
+                        lambda qapt: pt_name in qapt,
+                        quality_vulnerability_management["PTS"],
+                    ),
+                    None,
+                )
+                if apply_qualitypt:
+                    pt_info = apply_qualitypt[pt_name]
+                    pt_profile = pt_info["PROFILE"]
+                    pt_apps = pt_info["APPS"]
+
+                    input_core.threshold_defined.vulnerability = (
+                        LevelVulnerability(quality_vulnerability_management[pt_profile])
+                        if pt_apps == "ALL"
+                        or any(map(lambda pd: pd in input_core.scope_pipeline, pt_apps))
+                        else input_core.threshold_defined.vulnerability
+                    )

devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/azure/azure_devops.py

@@ -70,6 +70,9 @@ class AzureDevops(DevopsPlatformGateway):
             f"{remote_config_repo}?path=/"
         )
 
+    def get_build_pipeline_execution_url(self):
+        return f"{SystemVariables.System_TeamFoundationCollectionUri.value()}{SystemVariables.System_TeamProject.value()}/_build?buildId={BuildVariables.Build_BuildId.value()}"
+
     def get_variable(self, variable):
 
             variable_map = {

devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/defect_dojo/defect_dojo.py

@@ -13,7 +13,7 @@ from devsecops_engine_tools.engine_utilities.defect_dojo import (
     Engagement,
     Product,
     Component,
-    FindingExclusion
+    FindingExclusion,
 )
 from devsecops_engine_tools.engine_core.src.domain.model.exclusions import Exclusions
 from devsecops_engine_tools.engine_core.src.domain.model.report import Report
@@ -82,7 +82,7 @@ class DefectDojoPlatform(VulnerabilityManagementGateway):
                 "DEPENDENCY_CHECK": "Dependency Check Scan",
                 "SONARQUBE": "SonarQube API Import",
                 "GITLEAKS": "Gitleaks Scan",
-                "NUCLEI": "Nuclei Scan"
+                "NUCLEI": "Nuclei Scan",
             }
 
             if any(
@@ -254,9 +254,11 @@ class DefectDojoPlatform(VulnerabilityManagementGateway):
             )
 
             white_list = self._get_finding_exclusion(
-                session_manager, dd_max_retries, {
+                session_manager,
+                dd_max_retries,
+                {
                     "type": "white_list",
-                }
+                },
             )
 
             exclusions_white_list = self._get_findings_with_exclusions(
@@ -299,7 +301,9 @@ class DefectDojoPlatform(VulnerabilityManagementGateway):
                 "HOST_DEFECT_DOJO"
             ]
 
-            session_manager = self._get_session_manager(dict_args, secret_tool, config_tool)
+            session_manager = self._get_session_manager(
+                dict_args, secret_tool, config_tool
+            )
 
             findings = self._get_findings(
                 session_manager,
@@ -316,13 +320,18 @@ class DefectDojoPlatform(VulnerabilityManagementGateway):
             )
 
             white_list = self._get_finding_exclusion(
-                session_manager, max_retries, {
+                session_manager,
+                max_retries,
+                {
                     "type": "white_list",
-                }
+                },
             )
 
             all_exclusions = self._get_report_exclusions(
-                all_findings, self._format_date_to_dd_format, host_dd=host_dd, white_list=white_list
+                all_findings,
+                self._format_date_to_dd_format,
+                host_dd=host_dd,
+                white_list=white_list,
             )
 
             return all_findings, all_exclusions
@@ -401,6 +410,26 @@ class DefectDojoPlatform(VulnerabilityManagementGateway):
                 )
             )
 
+    def get_black_list(self, dict_args, secret_tool, config_tool):
+        try:
+            session_manager = self._get_session_manager(
+                dict_args, secret_tool, config_tool
+            )
+
+            exclusions_black_list = self._get_finding_exclusion(
+                session_manager,
+                config_tool["VULNERABILITY_MANAGER"]["DEFECT_DOJO"]["MAX_RETRIES_QUERY"],
+                {
+                    "type": "black_list",
+                },
+            )
+
+            return [entry.unique_id_from_tool for entry in exclusions_black_list]
+        except Exception as ex:
+            raise ExceptionVulnerabilityManagement(
+                "Error getting black list with the following error: {0} ".format(ex)
+            )
+
     def _build_request_importscan(
         self,
         vulnerability_management: VulnerabilityManagement,
@@ -502,19 +531,34 @@ class DefectDojoPlatform(VulnerabilityManagementGateway):
             if finding.risk_accepted:
                 exclusions.append(
                     self._create_report_exclusion(
-                        finding, date_fn, "engine_risk", self.RISK_ACCEPTED, host_dd, **kwargs
+                        finding,
+                        date_fn,
+                        "engine_risk",
+                        self.RISK_ACCEPTED,
+                        host_dd,
+                        **kwargs,
                     )
                 )
             elif finding.false_p:
                 exclusions.append(
                     self._create_report_exclusion(
-                        finding, date_fn, "engine_risk", self.FALSE_POSITIVE, host_dd, **kwargs
+                        finding,
+                        date_fn,
+                        "engine_risk",
+                        self.FALSE_POSITIVE,
+                        host_dd,
+                        **kwargs,
                     )
                 )
             elif finding.out_of_scope:
                 exclusions.append(
                     self._create_report_exclusion(
-                        finding, date_fn, "engine_risk", self.OUT_OF_SCOPE, host_dd, **kwargs
+                        finding,
+                        date_fn,
+                        "engine_risk",
+                        self.OUT_OF_SCOPE,
+                        host_dd,
+                        **kwargs,
                     )
                 )
             elif finding.risk_status == "Transfer Accepted":
@@ -525,26 +569,45 @@ class DefectDojoPlatform(VulnerabilityManagementGateway):
                         "engine_risk",
                         self.TRANSFERRED_FINDING,
                         host_dd,
-                        **kwargs
+                        **kwargs,
                     )
                 )
             elif finding.risk_status == self.ON_WHITELIST:
                 exclusions.append(
                     self._create_report_exclusion(
-                        finding, date_fn, "engine_risk", self.ON_WHITELIST, host_dd, **kwargs
+                        finding,
+                        date_fn,
+                        "engine_risk",
+                        self.ON_WHITELIST,
+                        host_dd,
+                        **kwargs,
                     )
                 )
         return exclusions
 
