devsecops-engine-tools 1.7.16__py3-none-any.whl → 1.7.18__py3-none-any.whl

devsecops_engine_tools/engine_core/src/applications/runner_engine_core.py

@@ -28,6 +28,20 @@ from devsecops_engine_tools.version import version
 
 logger = MyLogger.__call__(**settings.SETTING_LOGGER).get_logger()
 
+def parse_separated_list(value, choices):
+    values = value.split(',')
+    # Validar cada elemento de la lista
+    for val in values:
+        if val not in choices:
+            raise argparse.ArgumentTypeError(f"Invalid value: {val}. Valid values are: {', '.join(choices)}")
+    
+    return values
+
+def parse_choices(choices):
+    def parse_with_choices(value):
+        return parse_separated_list(value, choices)
+    return parse_with_choices
+
 def get_inputs_from_cli(args):
     parser = argparse.ArgumentParser()
     parser.add_argument("-v", "--version", action='version', version='{version}'.format(version=version))
@@ -49,7 +63,7 @@ def get_inputs_from_cli(args):
     )
     parser.add_argument("-fp", "--folder_path", type=str, required=False, help="Folder Path to scan, only apply engine_iac tool")
     parser.add_argument("-p",
-        "--platform", choices=["eks", "openshift"], type=str, required=False, help="Platform to execute,  only apply engine_iac tool"
+        "--platform", type=parse_choices({"all", "docker", "k8s", "cloudformation"}), required=False, default="all" ,help="Platform to scan, only apply engine_iac tool"
     )
     parser.add_argument(
         "--use_secrets_manager",

devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/defect_dojo/defect_dojo.py

@@ -54,6 +54,7 @@ class DefectDojoPlatform(VulnerabilityManagementGateway):
                 "PRISMA": "Twistlock Image Scan",
                 "XRAY": "JFrog Xray On Demand Binary Scan",
                 "TRUFFLEHOG": "Trufflehog Scan",
+                "TRIVY": "Trivy Scan",
             }
 
             if any(

devsecops_engine_tools/engine_sast/engine_iac/src/domain/model/config_tool.py

@@ -6,7 +6,6 @@ class ConfigTool:
         self.version = json_data[tool]["VERSION"]
         self.search_pattern = json_data["SEARCH_PATTERN"]
         self.ignore_search_pattern = json_data["IGNORE_SEARCH_PATTERN"]
-        self.exclusions_path = json_data["EXCLUSIONS_PATH"]
         self.use_external_checks_git = json_data[tool]["USE_EXTERNAL_CHECKS_GIT"]
         self.external_checks_git = json_data[tool]["EXTERNAL_CHECKS_GIT"]
         self.repository_ssh_host = json_data[tool]["EXTERNAL_GIT_SSH_HOST"]

devsecops_engine_tools/engine_sast/engine_iac/src/domain/model/gateways/tool_gateway.py

@@ -2,5 +2,5 @@ from abc import ABCMeta, abstractmethod
 
 class ToolGateway(metaclass=ABCMeta):
     @abstractmethod
-    def run_tool(self, config_tool, folders_to_scan, environment, container_platform, secret_tool):
+    def run_tool(self, config_tool, folders_to_scan, environment, platform_to_scan, secret_tool):
         "run_tool"

devsecops_engine_tools/engine_sast/engine_iac/src/infrastructure/driven_adapters/checkov/checkov_tool.py

@@ -38,6 +38,7 @@ class CheckovTool(ToolGateway):
     CHECKOV_CONFIG_FILE = "checkov_config.yaml"
     TOOL = "CHECKOV"
     framework_mapping = {"RULES_DOCKER": "dockerfile", "RULES_K8S": "kubernetes", "RULES_CLOUDFORMATION": "cloudformation"}
+    framework_external_checks = ["RULES_K8S", "RULES_CLOUDFORMATION","RULES_DOCKER"]
 
 
     def create_config_file(self, checkov_config: CheckovConfig):
@@ -113,58 +114,50 @@ class CheckovTool(ToolGateway):
         output = self.execute(checkov_config)
         result.append(json.loads(output))
         queue.put(result)
-    
-    def if_platform(self,value,container_platform):
-        if value.get("platform_not_apply"):
-            if value.get("platform_not_apply") != container_platform:
-                return True
-            else:
-                return False
-        else:
-            return True
         
     def scan_folders(
-        self, folders_to_scan, config_tool: ConfigTool, agent_env, environment, container_platform
+        self, folders_to_scan, config_tool: ConfigTool, agent_env, environment, platform_to_scan
     ):
         output_queue = queue.Queue()
         # Crea una lista para almacenar los hilos
         threads = []  
         for folder in folders_to_scan:
             for rule in config_tool.rules_data_type:
-                checkov_config = CheckovConfig(
-                    path_config_file="",
-                    config_file_name=rule,
-                    framework=self.framework_mapping[rule],
-                    checks=[
-                        key
-                        for key, value in config_tool.rules_data_type[rule].items()
-                        if value["environment"].get(environment) and self.if_platform(value,container_platform)
-                    ],
-                    soft_fail=False,
-                    directories=folder,
-                    external_checks_git=[
-                        f"{config_tool.external_checks_git}/{self.framework_mapping[rule]}"
-                    ]
-                    if config_tool.use_external_checks_git == "True"
-                    and agent_env is not None
-                    and rule in ["RULES_K8S", "RULES_CLOUDFORMATION","RULES_DOCKER"]
-                    else [],
-                    env=agent_env,
-                    external_checks_dir=f"/tmp/rules/{self.framework_mapping[rule]}"
-                    if config_tool.use_external_checks_dir == "True"
-                    and rule in ["RULES_K8S", "RULES_CLOUDFORMATION","RULES_DOCKER"]
-                    else [],
-                )
-
-                checkov_config.create_config_dict()
-                self.create_config_file(checkov_config)
-                config_tool.rules_all.update(config_tool.rules_data_type[rule])
-                t = threading.Thread(
-                    target=self.async_scan,
-                    args=(output_queue, checkov_config),
-                )
-                t.start()
-                threads.append(t)
+                if "all" in platform_to_scan or any(elem.upper() in rule for elem in platform_to_scan):
+                    checkov_config = CheckovConfig(
+                        path_config_file="",
+                        config_file_name=rule,
+                        framework=self.framework_mapping[rule],
+                        checks=[
+                            key
+                            for key, value in config_tool.rules_data_type[rule].items()
+                            if value["environment"].get(environment)
+                        ],
+                        soft_fail=False,
+                        directories=folder,
+                        external_checks_git=[
+                            f"{config_tool.external_checks_git}/{self.framework_mapping[rule]}"
+                        ]
+                        if config_tool.use_external_checks_git == "True"
+                        and agent_env is not None
+                        and rule in self.framework_external_checks
+                        else [],
+                        env=agent_env,
+                        external_checks_dir=f"/tmp/rules/{self.framework_mapping[rule]}"
+                        if config_tool.use_external_checks_dir == "True"
+                        and rule in self.framework_external_checks
+                        else [],
+                    )
+
+                    checkov_config.create_config_dict()
+                    self.create_config_file(checkov_config)
+                    config_tool.rules_all.update(config_tool.rules_data_type[rule])
+                    t = threading.Thread(
+                        target=self.async_scan,
+                        args=(output_queue, checkov_config),
+                    )
+                    t.start()
+                    threads.append(t)
         # Espera a que todos los hilos terminen
         for t in threads:
             t.join()
@@ -176,12 +169,12 @@ class CheckovTool(ToolGateway):
         return result_scans
 
