devsecops-engine-tools 1.8.13__tar.gz → 1.8.14__tar.gz

{devsecops_engine_tools-1.8.13 → devsecops_engine_tools-1.8.14}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: devsecops-engine-tools
-Version: 1.8.13
+Version: 1.8.14
 Summary: Tool for DevSecOps strategy
 Home-page: https://github.com/bancolombia/devsecops-engine-tools
 Author: Bancolombia DevSecOps Team

devsecops_engine_tools-1.8.14/devsecops_engine_tools/engine_sast/engine_secret/src/domain/model/gateway/git_gateway.py

@@ -0,0 +1,15 @@
+from abc import ABCMeta, abstractmethod
+
+
+class GitGateway(metaclass=ABCMeta):
+    @abstractmethod
+    def get_files_pull_request(self, sys_working_dir: str,
+                               target_branch: str,
+                               config_target_branch: dict,
+                               source_branch: str,
+                               access_token: str,
+                               collection_uri: str,
+                               team_project: str,
+                               repository_name: str,
+                               repository_provider: str) -> dict:
+        "get_files_pull_request"

{devsecops_engine_tools-1.8.13 → devsecops_engine_tools-1.8.14}/devsecops_engine_tools/engine_sast/engine_secret/src/domain/model/gateway/tool_gateway.py

@@ -11,5 +11,6 @@ class ToolGateway(metaclass=ABCMeta):
                             exclude_path: dict,
                             agent_os: str,
                             agent_work_folder: str,
-                            num_threads: int) -> str:
+                            num_threads: int,
+                            repository_name: str) -> str:
         "run tool secret scan"

{devsecops_engine_tools-1.8.13 → devsecops_engine_tools-1.8.14}/devsecops_engine_tools/engine_sast/engine_secret/src/domain/usecases/secret_scan.py

@@ -36,14 +36,20 @@ class SecretScan:
             files_pullrequest = self.git_gateway.get_files_pull_request(
                 self.devops_platform_gateway.get_variable("path_directory"),
                 self.devops_platform_gateway.get_variable("target_branch"),
+                config_tool.target_branches,
                 self.devops_platform_gateway.get_variable("source_branch"),
-                config_tool.message_info_engine_secret)
+                self.devops_platform_gateway.get_variable("access_token"),
+                self.devops_platform_gateway.get_variable("organization"),
+                self.devops_platform_gateway.get_variable("project_name"),
+                self.devops_platform_gateway.get_variable("repository"),
+                self.devops_platform_gateway.get_variable("repository_provider"))
             findings, file_path_findings = self.tool_gateway.run_tool_secret_scan(
                     files_pullrequest,
                     config_tool.exclude_path,
                     self.devops_platform_gateway.get_variable("os"),
                     self.devops_platform_gateway.get_variable("path_directory"),
-                    config_tool.number_threads
+                    config_tool.number_threads,
+                    self.devops_platform_gateway.get_variable("repository")
                     )
             finding_list = self.tool_deserialize.get_list_vulnerability(
                 findings,

devsecops_engine_tools-1.8.14/devsecops_engine_tools/engine_sast/engine_secret/src/infrastructure/driven_adapters/git_cli/git_run.py

