devsecops-engine-tools 1.7.12__tar.gz → 1.7.14__tar.gz

devsecops_engine_tools-1.7.14/PKG-INFO

@@ -0,0 +1,120 @@
+Metadata-Version: 2.1
+Name: devsecops-engine-tools
+Version: 1.7.14
+Summary: Tool for DevSecOps strategy
+Home-page: https://github.com/bancolombia/devsecops-engine-tools
+Author: Bancolombia DevSecOps Team
+Author-email: devsecops@bancolombia.com.co
+Classifier: Programming Language :: Python :: 3
+Classifier: License :: OSI Approved :: GNU Affero General Public License v3 or later (AGPLv3+)
+Classifier: Operating System :: OS Independent
+Requires-Python: >=3.8
+Description-Content-Type: text/markdown
+Requires-Dist: requests==2.31.0
+Requires-Dist: multipledispatch==0.6.0
+Requires-Dist: PyYAML==6.0.1
+Requires-Dist: checkov==2.3.296
+Requires-Dist: pyfiglet==0.7
+Requires-Dist: prettytable==3.8.0
+Requires-Dist: azure-devops==7.1.0b3
+Requires-Dist: marshmallow==3.19.0
+Requires-Dist: pytz==2023.3
+Requires-Dist: python-decouple==3.8
+Requires-Dist: requests_toolbelt==1.0.0
+Requires-Dist: python-dateutil==2.8.2
+Requires-Dist: pexpect==4.9.0
+
+# DevSecOps Engine Tools
+
+[![Maintained by Bancolombia](https://img.shields.io/badge/maintained_by-Bancolombia-yellow)](#)
+[![Build](https://github.com/bancolombia/devsecops-engine-tools/actions/workflows/build.yml/badge.svg)](https://github.com/bancolombia/devsecops-engine-tools/actions/workflows/build.yml)
+[![Quality Gate Status](https://sonarcloud.io/api/project_badges/measure?project=bancolombia_devsecops-engine-tools&metric=alert_status)](https://sonarcloud.io/summary/new_code?id=bancolombia_devsecops-engine-tools)
+[![Coverage](https://sonarcloud.io/api/project_badges/measure?project=bancolombia_devsecops-engine-tools&metric=coverage)](https://sonarcloud.io/summary/new_code?id=bancolombia_devsecops-engine-tools)
+[![Python Version](https://img.shields.io/badge/python%20-%203.8%20%7C%203.9%20%7C%203.10%20%7C%203.11%20%7C%203.12%20-blue)](#)
+
+# Objective
+
+Tool that unifies the evaluation of the different devsecops practices being agnostic to the devops platform, using both open source and market tools.
+
+# Component
+
+📦 [tools](https://github.com/bancolombia/devsecops-engine-tools/tree/trunk/tools): DevSecOps Practice Modules
+
+# Communications channel
+
+Here are the channels we use to communicate about the project:
+
+**1. Mailing list:** You can join our mailing list to always be informed at the following link: [CommunityDevsecopsEngine](https://groups.google.com/g/CommunityDevsecopsEngine)
+
+**2. Email:** You can write to us by email:  MaintainersDevsecopsEngine@googlegroups.com
+
+# Getting started
+
+### Requirements
+
+- Python >= 3.8
+
+### Installation
+
+```bash
+pip3 install devsecops-engine-tools
+```
+
+### Scan running - flags (CLI)
+
+```bash
+devsecops-engine-tools --platform_devops ["local","azure"] --remote_config_repo ["remote_config_repo"] --tool ["engine_iac", "engine_dast", "engine_secret", "engine_dependencies", "engine_container"] --folder_path ["Folder path scan engine_iac"] --platform ["eks","openshift"] --use_secrets_manager ["false", "true"] --use_vulnerability_management ["false", "true"] --send_metrics ["false", "true"] --token_cmdb ["token_cmdb"] --token_vulnerability_management ["token_vulnerability_management"] --token_engine_container ["token_engine_container"] --token_engine_dependencies ["token_engine_dependencies"] 
+```
+
+### Structure Remote Config
+[example_remote_config_local](https://github.com/bancolombia/devsecops-engine-tools/blob/trunk/example_remote_config_local/)
+```bash
+📦Remote_Config
+   ┣ 📂engine_core
+   ┃ ┗ 📜ConfigTool.json
+   ┣ 📂engine_sast
+   ┃ ┗ 📂engine_iac
+   ┃   ┗ 📜ConfigTool.json
+   ┃   ┗ 📜Exclusions.json
+   ┃ ┗ 📂engine_secret
+   ┃   ┗ 📜ConfigTool.json
+   ┣ 📂engine_sca
+   ┃ ┗ 📂engine_container
+   ┃   ┗ 📜ConfigTool.json
+   ┃   ┗ 📜Exclusions.json
+   ┃ ┗ 📂engine_dependencies
+   ┃   ┗ 📜ConfigTool.json
+   ┃   ┗ 📜Exclusions.json
+```
+### Scan running sample (CLI) - Local
+
+> Complete the value in **.envdetlocal** file a set in execution environment
+```
+$ set -a
+$ source .envdetlocal
+$ set +a
+```
+
+
+```bash
+devsecops-engine-tools --platform_devops local --remote_config_repo DevSecOps_Remote_Config --tool engine_iac
+
+```
+### Scan result sample (CLI)
+
+![Dashboard Grafana](docs/demo_session.svg)
+
+# Metrics
+
+With the flag **--send_metrics true** and the configuration of the AWS-METRICS_MANAGER driven adapter in ConfigTool.json of the engine_core the tool will send the report to bucket s3. In the [metrics](https://github.com/bancolombia/devsecops-engine-tools/blob/trunk/metrics/) folder you will find the base of the cloud formation template to deploy the infra and dashboard in grafana.
+
+![Dashboard Grafana](docs/metrics.png)
+
+# How can I help?
+
+Review the issues, we hear new ideas. Read more [Contributing](https://github.com/bancolombia/devsecops-engine-tools/blob/trunk/docs/CONTRIBUTING.md)
+
+
+
+
+