     def run_tool(
-        self, config_tool: ConfigTool, folders_to_scan, environment, container_platform, secret_tool
+        self, config_tool: ConfigTool, folders_to_scan, environment, platform_to_scan, secret_tool
     ):
         agent_env = self.configurate_external_checks(config_tool, secret_tool)
 
         result_scans = self.scan_folders(
-            folders_to_scan, config_tool, agent_env, environment, container_platform
+            folders_to_scan, config_tool, agent_env, environment, platform_to_scan
         )
 
         checkov_deserealizator = CheckovDeserealizator()

devsecops_engine_tools/engine_sast/engine_iac/src/infrastructure/helpers/file_generator_tool.py

@@ -35,27 +35,27 @@ def generate_file_from_tool(tool, result_list, rules_doc):
                         "checkov_version", None
                     )
 
-            file_name = "results.json"
-            results_data = {
-                "check_type": "Dockerfile, Kubernetes and CloudFormation",
-                "results": {
-                    "failed_checks": all_failed_checks,
-                },
-                "summary": {
-                    "passed": summary_passed,
-                    "failed": summary_failed,
-                    "skipped": summary_skipped,
-                    "parsing_errors": summary_parsing_errors,
-                    "resource_count": summary_resource_count,
-                    "checkov_version": checkov_version,
-                },
-            }
+                file_name = "results.json"
+                results_data = {
+                    "check_type": "Dockerfile, Kubernetes and CloudFormation",
+                    "results": {
+                        "failed_checks": all_failed_checks,
+                    },
+                    "summary": {
+                        "passed": summary_passed,
+                        "failed": summary_failed,
+                        "skipped": summary_skipped,
+                        "parsing_errors": summary_parsing_errors,
+                        "resource_count": summary_resource_count,
+                        "checkov_version": checkov_version,
+                    },
+                }
 
-            with open(file_name, "w") as json_file:
-                json.dump(results_data, json_file, indent=4)
+                with open(file_name, "w") as json_file:
+                    json.dump(results_data, json_file, indent=4)
 
-            absolute_path = os.path.abspath(file_name)
-            return absolute_path
+                absolute_path = os.path.abspath(file_name)
+                return absolute_path
         except Exception as ex:
             logger.error(f"Error during handling checkov json integrator {ex}")
 

devsecops_engine_tools/engine_sca/engine_container/src/domain/usecases/container_sca_scan.py

@@ -8,6 +8,8 @@ from devsecops_engine_tools.engine_sca.engine_container.src.domain.model.gateway
     DeseralizatorGateway,
 )
 
+import os
+
 
 class ContainerScaScan:
     def __init__(
@@ -26,7 +28,7 @@ class ContainerScaScan:
         self.build_id = build_id
         self.token = token
 
-    def scan_image(self):
+    def get_latest_image(self):
         """
         Process the list of images.
 
@@ -35,16 +37,48 @@ class ContainerScaScan:
         """
         return self.tool_images.list_images()
 
+    def get_images_already_scanned(self):
+        """
+        Create images scanned file if it does not exist and get the images that have already been scanned.
+        """
+        scanned_images_file = os.path.join(os.getcwd(), "scanned_images.txt")
+        if not os.path.exists(scanned_images_file):
+            open(scanned_images_file, "w").close()
+        with open(scanned_images_file, "r") as file:
+            images_scanned = file.read().splitlines()
+        return images_scanned
+
+    def set_image_scanned(self, result_file):
+        """
+        Write in scanned_images.txt the result file
+        """
+        with open("scanned_images.txt", "a") as file:
+            file.write(result_file + "\n")
+
     def process(self):
         """
         Process SCA scanning.
 
         Returns:
-            dict: SCA scanning results.
+            string: file scanning results name.
         """
-        return self.tool_run.run_tool_container_sca(
-            self.remote_config, self.token, self.scan_image(), self.build_id
-        )
+        latest_image = self.get_latest_image()
+        image_name = latest_image.tags[0]
+        image_scanned = None
+        if str(self.build_id) in image_name:
+            result_file = image_name + "_scan_result.json"
+            if result_file in self.get_images_already_scanned():
+                print(f"The image {image_name} has already been scanned previously.")
+                return image_scanned
+            image_scanned = self.tool_run.run_tool_container_sca(
+                self.remote_config, self.token, image_name, result_file
+            )
+            self.set_image_scanned(result_file)
+        else:
+            print(
+                f"'{image_name}' name does not contain build number '{self.build_id}'. Tool skipped."
+            )
+        return image_scanned
 
     def deseralizator(self, image_scanned):
         """

devsecops_engine_tools/engine_sca/engine_container/src/domain/usecases/set_input_core.py

@@ -31,7 +31,7 @@ class SetInputCore:
         ]
         return list_exclusions
 
-    def set_input_core(self, images_scanned):
+    def set_input_core(self, image_scanned):
         """
         Set the input core.
 
