devsecops-engine-tools 1.69.3__tar.gz → 1.70.0__tar.gz

{devsecops_engine_tools-1.69.3 → devsecops_engine_tools-1.70.0}/PKG-INFO

@@ -1,6 +1,6 @@
-Metadata-Version: 2.1
+Metadata-Version: 2.4
 Name: devsecops-engine-tools
-Version: 1.69.3
+Version: 1.70.0
 Summary: Tool for DevSecOps strategy
 Home-page: https://github.com/bancolombia/devsecops-engine-tools
 Author: Bancolombia DevSecOps Team
@@ -10,7 +10,7 @@ Classifier: License :: OSI Approved :: GNU Affero General Public License v3 or l
 Classifier: Operating System :: OS Independent
 Requires-Python: >=3.8
 Description-Content-Type: text/markdown
-Requires-Dist: requests==2.32.3
+Requires-Dist: requests==2.32.4
 Requires-Dist: PyYAML==6.0.2
 Requires-Dist: pyfiglet==0.8.post1
 Requires-Dist: prettytable==3.10.2
@@ -24,7 +24,7 @@ Requires-Dist: PyGithub==2.3.0
 Requires-Dist: distro==1.9.0
 Requires-Dist: boto3==1.34.157
 Requires-Dist: docker==7.1.0
-Requires-Dist: setuptools==72.1.0
+Requires-Dist: setuptools==78.1.1
 Requires-Dist: rich==13.9.4
 Requires-Dist: cpe==1.3.1
 Requires-Dist: packageurl-python==0.15.6
@@ -33,6 +33,15 @@ Requires-Dist: Authlib==1.3.2
 Requires-Dist: PyJWT==2.9.0
 Requires-Dist: sympy==1.13.3
 Requires-Dist: holidays==0.58
+Dynamic: author
+Dynamic: author-email
+Dynamic: classifier
+Dynamic: description
+Dynamic: description-content-type
+Dynamic: home-page
+Dynamic: requires-dist
+Dynamic: requires-python
+Dynamic: summary
 
 # DevSecOps Engine Tools
 
@@ -76,7 +85,7 @@ pip3 install devsecops-engine-tools
 ### Scan running - flags (CLI)
 
 ```bash
-devsecops-engine-tools --platform_devops ["local","azure","github"] --remote_config_source ["local","azure","github"] --remote_config_repo ["remote_config_repo"] --remote_config_branch ["remote_config_branch"] --module ["engine_iac", "engine_dast", "engine_secret", "engine_dependencies", "engine_container", "engine_risk", "engine_code"] --tool ["nuclei", "bearer", "checkov", "kics", "kubescape", "trufflehog", "gitleaks", "prisma", "trivy", "xray", "dependency_check"] --folder_path ["Folder path scan engine_iac, engine_code, engine_dependencies and engine_secret"] --platform ["k8s","cloudformation","docker", "openapi", "terraform"] --use_secrets_manager ["false", "true"] --use_vulnerability_management ["false", "true"] --send_metrics ["false", "true"] --token_cmdb ["token_cmdb"] --token_vulnerability_management ["token_vulnerability_management"] --token_engine_container ["token_engine_container"] --token_engine_dependencies ["token_engine_dependencies"] --token_external_checks ["token_external_checks"] --xray_mode ["scan", "audit","build-scan"] --image_to_scan ["image_to_scan"] --dast_file_path ["dast_file_path"] --terraform_repo_root ["terraform_files_repo"]
+devsecops-engine-tools --platform_devops ["local","azure","github"] --remote_config_source ["local","azure","github"] --remote_config_repo ["remote_config_repo"] --remote_config_branch ["remote_config_branch"] --module ["engine_iac", "engine_dast", "engine_secret", "engine_dependencies", "engine_container", "engine_risk", "engine_code"] --tool ["nuclei", "bearer", "checkov", "kics", "kubescape", "trufflehog", "gitleaks", "prisma", "trivy", "xray", "dependency_check"] --folder_path ["Folder path scan engine_iac, engine_code, engine_dependencies and engine_secret"] --platform ["k8s","cloudformation","docker", "openapi", "terraform"] --use_secrets_manager ["false", "true"] --use_vulnerability_management ["false", "true"] --send_metrics ["false", "true"] --token_cmdb ["token_cmdb"] --token_vulnerability_management ["token_vulnerability_management"] --token_engine_container ["token_engine_container"] --token_engine_dependencies ["token_engine_dependencies"] --token_external_checks ["token_external_checks"] --xray_mode ["scan", "audit","build-scan"] --image_to_scan ["image_to_scan"] --dast_file_path ["dast_file_path"] --context ["false", "true"] --terraform_repo_root ["terraform_files_repo"]
 ```
 
