devsecops-engine-tools 1.79.0__tar.gz → 1.81.0__tar.gz

{devsecops_engine_tools-1.79.0 → devsecops_engine_tools-1.81.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: devsecops-engine-tools
-Version: 1.79.0
+Version: 1.81.0
 Summary: Tool for DevSecOps strategy
 Home-page: https://github.com/bancolombia/devsecops-engine-tools
 Author: Bancolombia DevSecOps Team

{devsecops_engine_tools-1.79.0 → devsecops_engine_tools-1.81.0}/devsecops_engine_tools/engine_sca/engine_container/src/domain/model/gateways/images_gateway.py

@@ -12,4 +12,8 @@ class ImagesGateway(metaclass=ABCMeta):
 
     @abstractmethod
     def validate_base_image_date(self, image_to_scan, referenced_date) -> str:
+        "validate base image date"
+    
+    @abstractmethod
+    def validate_black_list_base_image(self, base_image, black_list) -> str:
         "validate base image date"

{devsecops_engine_tools-1.79.0 → devsecops_engine_tools-1.81.0}/devsecops_engine_tools/engine_sca/engine_container/src/domain/usecases/container_sca_scan.py

@@ -38,7 +38,6 @@ class ContainerScaScan:
         self.pipeline_name = pipeline_name
         self.context = context
 
-
     def process(self):
         """
         Process SCA scanning.
@@ -60,6 +59,15 @@ class ContainerScaScan:
                 matching_image,
                 self.remote_config["VALIDATE_BASE_IMAGE_DATE"]["REFERENCE_IMAGE_DATE"],
             )
+        if self.remote_config["BLACK_LIST_BASE_IMAGE"][
+            "ENABLED"
+        ] and not self.exclusions.get(self.pipeline_name, {}).get(
+            "BLACK_LIST_BASE_IMAGE"
+        ):
+            self._validate_black_list_base_image(
+                base_image, self.remote_config["BLACK_LIST_BASE_IMAGE"]["BLACK_LIST"]
+            )
+
         sbom_components = None
         generate_sbom = self.remote_config["SBOM"]["ENABLED"] and any(
             branch in str(self.branch)
@@ -128,6 +136,15 @@ class ContainerScaScan:
             matching_image, referenced_date
         )
 
+    def _validate_black_list_base_image(self, base_image, black_list):
+        """
+        Process the black list image base validation.
+
+        Returns:
+            string: blacklist.
+        """
+        return self.tool_images.validate_black_list_base_image(base_image, black_list)
+
     def _get_images_already_scanned(self):
         """
         Create images scanned file if it does not exist and get the images that have already been scanned.

{devsecops_engine_tools-1.79.0 → devsecops_engine_tools-1.81.0}/devsecops_engine_tools/engine_sca/engine_container/src/infrastructure/driven_adapters/docker/docker_images.py

@@ -124,3 +124,14 @@ class DockerImages(ImagesGateway):
                 f"Compliance issue: the source base image date ({date.strftime('%Y-%m-%d')}) is older than the referenced date ({reference_date.strftime('%Y-%m-%d')})."
             )
         return True
+
+    def validate_black_list_base_image(self, base_image, black_list):
+        if not isinstance(base_image, str) or not isinstance(black_list, list):
+            logger.error("Invalid input types: expected a string and a list of strings.")
+            return False
+        for black in black_list:
+            if black in base_image:
+                raise ValueError(
+                f"Compliance issue: the image: {base_image} is blacklisted for {black}"
+            )
+        return True

devsecops_engine_tools-1.81.0/devsecops_engine_tools/version.py

@@ -0,0 +1 @@
+version = '1.81.0'

{devsecops_engine_tools-1.79.0 → devsecops_engine_tools-1.81.0}/devsecops_engine_tools.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: devsecops-engine-tools
-Version: 1.79.0
+Version: 1.81.0
 Summary: Tool for DevSecOps strategy
 Home-page: https://github.com/bancolombia/devsecops-engine-tools
 Author: Bancolombia DevSecOps Team

devsecops_engine_tools-1.79.0/devsecops_engine_tools/version.py

@@ -1 +0,0 @@
-version = '1.79.0'