     def _get_findings_with_exclusions(
-        self, session_manager, service, max_retries, query_params, tool, date_fn, reason, **kwargs
+        self,
+        session_manager,
+        service,
+        max_retries,
+        query_params,
+        tool,
+        date_fn,
+        reason,
+        **kwargs,
     ):
         findings = self._get_findings(
             session_manager, service, max_retries, query_params
         )
 
         return map(
-            partial(self._create_exclusion, date_fn=date_fn, tool=tool, reason=reason, **kwargs),
+            partial(
+                self._create_exclusion,
+                date_fn=date_fn,
+                tool=tool,
+                reason=reason,
+                **kwargs,
+            ),
             findings,
         )
 
@@ -567,30 +630,60 @@ class DefectDojoPlatform(VulnerabilityManagementGateway):
     def _date_reason_based(self, finding, date_fn, reason, tool, **kwargs):
         def get_vuln_id(finding, tool):
             if tool == "engine_risk":
-                return finding.id[0]["vulnerability_id"] if finding.id else finding.vuln_id_from_tool
+                return (
+                    finding.id[0]["vulnerability_id"]
+                    if finding.id
+                    else finding.vuln_id_from_tool
+                )
             else:
-                return finding.vulnerability_ids[0]["vulnerability_id"] if finding.vulnerability_ids else finding.vuln_id_from_tool
+                return (
+                    finding.vulnerability_ids[0]["vulnerability_id"]
+                    if finding.vulnerability_ids
+                    else finding.vuln_id_from_tool
+                )
 
         def get_dates_from_whitelist(vuln_id, white_list):
-            matching_finding = next(filter(lambda x: x.unique_id_from_tool == vuln_id, white_list), None)
+            matching_finding = next(
+                filter(lambda x: x.unique_id_from_tool == vuln_id, white_list), None
+            )
             if matching_finding:
-                return date_fn(matching_finding.create_date), date_fn(matching_finding.expiration_date)
+                return date_fn(matching_finding.create_date), date_fn(
+                    matching_finding.expiration_date
+                )
             return date_fn(None), date_fn(None)
 
         reason_to_dates = {
-            self.FALSE_POSITIVE: lambda: (date_fn(finding.last_status_update), date_fn(None)),
-            self.OUT_OF_SCOPE: lambda: (date_fn(finding.last_status_update), date_fn(None)),
-            self.TRANSFERRED_FINDING: lambda: (date_fn(finding.transfer_finding.date), date_fn(finding.transfer_finding.expiration_date)),
-            self.RISK_ACCEPTED: lambda: (date_fn(finding.accepted_risks[-1]["created"]), date_fn(finding.accepted_risks[-1]["expiration_date"])),
-            self.ON_WHITELIST: lambda: get_dates_from_whitelist(get_vuln_id(finding, tool), kwargs.get("white_list", [])),
+            self.FALSE_POSITIVE: lambda: (
+                date_fn(finding.last_status_update),
+                date_fn(None),
+            ),
+            self.OUT_OF_SCOPE: lambda: (
+                date_fn(finding.last_status_update),
+                date_fn(None),
+            ),
+            self.TRANSFERRED_FINDING: lambda: (
+                date_fn(finding.transfer_finding.date),
+                date_fn(finding.transfer_finding.expiration_date),
+            ),
+            self.RISK_ACCEPTED: lambda: (
+                date_fn(finding.accepted_risks[-1]["created"]),
+                date_fn(finding.accepted_risks[-1]["expiration_date"]),
+            ),
+            self.ON_WHITELIST: lambda: get_dates_from_whitelist(
+                get_vuln_id(finding, tool), kwargs.get("white_list", [])
+            ),
         }
 
-        create_date, expired_date = reason_to_dates.get(reason, lambda: (date_fn(None), date_fn(None)))()
+        create_date, expired_date = reason_to_dates.get(
+            reason, lambda: (date_fn(None), date_fn(None))
+        )()
         return create_date, expired_date
 
     def _create_exclusion(self, finding, date_fn, tool, reason, **kwargs):
-        create_date, expired_date = self._date_reason_based(finding, date_fn, reason, tool, **kwargs)
-            
+        create_date, expired_date = self._date_reason_based(
+            finding, date_fn, reason, tool, **kwargs
+        )
+
         return Exclusions(
             id=(
                 finding.vuln_id_from_tool
@@ -608,8 +701,12 @@ class DefectDojoPlatform(VulnerabilityManagementGateway):
             reason=reason,
         )
 
