devsecops-engine-tools 1.8.11__tar.gz → 1.8.13__tar.gz

{devsecops_engine_tools-1.8.11 → devsecops_engine_tools-1.8.13}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: devsecops-engine-tools
-Version: 1.8.11
+Version: 1.8.13
 Summary: Tool for DevSecOps strategy
 Home-page: https://github.com/bancolombia/devsecops-engine-tools
 Author: Bancolombia DevSecOps Team

devsecops_engine_tools-1.8.13/devsecops_engine_tools/engine_sast/engine_secret/src/domain/model/gateway/git_gateway.py

@@ -0,0 +1,11 @@
+from abc import ABCMeta, abstractmethod
+
+
+class GitGateway(metaclass=ABCMeta):
+    @abstractmethod
+    def get_files_pull_request(self, sys_working_dir: str,
+                               target_branch: str,
+                               source_branch: str,
+                               message_info_engine_secret: str
+                               ) -> dict:
+        "get_files_pull_request"

{devsecops_engine_tools-1.8.11 → devsecops_engine_tools-1.8.13}/devsecops_engine_tools/engine_sast/engine_secret/src/domain/model/gateway/tool_gateway.py

@@ -11,6 +11,5 @@ class ToolGateway(metaclass=ABCMeta):
                             exclude_path: dict,
                             agent_os: str,
                             agent_work_folder: str,
-                            num_threads: int,
-                            repository_name: str) -> str:
+                            num_threads: int) -> str:
         "run tool secret scan"

{devsecops_engine_tools-1.8.11 → devsecops_engine_tools-1.8.13}/devsecops_engine_tools/engine_sast/engine_secret/src/domain/usecases/secret_scan.py

@@ -36,20 +36,14 @@ class SecretScan:
             files_pullrequest = self.git_gateway.get_files_pull_request(
                 self.devops_platform_gateway.get_variable("path_directory"),
                 self.devops_platform_gateway.get_variable("target_branch"),
-                config_tool.target_branches,
                 self.devops_platform_gateway.get_variable("source_branch"),
-                self.devops_platform_gateway.get_variable("access_token"),
-                self.devops_platform_gateway.get_variable("organization"),
-                self.devops_platform_gateway.get_variable("project_name"),
-                self.devops_platform_gateway.get_variable("repository"),
-                self.devops_platform_gateway.get_variable("repository_provider"))
+                config_tool.message_info_engine_secret)
             findings, file_path_findings = self.tool_gateway.run_tool_secret_scan(
                     files_pullrequest,
                     config_tool.exclude_path,
                     self.devops_platform_gateway.get_variable("os"),
                     self.devops_platform_gateway.get_variable("path_directory"),
-                    config_tool.number_threads,
-                    self.devops_platform_gateway.get_variable("repository")
+                    config_tool.number_threads
                     )
             finding_list = self.tool_deserialize.get_list_vulnerability(
                 findings,

devsecops_engine_tools-1.8.13/devsecops_engine_tools/engine_sast/engine_secret/src/infrastructure/driven_adapters/git_cli/git_run.py

@@ -0,0 +1,41 @@
+from dataclasses import dataclass
+import os
+import subprocess
+from devsecops_engine_tools.engine_sast.engine_secret.src.domain.model.gateway.git_gateway import GitGateway
+
+from devsecops_engine_tools.engine_utilities.utils.logger_info import MyLogger
+from devsecops_engine_tools.engine_utilities import settings
+
+logger = MyLogger.__call__(**settings.SETTING_LOGGER).get_logger()
+
+@dataclass
+class GitRun(GitGateway):
+
+    def get_files_pull_request(self,
+                               sys_working_dir,
+                               target_branch,
+                               source_branch,
+                               message_info_engine_secret
+                               ):
+        try:
+            source_branch = source_branch.replace("refs/heads/", "")
+            os.chdir(sys_working_dir)
+            subprocess.run(['git', 'checkout', '-b', source_branch, f'origin/{source_branch}'], text=True, capture_output=True, check=True)    
+            env = os.environ.copy()
+            env["GIT_COMMITTER_NAME"] = "Your Name"
+            env["GIT_COMMITTER_EMAIL"] = "your.email@example.com"
+            env["GIT_AUTHOR_NAME"] = "Your Name"
+            env["GIT_AUTHOR_EMAIL"] = "your.email@example.com"
+            command = ["git", "rebase", f"origin/{target_branch}", "-X", "theirs"]
+            subprocess.run(command, env=env, text=True, capture_output=True)
+
+            diff = subprocess.run(['git', 'diff', f'origin/{target_branch}..{source_branch}', '--name-only'], capture_output=True, text=True)
+            if diff.returncode == 0:
+                diff_files = diff.stdout.strip().split("\n")
+                print("Pull Requests Associated Files:",diff_files)
+                return diff_files
+        except subprocess.CalledProcessError as e:
+            raise Exception(f"Error in pipeline configuration, {message_info_engine_secret}") from e
+        except Exception as e:
+            logger.warning(f"Error getting files PullRequest: {e}")
+            return []

