devsecops-engine-tools 1.7.12__tar.gz → 1.7.13__tar.gz

{devsecops_engine_tools-1.7.12 → devsecops_engine_tools-1.7.13}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: devsecops-engine-tools
-Version: 1.7.12
+Version: 1.7.13
 Summary: Tool for DevSecOps strategy
 Home-page: https://github.com/bancolombia/devsecops-engine-tools
 Author: Bancolombia DevSecOps Team

{devsecops_engine_tools-1.7.12 → devsecops_engine_tools-1.7.13}/devsecops_engine_tools/engine_core/src/domain/usecases/handle_scan.py

@@ -110,7 +110,7 @@ class HandleScan:
             else:
                 secret_sca = dict_args["token_engine_container"]
             findings_list, input_core = runner_engine_container(
-                dict_args, config_tool, secret_sca, self.devops_platform_gateway
+                dict_args, config_tool["ENGINE_CONTAINER"]["TOOL"], secret_sca, self.devops_platform_gateway
             )
             if (
                 dict_args["use_vulnerability_management"] == "true"

{devsecops_engine_tools-1.7.12 → devsecops_engine_tools-1.7.13}/devsecops_engine_tools/engine_sca/engine_container/src/applications/runner_container_scan.py

@@ -18,12 +18,12 @@ from devsecops_engine_tools.engine_sca.engine_container.src.infrastructure.drive
 )
 
 
-def runner_engine_container(dict_args, config_tool, token, tool_remote):
+def runner_engine_container(dict_args, tool, token, tool_remote):
     try:
-        if config_tool["ENGINE_CONTAINER"]["TOOL"].lower() == "trivy":
+        if tool.lower() == "trivy":
             tool_run = TrivyScan()
             tool_deseralizator = TrivyDeserializator()
-        elif config_tool["ENGINE_CONTAINER"]["TOOL"].lower() == "prisma":
+        elif tool.lower() == "prisma":
             tool_run = PrismaCloudManagerScan()
             tool_deseralizator = PrismaDeserealizator()
         tool_images = DockerImages()
@@ -34,7 +34,7 @@ def runner_engine_container(dict_args, config_tool, token, tool_remote):
             tool_deseralizator,
             dict_args,
             token,
-            config_tool,
+            tool,
         )
 
     except Exception as e:

{devsecops_engine_tools-1.7.12 → devsecops_engine_tools-1.7.13}/devsecops_engine_tools/engine_sca/engine_container/src/domain/usecases/container_sca_scan.py

@@ -1,6 +1,3 @@
-from devsecops_engine_tools.engine_core.src.domain.model.gateway.devops_platform_gateway import (
-    DevopsPlatformGateway,
-)
 from devsecops_engine_tools.engine_sca.engine_container.src.domain.model.gateways.tool_gateway import (
     ToolGateway,
 )
@@ -11,33 +8,23 @@ from devsecops_engine_tools.engine_sca.engine_container.src.domain.model.gateway
     DeseralizatorGateway,
 )
 
+
 class ContainerScaScan:
     def __init__(
         self,
         tool_run: ToolGateway,
-        tool_remote: DevopsPlatformGateway,
+        remote_config,
         tool_images: ImagesGateway,
         tool_deseralizator: DeseralizatorGateway,
-        dict_args,
+        build_id,
         token,
-        skip_flag
     ):
         self.tool_run = tool_run
-        self.tool_remote = tool_remote
+        self.remote_config = remote_config
         self.tool_images = tool_images
         self.tool_deseralizator = tool_deseralizator
-        self.dict_args = dict_args
+        self.build_id = build_id
         self.token = token
-        self.skip_flag = skip_flag
-
-    def get_remote_config(self, file_path):
-        """
-        Get remote configuration.
-
-        Returns:
-            dict: Remote configuration.
-        """
-        return self.tool_remote.get_remote_config(self.dict_args["remote_config_repo"], file_path)
 
     def scan_image(self):
         """
@@ -48,15 +35,6 @@ class ContainerScaScan:
         """
         return self.tool_images.list_images()
 