@@ -45,7 +45,7 @@ class SetInputCore:
                 self.tool,
             ),
             Threshold(self.remote_config["THRESHOLD"]),
-            images_scanned[-1] if images_scanned else None,
+            image_scanned,
             self.remote_config["MESSAGE_INFO_ENGINE_CONTAINER"],
             self.pipeline_name,
             self.stage.capitalize(),

devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/driven_adapters/docker/docker_images.py

@@ -4,6 +4,11 @@ from devsecops_engine_tools.engine_sca.engine_container.src.domain.model.gateway
 )
 import docker
 
+from devsecops_engine_tools.engine_utilities.utils.logger_info import MyLogger
+from devsecops_engine_tools.engine_utilities import settings
+
+logger = MyLogger.__call__(**settings.SETTING_LOGGER).get_logger()
+
 
 class DockerImages(ImagesGateway):
     def list_images(self):
@@ -18,5 +23,7 @@ class DockerImages(ImagesGateway):
             print("Tag last image:", latest_image.tags)
             print("Created date last image:", latest_image.attrs["Created"])
             return latest_image
-        except subprocess.CalledProcessError as e:
-            raise ValueError(f"Error listing images:{e.stderr}")
+        except Exception as e:
+            logger.error(
+                f"Error listing images, docker must be running and added to PATH: {e}"
+            )

devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/driven_adapters/prisma_cloud/prisma_cloud_manager_scan.py

@@ -4,9 +4,6 @@ import os
 import subprocess
 import logging
 import base64
-from devsecops_engine_tools.engine_sca.engine_container.src.infrastructure.helpers.images_scanned import (
-    ImagesScanned,
-)
 from devsecops_engine_tools.engine_sca.engine_container.src.domain.model.gateways.tool_gateway import (
     ToolGateway,
 )
@@ -44,76 +41,60 @@ class PrismaCloudManagerScan(ToolGateway):
         except Exception as e:
             raise ValueError(f"Error downloading twistcli: {e}")
 
-    def scan_image(self, file_path, image, remoteconfig, prisma_secret_key, build_id):
-        file_name = "scanned_images.txt"
-        image_name = f"{image.tags[0]}"
-        result_file = f"{image_name}" + "_scan_result.json"
-        images_scanned = []
-
-        if (result_file) in ImagesScanned.get_images_already_scanned(file_name):
-            print(f"The image {image_name} has already been scanned previously.")
-        else:
-            if build_id in image_name:
-                command = (
-                    file_path,
-                    "images",
-                    "scan",
-                    "--address",
-                    remoteconfig["PRISMA_CLOUD"]["PRISMA_CONSOLE_URL"],
-                    "--user",
-                    remoteconfig["PRISMA_CLOUD"]["PRISMA_ACCESS_KEY"],
-                    "--password",
-                    prisma_secret_key,
-                    "--output-file",
-                    result_file,
-                    "--details",
-                    image_name,
-                )
-                try:
-                    subprocess.run(
-                        command,
-                        check=True,
-                        stdout=subprocess.PIPE,
-                        stderr=subprocess.PIPE,
-                        text=True,
-                    )
-                    images_scanned.append(result_file)
-                    print(f"The image {image_name} was scanned")
-                    with open(file_name, "a") as file:
-                        file.write(result_file + "\n")
-                except subprocess.CalledProcessError as e:
-                    logger.error(f"Error during image scan of {image_name}: {e.stderr}")
-
-        return images_scanned
-
-    def run_tool_container_sca(self, remoteconfig, prisma_secret_key, image, build_id):
-        images_scanned = []
+    def scan_image(
+        self, file_path, image_name, result_file, remoteconfig, prisma_secret_key
+    ):
+        command = (
+            file_path,
+            "images",
+            "scan",
+            "--address",
+            remoteconfig["PRISMA_CLOUD"]["PRISMA_CONSOLE_URL"],
+            "--user",
+            remoteconfig["PRISMA_CLOUD"]["PRISMA_ACCESS_KEY"],
+            "--password",
+            prisma_secret_key,
+            "--output-file",
+            result_file,
+            "--details",
+            image_name,
+        )
         try:
-            file_path = os.path.join(
-                os.getcwd(), remoteconfig["PRISMA_CLOUD"]["TWISTCLI_PATH"]
+            subprocess.run(
+                command,
+                check=True,
+                stdout=subprocess.PIPE,
+                stderr=subprocess.PIPE,
+                text=True,
             )
+            print(f"The image {image_name} was scanned")
 
-            if not os.path.exists(file_path):
-                self.download_twistcli(
-                    file_path,
-                    remoteconfig["PRISMA_CLOUD"]["PRISMA_ACCESS_KEY"],
-                    prisma_secret_key,
-                    remoteconfig["PRISMA_CLOUD"]["PRISMA_CONSOLE_URL"],
-                    remoteconfig["PRISMA_CLOUD"]["PRISMA_API_VERSION"],
-                )
-            images_scanned.extend(
-                self.scan_image(
-                    file_path,
-                    image,
-                    remoteconfig,
-                    prisma_secret_key,
-                    build_id,
-                )
-            )
+            return result_file
+
+        except subprocess.CalledProcessError as e:
+            logger.error(f"Error during image scan of {image_name}: {e.stderr}")
 
-            return images_scanned
+    def run_tool_container_sca(
+        self, remoteconfig, prisma_secret_key, image_name, result_file
+    ):
+        file_path = os.path.join(
+            os.getcwd(), remoteconfig["PRISMA_CLOUD"]["TWISTCLI_PATH"]
+        )
 
