devsecops-engine-tools 1.7.6__tar.gz → 1.7.7__tar.gz

{devsecops_engine_tools-1.7.6 → devsecops_engine_tools-1.7.7}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: devsecops-engine-tools
-Version: 1.7.6
+Version: 1.7.7
 Summary: Tool for DevSecOps strategy
 Home-page: https://github.com/bancolombia/devsecops-engine-tools
 Author: Bancolombia DevSecOps Team

{devsecops_engine_tools-1.7.6 → devsecops_engine_tools-1.7.7}/devsecops_engine_tools/engine_core/src/applications/runner_engine_core.py

@@ -41,6 +41,7 @@ def get_inputs_from_cli(args):
             "engine_secret",
             "engine_dependencies",
             "engine_container",
+            "engine_risk",
         ],
         type=str,
         required=True,

{devsecops_engine_tools-1.7.6 → devsecops_engine_tools-1.7.7}/devsecops_engine_tools/engine_core/src/domain/model/customs_exceptions.py

@@ -7,3 +7,8 @@ class ExceptionFindingsExcepted(Exception):
     def __init__(self, message):
         self.message = message
         super().__init__(self.message)
+
+class ExceptionGettingFindings(Exception):
+    def __init__(self, message):
+        self.message = message
+        super().__init__(self.message)

{devsecops_engine_tools-1.7.6 → devsecops_engine_tools-1.7.7}/devsecops_engine_tools/engine_core/src/domain/model/gateway/printer_table_gateway.py

@@ -2,12 +2,19 @@ from abc import ABCMeta, abstractmethod
 from devsecops_engine_tools.engine_core.src.domain.model.finding import (
     Finding,
 )
+from devsecops_engine_tools.engine_core.src.domain.model.report import (
+    Report,
+)
 
 class PrinterTableGateway(metaclass=ABCMeta):
     @abstractmethod
     def print_table_findings(self, finding_list: "list[Finding]"):
         "print_table_findings"
 
+    @abstractmethod
+    def print_table_report(self, report_list: "list[Report]"):
+        "print_table_report"
+
     @abstractmethod
     def print_table_exclusions(self, exclusions_list):
         "print_table_exclusions"

{devsecops_engine_tools-1.7.6 → devsecops_engine_tools-1.7.7}/devsecops_engine_tools/engine_core/src/domain/model/gateway/vulnerability_management_gateway.py

@@ -15,3 +15,9 @@ class VulnerabilityManagementGateway(metaclass=ABCMeta):
         self, service, dict_args, secret_tool, config_tool
     ):
         "get_findings_excepted"
+
+    @abstractmethod
+    def get_all_findings(
+        self, service, dict_args, secret_tool, config_tool
+    ):
+        "get_report"

devsecops_engine_tools-1.7.7/devsecops_engine_tools/engine_core/src/domain/model/report.py

@@ -0,0 +1,13 @@
+from dataclasses import dataclass
+
+
+@dataclass
+class Report:
+    def __init__(self, **kwargs):
+        self.id = kwargs.get("id", "")
+        self.date = kwargs.get("date", "")
+        self.where = kwargs.get("where", "")
+        self.tags = kwargs.get("tags", [])
+        self.severity = kwargs.get("severity", "")
+        self.active = kwargs.get("active", "")
+        self.status = kwargs.get("status", "")

devsecops_engine_tools-1.7.7/devsecops_engine_tools/engine_core/src/domain/usecases/handle_risk.py

