devsecops-engine-tools 1.7.13__tar.gz → 1.7.15__tar.gz

devsecops_engine_tools-1.7.15/PKG-INFO

@@ -0,0 +1,120 @@
+Metadata-Version: 2.1
+Name: devsecops-engine-tools
+Version: 1.7.15
+Summary: Tool for DevSecOps strategy
+Home-page: https://github.com/bancolombia/devsecops-engine-tools
+Author: Bancolombia DevSecOps Team
+Author-email: devsecops@bancolombia.com.co
+Classifier: Programming Language :: Python :: 3
+Classifier: License :: OSI Approved :: GNU Affero General Public License v3 or later (AGPLv3+)
+Classifier: Operating System :: OS Independent
+Requires-Python: >=3.8
+Description-Content-Type: text/markdown
+Requires-Dist: requests==2.31.0
+Requires-Dist: multipledispatch==0.6.0
+Requires-Dist: PyYAML==6.0.1
+Requires-Dist: checkov==2.3.296
+Requires-Dist: pyfiglet==0.7
+Requires-Dist: prettytable==3.8.0
+Requires-Dist: azure-devops==7.1.0b3
+Requires-Dist: marshmallow==3.19.0
+Requires-Dist: pytz==2023.3
+Requires-Dist: python-decouple==3.8
+Requires-Dist: requests_toolbelt==1.0.0
+Requires-Dist: python-dateutil==2.8.2
+Requires-Dist: pexpect==4.9.0
+
+# DevSecOps Engine Tools
+
+[![Maintained by Bancolombia](https://img.shields.io/badge/maintained_by-Bancolombia-yellow)](#)
+[![Build](https://github.com/bancolombia/devsecops-engine-tools/actions/workflows/build.yml/badge.svg)](https://github.com/bancolombia/devsecops-engine-tools/actions/workflows/build.yml)
+[![Quality Gate Status](https://sonarcloud.io/api/project_badges/measure?project=bancolombia_devsecops-engine-tools&metric=alert_status)](https://sonarcloud.io/summary/new_code?id=bancolombia_devsecops-engine-tools)
+[![Coverage](https://sonarcloud.io/api/project_badges/measure?project=bancolombia_devsecops-engine-tools&metric=coverage)](https://sonarcloud.io/summary/new_code?id=bancolombia_devsecops-engine-tools)
+[![Python Version](https://img.shields.io/badge/python%20-%203.8%20%7C%203.9%20%7C%203.10%20%7C%203.11%20%7C%203.12%20-blue)](#)
+
+# Objective
+
+Tool that unifies the evaluation of the different devsecops practices being agnostic to the devops platform, using both open source and market tools.
+
+# Component
+
+📦 [tools](https://github.com/bancolombia/devsecops-engine-tools/tree/trunk/tools): DevSecOps Practice Modules
+
+# Communications channel
+
+Here are the channels we use to communicate about the project:
+
+**1. Mailing list:** You can join our mailing list to always be informed at the following link: [CommunityDevsecopsEngine](https://groups.google.com/g/CommunityDevsecopsEngine)
+
+**2. Email:** You can write to us by email:  MaintainersDevsecopsEngine@googlegroups.com
+
+# Getting started
+
+### Requirements
+
+- Python >= 3.8
+
+### Installation
+
+```bash
+pip3 install devsecops-engine-tools
+```
+
+### Scan running - flags (CLI)
+
+```bash
+devsecops-engine-tools --platform_devops ["local","azure"] --remote_config_repo ["remote_config_repo"] --tool ["engine_iac", "engine_dast", "engine_secret", "engine_dependencies", "engine_container"] --folder_path ["Folder path scan engine_iac"] --platform ["eks","openshift"] --use_secrets_manager ["false", "true"] --use_vulnerability_management ["false", "true"] --send_metrics ["false", "true"] --token_cmdb ["token_cmdb"] --token_vulnerability_management ["token_vulnerability_management"] --token_engine_container ["token_engine_container"] --token_engine_dependencies ["token_engine_dependencies"] 
+```
+
+### Structure Remote Config
+[example_remote_config_local](https://github.com/bancolombia/devsecops-engine-tools/blob/trunk/example_remote_config_local/)
+```bash
+📦Remote_Config
+   ┣ 📂engine_core
+   ┃ ┗ 📜ConfigTool.json
+   ┣ 📂engine_sast
+   ┃ ┗ 📂engine_iac
+   ┃   ┗ 📜ConfigTool.json
+   ┃   ┗ 📜Exclusions.json
+   ┃ ┗ 📂engine_secret
+   ┃   ┗ 📜ConfigTool.json
+   ┣ 📂engine_sca
+   ┃ ┗ 📂engine_container
+   ┃   ┗ 📜ConfigTool.json
+   ┃   ┗ 📜Exclusions.json
+   ┃ ┗ 📂engine_dependencies
+   ┃   ┗ 📜ConfigTool.json
+   ┃   ┗ 📜Exclusions.json
+```
+### Scan running sample (CLI) - Local
+
+> Complete the value in **.envdetlocal** file a set in execution environment
+```
+$ set -a
+$ source .envdetlocal
+$ set +a
+```
+
+
+```bash
+devsecops-engine-tools --platform_devops local --remote_config_repo DevSecOps_Remote_Config --tool engine_iac
+
+```
+### Scan result sample (CLI)
+
+![Dashboard Grafana](docs/demo_session.svg)
+
+# Metrics
+
+With the flag **--send_metrics true** and the configuration of the AWS-METRICS_MANAGER driven adapter in ConfigTool.json of the engine_core the tool will send the report to bucket s3. In the [metrics](https://github.com/bancolombia/devsecops-engine-tools/blob/trunk/metrics/) folder you will find the base of the cloud formation template to deploy the infra and dashboard in grafana.
+
+![Dashboard Grafana](docs/metrics.png)
+
+# How can I help?
+
+Review the issues, we hear new ideas. Read more [Contributing](https://github.com/bancolombia/devsecops-engine-tools/blob/trunk/docs/CONTRIBUTING.md)
+
+
+
+
+