{devsecops_engine_tools-1.7.12 → devsecops_engine_tools-1.7.14}/devsecops_engine_tools/engine_core/src/domain/usecases/handle_scan.py

@@ -110,7 +110,7 @@ class HandleScan:
             else:
                 secret_sca = dict_args["token_engine_container"]
             findings_list, input_core = runner_engine_container(
-                dict_args, config_tool, secret_sca, self.devops_platform_gateway
+                dict_args, config_tool["ENGINE_CONTAINER"]["TOOL"], secret_sca, self.devops_platform_gateway
             )
             if (
                 dict_args["use_vulnerability_management"] == "true"

{devsecops_engine_tools-1.7.12 → devsecops_engine_tools-1.7.14}/devsecops_engine_tools/engine_sca/engine_container/src/applications/runner_container_scan.py

@@ -18,12 +18,12 @@ from devsecops_engine_tools.engine_sca.engine_container.src.infrastructure.drive
 )
 
 
-def runner_engine_container(dict_args, config_tool, token, tool_remote):
+def runner_engine_container(dict_args, tool, token, tool_remote):
     try:
-        if config_tool["ENGINE_CONTAINER"]["TOOL"].lower() == "trivy":
+        if tool.lower() == "trivy":
             tool_run = TrivyScan()
             tool_deseralizator = TrivyDeserializator()
-        elif config_tool["ENGINE_CONTAINER"]["TOOL"].lower() == "prisma":
+        elif tool.lower() == "prisma":
             tool_run = PrismaCloudManagerScan()
             tool_deseralizator = PrismaDeserealizator()
         tool_images = DockerImages()
@@ -34,7 +34,7 @@ def runner_engine_container(dict_args, config_tool, token, tool_remote):
             tool_deseralizator,
             dict_args,
             token,
-            config_tool,
+            tool,
         )
 
     except Exception as e:

{devsecops_engine_tools-1.7.12 → devsecops_engine_tools-1.7.14}/devsecops_engine_tools/engine_sca/engine_container/src/domain/usecases/container_sca_scan.py

@@ -1,6 +1,3 @@
-from devsecops_engine_tools.engine_core.src.domain.model.gateway.devops_platform_gateway import (
-    DevopsPlatformGateway,
-)
 from devsecops_engine_tools.engine_sca.engine_container.src.domain.model.gateways.tool_gateway import (
     ToolGateway,
 )
@@ -11,33 +8,23 @@ from devsecops_engine_tools.engine_sca.engine_container.src.domain.model.gateway
     DeseralizatorGateway,
 )
 
+
 class ContainerScaScan:
     def __init__(
         self,
         tool_run: ToolGateway,
-        tool_remote: DevopsPlatformGateway,
+        remote_config,
         tool_images: ImagesGateway,
         tool_deseralizator: DeseralizatorGateway,
-        dict_args,
+        build_id,
         token,
-        skip_flag
     ):
         self.tool_run = tool_run
-        self.tool_remote = tool_remote
+        self.remote_config = remote_config
         self.tool_images = tool_images
         self.tool_deseralizator = tool_deseralizator
-        self.dict_args = dict_args
+        self.build_id = build_id
         self.token = token
-        self.skip_flag = skip_flag
-
-    def get_remote_config(self, file_path):
-        """
-        Get remote configuration.
-
-        Returns:
-            dict: Remote configuration.
-        """
-        return self.tool_remote.get_remote_config(self.dict_args["remote_config_repo"], file_path)
 
     def scan_image(self):
         """
@@ -48,15 +35,6 @@ class ContainerScaScan:
         """
         return self.tool_images.list_images()
 
-    def get_variable(self, variable):
-        """
-        Get variable.
-
-        Returns:
-            dict: Remote variable.
-        """
-        return self.tool_remote.get_variable(variable)
-
     def process(self):
         """
         Process SCA scanning.
@@ -65,11 +43,7 @@ class ContainerScaScan:
             dict: SCA scanning results.
         """
         return self.tool_run.run_tool_container_sca(
-            self.get_remote_config("engine_sca/engine_container/ConfigTool.json"),
-            self.token,
-            self.scan_image(),
-            self.get_variable("build_id"),
-            self.skip_flag
+            self.remote_config, self.token, self.scan_image(), self.build_id
         )
 
     def deseralizator(self, image_scanned):
@@ -79,4 +53,4 @@ class ContainerScaScan:
         Returns:
             list: Deserialized list of findings.
         """
-        return self.tool_deseralizator.get_list_findings(image_scanned)
+        return self.tool_deseralizator.get_list_findings(image_scanned)

devsecops_engine_tools-1.7.14/devsecops_engine_tools/engine_sca/engine_container/src/domain/usecases/handle_remote_config_patterns.py

@@ -0,0 +1,32 @@
+import re
+
+
+class HandleRemoteConfigPatterns:
+    def __init__(self, remote_config, exclusions, pipeline_name):
+        self.remote_config = remote_config
+        self.exclusions = exclusions
+        self.pipeline_name = pipeline_name
+
+    def ignore_analysis_pattern(self):
+        """
+        Handle analysis pattern.
+        Return: bool: False -> not scan, True -> scan.
+        """
+        ignore = self.remote_config["IGNORE_SEARCH_PATTERN"]
+        if re.match(ignore, self.pipeline_name, re.IGNORECASE):
+            return False
+        else:
+            return True
+
+    def skip_from_exclusion(self):
+        """
+        Handle skip tool.
+
+        Return: bool: True -> skip tool, False -> not skip tool.
+        """
+        if (self.pipeline_name in self.exclusions) and (
+            self.exclusions[self.pipeline_name].get("SKIP_TOOL", 0)
+        ):
+            return True
+        else:
+            return False

devsecops_engine_tools-1.7.14/devsecops_engine_tools/engine_sca/engine_container/src/domain/usecases/set_input_core.py