-        except Exception as ex:
-            logger.error(f"An overall error occurred: {ex}")
+        if not os.path.exists(file_path):
+            self.download_twistcli(
+                file_path,
+                remoteconfig["PRISMA_CLOUD"]["PRISMA_ACCESS_KEY"],
+                prisma_secret_key,
+                remoteconfig["PRISMA_CLOUD"]["PRISMA_CONSOLE_URL"],
+                remoteconfig["PRISMA_CLOUD"]["PRISMA_API_VERSION"],
+            )
+        image_scanned = self.scan_image(
+            file_path,
+            image_name,
+            result_file,
+            remoteconfig,
+            prisma_secret_key,
+        )
 
-        return images_scanned
+        return image_scanned

devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/driven_adapters/prisma_cloud/prisma_deserialize_output.py

@@ -12,7 +12,7 @@ import json
 
 @dataclass
 class PrismaDeserealizator(DeseralizatorGateway):
-    def get_list_findings(self, images_scanned: list) -> "list[Finding]":
+    def get_list_findings(self, image_scanned) -> "list[Finding]":
         list_open_vulnerabilities = []
         SEVERITY_MAP = {
             "unimportant": "low",
@@ -26,40 +26,39 @@ class PrismaDeserealizator(DeseralizatorGateway):
             "important": "high",
             "critical": "critical",
         }
-        for image in images_scanned:
-            with open(image, "rb") as file:
-                image_object = file.read()
+        with open(image_scanned, "rb") as file:
+            image_object = file.read()
 
-                json_data = json.loads(image_object)
-                vulnerabilities_data = (
-                    json_data["results"][0]["vulnerabilities"]
-                    if "vulnerabilities" in json_data["results"][0]
-                    else []
-                )
+            json_data = json.loads(image_object)
+            vulnerabilities_data = (
+                json_data["results"][0]["vulnerabilities"]
+                if "vulnerabilities" in json_data["results"][0]
+                else []
+            )
 
-                # Create a list of findings instances from the JSON data
-                vulnerabilities = [
-                    Finding(
-                        id=vul.get("id", ""),
-                        cvss=float(vul.get("cvss", 0.0)),
-                        where=vul.get("packageName", "")
-                        + ":"
-                        + vul.get("packageVersion", ""),
-                        description=vul.get("description", "")[:150],
-                        severity=SEVERITY_MAP.get(vul.get("severity", ""), ""),
-                        identification_date=datetime.strptime(
-                            vul.get("discoveredDate", ""), "%Y-%m-%dT%H:%M:%S%z"
-                        ),
-                        published_date_cve=vul.get("publishedDate", None),
-                        module="engine_container",
-                        category=Category.VULNERABILITY,
-                        requirements=vul.get("status", ""),
-                        tool="PrismaCloud",
-                    )
-                    for vul in vulnerabilities_data
-                ]
+            # Create a list of findings instances from the JSON data
+            vulnerabilities = [
+                Finding(
+                    id=vul.get("id", ""),
+                    cvss=float(vul.get("cvss", 0.0)),
+                    where=vul.get("packageName", "")
+                    + ":"
+                    + vul.get("packageVersion", ""),
+                    description=vul.get("description", "")[:150],
+                    severity=SEVERITY_MAP.get(vul.get("severity", ""), ""),
+                    identification_date=datetime.strptime(
+                        vul.get("discoveredDate", ""), "%Y-%m-%dT%H:%M:%S%z"
+                    ),
+                    published_date_cve=vul.get("publishedDate", "").replace("Z", "+00:00"),
+                    module="engine_container",
+                    category=Category.VULNERABILITY,
+                    requirements=vul.get("status", ""),
+                    tool="PrismaCloud",
+                )
+                for vul in vulnerabilities_data
+            ]
 
-                # Add the Vulnerability instances to the list
-                list_open_vulnerabilities.extend(vulnerabilities)
+            # Add the Vulnerability instances to the list
+            list_open_vulnerabilities.extend(vulnerabilities)
 
         return list_open_vulnerabilities

devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/driven_adapters/trivy_tool/trivy_deserialize_output.py

@@ -7,45 +7,57 @@ from devsecops_engine_tools.engine_core.src.domain.model.finding import (
 )
 from dataclasses import dataclass
 import json
-from datetime import datetime
+from datetime import datetime, timezone
 