-    def get_variable(self, variable):
-        """
-        Get variable.
-
-        Returns:
-            dict: Remote variable.
-        """
-        return self.tool_remote.get_variable(variable)
-
     def process(self):
         """
         Process SCA scanning.
@@ -65,11 +43,7 @@ class ContainerScaScan:
             dict: SCA scanning results.
         """
         return self.tool_run.run_tool_container_sca(
-            self.get_remote_config("engine_sca/engine_container/ConfigTool.json"),
-            self.token,
-            self.scan_image(),
-            self.get_variable("build_id"),
-            self.skip_flag
+            self.remote_config, self.token, self.scan_image(), self.build_id
         )
 
     def deseralizator(self, image_scanned):
@@ -79,4 +53,4 @@ class ContainerScaScan:
         Returns:
             list: Deserialized list of findings.
         """
-        return self.tool_deseralizator.get_list_findings(image_scanned)
+        return self.tool_deseralizator.get_list_findings(image_scanned)

devsecops_engine_tools-1.7.13/devsecops_engine_tools/engine_sca/engine_container/src/domain/usecases/handle_remote_config_patterns.py

@@ -0,0 +1,32 @@
+import re
+
+
+class HandleRemoteConfigPatterns:
+    def __init__(self, remote_config, exclusions, pipeline_name):
+        self.remote_config = remote_config
+        self.exclusions = exclusions
+        self.pipeline_name = pipeline_name
+
+    def ignore_analysis_pattern(self):
+        """
+        Handle analysis pattern.
+        Return: bool: False -> not scan, True -> scan.
+        """
+        ignore = self.remote_config["IGNORE_SEARCH_PATTERN"]
+        if re.match(ignore, self.pipeline_name, re.IGNORECASE):
+            return False
+        else:
+            return True
+
+    def skip_from_exclusion(self):
+        """
+        Handle skip tool.
+
+        Return: bool: True -> skip tool, False -> not skip tool.
+        """
+        if (self.pipeline_name in self.exclusions) and (
+            self.exclusions[self.pipeline_name].get("SKIP_TOOL", 0)
+        ):
+            return True
+        else:
+            return False

devsecops_engine_tools-1.7.13/devsecops_engine_tools/engine_sca/engine_container/src/domain/usecases/set_input_core.py

@@ -0,0 +1,52 @@
+from devsecops_engine_tools.engine_core.src.domain.model.input_core import InputCore
+from devsecops_engine_tools.engine_core.src.domain.model.threshold import Threshold
+
+
+from devsecops_engine_tools.engine_core.src.domain.model.exclusions import Exclusions
+
+
+class SetInputCore:
+    def __init__(self, remote_config, exclusions, pipeline_name, tool, stage):
+        self.remote_config = remote_config
+        self.exclusions = exclusions
+        self.pipeline_name = pipeline_name
+        self.tool = tool
+        self.stage = stage
+
+    def get_exclusions(self, exclusions_data, pipeline_name, tool):
+        list_exclusions = [
+            Exclusions(
+                id=item.get("id", ""),
+                where=item.get("where", ""),
+                cve_id=item.get("cve_id", ""),
+                create_date=item.get("create_date", ""),
+                expired_date=item.get("expired_date", ""),
+                severity=item.get("severity", ""),
+                hu=item.get("hu", ""),
+                reason=item.get("reason", "Risk acceptance"),
+            )
+            for key, value in exclusions_data.items()
+            if key in {"All", pipeline_name} and value.get(tool)
+            for item in value[tool]
+        ]
+        return list_exclusions
+
+    def set_input_core(self, images_scanned):
+        """
+        Set the input core.
+
+        Returns:
+            dict: Input core.
+        """
+        return InputCore(
+            self.get_exclusions(
+                self.exclusions,
+                self.pipeline_name,
+                self.tool,
+            ),
+            Threshold(self.remote_config["THRESHOLD"]),
+            images_scanned[-1] if images_scanned else None,
+            self.remote_config["MESSAGE_INFO_ENGINE_CONTAINER"],
+            self.pipeline_name,
+            self.stage.capitalize(),
+        )

{devsecops_engine_tools-1.7.12 → devsecops_engine_tools-1.7.13}/devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/driven_adapters/docker/docker_images.py

@@ -19,4 +19,4 @@ class DockerImages(ImagesGateway):
             print("Created date last image:", latest_image.attrs["Created"])
             return latest_image
         except subprocess.CalledProcessError as e:
-            raise ValueError(f"Error listing images:{e.stderr}")
+            raise ValueError(f"Error listing images:{e.stderr}")

{devsecops_engine_tools-1.7.12 → devsecops_engine_tools-1.7.13}/devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/driven_adapters/prisma_cloud/prisma_cloud_manager_scan.py