 ### Structure Remote Config
@@ -212,9 +221,7 @@ docker run --rm -v ./folder_to_analyze:/folder_to_analyze -v ./custom_remote_con
 
 ### Scan running sample - Azure Pipelines
 
-The remote config should be in a Azure Devops repository.
-
-Note: By default the tool gets the token from the SYSTEM_ACCESSTOKEN variable to get the remote configuration repository. You must ensure that this token has permission to access this resource.
+Note: If the remote configuration is in an Azure Devops repository. the tool gets the token from the SYSTEM_ACCESSTOKEN variable to get the remote configuration repository. You must ensure that this token has permission to access this resource.
 
 ```yaml
 name: $(Build.SourceBranchName).$(date:yyyyMMdd)$(rev:.r)
@@ -245,7 +252,7 @@ stages:
 
 ### Scan running sample - Github Actions
 
-The remote config should be in a GitHub repository, either public or private.
+If remote config is in a GitHub repository, either public or private.
 
 **If the repository is public:** 
 

{devsecops_engine_tools-1.69.3 → devsecops_engine_tools-1.70.0}/devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/defect_dojo/defect_dojo.py

@@ -479,6 +479,7 @@ class DefectDojoPlatform(VulnerabilityManagementGateway):
                 in tool_scm_conf_mapping
                 else tool_scm_conf_mapping["DEFAULT"]
             ),
+            "sla_configuration": vulnerability_management.config_tool["VULNERABILITY_MANAGER"]["DEFECT_DOJO"]["TOOL_SLA_MAPPING"],
             "tags": tags,
             "version": vulnerability_management.version,
             "build_id": vulnerability_management.build_id,

{devsecops_engine_tools-1.69.3 → devsecops_engine_tools-1.70.0}/devsecops_engine_tools/engine_sast/engine_iac/src/domain/usecases/iac_scan.py

@@ -102,9 +102,13 @@ class IacScan:
         config_tool = ConfigTool(json_data=data_file_tool)
 
         config_tool.exclusions = exclusions
-        config_tool.scope_pipeline = self.devops_platform_gateway.get_variable(
-            "pipeline_name"
-        )
+        regex_clean = data_file_tool.get("REGEX_CLEAN_END_PIPELINE_NAME")
+        config_tool.scope_pipeline = self.devops_platform_gateway.get_variable("pipeline_name")
+        if regex_clean:
+            pattern = re.compile(regex_clean)
+            match = pattern.match(config_tool.scope_pipeline)
+            if match:
+                config_tool.scope_pipeline = match.group(1)
 
         skip_tool = bool(
             re.match(

{devsecops_engine_tools-1.69.3 → devsecops_engine_tools-1.70.0}/devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/entry_points/entry_point_tool.py

@@ -9,6 +9,7 @@ from devsecops_engine_tools.engine_sca.engine_container.src.domain.usecases.set_
 )
 from devsecops_engine_tools.engine_utilities.utils.logger_info import MyLogger
 from devsecops_engine_tools.engine_utilities import settings
+import re
 
 logger = MyLogger.__call__(**settings.SETTING_LOGGER).get_logger()
 
@@ -34,6 +35,13 @@ def init_engine_sca_rm(
         dict_args["remote_config_branch"],
     )
     pipeline_name = tool_remote.get_variable("pipeline_name")
+    regex_clean = remote_config.get("REGEX_CLEAN_END_PIPELINE_NAME")
+    if regex_clean:
+        pattern = re.compile(regex_clean)
+        match = pattern.match(pipeline_name)
+        if match:
+            pipeline_name= match.group(1)
+            
     handle_remote_config_patterns = HandleRemoteConfigPatterns(
         remote_config, exclusions, pipeline_name
     )

{devsecops_engine_tools-1.69.3 → devsecops_engine_tools-1.70.0}/devsecops_engine_tools/engine_utilities/defect_dojo/domain/request_objects/import_scan.py

@@ -31,6 +31,7 @@ class ImportScanRequest:
     branch_tag: str = ""
     commit_hash: str = ""
     api_scan_configuration: int = 0