-    def _create_report_exclusion(self, finding, date_fn, tool, reason, host_dd, **kwargs):
-        create_date, expired_date = self._date_reason_based(finding, date_fn, reason, tool, **kwargs)
+    def _create_report_exclusion(
+        self, finding, date_fn, tool, reason, host_dd, **kwargs
+    ):
+        create_date, expired_date = self._date_reason_based(
+            finding, date_fn, reason, tool, **kwargs
+        )
 
         return Exclusions(
             id=(

devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/github/github_actions.py

@@ -61,6 +61,9 @@ class GithubActions(DevopsPlatformGateway):
         owner = split[0]
         return f"{SystemVariables.github_server_url}/{owner}/{remote_config_repo}"
 
+    def get_build_pipeline_execution_url(self):
+        return f"{SystemVariables.github_server_url.value()}/{SystemVariables.github_repository.value()}/actions/runs/{BuildVariables.github_run_id.value()}"
+
     def get_variable(self, variable):
         variable_map = {
             "branch_name": BuildVariables.github_ref,

devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/runtime_local/runtime_local.py

@@ -42,6 +42,9 @@ class RuntimeLocal(DevopsPlatformGateway):
 
     def get_source_code_management_uri(self):
         return os.environ.get("DET_SOURCE_CODE_MANAGEMENT_URI")
+    
+    def get_build_pipeline_execution_url(self):
+        return os.environ.get("DET_BUILD_PIPELINE_EXECUTION_URL")
 
     def get_base_compact_remote_config_url(self, remote_config_repo):
         return f"{os.environ.get('DET_BASE_COMPACT_REMOTE_CONFIG_URL')}?path=/"

devsecops_engine_tools/engine_sast/engine_code/src/domain/usecases/code_scan.py

@@ -70,7 +70,7 @@ class CodeScan:
                             expired_date=exc.get("expired_date", ""),
                             severity=exc.get("severity", ""),
                             hu=exc.get("hu", ""),
-                            reason=exc.get("reason", "Risk acceptance"),
+                            reason=exc.get("reason", "DevSecOps policy"),
                         )
                         list_exclusions.append(exclusion)
         return list_exclusions, skip_tool

devsecops_engine_tools/engine_sast/engine_secret/src/domain/usecases/set_input_core.py

@@ -52,7 +52,7 @@ class SetInputCore:
                             expired_date=item.get("expired_date", ""),
                             severity=item.get("severity", ""),
                             hu=item.get("hu", ""),
-                            reason=item.get("reason", "Risk acceptance"),
+                            reason=item.get("reason", "DevSecOps policy"),
                         )
                         for item in value[tool]
                     ]

devsecops_engine_tools/engine_sca/engine_container/src/domain/usecases/set_input_core.py

@@ -36,7 +36,7 @@ class SetInputCore:
                         expired_date=item.get("expired_date", ""),
                         severity=item.get("severity", ""),
                         hu=item.get("hu", ""),
-                        reason=item.get("reason", "Risk acceptance"),
+                        reason=item.get("reason", "DevSecOps policy"),
                     )
                 )
 

devsecops_engine_tools/engine_sca/engine_dependencies/src/domain/model/gateways/tool_gateway.py

@@ -4,6 +4,6 @@ from abc import ABCMeta, abstractmethod
 class ToolGateway(metaclass=ABCMeta):
     @abstractmethod
     def run_tool_dependencies_sca(
-        self, remote_config, dict_args, to_scan, secret_tool, token_engine_dependencies
+        self, remote_config, dict_args,to_scan, secret_tool, token_engine_dependencies,**kwargs
     ) -> str:
         "run tool dependencies sca"

devsecops_engine_tools/engine_sca/engine_dependencies/src/domain/usecases/dependencies_sca_scan.py

@@ -17,6 +17,9 @@ class DependenciesScan:
         pipeline_name,
         to_scan,
         secret_tool,
+        build_id,
+        build_url
+
     ):
         self.tool_run = tool_run
         self.tool_deserializator = tool_deserializator
@@ -26,6 +29,9 @@ class DependenciesScan:
         self.dict_args = dict_args
         self.to_scan = to_scan
         self.secret_tool = secret_tool
+        self.build_id = build_id
+        self.build_url = build_url
+
 
     def process(self):
         """
@@ -41,6 +47,8 @@ class DependenciesScan:
             self.to_scan,
             self.secret_tool,
             self.dict_args["token_engine_dependencies"],
+            build_id=self.build_id,
+            build_url=self.build_url
         )
 
     def deserializator(self, dependencies_scanned):

devsecops_engine_tools/engine_sca/engine_dependencies/src/domain/usecases/set_input_core.py

@@ -25,7 +25,7 @@ class SetInputCore:
                             expired_date=item.get("expired_date", ""),
                             severity=item.get("severity", ""),
                             hu=item.get("hu", ""),
-                            reason=item.get("reason", "Risk acceptance"),
+                            reason=item.get("reason", "DevSecOps policy"),
                         )
                         for item in value[tool]
                     ]

devsecops_engine_tools/engine_sca/engine_dependencies/src/infrastructure/driven_adapters/dependency_check/dependency_check_tool.py