@@ -3,7 +3,6 @@ import requests
 import os
 import subprocess
 import logging
-import re
 import base64
 from devsecops_engine_tools.engine_sca.engine_container.src.infrastructure.helpers.images_scanned import (
     ImagesScanned,
@@ -87,37 +86,34 @@ class PrismaCloudManagerScan(ToolGateway):
 
         return images_scanned
 
-    def run_tool_container_sca(
-        self, remoteconfig, prisma_secret_key, image, build_id, skip_flag
-    ):
+    def run_tool_container_sca(self, remoteconfig, prisma_secret_key, image, build_id):
         images_scanned = []
-        if not (skip_flag):
-            try:
-                file_path = os.path.join(
-                    os.getcwd(), remoteconfig["PRISMA_CLOUD"]["TWISTCLI_PATH"]
-                )
+        try:
+            file_path = os.path.join(
+                os.getcwd(), remoteconfig["PRISMA_CLOUD"]["TWISTCLI_PATH"]
+            )
 
-                if not os.path.exists(file_path):
-                    self.download_twistcli(
-                        file_path,
-                        remoteconfig["PRISMA_CLOUD"]["PRISMA_ACCESS_KEY"],
-                        prisma_secret_key,
-                        remoteconfig["PRISMA_CLOUD"]["PRISMA_CONSOLE_URL"],
-                        remoteconfig["PRISMA_CLOUD"]["PRISMA_API_VERSION"],
-                    )
-                images_scanned.extend(
-                    self.scan_image(
-                        file_path,
-                        image,
-                        remoteconfig,
-                        prisma_secret_key,
-                        build_id,
-                    )
+            if not os.path.exists(file_path):
+                self.download_twistcli(
+                    file_path,
+                    remoteconfig["PRISMA_CLOUD"]["PRISMA_ACCESS_KEY"],
+                    prisma_secret_key,
+                    remoteconfig["PRISMA_CLOUD"]["PRISMA_CONSOLE_URL"],
+                    remoteconfig["PRISMA_CLOUD"]["PRISMA_API_VERSION"],
+                )
+            images_scanned.extend(
+                self.scan_image(
+                    file_path,
+                    image,
+                    remoteconfig,
+                    prisma_secret_key,
+                    build_id,
                 )
+            )
 
-                return images_scanned
+            return images_scanned
 
-            except Exception as ex:
-                logger.error(f"An overall error occurred: {ex}")
+        except Exception as ex:
+            logger.error(f"An overall error occurred: {ex}")
 
         return images_scanned

{devsecops_engine_tools-1.7.12 → devsecops_engine_tools-1.7.13}/devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/driven_adapters/prisma_cloud/prisma_deserialize_output.py

@@ -31,8 +31,12 @@ class PrismaDeserealizator(DeseralizatorGateway):
                 image_object = file.read()
 
                 json_data = json.loads(image_object)
-                vulnerabilities_data = json_data["results"][0]["vulnerabilities"] if "vulnerabilities" in json_data["results"][0] else []
-                
+                vulnerabilities_data = (
+                    json_data["results"][0]["vulnerabilities"]
+                    if "vulnerabilities" in json_data["results"][0]
+                    else []
+                )
+
                 # Create a list of findings instances from the JSON data
                 vulnerabilities = [
                     Finding(

{devsecops_engine_tools-1.7.12 → devsecops_engine_tools-1.7.13}/devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/driven_adapters/trivy_tool/trivy_deserialize_output.py

@@ -9,6 +9,7 @@ from dataclasses import dataclass
 import json
 from datetime import datetime
 
+
 @dataclass
 class TrivyDeserializator(DeseralizatorGateway):
     def get_list_findings(self, images_scanned: list) -> "list[Finding]":
@@ -34,7 +35,9 @@ class TrivyDeserializator(DeseralizatorGateway):
                         + vul.get("InstalledVersion", ""),
                         description=vul.get("Description", "").replace("\n", ""),
                         severity=vul.get("Severity", "").lower(),
-                        identification_date=datetime.now().strftime("%d-%m-%Y %H:%M:%S"),
+                        identification_date=datetime.now().strftime(
+                            "%d-%m-%Y %H:%M:%S"
+                        ),
                         published_date_cve=vul.get("PublishedDate", ""),
                         module="engine_container",
                         category=Category.VULNERABILITY,

devsecops_engine_tools-1.7.13/devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/entry_points/entry_point_tool.py