@@ -0,0 +1,75 @@
+from dataclasses import dataclass
+import os
+import subprocess
+from urllib.parse import quote
+from devsecops_engine_tools.engine_sast.engine_secret.src.domain.model.gateway.git_gateway import GitGateway
+
+from devsecops_engine_tools.engine_utilities.utils.logger_info import MyLogger
+from devsecops_engine_tools.engine_utilities import settings
+
+logger = MyLogger.__call__(**settings.SETTING_LOGGER).get_logger()
+
+@dataclass
+class GitRun(GitGateway):
+
+    def get_files_pull_request(self,
+                               sys_working_dir,
+                               target_branch,
+                               config_target_branch,
+                               source_branch,
+                               access_token,
+                               collection_uri,
+                               team_project,
+                               repository_name,
+                               repository_provider):
+        try:
+            if repository_provider == 'GitHub' or target_branch not in config_target_branch:
+                os.chdir(sys_working_dir)
+                subprocess.run(['git', 'checkout', '-b', source_branch, f'origin/{source_branch}'], capture_output=True, text=True)
+                env = os.environ.copy()
+                env["GIT_COMMITTER_NAME"] = "Your Name"
+                env["GIT_COMMITTER_EMAIL"] = "your.email@example.com"
+                env["GIT_AUTHOR_NAME"] = "Your Name"
+                env["GIT_AUTHOR_EMAIL"] = "your.email@example.com"
+                command = ["git", "rebase", f"origin/{target_branch}", "-X", "theirs"]
+                subprocess.run(command, env=env, capture_output=True, text=True)
+
+                diff = subprocess.run(['git', 'diff', f'origin/{target_branch}..{source_branch}', '--name-only'], capture_output=True, text=True)
+                if diff.returncode == 0:
+                    diff_files = diff.stdout.strip().split("\n")
+                    print("Pull Requests Associated Files:",diff_files)
+                    return diff_files
+                return []
+            base_compact_url = (
+            f"https://{collection_uri.rstrip('/').split('/')[-1].replace('.visualstudio.com','')}"
+            f".visualstudio.com/{quote(team_project)}/_git/"
+            f"{repository_name}"
+            )
+            
+            url_without_https = base_compact_url.replace("https://", "")
+            url_with_token = f"https://x-access-token:{access_token}@{url_without_https}"
+
+            path_new_folder = sys_working_dir + '/' + repository_name
+            
+            if os.path.exists(path_new_folder):
+                logger.warning(f"Error: folder {repository_name} already exist")
+                return []
+            os.makedirs(path_new_folder)
+            os.chdir(sys_working_dir)
+            subprocess.run(["git", "clone", "--branch", target_branch, url_with_token, path_new_folder], capture_output=True, text=True)
+            os.chdir(path_new_folder)
+ 
+            source_branch = source_branch.replace("refs/heads/", "")
+            subprocess.run(["git", "checkout", "-b", source_branch], capture_output=True, text=True)
+            command = ["git","-c","user.email=you@example.com","-c","user.name=Your Name","pull","--rebase","-X", "theirs","--no-edit","origin",source_branch]
+            subprocess.run(command, capture_output=True, text=True)
+
+            if source_branch != None:
+                diff = subprocess.run(['git', 'diff', '--name-only', f'{source_branch}..{target_branch}'], capture_output=True, text=True)
+                if diff:
+                    diff_files = diff.stdout.strip().split("\n")
+                print("Pull Requests Associated Files:",len(diff_files))
+                return diff_files
+        except Exception as e:
+            logger.warning(f"Error getting files PullRequest: {e}")
+            return []

{devsecops_engine_tools-1.8.13 → devsecops_engine_tools-1.8.14}/devsecops_engine_tools/engine_sast/engine_secret/src/infrastructure/driven_adapters/trufflehog/trufflehog_run.py

@@ -43,7 +43,8 @@ class TrufflehogRun(ToolGateway):
         exclude_paths,
         agent_os,
         agent_work_folder,
-        num_threads
+        num_threads,
+        repository_name,
     ):
         trufflehog_command = "trufflehog"
         if "Windows" in agent_os:
@@ -59,6 +60,7 @@ class TrufflehogRun(ToolGateway):
                 [agent_work_folder] * len(include_paths),
                 [exclude_path] * len(include_paths),
                 include_paths,
+                [repository_name] * len(include_paths),
             )
         findings, file_findings = self.create_file(self.decode_output(results), agent_work_folder)
         return  findings, file_findings
@@ -86,9 +88,10 @@ class TrufflehogRun(ToolGateway):
         trufflehog_command,
         agent_work_folder,
         exclude_path,
-        include_path
+        include_path,
+        repository_name,
     ):
-        command = f"{trufflehog_command} filesystem {agent_work_folder} --include-paths {include_path} --exclude-paths {exclude_path} --no-verification --json"
+        command = f"{trufflehog_command} filesystem {agent_work_folder + '/' + repository_name} --include-paths {include_path} --exclude-paths {exclude_path} --no-verification --json"
         result = subprocess.run(command, capture_output=True, shell=True, text=True)
         return result.stdout.strip()
 

