devsecops-engine-tools 1.7.3__py3-none-any.whl → 1.7.5__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.

This version of devsecops-engine-tools might be problematic. Click here for more details.

Files changed (13) hide show
  1. devsecops_engine_tools/engine_core/src/applications/runner_engine_core.py +2 -2
  2. devsecops_engine_tools/engine_core/src/domain/usecases/handle_scan.py +1 -1
  3. devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/defect_dojo/defect_dojo.py +1 -1
  4. devsecops_engine_tools/engine_sast/engine_iac/src/domain/usecases/iac_scan.py +3 -0
  5. devsecops_engine_tools/engine_sast/engine_secret/src/infrastructure/driven_adapters/trufflehog/trufflehog_deserealizator.py +3 -4
  6. devsecops_engine_tools/engine_utilities/defect_dojo/domain/serializers/import_scan.py +1 -1
  7. devsecops_engine_tools/engine_utilities/defect_dojo/domain/user_case/cmdb.py +0 -1
  8. devsecops_engine_tools/version.py +1 -1
  9. {devsecops_engine_tools-1.7.3.dist-info → devsecops_engine_tools-1.7.5.dist-info}/METADATA +1 -1
  10. {devsecops_engine_tools-1.7.3.dist-info → devsecops_engine_tools-1.7.5.dist-info}/RECORD +13 -13
  11. {devsecops_engine_tools-1.7.3.dist-info → devsecops_engine_tools-1.7.5.dist-info}/WHEEL +0 -0
  12. {devsecops_engine_tools-1.7.3.dist-info → devsecops_engine_tools-1.7.5.dist-info}/entry_points.txt +0 -0
  13. {devsecops_engine_tools-1.7.3.dist-info → devsecops_engine_tools-1.7.5.dist-info}/top_level.txt +0 -0
devsecops_engine_tools/engine_core/src/applications/runner_engine_core.py CHANGED
@@ -112,10 +112,10 @@ def application_core():
112
112
  args
113
113
  )
114
114
  except Exception as e:
115
- logger.error("Error SCAN: {0} ".format(str(e)))
115
+ logger.error("Error engine_core: {0} ".format(str(e)))
116
116
  print(
117
117
  devops_platform_gateway.message(
118
- "error", "Error SCAN: {0} ".format(str(e))
118
+ "error", "Error engine_core: {0} ".format(str(e))
119
119
  )
120
120
  )
121
121
  print(devops_platform_gateway.result_pipeline("failed"))
devsecops_engine_tools/engine_core/src/domain/usecases/handle_scan.py CHANGED
@@ -98,7 +98,7 @@ class HandleScan:
98
98
  findings_list, input_core = runner_engine_iac(
99
99
  dict_args, config_tool["ENGINE_IAC"]["TOOL"], secret_tool,self.devops_platform_gateway, env
100
100
  )
101
- if dict_args["use_vulnerability_management"] == "true":
101
+ if dict_args["use_vulnerability_management"] == "true" and input_core.path_file_results:
102
102
  self._use_vulnerability_management(
103
103
  config_tool, input_core, dict_args, secret_tool, env
104
104
  )
devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/defect_dojo/defect_dojo.py CHANGED
@@ -96,7 +96,7 @@ class DefectDojoPlatform(VulnerabilityManagementGateway):
96
96
  in enviroment_mapping
97
97
  else enviroment_mapping["default"]
98
98
  ),
99
- tags="evc",
99
+ tags=vulnerability_management.dict_args["tool"],
100
100
  )
101
101
 
102
102
  response = DefectDojo.send_import_scan(request)
devsecops_engine_tools/engine_sast/engine_iac/src/domain/usecases/iac_scan.py CHANGED
@@ -49,6 +49,9 @@ class IacScan:
49
49
  dict_args["platform"],
50
50
  secret_tool,
51
51
  )
52