{devsecops_engine_tools-1.8.11 → devsecops_engine_tools-1.8.13}/devsecops_engine_tools/engine_sast/engine_secret/src/infrastructure/driven_adapters/trufflehog/trufflehog_run.py

@@ -43,8 +43,7 @@ class TrufflehogRun(ToolGateway):
         exclude_paths,
         agent_os,
         agent_work_folder,
-        num_threads,
-        repository_name,
+        num_threads
     ):
         trufflehog_command = "trufflehog"
         if "Windows" in agent_os:
@@ -60,7 +59,6 @@ class TrufflehogRun(ToolGateway):
                 [agent_work_folder] * len(include_paths),
                 [exclude_path] * len(include_paths),
                 include_paths,
-                [repository_name] * len(include_paths),
             )
         findings, file_findings = self.create_file(self.decode_output(results), agent_work_folder)
         return  findings, file_findings
@@ -88,10 +86,9 @@ class TrufflehogRun(ToolGateway):
         trufflehog_command,
         agent_work_folder,
         exclude_path,
-        include_path,
-        repository_name,
+        include_path
     ):
-        command = f"{trufflehog_command} filesystem {agent_work_folder + '/' + repository_name} --include-paths {include_path} --exclude-paths {exclude_path} --no-verification --json"
+        command = f"{trufflehog_command} filesystem {agent_work_folder} --include-paths {include_path} --exclude-paths {exclude_path} --no-verification --json"
         result = subprocess.run(command, capture_output=True, shell=True, text=True)
         return result.stdout.strip()
 

{devsecops_engine_tools-1.8.11 → devsecops_engine_tools-1.8.13}/devsecops_engine_tools/engine_utilities/defect_dojo/infraestructure/driver_adapters/cmdb.py

@@ -21,23 +21,24 @@ class CmdbRestConsumer:
         data = json.dumps({"codapp": request.code_app})
         headers = {"tokenkey": self.__token, "Content-Type": "application/json"}
         logger.info("Search info of name product")
+        cmdb_object = Cmdb(
+                    product_type_name="ORPHAN_PRODUCT_TYPE",
+                    product_name=f"{request.code_app}_Product",
+                    tag_product="ORPHAN",
+                    product_description="Orphan Product Description",
+                    codigo_app=str(request.code_app),
+                )
         try:
             response = self.__session.post(self.__host, headers=headers, data=data, verify=VERIFY_CERTIFICATE)
             if response.status_code != 200:
                 logger.error(response)
-                raise ApiError(response.json()["Message"])
+                raise ApiError(f"Error querying cmdb: {response.reason}")
 
             if response.json() == []:
                 e = f"Engagement: {request.code_app} not found"
                 logger.warning(e)
                 # Producto is Orphan
-                return Cmdb(
-                    product_type_name="ORPHAN_PRODUCT_TYPE",
-                    product_name=f"{request.code_app}_Product",
-                    tag_product="ORPHAN",
-                    product_description="Orphan Product Description",
-                    codigo_app=str(request.code_app),
-                )
+                return cmdb_object
 
             data = response.json()[-1]
             data_map = self.mapping_cmdb(data)
@@ -45,11 +46,11 @@ class CmdbRestConsumer:
             cmdb_object = Cmdb.from_dict(data_map)
         except Exception as e:
             logger.error(e)
-            raise ApiError(e)
+            return cmdb_object
         return cmdb_object
 
     def mapping_cmdb(self, data):
         data_map = {}
         for key, value in self.__mapping_cmdb.items():
             data_map[key] = data[value] if value in data else ""
-        return data_map
+        return data_map

devsecops_engine_tools-1.8.13/devsecops_engine_tools/version.py

@@ -0,0 +1 @@
+version = '1.8.13'

{devsecops_engine_tools-1.8.11 → devsecops_engine_tools-1.8.13}/devsecops_engine_tools.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: devsecops-engine-tools
-Version: 1.8.11
+Version: 1.8.13
 Summary: Tool for DevSecOps strategy
 Home-page: https://github.com/bancolombia/devsecops-engine-tools
 Author: Bancolombia DevSecOps Team

devsecops_engine_tools-1.8.11/devsecops_engine_tools/engine_sast/engine_secret/src/domain/model/gateway/git_gateway.py