@@ -0,0 +1,64 @@
+from devsecops_engine_tools.engine_core.src.domain.model.gateway.vulnerability_management_gateway import (
+    VulnerabilityManagementGateway,
+)
+from devsecops_engine_tools.engine_core.src.domain.model.gateway.secrets_manager_gateway import (
+    SecretsManagerGateway,
+)
+from devsecops_engine_tools.engine_core.src.domain.model.gateway.devops_platform_gateway import (
+    DevopsPlatformGateway,
+)
+from devsecops_engine_tools.engine_core.src.domain.model.gateway.printer_table_gateway import (
+    PrinterTableGateway,
+)
+from devsecops_engine_tools.engine_risk.src.applications.runner_engine_risk import (
+    runner_engine_risk,
+)
+from devsecops_engine_tools.engine_core.src.domain.model.customs_exceptions import (
+    ExceptionGettingFindings,
+)
+
+from devsecops_engine_tools.engine_utilities.utils.logger_info import MyLogger
+from devsecops_engine_tools.engine_utilities import settings
+
+logger = MyLogger.__call__(**settings.SETTING_LOGGER).get_logger()
+
+
+class HandleRisk:
+    def __init__(
+        self,
+        vulnerability_management: VulnerabilityManagementGateway,
+        secrets_manager_gateway: SecretsManagerGateway,
+        devops_platform_gateway: DevopsPlatformGateway,
+        print_table_gateway: PrinterTableGateway,
+    ):
+        self.vulnerability_management = vulnerability_management
+        self.secrets_manager_gateway = secrets_manager_gateway
+        self.devops_platform_gateway = devops_platform_gateway
+        self.print_table_gateway = print_table_gateway
+
+    def get_finding_list(self, dict_args, secret_tool, remote_config):
+        try:
+            findigs_list = self.vulnerability_management.get_all_findings(
+                self.devops_platform_gateway.get_variable("pipeline_name"),
+                dict_args,
+                secret_tool,
+                remote_config,
+            )
+            return findigs_list
+        except ExceptionGettingFindings as e:
+            logger.error("Error getting finding list in handle risk: {0}".format(str(e)))
+
+
+    def process(self, dict_args: any, remote_config: any):
+        secret_tool = None
+        if dict_args["use_secrets_manager"] == "true":
+            secret_tool = self.secrets_manager_gateway.get_secret(remote_config)
+
+        findigs_list = self.get_finding_list(dict_args, secret_tool, remote_config)
+
+        runner_engine_risk(
+            dict_args,
+            findigs_list,
+            self.devops_platform_gateway,
+            self.print_table_gateway
+        )

{devsecops_engine_tools-1.7.6 → devsecops_engine_tools-1.7.7}/devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/defect_dojo/defect_dojo.py

@@ -12,10 +12,12 @@ from devsecops_engine_tools.engine_utilities.defect_dojo import (
     Finding,
 )
 from devsecops_engine_tools.engine_core.src.domain.model.exclusions import Exclusions
+from devsecops_engine_tools.engine_core.src.domain.model.report import Report
 from devsecops_engine_tools.engine_utilities.utils.session_manager import SessionManager
 from devsecops_engine_tools.engine_core.src.domain.model.customs_exceptions import (
     ExceptionVulnerabilityManagement,
     ExceptionFindingsExcepted,
+    ExceptionGettingFindings,
 )
 from devsecops_engine_tools.engine_core.src.infrastructure.helpers.util import (
     format_date,
@@ -118,13 +120,7 @@ class DefectDojoPlatform(VulnerabilityManagementGateway):
 
     def get_findings_excepted(self, service, dict_args, secret_tool, config_tool):
         try:
-            token_dd = dict_args.get(
-                "token_vulnerability_management"
-            ) or secret_tool.get("token_defect_dojo")
-            session_manager = SessionManager(
-                token_dd,
-                config_tool["VULNERABILITY_MANAGER"]["DEFECT_DOJO"]["HOST_DEFECT_DOJO"],
-            )
+            session_manager = self._get_session_manager(dict_args, secret_tool, config_tool)
 
             dd_limits_query = config_tool["VULNERABILITY_MANAGER"]["DEFECT_DOJO"][
                 "LIMITS_QUERY"
@@ -168,6 +164,45 @@ class DefectDojoPlatform(VulnerabilityManagementGateway):
                 )
             )
 
+    def get_all_findings(
+        self, service, dict_args, secret_tool, config_tool
+    ):
+        try:
+            all_findings_query_params = {
+                "limit": config_tool["VULNERABILITY_MANAGER"]["DEFECT_DOJO"]["LIMITS_QUERY"]
+            }
+
+            findings = self._get_findings(
+                self._get_session_manager(dict_args, secret_tool, config_tool),
+                service, 
+                all_findings_query_params
+            )
+
+            maped_list = list(
+                map(
+                    partial(self._create_report, date_fn=self._format_date_to_dd_format),
+                    findings,
+                )
+            )
+
+            return maped_list
+
+        except Exception as ex:
+            raise ExceptionGettingFindings(
+                "Error getting all findings with the following error: {0} ".format(
+                    ex
+                )
+            )
+
+    def _get_session_manager(self, dict_args, secret_tool, config_tool):
+        token_dd = dict_args.get(
+                "token_vulnerability_management"
+            ) or secret_tool.get("token_defect_dojo")
+        return SessionManager(
+            token_dd,
+            config_tool["VULNERABILITY_MANAGER"]["DEFECT_DOJO"]["HOST_DEFECT_DOJO"],
+        )
+
     def _get_findings_with_exclusions(
         self, session_manager, service, query_params, tool, date_fn, reason
     ):
@@ -199,17 +234,34 @@ class DefectDojoPlatform(VulnerabilityManagementGateway):
             reason=reason,
         )
 