+ else:
53
+ print(f"Tool skipped by DevSecOps policy")
54
+ logger.info(f"Tool skipped by DevSecOps policy")
52
55
 
53
56
  totalized_exclusions = []
54
57
  (
devsecops_engine_tools/engine_sast/engine_secret/src/infrastructure/driven_adapters/trufflehog/trufflehog_deserealizator.py CHANGED
@@ -11,11 +11,11 @@ class SecretScanDeserealizator(DeseralizatorGateway):
11
11
  def get_list_vulnerability(self, results_scan_list: List[dict], os, path_directory) -> List[Finding]:
12
12
  list_open_vulnerabilities = []
13
13
  for result in results_scan_list:
14
- where_text, line, raw = self.get_where_correctly(result, os, path_directory)
14
+ where_text, raw = self.get_where_correctly(result, os, path_directory)
15
15
  vulnerability_open = Finding(
16
16
  id="SECRET_SCANNING",
17
17
  cvss=None,
18
- where=f"{where_text}, Line: {line}, Secret: {raw}",
18
+ where=f"{where_text}, Secret: {raw}",
19
19
  description="Sensitive information in source code",
20
20
  severity="critical",
21
21
  identification_date=datetime.now().strftime("%d%m%Y"),
@@ -29,7 +29,6 @@ class SecretScanDeserealizator(DeseralizatorGateway):
29
29
  return list_open_vulnerabilities
30
30
 
31
31
  def get_where_correctly(self, result: dict, os, path_directory):
32
- line = str(result.get("SourceMetadata").get("Data").get("Filesystem").get("line") + 1 or "Multiline")
33
32
  original_where = str(result.get("SourceMetadata").get("Data").get("Filesystem").get("file"))
34
33
  raw = str(result.get("Raw"))
35
34
  if re.search(r'Linux', os):
@@ -37,4 +36,4 @@ class SecretScanDeserealizator(DeseralizatorGateway):
37
36
 
38
37
  path_remove = path_directory or ""
39
38
  where_text = original_where.replace(path_remove, "")
40
- return where_text, line, raw
39
+ return where_text, raw
devsecops_engine_tools/engine_utilities/defect_dojo/domain/serializers/import_scan.py CHANGED
@@ -181,7 +181,7 @@ class ImportScanSerializer(Schema):
181
181
  auto_create_context = fields.Str(required=False, load_default="true")
182
182
  deduplication_on_engagement = fields.Str(required=False)
183
183
  lead = fields.Str(required=False)
184
- tags = fields.Str(required=True, validate=validate.OneOf(["cde", "evc"]))
184
+ tags = fields.Str(required=True)
185
185
  close_old_findings = fields.Str(required=False, load_default=True)
186
186
  close_old_findings_product_scope = fields.Str(required=False)
187
187
  push_to_jira = fields.Str(required=False)
devsecops_engine_tools/engine_utilities/defect_dojo/domain/user_case/cmdb.py CHANGED
@@ -43,7 +43,6 @@ class CmdbUserCase:
43
43
  )
44
44
 
45
45
  request.product_name = product_data.product_name
46
- request.tags = product_data.tag_product if product_data.tag_product else "ORPHAN"
47
46
  request.product_description = product_data.product_description
48
47
 
49
48
  return request
devsecops_engine_tools/version.py CHANGED
@@ -1 +1 @@
1
- version = '1.7.3'
1
+ version = '1.7.5'
{devsecops_engine_tools-1.7.3.dist-info → devsecops_engine_tools-1.7.5.dist-info}/METADATA RENAMED
@@ -1,6 +1,6 @@
1
1
  Metadata-Version: 2.1
2
2
  Name: devsecops-engine-tools
3
- Version: 1.7.3
3
+ Version: 1.7.5
4
4
  Summary: Tool for DevSecOps strategy