{devsecops_engine_tools-1.7.13 → devsecops_engine_tools-1.7.15}/devsecops_engine_tools/engine_sca/engine_dependencies/src/domain/usecases/find_artifacts.py

@@ -15,43 +15,32 @@ class FindArtifacts:
         self,
         working_dir,
         pattern,
+        packages,
     ):
         self.working_dir = working_dir
         self.pattern = pattern
+        self.packages = packages
 
-    def find_packages(self, pattern, working_dir):
-        npm_packages = []
-        py_packages = []
-        ext_files = []
+    def find_packages(self, pattern, packages, working_dir):
+        packages_list = []
+        files_list = []
         extension_pattern = re.compile(pattern, re.IGNORECASE)
         for root, dirs, files in os.walk(working_dir):
             components = root.split(os.path.sep)
-            if not ("node_modules" in components) and not (
-                "site-packages" in components
-            ):
-                if "site-packages" in dirs:
-                    py_packages.append(os.path.join(root, "site-packages"))
-                if "node_modules" in dirs:
-                    npm_packages.append(os.path.join(root, "node_modules"))
+            flag = 0
+            for package in packages:
+                if not (package in components):
+                    flag = 1
+                    if package in dirs:
+                        packages_list.append(os.path.join(root, package))
+            if flag:
                 for file in files:
                     if extension_pattern.search(file):
-                        ext_files.append(os.path.join(root, file))
-        return npm_packages, py_packages, ext_files
-
-    def get_recent_package(self, packages):
-        recent_package = None
-        recent_time = 0
-        for path in packages:
-            created_time = os.path.getctime(path)
-            if created_time > recent_time:
-                recent_time = created_time
-                recent_package = path
-        return recent_package
+                        files_list.append(os.path.join(root, file))
+        return packages_list, files_list
 
     def compress_and_mv(self, tar_path, package):
         try:
-            if os.path.exists(tar_path):
-                os.remove(tar_path)
             with tarfile.open(tar_path, "w") as tar:
                 tar.add(
                     package,
@@ -75,21 +64,32 @@ class FindArtifacts:
             shutil.rmtree(dir_to_scan_path)
         os.makedirs(dir_to_scan_path)
 
-        npm_packages, py_packages, ext_files = self.find_packages(
-            self.pattern, self.working_dir
+        packages_list, files_list = self.find_packages(
+            self.pattern, self.packages, self.working_dir
         )
 
-        if len(npm_packages):
-            npm_recent = self.get_recent_package(npm_packages)
-            tar_path = os.path.join(dir_to_scan_path, "node_modules.tar")
-            self.compress_and_mv(tar_path, npm_recent)
+        for package in packages_list:
+            tar_path = os.path.join(
+                dir_to_scan_path,
+                "pkg"
+                + str(packages_list.index(package) + 1)
+                + "_"
+                + os.path.basename(package)
+                + ".tar",
+            )
+            self.compress_and_mv(tar_path, package)
 