@@ -0,0 +1,58 @@
+from devsecops_engine_tools.engine_sca.engine_container.src.domain.usecases.container_sca_scan import (
+    ContainerScaScan,
+)
+from devsecops_engine_tools.engine_sca.engine_container.src.domain.usecases.handle_remote_config_patterns import (
+    HandleRemoteConfigPatterns,
+)
+from devsecops_engine_tools.engine_sca.engine_container.src.domain.usecases.set_input_core import (
+    SetInputCore,
+)
+from devsecops_engine_tools.engine_utilities.utils.logger_info import MyLogger
+from devsecops_engine_tools.engine_utilities import settings
+
+logger = MyLogger.__call__(**settings.SETTING_LOGGER).get_logger()
+
+
+def init_engine_sca_rm(
+    tool_run,
+    tool_remote,
+    tool_images,
+    tool_deseralizator,
+    dict_args,
+    token,
+    tool,
+):
+    remote_config = tool_remote.get_remote_config(
+        dict_args["remote_config_repo"], "engine_sca/engine_container/ConfigTool.json"
+    )
+    exclusions = tool_remote.get_remote_config(
+        dict_args["remote_config_repo"], "engine_sca/engine_container/Exclusions.json"
+    )
+    pipeline_name = tool_remote.get_variable("pipeline_name")
+    handle_remote_config_patterns = HandleRemoteConfigPatterns(
+        remote_config, exclusions, pipeline_name
+    )
+    skip_flag = handle_remote_config_patterns.skip_from_exclusion()
+    scan_flag = handle_remote_config_patterns.ignore_analysis_pattern()
+    build_id = tool_remote.get_variable("build_id")
+    stage = tool_remote.get_variable("stage")
+    images_scanned = []
+    deseralized = []
+    input_core = SetInputCore(remote_config, exclusions, pipeline_name, tool, stage)
+    if scan_flag and not (skip_flag):
+        container_sca_scan = ContainerScaScan(
+            tool_run,
+            remote_config,
+            tool_images,
+            tool_deseralizator,
+            build_id,
+            token,
+        )
+        images_scanned = container_sca_scan.process()
+        deseralized = container_sca_scan.deseralizator(images_scanned)
+    else:
+        print("Tool skipped by DevSecOps policy")
+        logger.info("Tool skipped by DevSecOps policy")
+    core_input = input_core.set_input_core(images_scanned)
+
+    return deseralized, core_input

devsecops_engine_tools-1.7.13/devsecops_engine_tools/version.py

@@ -0,0 +1 @@
+version = '1.7.13'

{devsecops_engine_tools-1.7.12 → devsecops_engine_tools-1.7.13}/devsecops_engine_tools.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: devsecops-engine-tools
-Version: 1.7.12
+Version: 1.7.13
 Summary: Tool for DevSecOps strategy
 Home-page: https://github.com/bancolombia/devsecops-engine-tools
 Author: Bancolombia DevSecOps Team

devsecops_engine_tools-1.7.12/devsecops_engine_tools/engine_sca/engine_container/src/domain/usecases/handle_remote_config_patterns.py

@@ -1,67 +0,0 @@
-import re
-from devsecops_engine_tools.engine_core.src.domain.model.gateway.devops_platform_gateway import (
-    DevopsPlatformGateway,
-)
-
-
-class HandleRemoteConfigPatterns:
-    def __init__(
-        self,
-        tool_remote: DevopsPlatformGateway,
-        dict_args,
-    ):
-        self.tool_remote = tool_remote
-        self.dict_args = dict_args
-
-    def get_remote_config(self, file_path):
-        """
-        Get remote configuration
-        Return: dict: Remote configuration
-        """
-        return self.tool_remote.get_remote_config(
-            self.dict_args["remote_config_repo"], file_path
-        )
-
-    def get_variable(self, variable):
-        """
-        Get variable.
-
-        Returns:
-            dict: Remote variable.
-        """
-        return self.tool_remote.get_variable(variable)
-    
-    def ignore_analysis_pattern(self):
-        """
-        Handle analysis pattern.
-        Return: bool: False -> not scan, True -> scan.
-        """
-        ignore = self.get_remote_config("engine_sca/engine_container/ConfigTool.json")["IGNORE_SEARCH_PATTERN"]
-        if re.match(ignore, self.get_variable("pipeline_name"), re.IGNORECASE):
-            return False
-        else:
-            return True
-    
-    def handle_skip_tool(self, exclusions, pipeline_name):
-        """
-        Handle skip tool.
-
-        Return: bool: True -> skip tool, False -> not skip tool.
-        """
-        if (pipeline_name in exclusions) and (
-            exclusions[pipeline_name].get("SKIP_TOOL", 0)
-        ):
-            return True
-        else:
-            return False
-
-    def process_handle_skip_tool(self):
-        """
-        Process handle skip tool.
-
-        Return: bool: True -> skip tool, False -> not skip tool.
-        """
-        return self.handle_skip_tool(
-            self.get_remote_config("engine_sca/engine_container/Exclusions.json"),
-            self.get_variable("pipeline_name"),
-        )

devsecops_engine_tools-1.7.12/devsecops_engine_tools/engine_sca/engine_container/src/domain/usecases/set_input_core.py