5
5
  Home-page: https://github.com/bancolombia/devsecops-engine-tools
6
6
  Author: Bancolombia DevSecOps Team
{devsecops_engine_tools-1.7.3.dist-info → devsecops_engine_tools-1.7.5.dist-info}/RECORD RENAMED
@@ -1,9 +1,9 @@
1
1
  devsecops_engine_tools/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
2
- devsecops_engine_tools/version.py,sha256=UHqEAHY-ttVnJEFOzoluHzMxMQRbjou7FukFI-qrUaM,17
2
+ devsecops_engine_tools/version.py,sha256=RcLLAdA8QgF7ex8SHC-MX4bUr5hGi2takvlcxHtrOEE,18
3
3
  devsecops_engine_tools/engine_core/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
4
4
  devsecops_engine_tools/engine_core/src/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
5
5
  devsecops_engine_tools/engine_core/src/applications/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
6
- devsecops_engine_tools/engine_core/src/applications/runner_engine_core.py,sha256=ZwYhoKLJ01PGaOz3y7FAEgGeDF00kn7P1_njlZt6r30,5128
6
+ devsecops_engine_tools/engine_core/src/applications/runner_engine_core.py,sha256=9aPKhw6vbK5xZzzklF2azkeAzo54CyBXJ-P7QUmzCyM,5142
7
7
  devsecops_engine_tools/engine_core/src/deployment/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
8
8
  devsecops_engine_tools/engine_core/src/deployment/infrastructure/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
9
9
  devsecops_engine_tools/engine_core/src/domain/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
@@ -24,7 +24,7 @@ devsecops_engine_tools/engine_core/src/domain/model/gateway/secrets_manager_gate
24
24
  devsecops_engine_tools/engine_core/src/domain/model/gateway/vulnerability_management_gateway.py,sha256=F2VfV_-MjPMY-wlkgIviuIfKx0yZoyyXkJRXDPHjU48,533
25
25
  devsecops_engine_tools/engine_core/src/domain/usecases/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
26
26
  devsecops_engine_tools/engine_core/src/domain/usecases/break_build.py,sha256=z6lcd-tnb-3QfZ1yf2ZlaRbovwF0YE6nUmS5V92aszc,15534
27
- devsecops_engine_tools/engine_core/src/domain/usecases/handle_scan.py,sha256=TCChdAqsNRus417udUZngujAbTqNlCLS_zymnpijzF4,6377
27
+ devsecops_engine_tools/engine_core/src/domain/usecases/handle_scan.py,sha256=CBk6KR2lpZ_ayitIdZERjJ0yasg1_dICHA0Tw97s-eo,6410
28
28
  devsecops_engine_tools/engine_core/src/domain/usecases/metrics_manager.py,sha256=Xi0iNnPrFgqd2cBdAA5E_tgouhxs-BTo016aolnGgv8,2413
29
29
  devsecops_engine_tools/engine_core/src/infrastructure/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
30
30
  devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
@@ -34,7 +34,7 @@ devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/aws/secret
34
34
  devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/azure/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
35
35
  devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/azure/azure_devops.py,sha256=Ot1j5my-iEpU-ZYy9yNXkwmwLOmJ3f95JyyAUcpFN5g,4967
36
36
  devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/defect_dojo/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
37
- devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/defect_dojo/defect_dojo.py,sha256=CQWRtwGplHQRLIhGV-x_AjB8ESSeBq5aPETXg9X07E8,9072
37
+ devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/defect_dojo/defect_dojo.py,sha256=3SWPIEWD9XmLPOUv-yddqOQ-BDSSd3FwPVSu7gwWwSk,9109
38
38
  devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/printer_pretty_table/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
39
39
  devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/printer_pretty_table/printer_pretty_table.py,sha256=ilsrp-JB1ejM26-ItUuD3JSDqY7K8bzptwAUs_vLhW4,2855
40
40
  devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/runtime_local/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
@@ -69,7 +69,7 @@ devsecops_engine_tools/engine_sast/engine_iac/src/domain/model/config_tool.py,sh
69
69
  devsecops_engine_tools/engine_sast/engine_iac/src/domain/model/gateways/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
70
70
  devsecops_engine_tools/engine_sast/engine_iac/src/domain/model/gateways/tool_gateway.py,sha256=ep5luExG_wj8csjUUkecCq83jwi7Z8qogSPbexmZyUM,218
71
71
  devsecops_engine_tools/engine_sast/engine_iac/src/domain/usecases/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
72
- devsecops_engine_tools/engine_sast/engine_iac/src/domain/usecases/iac_scan.py,sha256=k2jpNDbeYHXAEUEutJ8vMukI346mS7_GVq01VbaAAsI,4865
72
+ devsecops_engine_tools/engine_sast/engine_iac/src/domain/usecases/iac_scan.py,sha256=ijFVq_acgzGJ58p-L9mApn7kmgJKiD8mih99Jncorcc,4995
73
73
  devsecops_engine_tools/engine_sast/engine_iac/src/infrastructure/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
74
74
  devsecops_engine_tools/engine_sast/engine_iac/src/infrastructure/driven_adapters/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
75
75
  devsecops_engine_tools/engine_sast/engine_iac/src/infrastructure/driven_adapters/checkov/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
@@ -101,7 +101,7 @@ devsecops_engine_tools/engine_sast/engine_secret/src/infrastructure/driven_adapt
101
101
  devsecops_engine_tools/engine_sast/engine_secret/src/infrastructure/driven_adapters/git_cli/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
102
102
  devsecops_engine_tools/engine_sast/engine_secret/src/infrastructure/driven_adapters/git_cli/git_run.py,sha256=xKIUAnNK4u0pTHgo5tFrzmnquBegBQgN2-3jU6V6vxQ,2642
103
103
  devsecops_engine_tools/engine_sast/engine_secret/src/infrastructure/driven_adapters/trufflehog/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
104
- devsecops_engine_tools/engine_sast/engine_secret/src/infrastructure/driven_adapters/trufflehog/trufflehog_deserealizator.py,sha256=OJMxvIN7H3wuReuQ2A0HmCWYl3tb8MmZgjapWfw4p9k,1962
104
+ devsecops_engine_tools/engine_sast/engine_secret/src/infrastructure/driven_adapters/trufflehog/trufflehog_deserealizator.py,sha256=HZcNUa9VvK1InsDY94HiuDQuEH_R6pJIeAN3Zwi8CBA,1825
105
105
  devsecops_engine_tools/engine_sast/engine_secret/src/infrastructure/driven_adapters/trufflehog/trufflehog_run.py,sha256=BYbYBdC_DWWxpaxoLWXYdIHiKXDbUJ_zOyExt0coJwA,4544
106
106
  devsecops_engine_tools/engine_sast/engine_secret/src/infrastructure/entry_points/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
107
107
  devsecops_engine_tools/engine_sast/engine_secret/src/infrastructure/entry_points/entry_point_tool.py,sha256=cSCDXXDptaIDeBn-u9y_j5UbtjEY3AYK1zNXyKi9Ilw,693