-        if len(py_packages):
-            py_recent = self.get_recent_package(py_packages)
-            tar_path = os.path.join(dir_to_scan_path, "site-packages.tar")
-            self.compress_and_mv(tar_path, py_recent)
+        if len(files_list):
+            self.move_files(dir_to_scan_path, files_list)
 
-        if len(ext_files):
-            self.move_files(dir_to_scan_path, ext_files)
+        files = os.listdir(dir_to_scan_path)
+        files = [
+            file
+            for file in files
+            if os.path.isfile(os.path.join(dir_to_scan_path, file))
+        ]
+        if files:
+            logger.debug(f"Files to scan: {", ".join(files)}")
+            print(f"Files to scan: {", ".join(files)}")
 
         return dir_to_scan_path

{devsecops_engine_tools-1.7.13 → devsecops_engine_tools-1.7.15}/devsecops_engine_tools/engine_sca/engine_dependencies/src/domain/usecases/handle_remote_config_patterns.py

@@ -1,5 +1,4 @@
 import re
-import os
 
 
 class HandleRemoteConfigPatterns:

{devsecops_engine_tools-1.7.13 → devsecops_engine_tools-1.7.15}/devsecops_engine_tools/engine_sca/engine_dependencies/src/infrastructure/entry_points/entry_point_tool.py

@@ -49,7 +49,7 @@ def init_engine_dependencies(
         bypass_limits_flag = handle_remote_config_patterns.bypass_archive_limits()
         pattern = handle_remote_config_patterns.excluded_files()
 
-        find_artifacts = FindArtifacts(os.getcwd(), pattern)
+        find_artifacts = FindArtifacts(os.getcwd(), pattern, remote_config["PACKAGES_TO_SCAN"])
         dir_to_scan_path = find_artifacts.find_artifacts()
 
         dependencies_sca_scan = DependenciesScan(

devsecops_engine_tools-1.7.15/devsecops_engine_tools/version.py

@@ -0,0 +1 @@
+version = '1.7.15'