+    sla_configuration: dict = None
     test_id: int = 0
     service: str = ""
     group_by: str = ""

{devsecops_engine_tools-1.69.3 → devsecops_engine_tools-1.70.0}/devsecops_engine_tools/engine_utilities/defect_dojo/domain/serializers/import_scan.py

@@ -197,6 +197,7 @@ class ImportScanSerializer(Schema):
     branch_tag = fields.Str(required=False)
     commit_hash = fields.Str(required=False)
     api_scan_configuration = fields.Int(required=False)
+    sla_configuration = fields.Dict(required=False)
     service = fields.Str(required=False)
     group_by = fields.Str(required=False)
     test_title = fields.Str(required=False)

{devsecops_engine_tools-1.69.3 → devsecops_engine_tools-1.70.0}/devsecops_engine_tools/engine_utilities/defect_dojo/infraestructure/driver_adapters/cmdb.py

@@ -115,8 +115,8 @@ class CmdbRestConsumer:
             logger.warning(response)
             raise ApiError(f"Error querying cmdb: {response.reason}")
 
-        if response.json() == []:
-            logger.warning(f"Engagement: {code_app} not found")
+        if response.json() == [] or '[]' in response.text:
+            logger.warning(f"Code app: {code_app} not found in CMDB")
             return cmdb_object  # Producto es Orphan
 
         data = self.get_nested_data(response, response_format)

{devsecops_engine_tools-1.69.3 → devsecops_engine_tools-1.70.0}/devsecops_engine_tools/engine_utilities/defect_dojo/infraestructure/driver_adapters/product.py

@@ -37,8 +37,12 @@ class ProductRestConsumer:
             "name": request.product_name,
             "description": "AREA RESPONSABLE TI: " + request.product_description.upper(),
             "enable_full_risk_acceptance": True,
-            "prod_type": product_type_id,
+            "prod_type": product_type_id
         }
+
+        if "Orphan Product" in request.product_description:
+            data["sla_configuration"] = request.sla_configuration["ORPHAN"]
+        
         headers = {"Authorization": f"Token {self.__token}"}
         try:
             response = self.__session.post(url, headers=headers, data=data, verify=VERIFY_CERTIFICATE)

devsecops_engine_tools-1.70.0/devsecops_engine_tools/version.py

@@ -0,0 +1 @@
+version = '1.70.0'

{devsecops_engine_tools-1.69.3 → devsecops_engine_tools-1.70.0}/devsecops_engine_tools.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
-Metadata-Version: 2.1
+Metadata-Version: 2.4
 Name: devsecops-engine-tools
-Version: 1.69.3
+Version: 1.70.0
 Summary: Tool for DevSecOps strategy
 Home-page: https://github.com/bancolombia/devsecops-engine-tools
 Author: Bancolombia DevSecOps Team
@@ -10,7 +10,7 @@ Classifier: License :: OSI Approved :: GNU Affero General Public License v3 or l
 Classifier: Operating System :: OS Independent
 Requires-Python: >=3.8
 Description-Content-Type: text/markdown
-Requires-Dist: requests==2.32.3
+Requires-Dist: requests==2.32.4
 Requires-Dist: PyYAML==6.0.2
 Requires-Dist: pyfiglet==0.8.post1
 Requires-Dist: prettytable==3.10.2
@@ -24,7 +24,7 @@ Requires-Dist: PyGithub==2.3.0
 Requires-Dist: distro==1.9.0
 Requires-Dist: boto3==1.34.157
 Requires-Dist: docker==7.1.0
-Requires-Dist: setuptools==72.1.0
+Requires-Dist: setuptools==78.1.1
 Requires-Dist: rich==13.9.4
 Requires-Dist: cpe==1.3.1
 Requires-Dist: packageurl-python==0.15.6
@@ -33,6 +33,15 @@ Requires-Dist: Authlib==1.3.2
 Requires-Dist: PyJWT==2.9.0
 Requires-Dist: sympy==1.13.3
 Requires-Dist: holidays==0.58
+Dynamic: author
+Dynamic: author-email
+Dynamic: classifier
+Dynamic: description
+Dynamic: description-content-type
+Dynamic: home-page
+Dynamic: requires-dist
+Dynamic: requires-python
+Dynamic: summary
 
 # DevSecOps Engine Tools
 
@@ -76,7 +85,7 @@ pip3 install devsecops-engine-tools
 ### Scan running - flags (CLI)
 