@@ -119,6 +119,7 @@ class DependencyCheckTool(ToolGateway):
         to_scan,
         token,
         token_engine_dependencies,
+        **kwargs,
     ):
         if not self.is_java_installed():
             logger.error(

devsecops_engine_tools/engine_sca/engine_dependencies/src/infrastructure/driven_adapters/xray_tool/xray_manager_scan.py

@@ -105,13 +105,42 @@ class XrayScan(ToolGateway):
         if os.path.exists(gradlew_path):
             os.chmod(gradlew_path, 0o755)
 
-    def scan_dependencies(self, prefix, cwd, config, mode, to_scan):
+    def scan_dependencies(self, prefix, cwd,pipeline_name,build_id,build_url,config, mode, to_scan):
         command = [
             prefix,
             mode,
             "--format=json",
             f"{to_scan}",
         ]
+
+        if mode == "build-scan":
+            #build info execution command
+            build_info_command =[
+               prefix,
+               "rt",
+               "bp",
+                pipeline_name,
+                build_id,
+                "--env-exclude=*password*;*psw*;*secret*;*key*;*token*;*auth*;",
+                f"--build-url={build_url}"  
+            ]
+            build_info_result = subprocess.run(build_info_command, cwd=cwd, stdout=subprocess.PIPE, stderr=subprocess.PIPE, text=True)
+
+            if  not build_info_result.stdout:
+               logger.error(f"Build info  NOT  successfully deployed to Jfrog Arifactory.: {build_info_result.stderr}")
+               return None
+            print("##[info]Build info successfully deployed.")
+            #build-scan execution command
+            command = [
+                prefix,
+                mode,
+                pipeline_name,
+                build_id,
+                "--format=json",
+                "--vuln",
+                "--fail=false",
+                "--rescan=true"
+            ]
         result = subprocess.run(
             command, cwd=cwd, stdout=subprocess.PIPE, stderr=subprocess.PIPE, text=True
         )
@@ -153,9 +182,10 @@ class XrayScan(ToolGateway):
         to_scan,
         secret_tool,
         token_engine_dependencies,
+        **kwargs,
     ):
         token = secret_tool["token_xray"] if secret_tool else token_engine_dependencies
-        if dict_args["xray_mode"] == "scan":
+        if dict_args["xray_mode"] == "scan" or dict_args["xray_mode"] == "build-scan":
             get_artifacts = GetArtifacts()
             pattern = get_artifacts.excluded_files(
                 remote_config, pipeline_name, exclusion, "XRAY"
@@ -192,6 +222,9 @@ class XrayScan(ToolGateway):
         results_file = self.scan_dependencies(
             command_prefix,
             cwd,
+            pipeline_name,
+            kwargs.get("build_id"),
+            kwargs.get("build_url"),
             remote_config,
             dict_args["xray_mode"],
             to_scan,

devsecops_engine_tools/engine_sca/engine_dependencies/src/infrastructure/entry_points/entry_point_tool.py

@@ -42,6 +42,8 @@ def init_engine_dependencies(
         dict_args["remote_config_branch"]
     )
     pipeline_name = tool_remote.get_variable("pipeline_name")
+    build_id = tool_remote.get_variable("build_id")
+    build_url = tool_remote.get_build_pipeline_execution_url()
 
     handle_remote_config_patterns = HandleRemoteConfigPatterns(
         remote_config, exclusions, pipeline_name
@@ -72,6 +74,9 @@ def init_engine_dependencies(
                 pipeline_name,
                 to_scan,
                 secret_tool,
+                build_id,
+                build_url
+
             )
             if config_sbom["ENABLED"] and any(
                 branch in str(tool_remote.get_variable("branch_tag"))

devsecops_engine_tools/version.py

@@ -1 +1 @@
-version = '1.34.2'
+version = '1.36.0'

{devsecops_engine_tools-1.34.2.dist-info → devsecops_engine_tools-1.36.0.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: devsecops-engine-tools
-Version: 1.34.2
+Version: 1.36.0
 Summary: Tool for DevSecOps strategy
 Home-page: https://github.com/bancolombia/devsecops-engine-tools
 Author: Bancolombia DevSecOps Team
@@ -74,7 +74,7 @@ pip3 install devsecops-engine-tools
 ### Scan running - flags (CLI)
 
 ```bash
-devsecops-engine-tools --platform_devops ["local","azure","github"] --remote_config_repo ["remote_config_repo"] --remote_config_branch ["remote_config_branch"] --tool ["engine_iac", "engine_dast", "engine_secret", "engine_dependencies", "engine_container", "engine_risk", "engine_code"] --folder_path ["Folder path scan engine_iac, engine_code, engine_dependencies and engine_secret"] --platform ["k8s","cloudformation","docker", "openapi", "terraform"] --use_secrets_manager ["false", "true"] --use_vulnerability_management ["false", "true"] --send_metrics ["false", "true"] --token_cmdb ["token_cmdb"] --token_vulnerability_management ["token_vulnerability_management"] --token_engine_container ["token_engine_container"] --token_engine_dependencies ["token_engine_dependencies"] --token_external_checks ["token_external_checks"] --xray_mode ["scan", "audit"] --image_to_scan ["image_to_scan"] --dast_file_path ["dast_file_path"]
+devsecops-engine-tools --platform_devops ["local","azure","github"] --remote_config_repo ["remote_config_repo"] --remote_config_branch ["remote_config_branch"] --tool ["engine_iac", "engine_dast", "engine_secret", "engine_dependencies", "engine_container", "engine_risk", "engine_code"] --folder_path ["Folder path scan engine_iac, engine_code, engine_dependencies and engine_secret"] --platform ["k8s","cloudformation","docker", "openapi", "terraform"] --use_secrets_manager ["false", "true"] --use_vulnerability_management ["false", "true"] --send_metrics ["false", "true"] --token_cmdb ["token_cmdb"] --token_vulnerability_management ["token_vulnerability_management"] --token_engine_container ["token_engine_container"] --token_engine_dependencies ["token_engine_dependencies"] --token_external_checks ["token_external_checks"] --xray_mode ["scan", "audit","build-scan"] --image_to_scan ["image_to_scan"] --dast_file_path ["dast_file_path"]
 ```
 