devsecops_engine_tools-1.7.15/devsecops_engine_tools.egg-info/PKG-INFO

@@ -0,0 +1,120 @@
+Metadata-Version: 2.1
+Name: devsecops-engine-tools
+Version: 1.7.15
+Summary: Tool for DevSecOps strategy
+Home-page: https://github.com/bancolombia/devsecops-engine-tools
+Author: Bancolombia DevSecOps Team
+Author-email: devsecops@bancolombia.com.co
+Classifier: Programming Language :: Python :: 3
+Classifier: License :: OSI Approved :: GNU Affero General Public License v3 or later (AGPLv3+)
+Classifier: Operating System :: OS Independent
+Requires-Python: >=3.8
+Description-Content-Type: text/markdown
+Requires-Dist: requests==2.31.0
+Requires-Dist: multipledispatch==0.6.0
+Requires-Dist: PyYAML==6.0.1
+Requires-Dist: checkov==2.3.296
+Requires-Dist: pyfiglet==0.7
+Requires-Dist: prettytable==3.8.0
+Requires-Dist: azure-devops==7.1.0b3
+Requires-Dist: marshmallow==3.19.0
+Requires-Dist: pytz==2023.3
+Requires-Dist: python-decouple==3.8
+Requires-Dist: requests_toolbelt==1.0.0
+Requires-Dist: python-dateutil==2.8.2
+Requires-Dist: pexpect==4.9.0
+
+# DevSecOps Engine Tools
+
+[![Maintained by Bancolombia](https://img.shields.io/badge/maintained_by-Bancolombia-yellow)](#)
+[![Build](https://github.com/bancolombia/devsecops-engine-tools/actions/workflows/build.yml/badge.svg)](https://github.com/bancolombia/devsecops-engine-tools/actions/workflows/build.yml)
+[![Quality Gate Status](https://sonarcloud.io/api/project_badges/measure?project=bancolombia_devsecops-engine-tools&metric=alert_status)](https://sonarcloud.io/summary/new_code?id=bancolombia_devsecops-engine-tools)
+[![Coverage](https://sonarcloud.io/api/project_badges/measure?project=bancolombia_devsecops-engine-tools&metric=coverage)](https://sonarcloud.io/summary/new_code?id=bancolombia_devsecops-engine-tools)
+[![Python Version](https://img.shields.io/badge/python%20-%203.8%20%7C%203.9%20%7C%203.10%20%7C%203.11%20%7C%203.12%20-blue)](#)
+
+# Objective
+
+Tool that unifies the evaluation of the different devsecops practices being agnostic to the devops platform, using both open source and market tools.
+
+# Component
+
+📦 [tools](https://github.com/bancolombia/devsecops-engine-tools/tree/trunk/tools): DevSecOps Practice Modules
+
+# Communications channel
+
+Here are the channels we use to communicate about the project:
+
+**1. Mailing list:** You can join our mailing list to always be informed at the following link: [CommunityDevsecopsEngine](https://groups.google.com/g/CommunityDevsecopsEngine)
+
+**2. Email:** You can write to us by email:  MaintainersDevsecopsEngine@googlegroups.com
+
+# Getting started
+
+### Requirements
+
+- Python >= 3.8
+
+### Installation
+
+```bash
+pip3 install devsecops-engine-tools
+```
+
+### Scan running - flags (CLI)
+
+```bash
+devsecops-engine-tools --platform_devops ["local","azure"] --remote_config_repo ["remote_config_repo"] --tool ["engine_iac", "engine_dast", "engine_secret", "engine_dependencies", "engine_container"] --folder_path ["Folder path scan engine_iac"] --platform ["eks","openshift"] --use_secrets_manager ["false", "true"] --use_vulnerability_management ["false", "true"] --send_metrics ["false", "true"] --token_cmdb ["token_cmdb"] --token_vulnerability_management ["token_vulnerability_management"] --token_engine_container ["token_engine_container"] --token_engine_dependencies ["token_engine_dependencies"] 
+```
+
+### Structure Remote Config
+[example_remote_config_local](https://github.com/bancolombia/devsecops-engine-tools/blob/trunk/example_remote_config_local/)
+```bash
+📦Remote_Config
+   ┣ 📂engine_core
+   ┃ ┗ 📜ConfigTool.json
+   ┣ 📂engine_sast
+   ┃ ┗ 📂engine_iac
+   ┃   ┗ 📜ConfigTool.json
+   ┃   ┗ 📜Exclusions.json
+   ┃ ┗ 📂engine_secret
+   ┃   ┗ 📜ConfigTool.json
+   ┣ 📂engine_sca
+   ┃ ┗ 📂engine_container
+   ┃   ┗ 📜ConfigTool.json
+   ┃   ┗ 📜Exclusions.json
+   ┃ ┗ 📂engine_dependencies
+   ┃   ┗ 📜ConfigTool.json
+   ┃   ┗ 📜Exclusions.json
+```
+### Scan running sample (CLI) - Local
+
+> Complete the value in **.envdetlocal** file a set in execution environment
+```
+$ set -a
+$ source .envdetlocal
+$ set +a
+```
+
+
+```bash
+devsecops-engine-tools --platform_devops local --remote_config_repo DevSecOps_Remote_Config --tool engine_iac
+
+```
+### Scan result sample (CLI)
+
+![Dashboard Grafana](docs/demo_session.svg)
+
+# Metrics
+
+With the flag **--send_metrics true** and the configuration of the AWS-METRICS_MANAGER driven adapter in ConfigTool.json of the engine_core the tool will send the report to bucket s3. In the [metrics](https://github.com/bancolombia/devsecops-engine-tools/blob/trunk/metrics/) folder you will find the base of the cloud formation template to deploy the infra and dashboard in grafana.
+
+![Dashboard Grafana](docs/metrics.png)
+
+# How can I help?
+
+Review the issues, we hear new ideas. Read more [Contributing](https://github.com/bancolombia/devsecops-engine-tools/blob/trunk/docs/CONTRIBUTING.md)
+
+
+
+
+