@@ -190,9 +190,9 @@ devsecops_engine_tools/engine_utilities/defect_dojo/domain/request_objects/findi
190
190
  devsecops_engine_tools/engine_utilities/defect_dojo/domain/request_objects/import_scan.py,sha256=Y1ewQ-9wM287MSEraT4myG1RDl4LjmeqansR3-Exn7U,4974
191
191
  devsecops_engine_tools/engine_utilities/defect_dojo/domain/serializers/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
192
192
  devsecops_engine_tools/engine_utilities/defect_dojo/domain/serializers/finding.py,sha256=4HSeSsZqBg-4Z1yR65o0nkfy6W4DSIC4wMvuz_LVAgs,5042
193
- devsecops_engine_tools/engine_utilities/defect_dojo/domain/serializers/import_scan.py,sha256=Z75nX88JuCHLw_HXn12ZDIgGTSzgln81eIzG2qKXLBw,7252
193
+ devsecops_engine_tools/engine_utilities/defect_dojo/domain/serializers/import_scan.py,sha256=VyV1LzeJDk51RYXz8EiweLHccpsuwTY3hTkAnkscX2E,7211
194
194
  devsecops_engine_tools/engine_utilities/defect_dojo/domain/user_case/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
195
- devsecops_engine_tools/engine_utilities/defect_dojo/domain/user_case/cmdb.py,sha256=dMKSlw0yhIT3cQ-xzh8uBAHOnCjJmiA056mHkPuwXrU,2741
195
+ devsecops_engine_tools/engine_utilities/defect_dojo/domain/user_case/cmdb.py,sha256=BUOdvP39bEMQ6Unr2hB28eljVGU2Uv8dDEkzRyEJgyQ,2650
196
196
  devsecops_engine_tools/engine_utilities/defect_dojo/domain/user_case/finding.py,sha256=TjfpdJtaBwQvT8XNJKBf6tuOASOAw7ZiOxJbqsKadaA,1689
197
197
  devsecops_engine_tools/engine_utilities/defect_dojo/domain/user_case/import_scan.py,sha256=6Ik3_IUPgsvVQ3uXMV6nkxdT89-lVNQVdvVWzmZSxgE,6794
198
198
  devsecops_engine_tools/engine_utilities/defect_dojo/infraestructure/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
@@ -224,8 +224,8 @@ devsecops_engine_tools/engine_utilities/utils/logger_info.py,sha256=4Mz8Bwlm9Mku
224
224
  devsecops_engine_tools/engine_utilities/utils/name_conversion.py,sha256=ADJrRGaxYSDe0ZRh6VHRf53H4sXPcb-vNP_i81PUn3I,307
225
225
  devsecops_engine_tools/engine_utilities/utils/printers.py,sha256=GAslbWaBpwP3mP6fBsgVl07TTBgcCggQTy8h2M9ibeo,612
226
226
  devsecops_engine_tools/engine_utilities/utils/session_manager.py,sha256=yNtlT-8Legz1sHbGPH8LNYjL-LgDUE0zXG2rYjiab7U,290
227
- devsecops_engine_tools-1.7.3.dist-info/METADATA,sha256=mbPeCnkSCuZdd4ikXOdHUxWrkodbXv2mldDZWTnTQKA,9926
228
- devsecops_engine_tools-1.7.3.dist-info/WHEEL,sha256=GJ7t_kWBFywbagK5eo9IoUwLW6oyOeTKmQ-9iHFVNxQ,92
229
- devsecops_engine_tools-1.7.3.dist-info/entry_points.txt,sha256=9IjXF_7Zpgowq_SY6OSmsA9vZze18a8_AeHwkQVrgKk,131
230
- devsecops_engine_tools-1.7.3.dist-info/top_level.txt,sha256=ge6y0X_xBAU1aG3EMWFtl9djbVyg5BxuSp2r2Lg6EQU,23
231
- devsecops_engine_tools-1.7.3.dist-info/RECORD,,
227
+ devsecops_engine_tools-1.7.5.dist-info/METADATA,sha256=QhMyurVZOxWWOTwY2pEerBrVsdmCT7kISl9O-jTRvVA,9926
228
+ devsecops_engine_tools-1.7.5.dist-info/WHEEL,sha256=GJ7t_kWBFywbagK5eo9IoUwLW6oyOeTKmQ-9iHFVNxQ,92
229
+ devsecops_engine_tools-1.7.5.dist-info/entry_points.txt,sha256=9IjXF_7Zpgowq_SY6OSmsA9vZze18a8_AeHwkQVrgKk,131
230
+ devsecops_engine_tools-1.7.5.dist-info/top_level.txt,sha256=ge6y0X_xBAU1aG3EMWFtl9djbVyg5BxuSp2r2Lg6EQU,23
231
+ devsecops_engine_tools-1.7.5.dist-info/RECORD,,