devsecops_engine_tools-1.8.14/devsecops_engine_tools/version.py

@@ -0,0 +1 @@
+version = '1.8.14'

{devsecops_engine_tools-1.8.13 → devsecops_engine_tools-1.8.14}/devsecops_engine_tools.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: devsecops-engine-tools
-Version: 1.8.13
+Version: 1.8.14
 Summary: Tool for DevSecOps strategy
 Home-page: https://github.com/bancolombia/devsecops-engine-tools
 Author: Bancolombia DevSecOps Team

devsecops_engine_tools-1.8.13/devsecops_engine_tools/engine_sast/engine_secret/src/domain/model/gateway/git_gateway.py

@@ -1,11 +0,0 @@
-from abc import ABCMeta, abstractmethod
-
-
-class GitGateway(metaclass=ABCMeta):
-    @abstractmethod
-    def get_files_pull_request(self, sys_working_dir: str,
-                               target_branch: str,
-                               source_branch: str,
-                               message_info_engine_secret: str
-                               ) -> dict:
-        "get_files_pull_request"

devsecops_engine_tools-1.8.13/devsecops_engine_tools/engine_sast/engine_secret/src/infrastructure/driven_adapters/git_cli/git_run.py

@@ -1,41 +0,0 @@
-from dataclasses import dataclass
-import os
-import subprocess
-from devsecops_engine_tools.engine_sast.engine_secret.src.domain.model.gateway.git_gateway import GitGateway
-
-from devsecops_engine_tools.engine_utilities.utils.logger_info import MyLogger
-from devsecops_engine_tools.engine_utilities import settings
-
-logger = MyLogger.__call__(**settings.SETTING_LOGGER).get_logger()
-
-@dataclass
-class GitRun(GitGateway):
-
-    def get_files_pull_request(self,
-                               sys_working_dir,
-                               target_branch,
-                               source_branch,
-                               message_info_engine_secret
-                               ):
-        try:
-            source_branch = source_branch.replace("refs/heads/", "")
-            os.chdir(sys_working_dir)
-            subprocess.run(['git', 'checkout', '-b', source_branch, f'origin/{source_branch}'], text=True, capture_output=True, check=True)    
-            env = os.environ.copy()
-            env["GIT_COMMITTER_NAME"] = "Your Name"
-            env["GIT_COMMITTER_EMAIL"] = "your.email@example.com"
-            env["GIT_AUTHOR_NAME"] = "Your Name"
-            env["GIT_AUTHOR_EMAIL"] = "your.email@example.com"
-            command = ["git", "rebase", f"origin/{target_branch}", "-X", "theirs"]
-            subprocess.run(command, env=env, text=True, capture_output=True)
-
-            diff = subprocess.run(['git', 'diff', f'origin/{target_branch}..{source_branch}', '--name-only'], capture_output=True, text=True)
-            if diff.returncode == 0:
-                diff_files = diff.stdout.strip().split("\n")
-                print("Pull Requests Associated Files:",diff_files)
-                return diff_files
-        except subprocess.CalledProcessError as e:
-            raise Exception(f"Error in pipeline configuration, {message_info_engine_secret}") from e
-        except Exception as e:
-            logger.warning(f"Error getting files PullRequest: {e}")
-            return []

devsecops_engine_tools-1.8.13/devsecops_engine_tools/version.py

@@ -1 +0,0 @@
-version = '1.8.13'