devsecops_engine_tools-1.7.13/PKG-INFO

@@ -1,156 +0,0 @@
-Metadata-Version: 2.1
-Name: devsecops-engine-tools
-Version: 1.7.13
-Summary: Tool for DevSecOps strategy
-Home-page: https://github.com/bancolombia/devsecops-engine-tools
-Author: Bancolombia DevSecOps Team
-Author-email: devsecops@bancolombia.com.co
-Classifier: Programming Language :: Python :: 3
-Classifier: License :: OSI Approved :: GNU Affero General Public License v3 or later (AGPLv3+)
-Classifier: Operating System :: OS Independent
-Requires-Python: >=3.8
-Description-Content-Type: text/markdown
-Requires-Dist: requests==2.31.0
-Requires-Dist: multipledispatch==0.6.0
-Requires-Dist: PyYAML==6.0.1
-Requires-Dist: checkov==2.3.296
-Requires-Dist: pyfiglet==0.7
-Requires-Dist: prettytable==3.8.0
-Requires-Dist: azure-devops==7.1.0b3
-Requires-Dist: marshmallow==3.19.0
-Requires-Dist: pytz==2023.3
-Requires-Dist: python-decouple==3.8
-Requires-Dist: requests_toolbelt==1.0.0
-Requires-Dist: python-dateutil==2.8.2
-Requires-Dist: pexpect==4.9.0
-
-# DevSecOps Engine Tools
-
-[![Maintained by Bancolombia](https://img.shields.io/badge/maintained_by-Bancolombia-yellow)](#)
-[![Build](https://github.com/bancolombia/devsecops-engine-tools/actions/workflows/build.yml/badge.svg)](https://github.com/bancolombia/devsecops-engine-tools/actions/workflows/build.yml)
-[![Python Version](https://img.shields.io/badge/python%20-%203.8%20%7C%203.9%20%7C%203.10%20%7C%203.11%20%7C%203.12%20-blue)](#)
-
-# Objective
-
-Tool that unifies the evaluation of the different devsecops practices being agnostic to the devops platform, using both open source and market tools.
-
-# Component
-
-📦 [tools](https://github.com/bancolombia/devsecops-engine-tools/tree/trunk/tools): DevSecOps Practice Modules
-
-# Communications channel
-
-Here are the channels we use to communicate about the project:
-
-**1. Mailing list:** You can join our mailing list to always be informed at the following link: [CommunityDevsecopsEngine](https://groups.google.com/g/CommunityDevsecopsEngine)
-
-**2. Email:** You can write to us by email:  MaintainersDevsecopsEngine@googlegroups.com
-
-# Getting started
-
-### Requirements
-
-- Python >= 3.8
-
-### Installation
-
-```bash
-pip3 install devsecops-engine-tools
-```
-
-### Scan running - flags (CLI)
-
-```bash
-devsecops-engine-tools --platform_devops ["local","azure"] --remote_config_repo ["remote_config_repo"] --tool ["engine_iac", "engine_dast", "engine_secret", "engine_dependencies", "engine_container"] --folder_path ["Folder path scan engine_iac"] --platform ["eks","openshift"] --use_secrets_manager ["false", "true"] --use_vulnerability_management ["false", "true"] --send_metrics ["false", "true"] --token_cmdb ["token_cmdb"] --token_vulnerability_management ["token_vulnerability_management"] --token_engine_container ["token_engine_container"] --token_engine_dependencies ["token_engine_dependencies"] 
-```
-
-### Structure Remote Config
-[example_remote_config_local](https://github.com/bancolombia/devsecops-engine-tools/blob/trunk/example_remote_config_local/)
-```bash
-📦Remote_Config
-   ┣ 📂engine_core
-   ┃ ┗ 📜ConfigTool.json
-   ┣ 📂engine_sast
-   ┃ ┗ 📂engine_iac
-   ┃   ┗ 📜ConfigTool.json
-   ┃   ┗ 📜Exclusions.json
-   ┃ ┗ 📂engine_secret
-   ┃   ┗ 📜ConfigTool.json
-   ┣ 📂engine_sca
-   ┃ ┗ 📂engine_container
-   ┃   ┗ 📜ConfigTool.json
-   ┃   ┗ 📜Exclusions.json
-   ┃ ┗ 📂engine_dependencies
-   ┃   ┗ 📜ConfigTool.json
-   ┃   ┗ 📜Exclusions.json
-```
-### Scan running sample (CLI) - Local
-
-> Complete the value in **.envdetlocal** file a set in execution environment
-```
-$ set -a
-$ source .envdetlocal
-$ set +a
-```
-
-
-```bash
-devsecops-engine-tools --platform_devops local --remote_config_repo DevSecOps_Remote_Config --tool engine_iac
-
-```
-### Scan result sample (CLI)
-
-```bash
-    ____            _____           ____                ______            _               ______            __    
-   / __ \___ _   __/ ___/___  _____/ __ \____  _____   / ____/___  ____ _(_)___  ___     /_  __/___  ____  / /____
