devsecops-engine-tools 1.7.19__tar.gz → 1.7.20__tar.gz

{devsecops_engine_tools-1.7.19 → devsecops_engine_tools-1.7.20}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: devsecops-engine-tools
-Version: 1.7.19
+Version: 1.7.20
 Summary: Tool for DevSecOps strategy
 Home-page: https://github.com/bancolombia/devsecops-engine-tools
 Author: Bancolombia DevSecOps Team

{devsecops_engine_tools-1.7.19 → devsecops_engine_tools-1.7.20}/devsecops_engine_tools/engine_core/src/applications/runner_engine_core.py

@@ -89,7 +89,7 @@ def get_inputs_from_cli(args):
     parser.add_argument("--token_cmdb", required=False, help="Token to connect to the CMDB")
     parser.add_argument("--token_vulnerability_management", required=False, help="Token to connect to the Vulnerability Management")
     parser.add_argument("--token_engine_container", required=False, help="Token to execute engine_container if is necessary")
-    parser.add_argument("--token_engine_dependencies", required=False, help="Token to execute engine_dependencies if is necessary")
+    parser.add_argument("--token_engine_dependencies", required=False, help="Token to execute engine_dependencies if is necessary. If using xray as engine_dependencies tool, the token is the base64 of artifactory server config.")
     args = parser.parse_args()
     return {
         "platform_devops": args.platform_devops,

{devsecops_engine_tools-1.7.19 → devsecops_engine_tools-1.7.20}/devsecops_engine_tools/engine_sca/engine_dependencies/src/domain/model/gateways/tool_gateway.py

@@ -4,6 +4,6 @@ from abc import ABCMeta, abstractmethod
 class ToolGateway(metaclass=ABCMeta):
     @abstractmethod
     def run_tool_dependencies_sca(
-        self, remote_config, dir_to_scan_path, bypass_limits_flag, token
+        self, remote_config, file_to_scan, bypass_limits_flag, token
     ) -> str:
         "run tool dependencies sca"

{devsecops_engine_tools-1.7.19 → devsecops_engine_tools-1.7.20}/devsecops_engine_tools/engine_sca/engine_dependencies/src/domain/usecases/dependencies_sca_scan.py

@@ -12,14 +12,14 @@ class DependenciesScan:
         tool_run: ToolGateway,
         tool_deserializator: DeserializatorGateway,
         remote_config,
-        dir_to_scan_path,
+        file_to_scan,
         bypass_limits_flag,
         token,
     ):
         self.tool_run = tool_run
         self.tool_deserializator = tool_deserializator
         self.remote_config = remote_config
-        self.dir_to_scan_path = dir_to_scan_path
+        self.file_to_scan = file_to_scan
         self.bypass_limits_flag = bypass_limits_flag
         self.token = token
 
@@ -31,7 +31,7 @@ class DependenciesScan:
         """
         return self.tool_run.run_tool_dependencies_sca(
             self.remote_config,
-            self.dir_to_scan_path,
+            self.file_to_scan,
             self.bypass_limits_flag,
             self.token,
         )

{devsecops_engine_tools-1.7.19 → devsecops_engine_tools-1.7.20}/devsecops_engine_tools/engine_sca/engine_dependencies/src/domain/usecases/find_artifacts.py

@@ -47,7 +47,6 @@ class FindArtifacts:
                     arcname=os.path.basename(package),
                     filter=lambda x: None if "/.bin/" in x.name else x,
                 )
-                logger.debug(f"File to scan: {tar_path}")
 
         except subprocess.CalledProcessError as e:
             logger.error(f"Error during {package} compression: {e}")
@@ -88,9 +87,14 @@ class FindArtifacts:
             for file in files
             if os.path.isfile(os.path.join(dir_to_scan_path, file))
         ]
+        file_to_scan = None
         if files:
+            file_to_scan = os.path.join(dir_to_scan_path, "file_to_scan.tar")
+            self.compress_and_mv(file_to_scan, dir_to_scan_path)
             files_string = ", ".join(files)
             logger.debug(f"Files to scan: {files_string}")
             print(f"Files to scan: {files_string}")
+        else:
+            logger.warning("No artifacts found")
 
-        return dir_to_scan_path
+        return file_to_scan

{devsecops_engine_tools-1.7.19 → devsecops_engine_tools-1.7.20}/devsecops_engine_tools/engine_sca/engine_dependencies/src/infrastructure/driven_adapters/xray_tool/xray_manager_scan.py

