devsecops-engine-tools 1.44.0__tar.gz → 1.45.1__tar.gz

{devsecops_engine_tools-1.44.0 → devsecops_engine_tools-1.45.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: devsecops-engine-tools
-Version: 1.44.0
+Version: 1.45.1
 Summary: Tool for DevSecOps strategy
 Home-page: https://github.com/bancolombia/devsecops-engine-tools
 Author: Bancolombia DevSecOps Team

{devsecops_engine_tools-1.44.0 → devsecops_engine_tools-1.45.1}/devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/azure/azure_devops.py

@@ -99,6 +99,7 @@ class AzureDevops(DevopsPlatformGateway):
                 "target_branch": SystemVariables.System_TargetBranchName,
                 "source_branch": SystemVariables.System_SourceBranch,
                 "repository_provider": BuildVariables.Build_Repository_Provider,
+                "pull_request_id": SystemVariables.System_PullRequestId,
                 "vm_product_type_name": VMVariables.Vm_Product_Type_Name,
                 "vm_product_name": VMVariables.Vm_Product_Name,
                 "vm_product_description": VMVariables.Vm_Product_Description,

{devsecops_engine_tools-1.44.0 → devsecops_engine_tools-1.45.1}/devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/github/github_actions.py

@@ -89,6 +89,7 @@ class GithubActions(DevopsPlatformGateway):
             "target_branch": SystemVariables.github_event_base_ref,
             "source_branch": SystemVariables.github_ref,
             "repository_provider": BuildVariables.GitHub,
+            "pull_request_id": SystemVariables.github_event_number,
             "vm_product_type_name": VMVariables.Vm_Product_Type_Name,
             "vm_product_name": VMVariables.Vm_Product_Name,
             "vm_product_description": VMVariables.Vm_Product_Description,

{devsecops_engine_tools-1.44.0 → devsecops_engine_tools-1.45.1}/devsecops_engine_tools/engine_risk/src/domain/usecases/break_build.py

@@ -123,7 +123,7 @@ class BreakBuild:
     def _remediation_rate_control(
         self, all_report: "list[Report]", new_report_list: "list[Report]"
     ):
-        sp.init_printing(use_unicode=True)
+        sp.init_printing(use_unicode=True, num_columns=100)
         (
             remediation_rate_name,
             mitigated_name,

{devsecops_engine_tools-1.44.0 → devsecops_engine_tools-1.45.1}/devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/driven_adapters/docker/docker_images.py

@@ -74,6 +74,8 @@ class DockerImages(ImagesGateway):
 
     def extract_base_image_from_labels(self, labels, matching_image=None):
         try:
+            if labels.get("repository") == 'evc/uso_especifico':
+                return None
             source_image = labels.get("x86.image.name") or labels.get(
                 "image.base.ref.name"
             )
@@ -109,7 +111,8 @@ class DockerImages(ImagesGateway):
 
     def validate_date(self, date, referenced_date):
         if not date:
-            raise ValueError("Cannot validate date: Invalid or missing date.")
+            logger.error("Cannot validate date: Invalid or missing date.")
+            return False
 
         reference_date = self.parse_date(referenced_date)
         if not reference_date:

{devsecops_engine_tools-1.44.0 → devsecops_engine_tools-1.45.1}/devsecops_engine_tools/engine_utilities/sonarqube/src/domain/usecases/report_sonar.py

@@ -115,18 +115,35 @@ class ReportSonar:
                 )[0]
                 filtered_findings = self.sonar_gateway.filter_by_sonarqube_tag(findings)
 
+                sonar_vulns_params = {
+                    "componentKeys": project_key,
+                    "types": "VULNERABILITY",
+                    "ps": 500,
+                    "p": 1,
+                    "s": "CREATION_DATE",
+                    "asc": "false"
+                }
+                sonar_hotspots_params = {
+                    "projectKey": project_key,
+                    "ps": 100,
+                    "p": 1,
+                }
+
+                if report_config_tool["USE_BRANCH_PARAMETER"] and pipeline_name not in report_config_tool["USE_PULL_REQUEST_PARAMETER"]:
+                    sonar_vulns_params["branch"] = branch
+                    sonar_hotspots_params["branch"] = branch
+                else:
+                    try:
+                        pull_request_id = int(self.devops_platform_gateway.get_variable("pull_request_id"))
+                        sonar_vulns_params["pullRequest"] = pull_request_id
+                        sonar_hotspots_params["pullRequest"] = pull_request_id
+                    except Exception as e: pass
+
                 sonar_vulnerabilities = self.sonar_gateway.get_findings(
                     args["sonar_url"],
                     secret["token_sonar"],
                     "/api/issues/search",
-                    {
-                        "componentKeys": project_key,
-                        "types": "VULNERABILITY",
-                        "ps": 500,
-                        "p": 1,
-                        "s": "CREATION_DATE",
-                        "asc": "false"
-                    },
+                    sonar_vulns_params,
                     "issues",
                     report_config_tool["MAX_RETRIES_QUERY_SONAR"]
                 )
@@ -134,11 +151,7 @@ class ReportSonar:
                     args["sonar_url"],
                     secret["token_sonar"],
                     "/api/hotspots/search",
-                    {
-                        "projectKey": project_key,
-                        "ps": 100,
-                        "p": 1,
-                    },
+                    sonar_hotspots_params,
                     "hotspots",
                     report_config_tool["MAX_RETRIES_QUERY_SONAR"]
                 )

devsecops_engine_tools-1.45.1/devsecops_engine_tools/version.py

@@ -0,0 +1 @@
+version = '1.45.1'

{devsecops_engine_tools-1.44.0 → devsecops_engine_tools-1.45.1}/devsecops_engine_tools.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: devsecops-engine-tools
-Version: 1.44.0
+Version: 1.45.1
 Summary: Tool for DevSecOps strategy
 Home-page: https://github.com/bancolombia/devsecops-engine-tools
 Author: Bancolombia DevSecOps Team

devsecops_engine_tools-1.44.0/devsecops_engine_tools/version.py

@@ -1 +0,0 @@
-version = '1.44.0'