-  / / / / _ \ | / /\__ \/ _ \/ ___/ / / / __ \/ ___/  / __/ / __ \/ __ `/ / __ \/ _ \     / / / __ \/ __ \/ / ___/
- / /_/ /  __/ |/ /___/ /  __/ /__/ /_/ / /_/ (__  )  / /___/ / / / /_/ / / / / /  __/    / / / /_/ / /_/ / (__  ) 
-/_____/\___/|___//____/\___/\___/\____/ .___/____/  /_____/_/ /_/\__, /_/_/ /_/\___/    /_/  \____/\____/_/____/  
-                                     /_/                        /____/                                            
-
-Secrets manager is not enabled to configure external checks
-
-Below are all vulnerabilities detected.
-╔══════════╦════════════╦════════════════════════════════════════════════════════════════════════════════════╦════════════════════════╗
-║ Severity ║ ID         ║ Description                                                                        ║ Where                  ║
-╠══════════╬════════════╬════════════════════════════════════════════════════════════════════════════════════╬════════════════════════╣
-║ critical ║ CKV_K8S_37 ║ IAC-CKV_K8S_37 Minimize the admission of containers with capabilities assigned     ║ /_AW1234/app.yaml      ║
-║ critical ║ CKV_K8S_20 ║ IAC-CKV_K8S_20 Containers should not run with allowPrivilegeEscalation             ║ /_AW1234/app.yaml      ║
-║ critical ║ CKV_K8S_30 ║ IAC-CKV_K8S_30 Apply security context to your containers                           ║ /_AW1234/app.yaml      ║
-║ critical ║ CKV_K8S_23 ║ IAC-CKV_K8S_23 Minimize the admission of root containers                           ║ /_AW1234/app.yaml      ║
-║ high     ║ CKV_AWS_20 ║ C-S3-005-AWS S3 buckets are accessible to public                                   ║ /_AW1234/template.yaml ║
-║ high     ║ CKV_K8S_22 ║ IAC-CKV_K8S_22 Use read-only filesystem for containers where possible              ║ /_AW1234/app.yaml      ║
-║ high     ║ CKV_K8S_28 ║ IAC-CKV_K8S_28 Minimize the admission of containers with the NET_RAW capability    ║ /_AW1234/app.yaml      ║
-║ high     ║ CKV_K8S_38 ║ IAC-CKV_K8S_38 Ensure that Service Account Tokens are only mounted where necessary ║ /_AW1234/app.yaml      ║
-╚══════════╩════════════╩════════════════════════════════════════════════════════════════════════════════════╩════════════════════════╝
-Security count issues (critical: 4, high: 4, medium: 0, low: 0) is greater than or equal to failure criteria (critical: 1, high: 8, medium: 10, low:15, operator: or)
-✘Failed
-
-Below are all compliances issues detected.
-╔══════════╦═══════════╦════════════════════════════════════════════════════╦═══════════════════╗
-║ Severity ║ ID        ║ Description                                        ║ Where             ║
-╠══════════╬═══════════╬════════════════════════════════════════════════════╬═══════════════════╣
-║ critical ║ CKV_K8S_8 ║ IAC-CKV_K8S_8 Liveness Probe Should be Configured  ║ /_AW1234/app.yaml ║
-║ critical ║ CKV_K8S_9 ║ IAC-CKV_K8S_9 Readiness Probe Should be Configured ║ /_AW1234/app.yaml ║
-╚══════════╩═══════════╩════════════════════════════════════════════════════╩═══════════════════╝
-Compliance issues count (critical: 2) is greater than or equal to failure criteria (critical: 1)
-✘Failed
-
-Bellow are all the findings that were accepted.
-╔══════════╦════════════╦═══════════════════╦═════════════╦══════════════╦══════════════════╗
-║ Severity ║ ID         ║ Where             ║ Create Date ║ Expired Date ║ Reason           ║
-╠══════════╬════════════╬═══════════════════╬═════════════╬══════════════╬══════════════════╣
-║ high     ║ CKV_K8S_38 ║ /_AW1234/app.yaml ║ 18/11/2023  ║ 18/03/2024   ║ False Positive   ║
-╚══════════╩════════════╩═══════════════════╩═════════════╩══════════════╩══════════════════╝
-
-message custom
-```
-
-# How can I help?
-
-Review the issues, we hear new ideas. Read more [Contributing](https://github.com/bancolombia/devsecops-engine-tools/blob/trunk/docs/CONTRIBUTING.md)
-
-
-
-
-

devsecops_engine_tools-1.7.13/devsecops_engine_tools/version.py

@@ -1 +0,0 @@
-version = '1.7.13'