@@ -95,7 +95,7 @@ class XrayScan(ToolGateway):
         except subprocess.CalledProcessError as error:
             logger.error(f"Error during Xray Server configuration: {error}")
 
-    def scan_dependencies(self, prefix, target_dir_name, bypass_limits_flag):
+    def scan_dependencies(self, prefix, file_to_scan, bypass_limits_flag):
         try:
             if bypass_limits_flag:
                 command = [
@@ -103,15 +103,15 @@ class XrayScan(ToolGateway):
                     "scan",
                     "--format=json",
                     "--bypass-archive-limits",
-                    f"{target_dir_name}/",
+                    f"{file_to_scan}",
                 ]
             else:
-                command = [prefix, "scan", "--format=json", f"{target_dir_name}/"]
+                command = [prefix, "scan", "--format=json", f"{file_to_scan}"]
             result = subprocess.run(
                 command, stdout=subprocess.PIPE, stderr=subprocess.PIPE, text=True
             )
             scan_result = json.loads(result.stdout)
-            file_result = os.path.join(target_dir_name, "scan_result.json")
+            file_result = os.path.join(os.getcwd(), "scan_result.json")
             with open(file_result, "w") as file:
                 json.dump(scan_result, file, indent=4)
             return file_result
@@ -121,7 +121,7 @@ class XrayScan(ToolGateway):
     def run_tool_dependencies_sca(
         self,
         remote_config,
-        dir_to_scan_path,
+        file_to_scan,
         bypass_limits_flag,
         token,
     ):
@@ -143,12 +143,8 @@ class XrayScan(ToolGateway):
 
         self.config_server(command_prefix, token)
 
-        results_file = None
-        if len(os.listdir(dir_to_scan_path)) == 0:
-            logger.warning("No artifacts found")
-        else:
-            results_file = self.scan_dependencies(
-                command_prefix, dir_to_scan_path, bypass_limits_flag
-            )
+        results_file = self.scan_dependencies(
+            command_prefix, file_to_scan, bypass_limits_flag
+        )
 
         return results_file

{devsecops_engine_tools-1.7.19 → devsecops_engine_tools-1.7.20}/devsecops_engine_tools/engine_sca/engine_dependencies/src/infrastructure/entry_points/entry_point_tool.py

@@ -49,19 +49,20 @@ def init_engine_dependencies(
         bypass_limits_flag = handle_remote_config_patterns.bypass_archive_limits()
         pattern = handle_remote_config_patterns.excluded_files()
 
-        find_artifacts = FindArtifacts(os.getcwd(), pattern, remote_config["PACKAGES_TO_SCAN"])
-        dir_to_scan_path = find_artifacts.find_artifacts()
-
-        dependencies_sca_scan = DependenciesScan(
-            tool_run,
-            tool_deserializator,
-            remote_config,
-            dir_to_scan_path,
-            bypass_limits_flag,
-            token,
+        find_artifacts = FindArtifacts(
+            os.getcwd(), pattern, remote_config["PACKAGES_TO_SCAN"]
         )
-        dependencies_scanned = dependencies_sca_scan.process()
-        if dependencies_scanned:
+        file_to_scan = find_artifacts.find_artifacts()
+        if file_to_scan:
+            dependencies_sca_scan = DependenciesScan(
+                tool_run,
+                tool_deserializator,
+                remote_config,
+                file_to_scan,
+                bypass_limits_flag,
+                token,
+            )
+            dependencies_scanned = dependencies_sca_scan.process()
             deserialized = dependencies_sca_scan.deserializator(dependencies_scanned)
     else:
         print(f"Tool skipped by DevSecOps policy")

devsecops_engine_tools-1.7.20/devsecops_engine_tools/version.py

@@ -0,0 +1 @@
+version = '1.7.20'

{devsecops_engine_tools-1.7.19 → devsecops_engine_tools-1.7.20}/devsecops_engine_tools.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: devsecops-engine-tools
-Version: 1.7.19
+Version: 1.7.20
 Summary: Tool for DevSecOps strategy
 Home-page: https://github.com/bancolombia/devsecops-engine-tools
 Author: Bancolombia DevSecOps Team

devsecops_engine_tools-1.7.19/devsecops_engine_tools/version.py

@@ -1 +0,0 @@
-version = '1.7.19'