+    def _create_report(self, finding, date_fn):
+        return Report(
+            id=finding.vuln_id_from_tool,
+            date=date_fn(
+                finding.date
+            ),
+            status=finding.display_status,
+            where=self._get_where_report(finding),
+            tags=finding.tags,
+            severity=finding.severity,
+            active=finding.active,
+        )
+
     def _format_date_to_dd_format(self, date_string):
         return (
             format_date(date_string.split("T")[0], "%Y-%m-%d", "%d%m%Y")
             if date_string
             else None
         )
+    
+    def _get_where_report(self, finding):
+        for tag in finding.tags:
+            return self._get_where(finding, tag)
 
     def _get_where(self, finding, tool):
-        if tool in ["engine_iac", "engine_secret"]:
-            return finding.file_path
-        elif tool in ["engine_container", "engine_dependencies"]:
+        if tool in ["engine_container", "engine_dependencies"]:
             return finding.component_name + ":" + finding.component_version
         elif tool == "engine_dast":
             return finding.endpoints
+        else:
+            return finding.file_path

{devsecops_engine_tools-1.7.6 → devsecops_engine_tools-1.7.7}/devsecops_engine_tools/engine_core/src/infrastructure/driven_adapters/printer_pretty_table/printer_pretty_table.py

@@ -6,6 +6,9 @@ from devsecops_engine_tools.engine_core.src.domain.model.gateway.printer_table_g
 from devsecops_engine_tools.engine_core.src.domain.model.finding import (
     Finding,
 )
+from devsecops_engine_tools.engine_core.src.domain.model.report import (
+    Report,
+)
 from devsecops_engine_tools.engine_core.src.infrastructure.helpers.util import (
     format_date
 )
@@ -58,7 +61,34 @@ class PrinterPrettyTable(PrinterTableGateway):
 
         if len(sorted_table.rows) > 0:
             print(sorted_table)
-    
+
+    def print_table_report(self, report_list: "list[Report]"):
+        headers = ["Severity", "ID", "Tag", "Where"]
+        table = PrettyTable(headers)
+        for report in report_list:
+            row_data = [
+                report.severity.lower(),
+                report.id,
+                report.tags,
+                report.where,
+            ]
+            table.add_row(row_data)
+
+        severity_order = {"critical": 0, "high": 1, "medium": 2, "low": 3, "unknown": 4}
+        sorted_table = PrettyTable()
+        sorted_table.field_names = table.field_names
+        sorted_table.add_rows(
+            sorted(table._rows, key=lambda row: severity_order[row[0]])
+        )
+
+        for column in table.field_names:
+            sorted_table.align[column] = "l"
+
+        sorted_table.set_style(DOUBLE_BORDER)
+
+        if len(sorted_table.rows) > 0:
+            print(sorted_table)
+
     def print_table_exclusions(self, exclusions):
         if (exclusions):
             headers = ["Severity", "ID", "Where", "Create Date", "Expired Date", "Reason"]

{devsecops_engine_tools-1.7.6 → devsecops_engine_tools-1.7.7}/devsecops_engine_tools/engine_core/src/infrastructure/entry_points/entry_point_core.py

@@ -4,6 +4,9 @@ from devsecops_engine_tools.engine_core.src.domain.usecases.break_build import (
 from devsecops_engine_tools.engine_core.src.domain.usecases.handle_scan import (
     HandleScan,
 )
+from devsecops_engine_tools.engine_core.src.domain.usecases.handle_risk import (
+    HandleRisk,
+)
 from devsecops_engine_tools.engine_core.src.domain.usecases.metrics_manager import (
     MetricsManager,
 )
@@ -26,21 +29,29 @@ def init_engine_core(
     Printers.print_logo_tool(config_tool["BANNER"])
 
     if config_tool[args["tool"].upper()]["ENABLED"] == "true":
-        findings_list, input_core = HandleScan(
-            vulnerability_management_gateway,
-            secrets_manager_gateway,
-            devops_platform_gateway,
-        ).process(args, config_tool)
+        if args["tool"] == "engine_risk":
+            HandleRisk(
+                vulnerability_management_gateway,
+                secrets_manager_gateway,
+                devops_platform_gateway,
+                print_table_gateway,
+            ).process(args, config_tool)
+        else:
+            findings_list, input_core = HandleScan(
+                vulnerability_management_gateway,
+                secrets_manager_gateway,
+                devops_platform_gateway,
+            ).process(args, config_tool)
 