 ### Structure Remote Config

{devsecops_engine_tools-1.34.2.dist-info → devsecops_engine_tools-1.36.0.dist-info}/RECORD

@@ -1,16 +1,16 @@
 devsecops_engine_tools/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-devsecops_engine_tools/version.py,sha256=XA03ECOqqJtcmIpgpHepRa7DJloMuNIy1neCOor7Fbw,19
+devsecops_engine_tools/version.py,sha256=Bm0QlJAY4Gy2BV82t6eMzctMh_SORArcckv0IqNoz7g,19
 devsecops_engine_tools/engine_core/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_core/src/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_core/src/applications/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-devsecops_engine_tools/engine_core/src/applications/runner_engine_core.py,sha256=PcYxH6NQIPkFPMkeOEUs5iw2k-gL0HKuOek2uhR4gIQ,8080
+devsecops_engine_tools/engine_core/src/applications/runner_engine_core.py,sha256=panasPdwMUKZYgcQXQdMqTjOISzx0OQcmsS61EeMucI,8194
 devsecops_engine_tools/engine_core/src/deployment/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_core/src/deployment/infrastructure/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_core/src/domain/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_core/src/domain/model/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_core/src/domain/model/component.py,sha256=_rWtP0v_lyOZ4s5FGZc0rOJ3eh4AAWuGMaXzSYBcZMU,94
 devsecops_engine_tools/engine_core/src/domain/model/customs_exceptions.py,sha256=YLeOj4O7kNsUx8RD6pwBQdFLYbkm7Eh-F-ohZ3jFGbs,599
-devsecops_engine_tools/engine_core/src/domain/model/exclusions.py,sha256=RjFKIpGVuntnvFZ6GlOYODrChKsUcWxPVQLGeGOeqfo,751
+devsecops_engine_tools/engine_core/src/domain/model/exclusions.py,sha256=ujzfzp_gwkd2Qzy_F8be3evgDVk2pxbSa0YuMlM2aYU,754
 devsecops_engine_tools/engine_core/src/domain/model/finding.py,sha256=MntDksQuPt1L-1Ww3nK7NbMLfVwRjxPGCN_oHYXbbWk,383
 devsecops_engine_tools/engine_core/src/domain/model/input_core.py,sha256=hc1WMzCwsGxnrlvvk84S5iNYJRDQWbaQP9MwR3N7tVM,422
 devsecops_engine_tools/engine_core/src/domain/model/level_compliance.py,sha256=ntn_UWqHc6sT5g_LozBdjdewTQxFsp7Kt8M0xqw-k_o,98
@@ -19,16 +19,16 @@ devsecops_engine_tools/engine_core/src/domain/model/report.py,sha256=09QV_jBQbuc
 devsecops_engine_tools/engine_core/src/domain/model/threshold.py,sha256=TCBECuvoC3-9g8vg3iKWGIixssNecP0iUaZ9Qzv0n7w,596
 devsecops_engine_tools/engine_core/src/domain/model/vulnerability_management.py,sha256=04ALQoTM4uoea9s505WCDw18J3Cvu6phf54ZTKODN64,552
 devsecops_engine_tools/engine_core/src/domain/model/gateway/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-devsecops_engine_tools/engine_core/src/domain/model/gateway/devops_platform_gateway.py,sha256=7u7Qq2fq_QW7PJmGnSKZZyVSjTwnj3Oj-HBpj6nI8jk,684
+devsecops_engine_tools/engine_core/src/domain/model/gateway/devops_platform_gateway.py,sha256=-L7O48UlUe2wI1DRnpAdZ98SLge7pcvoUOXITgFaBLg,800
 devsecops_engine_tools/engine_core/src/domain/model/gateway/metrics_manager_gateway.py,sha256=u_ivbmCyymw0Je7gRFg0uD9iDmZfTbteH5UwcgP0JAs,191
 devsecops_engine_tools/engine_core/src/domain/model/gateway/printer_table_gateway.py,sha256=ROBsh7Lyu62a5RqZ4KgGQcwrBzbHRwxAJ9Rj3LoupQc,602
 devsecops_engine_tools/engine_core/src/domain/model/gateway/sbom_manager.py,sha256=HpkUZYbmW72r4KDIPWwDmAOU_uawmKaexxmWheR9QAA,321
 devsecops_engine_tools/engine_core/src/domain/model/gateway/secrets_manager_gateway.py,sha256=CTwUIvUWF0NSSzdCqASUFst6KUysW53NV9eatjLGdl8,170
-devsecops_engine_tools/engine_core/src/domain/model/gateway/vulnerability_management_gateway.py,sha256=Szw5ONhHDRVgnBIUzCS0kkY3GbosZTS41kJVOcx3kSM,1302
+devsecops_engine_tools/engine_core/src/domain/model/gateway/vulnerability_management_gateway.py,sha256=MsNHO4x78KqMkJ3u3gxPltyBIqP5gB3tRBlN-w7VtBg,1429
 devsecops_engine_tools/engine_core/src/domain/usecases/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-devsecops_engine_tools/engine_core/src/domain/usecases/break_build.py,sha256=0JK4U5LGxzrLVZOw68j1PMxmLTDPru7Kts_-RtAG0jA,15965