@@ -0,0 +1,52 @@
+from devsecops_engine_tools.engine_core.src.domain.model.input_core import InputCore
+from devsecops_engine_tools.engine_core.src.domain.model.threshold import Threshold
+
+
+from devsecops_engine_tools.engine_core.src.domain.model.exclusions import Exclusions
+
+
+class SetInputCore:
+    def __init__(self, remote_config, exclusions, pipeline_name, tool, stage):
+        self.remote_config = remote_config
+        self.exclusions = exclusions
+        self.pipeline_name = pipeline_name
+        self.tool = tool
+        self.stage = stage
+
+    def get_exclusions(self, exclusions_data, pipeline_name, tool):
+        list_exclusions = [
+            Exclusions(
+                id=item.get("id", ""),
+                where=item.get("where", ""),
+                cve_id=item.get("cve_id", ""),
+                create_date=item.get("create_date", ""),
+                expired_date=item.get("expired_date", ""),
+                severity=item.get("severity", ""),
+                hu=item.get("hu", ""),
+                reason=item.get("reason", "Risk acceptance"),
+            )
+            for key, value in exclusions_data.items()
+            if key in {"All", pipeline_name} and value.get(tool)
+            for item in value[tool]
+        ]
+        return list_exclusions
+
+    def set_input_core(self, images_scanned):
+        """
+        Set the input core.
+
+        Returns:
+            dict: Input core.
+        """
+        return InputCore(
+            self.get_exclusions(
+                self.exclusions,
+                self.pipeline_name,
+                self.tool,
+            ),
+            Threshold(self.remote_config["THRESHOLD"]),
+            images_scanned[-1] if images_scanned else None,
+            self.remote_config["MESSAGE_INFO_ENGINE_CONTAINER"],
+            self.pipeline_name,
+            self.stage.capitalize(),
+        )

{devsecops_engine_tools-1.7.12 → devsecops_engine_tools-1.7.14}/devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/driven_adapters/docker/docker_images.py

@@ -19,4 +19,4 @@ class DockerImages(ImagesGateway):
             print("Created date last image:", latest_image.attrs["Created"])
             return latest_image
         except subprocess.CalledProcessError as e:
-            raise ValueError(f"Error listing images:{e.stderr}")
+            raise ValueError(f"Error listing images:{e.stderr}")

{devsecops_engine_tools-1.7.12 → devsecops_engine_tools-1.7.14}/devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/driven_adapters/prisma_cloud/prisma_cloud_manager_scan.py

@@ -3,7 +3,6 @@ import requests
 import os
 import subprocess
 import logging
-import re
 import base64
 from devsecops_engine_tools.engine_sca.engine_container.src.infrastructure.helpers.images_scanned import (
     ImagesScanned,
@@ -87,37 +86,34 @@ class PrismaCloudManagerScan(ToolGateway):
 
         return images_scanned
 
-    def run_tool_container_sca(
-        self, remoteconfig, prisma_secret_key, image, build_id, skip_flag
-    ):
+    def run_tool_container_sca(self, remoteconfig, prisma_secret_key, image, build_id):
         images_scanned = []
-        if not (skip_flag):
-            try:
-                file_path = os.path.join(
-                    os.getcwd(), remoteconfig["PRISMA_CLOUD"]["TWISTCLI_PATH"]
-                )
+        try:
+            file_path = os.path.join(
+                os.getcwd(), remoteconfig["PRISMA_CLOUD"]["TWISTCLI_PATH"]
+            )
 