 
 @dataclass
 class TrivyDeserializator(DeseralizatorGateway):
-    def get_list_findings(self, images_scanned: list) -> "list[Finding]":
+    def check_date_format(self, vul):
+        try:
+            published_date_cve=datetime.strptime(
+                vul.get("PublishedDate"),
+                "%Y-%m-%dT%H:%M:%S.%fZ"
+            ).replace(tzinfo=timezone.utc).isoformat()
+        except:
+            published_date_cve=datetime.strptime(
+                vul.get("PublishedDate"),
+                "%Y-%m-%dT%H:%M:%SZ"
+            ).replace(tzinfo=timezone.utc).isoformat()
+        return published_date_cve
+
+    def get_list_findings(self, image_scanned) -> "list[Finding]":
         list_open_vulnerabilities = []
-        for image in images_scanned:
-            with open(image, "rb") as file:
-                image_object = file.read()
-                json_data = json.loads(image_object)
-                vulnerabilities_data = json_data["Results"][0]["Vulnerabilities"]
-                vulnerabilities = [
-                    Finding(
-                        id=vul.get("VulnerabilityID", ""),
-                        cvss=next(
-                            (
-                                v["V3Score"]
-                                for v in vul["CVSS"].values()
-                                if "V3Score" in v
-                            ),
-                            None,
-                        ),
-                        where=vul.get("PkgName", "")
-                        + " "
-                        + vul.get("InstalledVersion", ""),
-                        description=vul.get("Description", "").replace("\n", ""),
-                        severity=vul.get("Severity", "").lower(),
-                        identification_date=datetime.now().strftime(
-                            "%d-%m-%Y %H:%M:%S"
+        with open(image_scanned, "rb") as file:
+            image_object = file.read()
+            json_data = json.loads(image_object)
+            vulnerabilities_data = json_data["Results"][0].get("Vulnerabilities", [])
+            vulnerabilities = [
+                Finding(
+                    id=vul.get("VulnerabilityID", ""),
+                    cvss=str(next(
+                        (
+                            v["V3Score"]
+                            for v in vul["CVSS"].values()
+                            if "V3Score" in v
                         ),
-                        published_date_cve=vul.get("PublishedDate", ""),
-                        module="engine_container",
-                        category=Category.VULNERABILITY,
-                        requirements=vul.get("FixedVersion") or vul.get("Status", ""),
-                        tool="Trivy",
-                    )
-                    for vul in vulnerabilities_data
-                    if "CVSS" in vul
-                ]
-                list_open_vulnerabilities.extend(vulnerabilities)
+                        None,
+                    )),
+                    where=vul.get("PkgName", "")
+                    + " "
+                    + vul.get("InstalledVersion", ""),
+                    description=vul.get("Description", "").replace("\n", "")[:150],
+                    severity=vul.get("Severity", "").lower(),
+                    identification_date=datetime.now().strftime(
+                        "%Y-%m-%dT%H:%M:%S%z"
+                    ),
+                    published_date_cve=self.check_date_format(vul),
+                    module="engine_container",
+                    category=Category.VULNERABILITY,
+                    requirements=vul.get("FixedVersion") or vul.get("Status", ""),
+                    tool="Trivy",
+                )
+                for vul in vulnerabilities_data
+                if vul.get("CVSS") and vul.get("PublishedDate")
+            ]
+            list_open_vulnerabilities.extend(vulnerabilities)
         return list_open_vulnerabilities

devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/driven_adapters/trivy_tool/trivy_manager_scan.py

@@ -1,13 +1,12 @@
-import subprocess
-import re
-
 from devsecops_engine_tools.engine_sca.engine_container.src.domain.model.gateways.tool_gateway import (
     ToolGateway,
 )
 
-from devsecops_engine_tools.engine_sca.engine_container.src.infrastructure.helpers.images_scanned import (
-    ImagesScanned,
-)
+import subprocess
+import platform
+import requests
+import tarfile
+import zipfile
 
 from devsecops_engine_tools.engine_utilities.utils.logger_info import MyLogger
 from devsecops_engine_tools.engine_utilities import settings
@@ -16,99 +15,92 @@ logger = MyLogger.__call__(**settings.SETTING_LOGGER).get_logger()
 
 
 class TrivyScan(ToolGateway):
-    def install_tool(self, version):
+    def download_tool(self, file, url):
+        try:
+            response = requests.get(url, allow_redirects=True)
+            with open(file, "wb") as compress_file:
+                compress_file.write(response.content)
+        except Exception as e:
+            logger.error(f"Error downloading trivy: {e}")
+
+    def install_tool(self, file, url):
         installed = subprocess.run(
-            ["which", "trivy"],
+            ["which", "./trivy"],
             stdout=subprocess.PIPE,
             stderr=subprocess.PIPE,
         )
         if installed.returncode == 1:
             try:
-                command1 = [
-                    "wget",
-                    "https://github.com/aquasecurity/trivy/releases/download/v"
-                    + version
-                    + "/trivy_"
-                    + version
-                    + "_Linux-64bit.deb",
-                ]
-                subprocess.run(
-                    command1, check=True, stdout=subprocess.PIPE, stderr=subprocess.PIPE
-                )
-                command2 = [
-                    "sudo",
-                    "dpkg",
-                    "-i",
-                    "trivy_" + version + "_Linux-64bit.deb",
-                ]
-                subprocess.run(
-                    command2, check=True, stdout=subprocess.PIPE, stderr=subprocess.PIPE
-                )
-            except subprocess.CalledProcessError as error:
-                raise RuntimeError(f"Error al instalar trivy: {error}")
-
-    def scan_image(self, repository, tag, remoteconfig, release):
-        file_name = "scanned_images.txt"
-        repo = repository.split("/")[1] if len(repository.split("/")) >= 2 else ""
-        image_name = f"{repository}:{tag}"
-        result_file = f"{repo}:{tag}" + "_scan_result.json"
-        images_scanned = []
+                self.download_tool(file, url)
+                with tarfile.open(file, 'r:gz') as tar_file:
+                    tar_file.extract(member=tar_file.getmember("trivy"))
+            except Exception as e:
+                logger.error(f"Error installing trivy: {e}")
+        
+    def install_tool_windows(self, file, url):
+        try:
+            subprocess.run(
+                ["./trivy.exe", "--version"],
+                stdout=subprocess.PIPE,
+                stderr=subprocess.PIPE,
+            )
+        except:
+            try:
+                self.download_tool(file, url)
+                with zipfile.ZipFile(file, 'r') as zip_file:
+                    zip_file.extract(member="trivy.exe")
+            except Exception as e:
+                logger.error(f"Error installing trivy: {e}")
 