+devsecops_engine_tools/engine_core/src/domain/usecases/break_build.py,sha256=OLaovhcWWA6n1TkoSGZhnfjfQis1R33WztEN3DG6gII,16645
 devsecops_engine_tools/engine_core/src/domain/usecases/handle_risk.py,sha256=RirHqsW5AhGjV7ITa13bW_BfM6VE99DffrPASoB9SN0,9403
-devsecops_engine_tools/engine_core/src/domain/usecases/handle_scan.py,sha256=XHLeVIVLrXv4oZF8GY6InEqWg0dszMb-0XBJFX7RZjY,10161
+devsecops_engine_tools/engine_core/src/domain/usecases/handle_scan.py,sha256=HKwsK09-rRbW7y7aOrsCJLGaa279XeUB3M8k6SsGFtA,10723
 devsecops_engine_tools/engine_core/src/domain/usecases/metrics_manager.py,sha256=Xi0iNnPrFgqd2cBdAA5E_tgouhxs-BTo016aolnGgv8,2413
 devsecops_engine_tools/engine_core/src/infrastructure/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
@@ -36,17 +36,17 @@ devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/aws/__init
 devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/aws/s3_manager.py,sha256=4h1k5EQnL_3NoGI6oRyVibkN5u3s4j5VUthNU1m1zQc,2206
 devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/aws/secrets_manager.py,sha256=ELihQBgSPH4f9QCyg2dgjudsFitaqgdsljnVOmaA_v4,1972
 devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/azure/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/azure/azure_devops.py,sha256=buCBJ6kAg-5b_7P-gWzem6NEMbk5lK9Hx0Zuf-BQfXQ,5090
+devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/azure/azure_devops.py,sha256=lNjYo83p3lovwfW4BeBtHQZckZl9m-9jlcIB-DesqhY,5316
 devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/defect_dojo/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/defect_dojo/defect_dojo.py,sha256=ma6TTlrXnUqGJ6DXM7PQzgZyoTK6Wd-tvMXLITpOvaA,27330
+devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/defect_dojo/defect_dojo.py,sha256=erkwrgzqUXArghRmFfgyWiS0UeQmo0eSKIgqkvmcRMA,29388
 devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/github/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/github/github_actions.py,sha256=KCg6tTDncasrRZbB20QiLZNE6TKYkfgQ9zP0wPd3xe0,3925
+devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/github/github_actions.py,sha256=cn9VGDaD9gUnJrLn9vEkQvfqYHIJftGE9ZACHEUOUxo,4132
 devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/printer_pretty_table/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/printer_pretty_table/printer_pretty_table.py,sha256=NkXu7JYoCHXIx0HzHl4DhdLGEpocPMIqs2L0ADS-RcI,5369
 devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/printer_rich_table/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/printer_rich_table/printer_rich_table.py,sha256=LPr3xSv0I7ENEdu1xj8ve5PXzpUohs7hbQvHjDSaUuE,3028
 devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/runtime_local/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/runtime_local/runtime_local.py,sha256=O1ZstzA7JHoFvNCNA_mHK1w7ZWCfMEXz-CZa48tDQqg,2748
+devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/runtime_local/runtime_local.py,sha256=uIO3rihY5uBm40dC9pAKaZoKO_606O1ZIgKG7TZCeS4,2867
 devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/syft/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/syft/syft.py,sha256=hP5MitHTeZf3Ia-xwi5bUdIU5hIwbUNuDSzcsqlxG5c,4457
 devsecops_engine_tools/engine_core/src/infrastructure/entry_points/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
@@ -125,7 +125,7 @@ devsecops_engine_tools/engine_sast/engine_code/src/domain/model/config_tool.py,s
 devsecops_engine_tools/engine_sast/engine_code/src/domain/model/gateways/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_sast/engine_code/src/domain/model/gateways/tool_gateway.py,sha256=kseBXn2SzCaFNJLghY9bTOCVvD2v5t7DKcfxgSmvBc0,459
 devsecops_engine_tools/engine_sast/engine_code/src/domain/usecases/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-devsecops_engine_tools/engine_sast/engine_code/src/domain/usecases/code_scan.py,sha256=4LVJffD-v5kbbJz1qNM9CjVEQgh-6UOpgjXMUqhQ3sg,5989
+devsecops_engine_tools/engine_sast/engine_code/src/domain/usecases/code_scan.py,sha256=LbsUQtQNrKlNO_9X5o5G32gCAYWHlaQwZDYMQtArOnw,5990