-                if not os.path.exists(file_path):
-                    self.download_twistcli(
-                        file_path,
-                        remoteconfig["PRISMA_CLOUD"]["PRISMA_ACCESS_KEY"],
-                        prisma_secret_key,
-                        remoteconfig["PRISMA_CLOUD"]["PRISMA_CONSOLE_URL"],
-                        remoteconfig["PRISMA_CLOUD"]["PRISMA_API_VERSION"],
-                    )
-                images_scanned.extend(
-                    self.scan_image(
-                        file_path,
-                        image,
-                        remoteconfig,
-                        prisma_secret_key,
-                        build_id,
-                    )
+            if not os.path.exists(file_path):
+                self.download_twistcli(
+                    file_path,
+                    remoteconfig["PRISMA_CLOUD"]["PRISMA_ACCESS_KEY"],
+                    prisma_secret_key,
+                    remoteconfig["PRISMA_CLOUD"]["PRISMA_CONSOLE_URL"],
+                    remoteconfig["PRISMA_CLOUD"]["PRISMA_API_VERSION"],
+                )
+            images_scanned.extend(
+                self.scan_image(
+                    file_path,
+                    image,
+                    remoteconfig,
+                    prisma_secret_key,
+                    build_id,
                 )
+            )
 
-                return images_scanned
+            return images_scanned
 
-            except Exception as ex:
-                logger.error(f"An overall error occurred: {ex}")
+        except Exception as ex:
+            logger.error(f"An overall error occurred: {ex}")
 
         return images_scanned

{devsecops_engine_tools-1.7.12 → devsecops_engine_tools-1.7.14}/devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/driven_adapters/prisma_cloud/prisma_deserialize_output.py

@@ -31,8 +31,12 @@ class PrismaDeserealizator(DeseralizatorGateway):
                 image_object = file.read()
 
                 json_data = json.loads(image_object)
-                vulnerabilities_data = json_data["results"][0]["vulnerabilities"] if "vulnerabilities" in json_data["results"][0] else []
-                
+                vulnerabilities_data = (
+                    json_data["results"][0]["vulnerabilities"]
+                    if "vulnerabilities" in json_data["results"][0]
+                    else []
+                )
+
                 # Create a list of findings instances from the JSON data
                 vulnerabilities = [
                     Finding(

{devsecops_engine_tools-1.7.12 → devsecops_engine_tools-1.7.14}/devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/driven_adapters/trivy_tool/trivy_deserialize_output.py

@@ -9,6 +9,7 @@ from dataclasses import dataclass
 import json
 from datetime import datetime
 
+
 @dataclass
 class TrivyDeserializator(DeseralizatorGateway):
     def get_list_findings(self, images_scanned: list) -> "list[Finding]":
@@ -34,7 +35,9 @@ class TrivyDeserializator(DeseralizatorGateway):
                         + vul.get("InstalledVersion", ""),
                         description=vul.get("Description", "").replace("\n", ""),
                         severity=vul.get("Severity", "").lower(),
-                        identification_date=datetime.now().strftime("%d-%m-%Y %H:%M:%S"),
+                        identification_date=datetime.now().strftime(
+                            "%d-%m-%Y %H:%M:%S"
+                        ),
                         published_date_cve=vul.get("PublishedDate", ""),
                         module="engine_container",
                         category=Category.VULNERABILITY,

devsecops_engine_tools-1.7.14/devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/entry_points/entry_point_tool.py

