devsecops-engine-tools 1.60.1__tar.gz → 1.61.0__tar.gz

{devsecops_engine_tools-1.60.1 → devsecops_engine_tools-1.61.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: devsecops-engine-tools
-Version: 1.60.1
+Version: 1.61.0
 Summary: Tool for DevSecOps strategy
 Home-page: https://github.com/bancolombia/devsecops-engine-tools
 Author: Bancolombia DevSecOps Team

{devsecops_engine_tools-1.60.1 → devsecops_engine_tools-1.61.0}/devsecops_engine_tools/engine_sast/engine_iac/src/infrastructure/driven_adapters/kics/kics_tool.py

@@ -134,15 +134,15 @@ class KicsTool(ToolGateway):
                 if f"RULES_{platform}" not in config_tool[self.TOOL_KICS]["RULES"]:
                     logger.error(f"Platform {platform} not found in RULES")
                 queries = [
-                    {key: value["checkID"]}
-                    for key, value in config_tool[self.TOOL_KICS]["RULES"][
-                        f"RULES_{platform}"
-                    ].items()
-                ]
+                    {key: [value["checkID"], value["overrideID"]],
+                            "severity": value["severity"]}
+                           for key, value in config_tool[self.TOOL_KICS]["RULES"][f"RULES_{platform}"].items()
+                           ]
             return queries
         except Exception as e:
             logger.error(f"Error writing queries file: {e}")
 
+    
     def _execute_kics(
         self,
         folders_to_scan,
@@ -152,13 +152,14 @@ class KicsTool(ToolGateway):
         os_platform,
         queries,
     ):
-        folders = ",".join(folders_to_scan)
-        queries = ",".join([list(query.values())[0] for query in queries])
-        mapped_platforms = [
-            self.scan_type_platform_mapping.get(platform.lower(), platform)
-            for platform in platform_to_scan
-        ]
-        platforms = ",".join(mapped_platforms)
+        folders = ','.join(folders_to_scan)
+        queries = ','.join(
+            uuid for query in queries for uuid in list(query.values())[0]
+            ) if queries else ""
+        mapped_platforms = [ 
+                            self.scan_type_platform_mapping.get(platform.lower(), platform) 
+                            for platform in platform_to_scan ] if platform_to_scan != ["all"] else list(self.scan_type_platform_mapping.values())
+        platforms = ','.join(mapped_platforms)
 
         command = [
             prefix,
@@ -184,22 +185,33 @@ class KicsTool(ToolGateway):
             subprocess.run(command, capture_output=True)
         except subprocess.CalledProcessError as e:
             logger.error(f"Error during KICS execution: {e}")
-
+            return []
+            
     def _load_results(self, work_folder, queries):
         try:
             results_path = os.path.join(work_folder, "results.json")
             with open(results_path, "r") as f:
                 data = json.load(f)
 
+            query_id_to_info = {}
+            for query in queries:
+                severity = query.get("severity")
+                for custom_id, ids in query.items():
+                    if custom_id == "severity":
+                        continue
+                    for query_id in ids:
+                        if query_id != "":
+                            query_id_to_info[query_id] = {
+                                "severity": severity,
+                                "custom_id": custom_id
+                            }
+
             for finding in data.get("queries", []):
-                query_ids = {list(query.values())[0] for query in queries}
-                if finding.get("query_id") in query_ids:
-                    finding["custom_vuln_id"] = next(
-                        key
-                        for query in queries
-                        for key, value in query.items()
-                        if value == finding.get("query_id")
-                    )
+                query_id = finding.get("query_id")
+                if query_id in query_id_to_info:
+                    info = query_id_to_info[query_id]
+                    finding["severity"] = info["severity"].upper()
+                    finding["custom_id"] = info["custom_id"]
 
             with open(results_path, "w") as f:
                 json.dump(data, f, indent=4)
@@ -207,4 +219,4 @@ class KicsTool(ToolGateway):
             return data
         except Exception as ex:
             logger.error(f"An error occurred loading or modifying KICS results {ex}")
-            return None
+            return None

devsecops_engine_tools-1.61.0/devsecops_engine_tools/version.py

@@ -0,0 +1 @@
+version = '1.61.0'

{devsecops_engine_tools-1.60.1 → devsecops_engine_tools-1.61.0}/devsecops_engine_tools.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: devsecops-engine-tools
-Version: 1.60.1
+Version: 1.61.0
 Summary: Tool for DevSecOps strategy
 Home-page: https://github.com/bancolombia/devsecops-engine-tools
 Author: Bancolombia DevSecOps Team

devsecops_engine_tools-1.60.1/devsecops_engine_tools/version.py

@@ -1 +0,0 @@
-version = '1.60.1'