@@ -1,76 +0,0 @@
-from devsecops_engine_tools.engine_core.src.domain.model.input_core import InputCore
-from devsecops_engine_tools.engine_core.src.domain.model.threshold import Threshold
-from devsecops_engine_tools.engine_core.src.domain.model.gateway.devops_platform_gateway import (
-    DevopsPlatformGateway,
-)
-
-from devsecops_engine_tools.engine_core.src.domain.model.exclusions import Exclusions
-
-
-class SetInputCore:
-    def __init__(self, tool_remote: DevopsPlatformGateway, dict_args, config_tool):
-        self.tool_remote = tool_remote
-        self.dict_args = dict_args
-        self.config_tool = config_tool
-
-    def get_remote_config(self, file_path):
-        """
-        Get remote configuration.
-
-        Returns:
-            dict: Remote configuration.
-        """
-        return self.tool_remote.get_remote_config(self.dict_args["remote_config_repo"], file_path)
-
-    def get_variable(self, variable):
-        """
-        Get variable.
-
-        Returns:
-            dict: Remote variable.
-        """
-        return self.tool_remote.get_variable(variable)
-
-    def get_exclusions(self, exclusions_data, pipeline_name, config_tool):
-        list_exclusions = []
-        for key, value in exclusions_data.items():
-            if (key == "All") or (key == pipeline_name):
-                exclusions = [
-                    Exclusions(
-                        id=item.get("id", ""),
-                        where=item.get("where", ""),
-                        cve_id=item.get("cve_id", ""),
-                        create_date=item.get("create_date", ""),
-                        expired_date=item.get("expired_date", ""),
-                        severity=item.get("severity", ""),
-                        hu=item.get("hu", ""),
-                        reason=item.get("reason", "Risk acceptance"),
-                    )
-                    for item in value[config_tool["ENGINE_CONTAINER"]["TOOL"]]
-                ]
-                list_exclusions.extend(exclusions)
-        return list_exclusions
-
-    def set_input_core(self, images_scanned):
-        """
-        Set the input core.
-
-        Returns:
-            dict: Input core.
-        """
-        return InputCore(
-            self.get_exclusions(
-                self.get_remote_config("engine_sca/engine_container/Exclusions.json"),
-                self.get_variable("pipeline_name"),
-                self.config_tool,
-            ),
-            Threshold(
-                self.get_remote_config("engine_sca/engine_container/ConfigTool.json")["THRESHOLD"]
-            ),
-            images_scanned[-1] if images_scanned else None,
-            self.get_remote_config("engine_sca/engine_container/ConfigTool.json")[
-                "MESSAGE_INFO_ENGINE_CONTAINER"
-            ],
-            self.get_variable("pipeline_name"),
-            self.get_variable("stage").capitalize(),
-        )

devsecops_engine_tools-1.7.12/devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/entry_points/entry_point_tool.py

@@ -1,40 +0,0 @@
-from devsecops_engine_tools.engine_sca.engine_container.src.domain.usecases.container_sca_scan import (
-    ContainerScaScan,
-)
-from devsecops_engine_tools.engine_sca.engine_container.src.domain.usecases.handle_remote_config_patterns import (
-    HandleRemoteConfigPatterns,
-)
-from devsecops_engine_tools.engine_sca.engine_container.src.domain.usecases.set_input_core import (
-    SetInputCore,
-)
-
-
-def init_engine_sca_rm(
-    tool_run,
-    tool_remote,
-    tool_images,
-    tool_deseralizator,
-    dict_args,
-    token,
-    config_tool,
-):
-    handle_remote_config_patterns = HandleRemoteConfigPatterns(tool_remote, dict_args)
-    flag = handle_remote_config_patterns.ignore_analysis_pattern()
-    images_scanned = []
-    deseralized = []
-    if flag:
-        container_sca_scan = ContainerScaScan(
-            tool_run,
-            tool_remote,
-            tool_images,
-            tool_deseralizator,
-            dict_args,
-            token,
-            handle_remote_config_patterns.process_handle_skip_tool(),
-        )
-        images_scanned = container_sca_scan.process()
-        deseralized = container_sca_scan.deseralizator(images_scanned)
-    input_core = SetInputCore(tool_remote, dict_args, config_tool)
-    
-    return deseralized, input_core.set_input_core(images_scanned
-    )

devsecops_engine_tools-1.7.12/devsecops_engine_tools/version.py

@@ -1 +0,0 @@
-version = '1.7.12'