-        scan_result = BreakBuild(devops_platform_gateway, print_table_gateway).process(
-            findings_list,
-            input_core,
-            args
-        )
-        if args["send_metrics"] == "true":
-            MetricsManager(devops_platform_gateway, metrics_manager_gateway).process(
-                config_tool, input_core, args, scan_result
+            scan_result = BreakBuild(devops_platform_gateway, print_table_gateway).process(
+                findings_list,
+                input_core,
+                args
             )
+            if args["send_metrics"] == "true":
+                MetricsManager(devops_platform_gateway, metrics_manager_gateway).process(
+                    config_tool, input_core, args, scan_result
+                )
     else:
         print(
             devops_platform_gateway.message(

devsecops_engine_tools-1.7.7/devsecops_engine_tools/engine_risk/src/applications/runner_engine_risk.py

@@ -0,0 +1,20 @@
+from devsecops_engine_tools.engine_risk.src.infrastructure.entry_points.entry_point_risk import (
+    init_engine_risk,
+)
+
+from devsecops_engine_tools.engine_utilities.utils.logger_info import MyLogger
+from devsecops_engine_tools.engine_utilities import settings
+
+
+logger = MyLogger.__call__(**settings.SETTING_LOGGER).get_logger()
+
+
+def runner_engine_risk(
+    dict_args, findings, devops_platform_gateway, print_table_gateway
+):
+    init_engine_risk(
+        devops_platform_gateway,
+        print_table_gateway,
+        dict_args,
+        findings,
+    )

devsecops_engine_tools-1.7.7/devsecops_engine_tools/engine_risk/src/domain/usecases/break_build.py

@@ -0,0 +1,36 @@
+from devsecops_engine_tools.engine_core.src.domain.model.gateway.devops_platform_gateway import (
+    DevopsPlatformGateway,
+)
+from devsecops_engine_tools.engine_core.src.domain.model.gateway.printer_table_gateway import (
+    PrinterTableGateway,
+)
+from devsecops_engine_tools.engine_core.src.domain.model.report import (
+    Report,
+)
+
+
+class BreakBuild:
+    def __init__(
+        self,
+        devops_platform_gateway: DevopsPlatformGateway,
+        printer_table_gateway: PrinterTableGateway,
+    ):
+        self.devops_platform_gateway = devops_platform_gateway
+        self.printer_table_gateway = printer_table_gateway
+
+    def process(self, report_list: "list[Report]"):
+        devops_platform_gateway = self.devops_platform_gateway
+        printer_table_gateway = self.printer_table_gateway
+        if len(report_list):
+            print(
+                "Below are all vulnerabilities from Vulnerability Management Platform"
+            )
+            printer_table_gateway.print_table_report(
+                report_list,
+            )
+        else:
+            print(
+                devops_platform_gateway.message(
+                    "succeeded", "There are no vulnerabilities"
+                )
+            )

devsecops_engine_tools-1.7.7/devsecops_engine_tools/engine_risk/src/domain/usecases/handle_filters.py

@@ -0,0 +1,16 @@
+class HandleFilters:
+    def __init__(
+        self,
+        remote_config,
+    ):
+        self.remote_config = remote_config
+
+    def filter(self, findings):
+        tag_list = self.remote_config["TAG_FILTER"]
+        return list(
+            filter(
+                lambda finding: finding.active
+                and any(tag in finding.tags for tag in tag_list),
+                findings,
+            )
+        )

devsecops_engine_tools-1.7.7/devsecops_engine_tools/engine_risk/src/infrastructure/entry_points/entry_point_risk.py

@@ -0,0 +1,31 @@
+from devsecops_engine_tools.engine_risk.src.domain.usecases.handle_filters import (
+    HandleFilters,
+)
+from devsecops_engine_tools.engine_risk.src.domain.usecases.break_build import (
+    BreakBuild,
+)
+
+from devsecops_engine_tools.engine_utilities.utils.logger_info import MyLogger
+from devsecops_engine_tools.engine_utilities import settings
+
+logger = MyLogger.__call__(**settings.SETTING_LOGGER).get_logger()
+
+
+def init_engine_risk(devops_platform_gateway, print_table_gateway, dict_args, findings):
+    remote_config = devops_platform_gateway.get_remote_config(
+        dict_args["remote_config_repo"], "engine_risk/ConfigTool.json"
+    )
+    findings_filtered = []
+    if len(findings):
+        handle_filters = HandleFilters(
+            remote_config,
+        )
+        findings_filtered = handle_filters.filter(findings)
+
+        BreakBuild(devops_platform_gateway, print_table_gateway).process(
+            findings_filtered,
+        )
+
+    else:
+        print("No Findings found in Vulnerability Management Platform")
+        logger.info("No Findings found in Vulnerability Management Platform")

devsecops_engine_tools-1.7.7/devsecops_engine_tools/version.py

@@ -0,0 +1 @@
+version = '1.7.7'