@@ -0,0 +1,58 @@
+from devsecops_engine_tools.engine_sca.engine_container.src.domain.usecases.container_sca_scan import (
+    ContainerScaScan,
+)
+from devsecops_engine_tools.engine_sca.engine_container.src.domain.usecases.handle_remote_config_patterns import (
+    HandleRemoteConfigPatterns,
+)
+from devsecops_engine_tools.engine_sca.engine_container.src.domain.usecases.set_input_core import (
+    SetInputCore,
+)
+from devsecops_engine_tools.engine_utilities.utils.logger_info import MyLogger
+from devsecops_engine_tools.engine_utilities import settings
+
+logger = MyLogger.__call__(**settings.SETTING_LOGGER).get_logger()
+
+
+def init_engine_sca_rm(
+    tool_run,
+    tool_remote,
+    tool_images,
+    tool_deseralizator,
+    dict_args,
+    token,
+    tool,
+):
+    remote_config = tool_remote.get_remote_config(
+        dict_args["remote_config_repo"], "engine_sca/engine_container/ConfigTool.json"
+    )
+    exclusions = tool_remote.get_remote_config(
+        dict_args["remote_config_repo"], "engine_sca/engine_container/Exclusions.json"
+    )
+    pipeline_name = tool_remote.get_variable("pipeline_name")
+    handle_remote_config_patterns = HandleRemoteConfigPatterns(
+        remote_config, exclusions, pipeline_name
+    )
+    skip_flag = handle_remote_config_patterns.skip_from_exclusion()
+    scan_flag = handle_remote_config_patterns.ignore_analysis_pattern()
+    build_id = tool_remote.get_variable("build_id")
+    stage = tool_remote.get_variable("stage")
+    images_scanned = []
+    deseralized = []
+    input_core = SetInputCore(remote_config, exclusions, pipeline_name, tool, stage)
+    if scan_flag and not (skip_flag):
+        container_sca_scan = ContainerScaScan(
+            tool_run,
+            remote_config,
+            tool_images,
+            tool_deseralizator,
+            build_id,
+            token,
+        )
+        images_scanned = container_sca_scan.process()
+        deseralized = container_sca_scan.deseralizator(images_scanned)
+    else:
+        print("Tool skipped by DevSecOps policy")
+        logger.info("Tool skipped by DevSecOps policy")
+    core_input = input_core.set_input_core(images_scanned)
+
+    return deseralized, core_input

devsecops_engine_tools-1.7.14/devsecops_engine_tools/version.py

@@ -0,0 +1 @@
+version = '1.7.14'