-        if not ((result_file) in ImagesScanned.get_images_already_scanned(file_name)):
-            pattern = remoteconfig["REGEX_EXPRESSION_PROJECTS"]
-            match = re.match(pattern, repo.upper())
-            if match:
-                if match.group() in release.upper():
-                    command1 = ["trivy", "image", "--download-db-only"]
-                    command2 = [
-                        "trivy",
-                        "--scanners",
-                        "vuln",
-                        "-f",
-                        "json",
-                        "-o",
-                        result_file,
-                    ]
-                    command2.extend(["--quiet", "image", image_name])
-                    try:
-                        subprocess.run(
-                            command1,
-                            check=True,
-                            stdout=subprocess.PIPE,
-                            stderr=subprocess.PIPE,
-                        )
-                        subprocess.run(
-                            command2,
-                            check=True,
-                            stdout=subprocess.PIPE,
-                            stderr=subprocess.PIPE,
-                            text=True,
-                        )
-                        images_scanned.append(result_file)
-                        with open(file_name, "a") as file:
-                            file.write(result_file + "\n")
-                    except subprocess.CalledProcessError as e:
-                        logger.error(
-                            f"Error during image scan of {repository}: {e.stderr}"
-                        )
+    def scan_image(self, prefix, image_name, result_file):
+        command = [
+            prefix,
+            "--scanners",
+            "vuln",
+            "-f",
+            "json",
+            "-o",
+            result_file,
+        ]
+        command.extend(["--quiet", "image", image_name])
+        try:
+            subprocess.run(
+                command,
+                check=True,
+                stdout=subprocess.PIPE,
+                stderr=subprocess.PIPE,
+                text=True,
+            )
+            print(f"The image {image_name} was scanned")
 
-        return images_scanned
+            return result_file
 
-    def run_tool_container_sca(self, remoteconfig, token, scan_image, release):
-        try:
-            trivy_version = remoteconfig["TRIVY"]["TRIVY_VERSION"]
-            self.install_tool(trivy_version)
-            images_scanned = []
+        except Exception as e:
+            logger.error(f"Error during image scan of {image_name}: {e}")
 
-            for image in scan_image:
-                repository, tag = image["Repository"], image["Tag"]
-                images_scanned.extend(
-                    self.scan_image(repository, tag, remoteconfig, release)
-                )
+    def run_tool_container_sca(self, remoteconfig, token, image_name, result_file):
+        trivy_version = remoteconfig["TRIVY"]["TRIVY_VERSION"]
+        os_platform = platform.system()
+        base_url = f"https://github.com/aquasecurity/trivy/releases/download/v{trivy_version}/"
 
-            return images_scanned
+        if os_platform == "Linux":
+            file=f"trivy_{trivy_version}_Linux-64bit.tar.gz"
+            self.install_tool(file, base_url+file)
+            command_prefix = "./trivy"
+        elif os_platform == "Darwin":
+            file=f"trivy_{trivy_version}_macOS-64bit.tar.gz"
+            self.install_tool(file, base_url+file)
+            command_prefix = "./trivy"
+        elif os_platform == "Windows":
+            file=f"trivy_{trivy_version}_windows-64bit.zip"
+            self.install_tool_windows(file, base_url+file)
+            command_prefix = "./trivy.exe"
+        else:
+            logger.warning(f"{os_platform} is not supported.")
+            return None
 
-        except Exception as ex:
-            logger.error(f"An overall error occurred: {ex}")
+        image_scanned = (
+            self.scan_image(command_prefix, image_name, result_file)
+        )
 
-        return 0
+        return image_scanned

devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/entry_points/entry_point_tool.py

@@ -36,7 +36,7 @@ def init_engine_sca_rm(
     scan_flag = handle_remote_config_patterns.ignore_analysis_pattern()
     build_id = tool_remote.get_variable("build_id")
     stage = tool_remote.get_variable("stage")
-    images_scanned = []
+    image_scanned = None
     deseralized = []
     input_core = SetInputCore(remote_config, exclusions, pipeline_name, tool, stage)
     if scan_flag and not (skip_flag):
@@ -48,11 +48,12 @@ def init_engine_sca_rm(
             build_id,
             token,
         )
-        images_scanned = container_sca_scan.process()
-        deseralized = container_sca_scan.deseralizator(images_scanned)
+        image_scanned = container_sca_scan.process()
+        if image_scanned:
+            deseralized = container_sca_scan.deseralizator(image_scanned)
     else:
         print("Tool skipped by DevSecOps policy")
         logger.info("Tool skipped by DevSecOps policy")
-    core_input = input_core.set_input_core(images_scanned)
+    core_input = input_core.set_input_core(image_scanned)
 
     return deseralized, core_input

devsecops_engine_tools/version.py

@@ -1 +1 @@
-version = '1.7.16'
+version = '1.7.18'

{devsecops_engine_tools-1.7.16.dist-info → devsecops_engine_tools-1.7.18.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: devsecops-engine-tools
-Version: 1.7.16
+Version: 1.7.18
 Summary: Tool for DevSecOps strategy
 Home-page: https://github.com/bancolombia/devsecops-engine-tools
 Author: Bancolombia DevSecOps Team

{devsecops_engine_tools-1.7.16.dist-info → devsecops_engine_tools-1.7.18.dist-info}/RECORD