@@ -1,15 +0,0 @@
-from abc import ABCMeta, abstractmethod
-
-
-class GitGateway(metaclass=ABCMeta):
-    @abstractmethod
-    def get_files_pull_request(self, sys_working_dir: str,
-                               target_branch: str,
-                               config_target_branch: dict,
-                               source_branch: str,
-                               access_token: str,
-                               collection_uri: str,
-                               team_project: str,
-                               repository_name: str,
-                               repository_provider: str) -> dict:
-        "get_files_pull_request"

devsecops_engine_tools-1.8.11/devsecops_engine_tools/engine_sast/engine_secret/src/infrastructure/driven_adapters/git_cli/git_run.py

@@ -1,75 +0,0 @@
-from dataclasses import dataclass
-import os
-import subprocess
-from urllib.parse import quote
-from devsecops_engine_tools.engine_sast.engine_secret.src.domain.model.gateway.git_gateway import GitGateway
-
-from devsecops_engine_tools.engine_utilities.utils.logger_info import MyLogger
-from devsecops_engine_tools.engine_utilities import settings
-
-logger = MyLogger.__call__(**settings.SETTING_LOGGER).get_logger()
-
-@dataclass
-class GitRun(GitGateway):
-
-    def get_files_pull_request(self,
-                               sys_working_dir,
-                               target_branch,
-                               config_target_branch,
-                               source_branch,
-                               access_token,
-                               collection_uri,
-                               team_project,
-                               repository_name,
-                               repository_provider):
-        try:
-            if repository_provider == 'GitHub' or target_branch not in config_target_branch:
-                os.chdir(sys_working_dir)
-                subprocess.run(['git', 'checkout', '-b', source_branch, f'origin/{source_branch}'], capture_output=True, text=True)
-                env = os.environ.copy()
-                env["GIT_COMMITTER_NAME"] = "Your Name"
-                env["GIT_COMMITTER_EMAIL"] = "your.email@example.com"
-                env["GIT_AUTHOR_NAME"] = "Your Name"
-                env["GIT_AUTHOR_EMAIL"] = "your.email@example.com"
-                command = ["git", "rebase", f"origin/{target_branch}", "-X", "theirs"]
-                subprocess.run(command, env=env, capture_output=True, text=True)
-
-                diff = subprocess.run(['git', 'diff', f'origin/{target_branch}..{source_branch}', '--name-only'], capture_output=True, text=True)
-                if diff.returncode == 0:
-                    diff_files = diff.stdout.strip().split("\n")
-                    print("Pull Requests Associated Files:",diff_files)
-                    return diff_files
-                return []
-            base_compact_url = (
-            f"https://{collection_uri.rstrip('/').split('/')[-1].replace('.visualstudio.com','')}"
-            f".visualstudio.com/{quote(team_project)}/_git/"
-            f"{repository_name}"
-            )
-            
-            url_without_https = base_compact_url.replace("https://", "")
-            url_with_token = f"https://x-access-token:{access_token}@{url_without_https}"
-
-            path_new_folder = sys_working_dir + '/' + repository_name
-            
-            if os.path.exists(path_new_folder):
-                logger.warning(f"Error: folder {repository_name} already exist")
-                return []
-            os.makedirs(path_new_folder)
-            os.chdir(sys_working_dir)
-            subprocess.run(["git", "clone", "--branch", target_branch, url_with_token, path_new_folder], capture_output=True, text=True)
-            os.chdir(path_new_folder)
- 
-            source_branch = source_branch.replace("refs/heads/", "")
-            subprocess.run(["git", "checkout", "-b", source_branch], capture_output=True, text=True)
-            command = ["git","-c","user.email=you@example.com","-c","user.name=Your Name","pull","--rebase","-X", "theirs","--no-edit","origin",source_branch]
-            subprocess.run(command, capture_output=True, text=True)
-
-            if source_branch != None:
-                diff = subprocess.run(['git', 'diff', '--name-only', f'{source_branch}..{target_branch}'], capture_output=True, text=True)
-                if diff:
-                    diff_files = diff.stdout.strip().split("\n")
-                print("Pull Requests Associated Files:",len(diff_files))
-                return diff_files
-        except Exception as e:
-            logger.warning(f"Error getting files PullRequest: {e}")
-            return []

devsecops_engine_tools-1.8.11/devsecops_engine_tools/version.py

@@ -1 +0,0 @@
-version = '1.8.11'