devsecops_engine_tools-1.7.14/devsecops_engine_tools.egg-info/PKG-INFO

@@ -0,0 +1,120 @@
+Metadata-Version: 2.1
+Name: devsecops-engine-tools
+Version: 1.7.14
+Summary: Tool for DevSecOps strategy
+Home-page: https://github.com/bancolombia/devsecops-engine-tools
+Author: Bancolombia DevSecOps Team
+Author-email: devsecops@bancolombia.com.co
+Classifier: Programming Language :: Python :: 3
+Classifier: License :: OSI Approved :: GNU Affero General Public License v3 or later (AGPLv3+)
+Classifier: Operating System :: OS Independent
+Requires-Python: >=3.8
+Description-Content-Type: text/markdown
+Requires-Dist: requests==2.31.0
+Requires-Dist: multipledispatch==0.6.0
+Requires-Dist: PyYAML==6.0.1
+Requires-Dist: checkov==2.3.296
+Requires-Dist: pyfiglet==0.7
+Requires-Dist: prettytable==3.8.0
+Requires-Dist: azure-devops==7.1.0b3
+Requires-Dist: marshmallow==3.19.0
+Requires-Dist: pytz==2023.3
+Requires-Dist: python-decouple==3.8
+Requires-Dist: requests_toolbelt==1.0.0
+Requires-Dist: python-dateutil==2.8.2
+Requires-Dist: pexpect==4.9.0
+
+# DevSecOps Engine Tools
+
+[![Maintained by Bancolombia](https://img.shields.io/badge/maintained_by-Bancolombia-yellow)](#)
+[![Build](https://github.com/bancolombia/devsecops-engine-tools/actions/workflows/build.yml/badge.svg)](https://github.com/bancolombia/devsecops-engine-tools/actions/workflows/build.yml)
+[![Quality Gate Status](https://sonarcloud.io/api/project_badges/measure?project=bancolombia_devsecops-engine-tools&metric=alert_status)](https://sonarcloud.io/summary/new_code?id=bancolombia_devsecops-engine-tools)
+[![Coverage](https://sonarcloud.io/api/project_badges/measure?project=bancolombia_devsecops-engine-tools&metric=coverage)](https://sonarcloud.io/summary/new_code?id=bancolombia_devsecops-engine-tools)
+[![Python Version](https://img.shields.io/badge/python%20-%203.8%20%7C%203.9%20%7C%203.10%20%7C%203.11%20%7C%203.12%20-blue)](#)
+
+# Objective
+
+Tool that unifies the evaluation of the different devsecops practices being agnostic to the devops platform, using both open source and market tools.
+
+# Component
+
+📦 [tools](https://github.com/bancolombia/devsecops-engine-tools/tree/trunk/tools): DevSecOps Practice Modules
+
+# Communications channel
+
+Here are the channels we use to communicate about the project:
+
+**1. Mailing list:** You can join our mailing list to always be informed at the following link: [CommunityDevsecopsEngine](https://groups.google.com/g/CommunityDevsecopsEngine)
+
+**2. Email:** You can write to us by email:  MaintainersDevsecopsEngine@googlegroups.com
+
+# Getting started
+
+### Requirements
+
+- Python >= 3.8
+
+### Installation
+
+```bash
+pip3 install devsecops-engine-tools
+```
+
+### Scan running - flags (CLI)
+
+```bash
+devsecops-engine-tools --platform_devops ["local","azure"] --remote_config_repo ["remote_config_repo"] --tool ["engine_iac", "engine_dast", "engine_secret", "engine_dependencies", "engine_container"] --folder_path ["Folder path scan engine_iac"] --platform ["eks","openshift"] --use_secrets_manager ["false", "true"] --use_vulnerability_management ["false", "true"] --send_metrics ["false", "true"] --token_cmdb ["token_cmdb"] --token_vulnerability_management ["token_vulnerability_management"] --token_engine_container ["token_engine_container"] --token_engine_dependencies ["token_engine_dependencies"] 
+```
+
+### Structure Remote Config
+[example_remote_config_local](https://github.com/bancolombia/devsecops-engine-tools/blob/trunk/example_remote_config_local/)
+```bash
+📦Remote_Config
+   ┣ 📂engine_core
+   ┃ ┗ 📜ConfigTool.json
+   ┣ 📂engine_sast
+   ┃ ┗ 📂engine_iac
+   ┃   ┗ 📜ConfigTool.json
+   ┃   ┗ 📜Exclusions.json
+   ┃ ┗ 📂engine_secret
+   ┃   ┗ 📜ConfigTool.json
+   ┣ 📂engine_sca
+   ┃ ┗ 📂engine_container
+   ┃   ┗ 📜ConfigTool.json
+   ┃   ┗ 📜Exclusions.json
+   ┃ ┗ 📂engine_dependencies
+   ┃   ┗ 📜ConfigTool.json
+   ┃   ┗ 📜Exclusions.json
+```
+### Scan running sample (CLI) - Local
+
+> Complete the value in **.envdetlocal** file a set in execution environment
+```
+$ set -a
+$ source .envdetlocal
+$ set +a
+```
+
+
+```bash
+devsecops-engine-tools --platform_devops local --remote_config_repo DevSecOps_Remote_Config --tool engine_iac
+
+```
+### Scan result sample (CLI)
+
+![Dashboard Grafana](docs/demo_session.svg)
+
+# Metrics
+
+With the flag **--send_metrics true** and the configuration of the AWS-METRICS_MANAGER driven adapter in ConfigTool.json of the engine_core the tool will send the report to bucket s3. In the [metrics](https://github.com/bancolombia/devsecops-engine-tools/blob/trunk/metrics/) folder you will find the base of the cloud formation template to deploy the infra and dashboard in grafana.
+
+![Dashboard Grafana](docs/metrics.png)
+
+# How can I help?
+
+Review the issues, we hear new ideas. Read more [Contributing](https://github.com/bancolombia/devsecops-engine-tools/blob/trunk/docs/CONTRIBUTING.md)
+
+
+
+
+