@@ -1,9 +1,9 @@
 devsecops_engine_tools/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-devsecops_engine_tools/version.py,sha256=vVlXeXuVsZX9q82mpgg-l8td6DNWeMF45zXX4TerVqA,18
+devsecops_engine_tools/version.py,sha256=uHp5xMfNM22KDFIlPApHm9JbkzWEjgI-J44tqG0qvgY,19
 devsecops_engine_tools/engine_core/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_core/src/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_core/src/applications/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-devsecops_engine_tools/engine_core/src/applications/runner_engine_core.py,sha256=N62RsNN9aM2dhLQDNtDqDRRS0oo9zGnyjEotNaPmrMI,5169
+devsecops_engine_tools/engine_core/src/applications/runner_engine_core.py,sha256=17BPgOOIu21bsIsu319Q-7HUMYXjMUtxVf17tPA8BOU,5650
 devsecops_engine_tools/engine_core/src/deployment/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_core/src/deployment/infrastructure/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_core/src/domain/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
@@ -36,7 +36,7 @@ devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/aws/secret
 devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/azure/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/azure/azure_devops.py,sha256=Ot1j5my-iEpU-ZYy9yNXkwmwLOmJ3f95JyyAUcpFN5g,4967
 devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/defect_dojo/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/defect_dojo/defect_dojo.py,sha256=fnyexfnIfFyP4iCLTeMwWa6OaEP_VYcnPg8roANIKGs,10864
+devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/defect_dojo/defect_dojo.py,sha256=qOqipt7P6THEjoaBwpIPO8OEN9OKpW6u_X_c4DeGhx8,10903
 devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/printer_pretty_table/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/printer_pretty_table/printer_pretty_table.py,sha256=Tz056qYuIKrdYGKyoPo7xFdOpfN3A0YMd3cCSAGVrYQ,3828
 devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/runtime_local/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
@@ -84,9 +84,9 @@ devsecops_engine_tools/engine_sast/engine_iac/src/deployment/__init__.py,sha256=
 devsecops_engine_tools/engine_sast/engine_iac/src/deployment/infrastructure/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_sast/engine_iac/src/domain/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_sast/engine_iac/src/domain/model/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-devsecops_engine_tools/engine_sast/engine_iac/src/domain/model/config_tool.py,sha256=aED1_wtWYENRazT_OvumQbtWIvAne4wHCV-BrLig2Jw,1303
+devsecops_engine_tools/engine_sast/engine_iac/src/domain/model/config_tool.py,sha256=NLV61UALqRWJHq4uvxcH4CugtQGMAwCr-RM5UvZuUC8,1243
 devsecops_engine_tools/engine_sast/engine_iac/src/domain/model/gateways/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-devsecops_engine_tools/engine_sast/engine_iac/src/domain/model/gateways/tool_gateway.py,sha256=ep5luExG_wj8csjUUkecCq83jwi7Z8qogSPbexmZyUM,218
+devsecops_engine_tools/engine_sast/engine_iac/src/domain/model/gateways/tool_gateway.py,sha256=tqOkmy5fRMvCFjuQUSdGdWd-PrShtJi0YDlAQ8htMzM,216
 devsecops_engine_tools/engine_sast/engine_iac/src/domain/usecases/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_sast/engine_iac/src/domain/usecases/iac_scan.py,sha256=ijFVq_acgzGJ58p-L9mApn7kmgJKiD8mih99Jncorcc,4995
 devsecops_engine_tools/engine_sast/engine_iac/src/infrastructure/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
@@ -94,11 +94,11 @@ devsecops_engine_tools/engine_sast/engine_iac/src/infrastructure/driven_adapters
 devsecops_engine_tools/engine_sast/engine_iac/src/infrastructure/driven_adapters/checkov/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_sast/engine_iac/src/infrastructure/driven_adapters/checkov/checkov_config.py,sha256=qbE6wUO5_WFXF_QolL0JYelaRGEOUakPEZR_6HAKzzI,4355
 devsecops_engine_tools/engine_sast/engine_iac/src/infrastructure/driven_adapters/checkov/checkov_deserealizator.py,sha256=_TfAN504MBl17VsSMOymCWaAtQUvS1UKKuDwR2tIx3I,1367
-devsecops_engine_tools/engine_sast/engine_iac/src/infrastructure/driven_adapters/checkov/checkov_tool.py,sha256=kekssQfHYUftr7x3VIl6pm1ppbmNPERriHSAfDx25fA,7679
+devsecops_engine_tools/engine_sast/engine_iac/src/infrastructure/driven_adapters/checkov/checkov_tool.py,sha256=SrEH7SnPLIMjP4OgSXvuntZJFfttgoTVjaitwLCCGhU,7619
 devsecops_engine_tools/engine_sast/engine_iac/src/infrastructure/entry_points/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_sast/engine_iac/src/infrastructure/entry_points/entry_point_tool.py,sha256=60iaHYZZp5uTngD7a8vsQaQYsTfBzP_kp0xflfPNnk4,305
 devsecops_engine_tools/engine_sast/engine_iac/src/infrastructure/helpers/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-devsecops_engine_tools/engine_sast/engine_iac/src/infrastructure/helpers/file_generator_tool.py,sha256=qewN-QIo0tbipeuZNGfwFNlymWQLpIHM1G_Hnedltpk,3007
+devsecops_engine_tools/engine_sast/engine_iac/src/infrastructure/helpers/file_generator_tool.py,sha256=lim8ARYvVT6a2Affqw4QVxhV_wq3aKiGf-2VUskSXII,3083
 devsecops_engine_tools/engine_sast/engine_secret/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_sast/engine_secret/src/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_sast/engine_secret/src/applications/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
@@ -138,23 +138,22 @@ devsecops_engine_tools/engine_sca/engine_container/src/domain/model/gateways/des
 devsecops_engine_tools/engine_sca/engine_container/src/domain/model/gateways/images_gateway.py,sha256=szx-9iO1eSDedr3rw605Mx3jYBEFwRKBM0ts5zImgx0,158
 devsecops_engine_tools/engine_sca/engine_container/src/domain/model/gateways/tool_gateway.py,sha256=ADZjrl8u8CQ0hWoVhbnHFcjvyUmUeleffwmhtlg8s30,224