 devsecops_engine_tools/engine_sast/engine_code/src/infrastructure/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_sast/engine_code/src/infrastructure/driven_adapters/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_sast/engine_code/src/infrastructure/driven_adapters/bearer/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
@@ -176,7 +176,7 @@ devsecops_engine_tools/engine_sast/engine_secret/src/domain/model/gateway/gatewa
 devsecops_engine_tools/engine_sast/engine_secret/src/domain/model/gateway/tool_gateway.py,sha256=VMhjJFEXxFT7tqY3m2c384IhBRjCk7YMZ-DKs9lHivA,771
 devsecops_engine_tools/engine_sast/engine_secret/src/domain/usecases/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_sast/engine_secret/src/domain/usecases/secret_scan.py,sha256=pziX0qZ5Ac4QDcJLxLLdpm5XBIRTjOFp8D_LEU_MdQk,4528
-devsecops_engine_tools/engine_sast/engine_secret/src/domain/usecases/set_input_core.py,sha256=VbpiXDHIGeFAGHWb6FBR1axRvh5R2vCOzeYsDkQoHAE,3189
+devsecops_engine_tools/engine_sast/engine_secret/src/domain/usecases/set_input_core.py,sha256=mfmzInLUV2W-uqAOua_haCZnEByqrDVyTfTzq5DftwY,3190
 devsecops_engine_tools/engine_sast/engine_secret/src/infrastructure/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_sast/engine_secret/src/infrastructure/driven_adapters/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_sast/engine_secret/src/infrastructure/driven_adapters/gitleaks/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
@@ -203,7 +203,7 @@ devsecops_engine_tools/engine_sca/engine_container/src/domain/model/gateways/too
 devsecops_engine_tools/engine_sca/engine_container/src/domain/usecases/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_sca/engine_container/src/domain/usecases/container_sca_scan.py,sha256=N61PjZAecSqhGTYc2HcyuBqdhDTFZ6ZpQMmOQH17h9Y,4122
 devsecops_engine_tools/engine_sca/engine_container/src/domain/usecases/handle_remote_config_patterns.py,sha256=4wgBTQSDE-C5v01C3Vxzeq0DJKZUSqQ5TVLG7yPZPKs,926
-devsecops_engine_tools/engine_sca/engine_container/src/domain/usecases/set_input_core.py,sha256=n-SjcDl6YPAnUWqkOYXsVr-mTiS4rGxj4sS2YkXo6xw,2632
+devsecops_engine_tools/engine_sca/engine_container/src/domain/usecases/set_input_core.py,sha256=1F1l-_2izb_ENhE0c0iz42L8FyPv07ZGsQbkJzDI_uA,2633
 devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/driven_adapters/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/driven_adapters/docker/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
@@ -227,21 +227,21 @@ devsecops_engine_tools/engine_sca/engine_dependencies/src/domain/__init__.py,sha
 devsecops_engine_tools/engine_sca/engine_dependencies/src/domain/model/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_sca/engine_dependencies/src/domain/model/gateways/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_sca/engine_dependencies/src/domain/model/gateways/deserializator_gateway.py,sha256=A4WPW-cNMlitI7-P2L-W2hFUPvIU7Ejk6JxRJGATfwc,301
-devsecops_engine_tools/engine_sca/engine_dependencies/src/domain/model/gateways/tool_gateway.py,sha256=KVHx_8A7hSUQqZdq0S8-yX2f_L2wYDC6TodSV96f3ww,273
+devsecops_engine_tools/engine_sca/engine_dependencies/src/domain/model/gateways/tool_gateway.py,sha256=3DrF1v-E5tUGAj2N9f47o5TqPljCGjurWecUz36vRPY,281
 devsecops_engine_tools/engine_sca/engine_dependencies/src/domain/usecases/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-devsecops_engine_tools/engine_sca/engine_dependencies/src/domain/usecases/dependencies_sca_scan.py,sha256=0JYY5g3bSSiEqFdsN5phglX76z3YpiyGTL_CvBvO274,1562
+devsecops_engine_tools/engine_sca/engine_dependencies/src/domain/usecases/dependencies_sca_scan.py,sha256=jrdWJhy9i6E_JFqXQDDgE7It-wYXjY3o9CgEfSTovsw,1741
 devsecops_engine_tools/engine_sca/engine_dependencies/src/domain/usecases/handle_remote_config_patterns.py,sha256=cTM8IQRZJBr5zG5nhCkTxuw2fCHDZ3wrPgQhRjG88pg,968
-devsecops_engine_tools/engine_sca/engine_dependencies/src/domain/usecases/set_input_core.py,sha256=0M53iuI0VEDcYk9G4EuAFTc1Iok3xqiWLHYuKaU3dqg,2250