 ```bash
-devsecops-engine-tools --platform_devops ["local","azure","github"] --remote_config_source ["local","azure","github"] --remote_config_repo ["remote_config_repo"] --remote_config_branch ["remote_config_branch"] --module ["engine_iac", "engine_dast", "engine_secret", "engine_dependencies", "engine_container", "engine_risk", "engine_code"] --tool ["nuclei", "bearer", "checkov", "kics", "kubescape", "trufflehog", "gitleaks", "prisma", "trivy", "xray", "dependency_check"] --folder_path ["Folder path scan engine_iac, engine_code, engine_dependencies and engine_secret"] --platform ["k8s","cloudformation","docker", "openapi", "terraform"] --use_secrets_manager ["false", "true"] --use_vulnerability_management ["false", "true"] --send_metrics ["false", "true"] --token_cmdb ["token_cmdb"] --token_vulnerability_management ["token_vulnerability_management"] --token_engine_container ["token_engine_container"] --token_engine_dependencies ["token_engine_dependencies"] --token_external_checks ["token_external_checks"] --xray_mode ["scan", "audit","build-scan"] --image_to_scan ["image_to_scan"] --dast_file_path ["dast_file_path"] --terraform_repo_root ["terraform_files_repo"]
+devsecops-engine-tools --platform_devops ["local","azure","github"] --remote_config_source ["local","azure","github"] --remote_config_repo ["remote_config_repo"] --remote_config_branch ["remote_config_branch"] --module ["engine_iac", "engine_dast", "engine_secret", "engine_dependencies", "engine_container", "engine_risk", "engine_code"] --tool ["nuclei", "bearer", "checkov", "kics", "kubescape", "trufflehog", "gitleaks", "prisma", "trivy", "xray", "dependency_check"] --folder_path ["Folder path scan engine_iac, engine_code, engine_dependencies and engine_secret"] --platform ["k8s","cloudformation","docker", "openapi", "terraform"] --use_secrets_manager ["false", "true"] --use_vulnerability_management ["false", "true"] --send_metrics ["false", "true"] --token_cmdb ["token_cmdb"] --token_vulnerability_management ["token_vulnerability_management"] --token_engine_container ["token_engine_container"] --token_engine_dependencies ["token_engine_dependencies"] --token_external_checks ["token_external_checks"] --xray_mode ["scan", "audit","build-scan"] --image_to_scan ["image_to_scan"] --dast_file_path ["dast_file_path"] --context ["false", "true"] --terraform_repo_root ["terraform_files_repo"]
 ```
 
 ### Structure Remote Config
@@ -212,9 +221,7 @@ docker run --rm -v ./folder_to_analyze:/folder_to_analyze -v ./custom_remote_con
 
 ### Scan running sample - Azure Pipelines
 
-The remote config should be in a Azure Devops repository.
-
-Note: By default the tool gets the token from the SYSTEM_ACCESSTOKEN variable to get the remote configuration repository. You must ensure that this token has permission to access this resource.
+Note: If the remote configuration is in an Azure Devops repository. the tool gets the token from the SYSTEM_ACCESSTOKEN variable to get the remote configuration repository. You must ensure that this token has permission to access this resource.
 
 ```yaml
 name: $(Build.SourceBranchName).$(date:yyyyMMdd)$(rev:.r)
@@ -245,7 +252,7 @@ stages:
 
 ### Scan running sample - Github Actions
 
-The remote config should be in a GitHub repository, either public or private.
+If remote config is in a GitHub repository, either public or private.
 
 **If the repository is public:** 
 

{devsecops_engine_tools-1.69.3 → devsecops_engine_tools-1.70.0}/devsecops_engine_tools.egg-info/requires.txt

@@ -1,4 +1,4 @@
-requests==2.32.3
+requests==2.32.4
 PyYAML==6.0.2
 pyfiglet==0.8.post1
 prettytable==3.10.2
@@ -12,7 +12,7 @@ PyGithub==2.3.0
 distro==1.9.0
 boto3==1.34.157
 docker==7.1.0
-setuptools==72.1.0
+setuptools==78.1.1
 rich==13.9.4
 cpe==1.3.1
 packageurl-python==0.15.6

devsecops_engine_tools-1.69.3/devsecops_engine_tools/version.py

@@ -1 +0,0 @@
-version = '1.69.3'