{devsecops_engine_tools-1.7.6 → devsecops_engine_tools-1.7.7}/devsecops_engine_tools.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: devsecops-engine-tools
-Version: 1.7.6
+Version: 1.7.7
 Summary: Tool for DevSecOps strategy
 Home-page: https://github.com/bancolombia/devsecops-engine-tools
 Author: Bancolombia DevSecOps Team

{devsecops_engine_tools-1.7.6 → devsecops_engine_tools-1.7.7}/devsecops_engine_tools.egg-info/SOURCES.txt

@@ -22,6 +22,7 @@ devsecops_engine_tools/engine_core/src/domain/model/finding.py
 devsecops_engine_tools/engine_core/src/domain/model/input_core.py
 devsecops_engine_tools/engine_core/src/domain/model/level_compliance.py
 devsecops_engine_tools/engine_core/src/domain/model/level_vulnerability.py
+devsecops_engine_tools/engine_core/src/domain/model/report.py
 devsecops_engine_tools/engine_core/src/domain/model/threshold.py
 devsecops_engine_tools/engine_core/src/domain/model/vulnerability_management.py
 devsecops_engine_tools/engine_core/src/domain/model/gateway/__init__.py
@@ -32,6 +33,7 @@ devsecops_engine_tools/engine_core/src/domain/model/gateway/secrets_manager_gate
 devsecops_engine_tools/engine_core/src/domain/model/gateway/vulnerability_management_gateway.py
 devsecops_engine_tools/engine_core/src/domain/usecases/__init__.py
 devsecops_engine_tools/engine_core/src/domain/usecases/break_build.py
+devsecops_engine_tools/engine_core/src/domain/usecases/handle_risk.py
 devsecops_engine_tools/engine_core/src/domain/usecases/handle_scan.py
 devsecops_engine_tools/engine_core/src/domain/usecases/metrics_manager.py
 devsecops_engine_tools/engine_core/src/infrastructure/__init__.py
@@ -64,6 +66,23 @@ devsecops_engine_tools/engine_dast/src/infrastructure/__init__.py
 devsecops_engine_tools/engine_dast/src/infrastructure/driven_adapters/__init__.py
 devsecops_engine_tools/engine_dast/src/infrastructure/entry_points/__init__.py
 devsecops_engine_tools/engine_dast/src/infrastructure/helpers/__init__.py
+devsecops_engine_tools/engine_risk/__init__.py
+devsecops_engine_tools/engine_risk/src/__init__.py
+devsecops_engine_tools/engine_risk/src/applications/__init__.py
+devsecops_engine_tools/engine_risk/src/applications/runner_engine_risk.py
+devsecops_engine_tools/engine_risk/src/deployment/__init__.py
+devsecops_engine_tools/engine_risk/src/deployment/infrastructure/__init__.py
+devsecops_engine_tools/engine_risk/src/domain/__init__.py
+devsecops_engine_tools/engine_risk/src/domain/model/__init__.py
+devsecops_engine_tools/engine_risk/src/domain/model/gateways/__init__.py
+devsecops_engine_tools/engine_risk/src/domain/usecases/__init__.py
+devsecops_engine_tools/engine_risk/src/domain/usecases/break_build.py
+devsecops_engine_tools/engine_risk/src/domain/usecases/handle_filters.py
+devsecops_engine_tools/engine_risk/src/infrastructure/__init__.py
+devsecops_engine_tools/engine_risk/src/infrastructure/driven_adapters/__init__.py
+devsecops_engine_tools/engine_risk/src/infrastructure/entry_points/__init__.py
+devsecops_engine_tools/engine_risk/src/infrastructure/entry_points/entry_point_risk.py
+devsecops_engine_tools/engine_risk/src/infrastructure/helpers/__init__.py
 devsecops_engine_tools/engine_sast/__init__.py
 devsecops_engine_tools/engine_sast/engine_iac/__init__.py
 devsecops_engine_tools/engine_sast/engine_iac/src/__init__.py

devsecops_engine_tools-1.7.6/devsecops_engine_tools/version.py

@@ -1 +0,0 @@
-version = '1.7.6'