devsecops-engine-tools 1.7.4__tar.gz → 1.7.6__tar.gz

{devsecops_engine_tools-1.7.4 → devsecops_engine_tools-1.7.6}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: devsecops-engine-tools
-Version: 1.7.4
+Version: 1.7.6
 Summary: Tool for DevSecOps strategy
 Home-page: https://github.com/bancolombia/devsecops-engine-tools
 Author: Bancolombia DevSecOps Team

{devsecops_engine_tools-1.7.4 → devsecops_engine_tools-1.7.6}/devsecops_engine_tools/engine_core/src/applications/runner_engine_core.py

@@ -112,10 +112,10 @@ def application_core():
             args
         )
     except Exception as e:
-        logger.error("Error SCAN: {0} ".format(str(e)))
+        logger.error("Error engine_core: {0} ".format(str(e)))
         print(
             devops_platform_gateway.message(
-                "error", "Error SCAN: {0} ".format(str(e))
+                "error", "Error engine_core: {0} ".format(str(e))
             )
         )
         print(devops_platform_gateway.result_pipeline("failed"))

{devsecops_engine_tools-1.7.4 → devsecops_engine_tools-1.7.6}/devsecops_engine_tools/engine_core/src/domain/usecases/handle_scan.py

@@ -98,7 +98,7 @@ class HandleScan:
             findings_list, input_core = runner_engine_iac(
                 dict_args, config_tool["ENGINE_IAC"]["TOOL"], secret_tool,self.devops_platform_gateway, env
             )
-            if dict_args["use_vulnerability_management"] == "true":
+            if dict_args["use_vulnerability_management"] == "true" and input_core.path_file_results:
                 self._use_vulnerability_management(
                     config_tool, input_core, dict_args, secret_tool, env
                 )

{devsecops_engine_tools-1.7.4 → devsecops_engine_tools-1.7.6}/devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/defect_dojo/defect_dojo.py

@@ -96,7 +96,7 @@ class DefectDojoPlatform(VulnerabilityManagementGateway):
                         in enviroment_mapping
                         else enviroment_mapping["default"]
                     ),
-                    tags="evc",
+                    tags=vulnerability_management.dict_args["tool"],
                 )
 
                 response = DefectDojo.send_import_scan(request)

{devsecops_engine_tools-1.7.4 → devsecops_engine_tools-1.7.6}/devsecops_engine_tools/engine_sast/engine_iac/src/domain/usecases/iac_scan.py

@@ -49,6 +49,9 @@ class IacScan:
                 dict_args["platform"],
                 secret_tool,
             )
+        else:
+            print(f"Tool skipped by DevSecOps policy")
+            logger.info(f"Tool skipped by DevSecOps policy")
 
         totalized_exclusions = []
         (

{devsecops_engine_tools-1.7.4 → devsecops_engine_tools-1.7.6}/devsecops_engine_tools/engine_utilities/defect_dojo/domain/serializers/import_scan.py

@@ -181,7 +181,7 @@ class ImportScanSerializer(Schema):
     auto_create_context = fields.Str(required=False, load_default="true")
     deduplication_on_engagement = fields.Str(required=False)
     lead = fields.Str(required=False)
-    tags = fields.Str(required=True, validate=validate.OneOf(["cde", "evc"]))
+    tags = fields.Str(required=True)
     close_old_findings = fields.Str(required=False, load_default=True)
     close_old_findings_product_scope = fields.Str(required=False)
     push_to_jira = fields.Str(required=False)

{devsecops_engine_tools-1.7.4 → devsecops_engine_tools-1.7.6}/devsecops_engine_tools/engine_utilities/defect_dojo/domain/user_case/cmdb.py

@@ -43,7 +43,6 @@ class CmdbUserCase:
             )
 
         request.product_name = product_data.product_name
-        request.tags = product_data.tag_product if product_data.tag_product else "ORPHAN"
         request.product_description = product_data.product_description
 
         return request

devsecops_engine_tools-1.7.6/devsecops_engine_tools/version.py

@@ -0,0 +1 @@
+version = '1.7.6'

{devsecops_engine_tools-1.7.4 → devsecops_engine_tools-1.7.6}/devsecops_engine_tools.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: devsecops-engine-tools
-Version: 1.7.4
+Version: 1.7.6
 Summary: Tool for DevSecOps strategy
 Home-page: https://github.com/bancolombia/devsecops-engine-tools
 Author: Bancolombia DevSecOps Team

devsecops_engine_tools-1.7.4/devsecops_engine_tools/version.py

@@ -1 +0,0 @@
-version = '1.7.4'