 devsecops_engine_tools/engine_sca/engine_container/src/domain/usecases/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-devsecops_engine_tools/engine_sca/engine_container/src/domain/usecases/container_sca_scan.py,sha256=zwlYQSmtn7_ms9x5-Dhr3WTilLM5cXdAyslgWRh5xdc,1635
+devsecops_engine_tools/engine_sca/engine_container/src/domain/usecases/container_sca_scan.py,sha256=bJrQr-e_mEQci_cT3a3fWGbCAryX1lFLJbrY8rd-Qg8,3054
 devsecops_engine_tools/engine_sca/engine_container/src/domain/usecases/handle_remote_config_patterns.py,sha256=4wgBTQSDE-C5v01C3Vxzeq0DJKZUSqQ5TVLG7yPZPKs,926
-devsecops_engine_tools/engine_sca/engine_container/src/domain/usecases/set_input_core.py,sha256=Jw2sjrgRS8kjIFLt2nEBXQpF2-Ncm_ltgc6Q7ZIZKw0,1840
+devsecops_engine_tools/engine_sca/engine_container/src/domain/usecases/set_input_core.py,sha256=DdKyKnLzqswHt619B3s1GTB5u_RyUixCambDkBuu7y4,1806
 devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/driven_adapters/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/driven_adapters/docker/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/driven_adapters/docker/docker_images.py,sha256=tdZeW5KbZcLxSMM37-GdmkLItpRDUlR0eAyew6bI2ts,816
+devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/driven_adapters/docker/docker_images.py,sha256=XoF6PtMNIdycuBQbRl7NjBPaqUr80-S8KxV93iEpFNA,1067
 devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/driven_adapters/prisma_cloud/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/driven_adapters/prisma_cloud/prisma_cloud_manager_scan.py,sha256=3KyqbuLSFHMAUO5n9ruLMU8nhiP9BuGeXchN9PHW3M0,4369
-devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/driven_adapters/prisma_cloud/prisma_deserialize_output.py,sha256=k6j6ajlHFVfKdxIdvWVak0eryhIknT0IyTvyI2e3gz0,2514
+devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/driven_adapters/prisma_cloud/prisma_cloud_manager_scan.py,sha256=DUq-cs3DuKpwfKVcu_zCiydLD-OZihbtRiQhVw0Dl1M,3213
+devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/driven_adapters/prisma_cloud/prisma_deserialize_output.py,sha256=Q6jPGjAO-oY0YeHZYmmD_in-nA8R6oa4_cBGbNs1oy8,2375
 devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/driven_adapters/trivy_tool/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/driven_adapters/trivy_tool/trivy_deserialize_output.py,sha256=v0XU-KJfnt4BFmoLbpc3IE0RxDVsYN5dzftfJiWR2Fs,2169
-devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/driven_adapters/trivy_tool/trivy_manager_scan.py,sha256=IBd3fOQmHPDeVud54DQtw0x2o4jm31iwRoiBDTpkqdc,4284
+devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/driven_adapters/trivy_tool/trivy_deserialize_output.py,sha256=LGqnO10Zt-0-TxUW6F1S46jVktlIwxWSYATKSVblCWI,2535
+devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/driven_adapters/trivy_tool/trivy_manager_scan.py,sha256=dAjnif-4CVYWrEpsMeAP97p-vsqtcZooxTBKeW8dzOY,3611
 devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/entry_points/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/entry_points/entry_point_tool.py,sha256=BM8XJI_tlFxurdhBz2N5R33z4WGNLN_mkaG2npYBTiM,2212
+devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/entry_points/entry_point_tool.py,sha256=RrpGnDSAL_YnRmONRkOKjWk5JbCOi_vG9dvlz5E_67U,2241
 devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/helpers/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/helpers/images_scanned.py,sha256=V_wE9maXdGlQbYIe6qVgOqEtiWrh-icd8V4dpWDQrXg,590
 devsecops_engine_tools/engine_sca/engine_dependencies/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_sca/engine_dependencies/src/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devsecops_engine_tools/engine_sca/engine_dependencies/src/applications/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
@@ -242,8 +241,8 @@ devsecops_engine_tools/engine_utilities/utils/logger_info.py,sha256=4Mz8Bwlm9Mku
 devsecops_engine_tools/engine_utilities/utils/name_conversion.py,sha256=ADJrRGaxYSDe0ZRh6VHRf53H4sXPcb-vNP_i81PUn3I,307
 devsecops_engine_tools/engine_utilities/utils/printers.py,sha256=GAslbWaBpwP3mP6fBsgVl07TTBgcCggQTy8h2M9ibeo,612
 devsecops_engine_tools/engine_utilities/utils/session_manager.py,sha256=yNtlT-8Legz1sHbGPH8LNYjL-LgDUE0zXG2rYjiab7U,290
-devsecops_engine_tools-1.7.16.dist-info/METADATA,sha256=BwG-ipv7ziTvAqeXg3xPytZqTQ0lpI3wch50ZHysRLw,4840
-devsecops_engine_tools-1.7.16.dist-info/WHEEL,sha256=GJ7t_kWBFywbagK5eo9IoUwLW6oyOeTKmQ-9iHFVNxQ,92
-devsecops_engine_tools-1.7.16.dist-info/entry_points.txt,sha256=9IjXF_7Zpgowq_SY6OSmsA9vZze18a8_AeHwkQVrgKk,131
-devsecops_engine_tools-1.7.16.dist-info/top_level.txt,sha256=ge6y0X_xBAU1aG3EMWFtl9djbVyg5BxuSp2r2Lg6EQU,23
-devsecops_engine_tools-1.7.16.dist-info/RECORD,,
+devsecops_engine_tools-1.7.18.dist-info/METADATA,sha256=rFH9e75HrUpTxJzgK9S2HKeBnDoqZJC5UEmEvSm-VVQ,4840
+devsecops_engine_tools-1.7.18.dist-info/WHEEL,sha256=GJ7t_kWBFywbagK5eo9IoUwLW6oyOeTKmQ-9iHFVNxQ,92
+devsecops_engine_tools-1.7.18.dist-info/entry_points.txt,sha256=9IjXF_7Zpgowq_SY6OSmsA9vZze18a8_AeHwkQVrgKk,131
+devsecops_engine_tools-1.7.18.dist-info/top_level.txt,sha256=ge6y0X_xBAU1aG3EMWFtl9djbVyg5BxuSp2r2Lg6EQU,23
+devsecops_engine_tools-1.7.18.dist-info/RECORD,,

devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/helpers/images_scanned.py

@@ -1,16 +0,0 @@
-import os
-
-
-class ImagesScanned:
-    @staticmethod
-    def get_images_already_scanned(file_name):
-        """
-        Create images scanned file if it does not exist and get the images that have already been scanned.
-        """
-        scanned_images_file = os.path.join(os.getcwd(), file_name)
-        # Check if the file exists; if not, create it
-        if not os.path.exists(scanned_images_file):
-            open(scanned_images_file, "w").close()
-        with open(scanned_images_file, "r") as file:
-            images_scanned = file.read().splitlines()
-        return images_scanned