+devsecops_engine_tools/engine_sca/engine_dependencies/src/domain/usecases/set_input_core.py,sha256=yy-S8nP7KGFUA9e19SaSvX5fnRTH_pjuwAGL-oDfOdM,2251
 devsecops_engine_tools/engine_sca/engine_dependencies/src/infrastructure/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_sca/engine_dependencies/src/infrastructure/driven_adapters/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_sca/engine_dependencies/src/infrastructure/driven_adapters/dependency_check/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_sca/engine_dependencies/src/infrastructure/driven_adapters/dependency_check/dependency_check_deserialize.py,sha256=Na8FSmBODt9XtxTtWvGpLWy3RvhoPJ2i7jneEfvpaHM,7210
-devsecops_engine_tools/engine_sca/engine_dependencies/src/infrastructure/driven_adapters/dependency_check/dependency_check_tool.py,sha256=bU2u__bgV_MmwB8JCVAq1NHvkKfMV2-mFkteQ2iA-j8,4864
+devsecops_engine_tools/engine_sca/engine_dependencies/src/infrastructure/driven_adapters/dependency_check/dependency_check_tool.py,sha256=JH1GiB11OLfs8nRNOSMgK7VmQBUYC5gA3_XbVMiNX5A,4882
 devsecops_engine_tools/engine_sca/engine_dependencies/src/infrastructure/driven_adapters/xray_tool/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_sca/engine_dependencies/src/infrastructure/driven_adapters/xray_tool/xray_deserialize_output.py,sha256=ZUk-e1PKzV7uRAT7BpET363pgl2eMnXMCGSpewsOpKg,2236
-devsecops_engine_tools/engine_sca/engine_dependencies/src/infrastructure/driven_adapters/xray_tool/xray_manager_scan.py,sha256=xFNvfPd0L-dc4Ghm-1PtKEU0ueR_XCRZEaJNggug_9U,7648
+devsecops_engine_tools/engine_sca/engine_dependencies/src/infrastructure/driven_adapters/xray_tool/xray_manager_scan.py,sha256=Z6PHC5mV14q6yDDQ75qskjtIbV0mUn1LI47yshgY89Q,8910
 devsecops_engine_tools/engine_sca/engine_dependencies/src/infrastructure/entry_points/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-devsecops_engine_tools/engine_sca/engine_dependencies/src/infrastructure/entry_points/entry_point_tool.py,sha256=gZZRX1oGg1tyZD3yikBXBbH7u33v-nzz6tuSJH5TApk,3453
+devsecops_engine_tools/engine_sca/engine_dependencies/src/infrastructure/entry_points/entry_point_tool.py,sha256=1A_KeCVCQN0z17zpvKQVajHAbNDbA7OCZkt8P1dwLK0,3621
 devsecops_engine_tools/engine_sca/engine_dependencies/src/infrastructure/helpers/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_sca/engine_dependencies/src/infrastructure/helpers/get_artifacts.py,sha256=CpzyUJyO2bRtv6mZJODV5NL5ea79_VRqsYKC0oYDsNU,4077
 devsecops_engine_tools/engine_utilities/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
@@ -347,8 +347,8 @@ devsecops_engine_tools/engine_utilities/utils/name_conversion.py,sha256=ADJrRGax
 devsecops_engine_tools/engine_utilities/utils/printers.py,sha256=amYAr9YQfYgR6jK9a2l26z3oovFPQ3FAKmhq6BKhEBA,623
 devsecops_engine_tools/engine_utilities/utils/session_manager.py,sha256=Z0fdhB3r-dxU0nGSD9zW_B4r2Qol1rUnUCkhFR0U-HQ,487
 devsecops_engine_tools/engine_utilities/utils/utils.py,sha256=XFap4yOK7ItLWsqbwDhvLd7NpDhs7i-UGJAMD6jjd7w,6687
-devsecops_engine_tools-1.34.2.dist-info/METADATA,sha256=dnbvW0U-q_wJeK1UC1uLD16vjnbYeAI7_Oo-cOCQ_L8,11592
-devsecops_engine_tools-1.34.2.dist-info/WHEEL,sha256=R0nc6qTxuoLk7ShA2_Y-UWkN8ZdfDBG2B6Eqpz2WXbs,91
-devsecops_engine_tools-1.34.2.dist-info/entry_points.txt,sha256=MHCTFFs9bdNKo6YcWCcBW2_8X6yTisgLOlmVx-V8Rxc,276
-devsecops_engine_tools-1.34.2.dist-info/top_level.txt,sha256=ge6y0X_xBAU1aG3EMWFtl9djbVyg5BxuSp2r2Lg6EQU,23
-devsecops_engine_tools-1.34.2.dist-info/RECORD,,
+devsecops_engine_tools-1.36.0.dist-info/METADATA,sha256=2dCoiA9e74VNmhcbrg4CZHSlxAww3jN5cstilXxvRg4,11605
+devsecops_engine_tools-1.36.0.dist-info/WHEEL,sha256=R0nc6qTxuoLk7ShA2_Y-UWkN8ZdfDBG2B6Eqpz2WXbs,91
+devsecops_engine_tools-1.36.0.dist-info/entry_points.txt,sha256=MHCTFFs9bdNKo6YcWCcBW2_8X6yTisgLOlmVx-V8Rxc,276
+devsecops_engine_tools-1.36.0.dist-info/top_level.txt,sha256=ge6y0X_xBAU1aG3EMWFtl9djbVyg5BxuSp2r2Lg6EQU,23
+devsecops_engine_tools-1.36.0.dist-info/RECORD,,