devsecops-engine-tools 1.8.14__tar.gz → 1.123.3__tar.gz

devsecops_engine_tools-1.123.3/PKG-INFO

@@ -0,0 +1,78 @@
+Metadata-Version: 2.4
+Name: devsecops-engine-tools
+Version: 1.123.3
+Summary: Tool for DevSecOps strategy
+Home-page: https://github.com/bancolombia/devsecops-engine-tools
+Author: Bancolombia DevSecOps Team
+Author-email: devsecops@bancolombia.com.co
+Classifier: Programming Language :: Python :: 3
+Classifier: License :: OSI Approved :: GNU Affero General Public License v3 or later (AGPLv3+)
+Classifier: Operating System :: OS Independent
+Requires-Python: >=3.10
+Description-Content-Type: text/markdown
+Requires-Dist: requests==2.32.5
+Requires-Dist: PyYAML==6.0.3
+Requires-Dist: pyfiglet==1.0.4
+Requires-Dist: prettytable==3.16.0
+Requires-Dist: azure-devops==7.1.0b4
+Requires-Dist: marshmallow==4.0.1
+Requires-Dist: pytz==2025.2
+Requires-Dist: python-decouple==3.8
+Requires-Dist: requests_toolbelt==1.0.0
+Requires-Dist: pexpect==4.9.0
+Requires-Dist: PyGithub==2.8.1
+Requires-Dist: distro==1.9.0
+Requires-Dist: boto3==1.40.70
+Requires-Dist: docker==7.1.0
+Requires-Dist: setuptools==78.1.1
+Requires-Dist: rich==14.1.0
+Requires-Dist: cpe==1.3.1
+Requires-Dist: packageurl-python==0.13.4
+Requires-Dist: ruamel.yaml==0.18.15
+Requires-Dist: Authlib==1.6.5
+Requires-Dist: PyJWT==2.10.1
+Requires-Dist: sympy==1.14.0
+Requires-Dist: urllib3==2.5.0
+Requires-Dist: holidays==0.81
+Requires-Dist: pyarrow==22.0.0
+Dynamic: author
+Dynamic: author-email
+Dynamic: classifier
+Dynamic: description
+Dynamic: description-content-type
+Dynamic: home-page
+Dynamic: requires-dist
+Dynamic: requires-python
+Dynamic: summary
+
+# DevSecOps Engine Tools
+
+[![Maintained by Bancolombia](https://img.shields.io/badge/maintained_by-Bancolombia-yellow)](#)
+[![Build](https://github.com/bancolombia/devsecops-engine-tools/actions/workflows/build.yml/badge.svg)](https://github.com/bancolombia/devsecops-engine-tools/actions/workflows/build.yml)
+[![Quality Gate Status](https://sonarcloud.io/api/project_badges/measure?project=bancolombia_devsecops-engine-tools&metric=alert_status)](https://sonarcloud.io/summary/new_code?id=bancolombia_devsecops-engine-tools)
+[![Coverage](https://sonarcloud.io/api/project_badges/measure?project=bancolombia_devsecops-engine-tools&metric=coverage)](https://sonarcloud.io/summary/new_code?id=bancolombia_devsecops-engine-tools)
+[![Python Version](https://img.shields.io/badge/python%20-%203.10%20%7C%203.11%20%7C%203.12%20%7C%203.13%20%20%7C%203.14%20-blue)](#)
+[![PyPI](https://img.shields.io/pypi/v/devsecops-engine-tools)](https://pypi.org/project/devsecops-engine-tools/)
+[![Docker Pulls](https://img.shields.io/docker/pulls/bancolombia/devsecops-engine-tools
+)](https://hub.docker.com/r/bancolombia/devsecops-engine-tools)
+
+# Objective
+
+Tool that unifies the evaluation of the different devsecops practices being agnostic to the devops platform, using both open source and market tools.
+
+
+# Communications channel
+
+Here are the channels we use to communicate about the project:
+
+**1. Mailing list:** You can join our mailing list to always be informed at the following link: [CommunityDevsecopsEngine](https://groups.google.com/g/CommunityDevsecopsEngine)
+
+**2. Email:** You can write to us by email:  MaintainersDevsecopsEngine@googlegroups.com
+
+# Getting Started
+
+Please follow our [Getting Started Guide](https://bancolombia.github.io/devsecops-engine-tools/)
+
+# How can I help?
+
+Review the issues, we hear new ideas. Read more [Contributing](https://github.com/bancolombia/devsecops-engine-tools/blob/trunk/docs/CONTRIBUTING.md)

{devsecops_engine_tools-1.8.14 → devsecops_engine_tools-1.123.3}/README.md

@@ -68,6 +68,17 @@ devsecops_engine_tools
 |                   driven_adapters
 |                   entry_points
 |                   utils.
+|           engine_code -> Static Code Scanning
+|              src
+|               applications
+|               deployment
+|               domain
+|                   model
+|                   usecases
+|               infraestructure
+|                   driven_adapters
+|                   entry_points
+|                   utils.
 |
 ├───engine_sca -> SCA Practices
 |            engine_container -> Container Scanning
@@ -92,11 +103,24 @@ devsecops_engine_tools
 |                   driven_adapters
 |                   entry_points
 |                   utils.
+|
+├───engine_integrations -> Tool integration module.
+|           test
+|           src
+|               applications
+|               domain
+|                   usecases
+|               infraestructure
+|                   entry_points
+|
 ├───engine_utilities -> Utilities transversal.
 |           azuredevops
 |           defect_dojo
+|           git_cli
 |           github
 |           input_validations
+|           sbom
+|           sonarqube -> report_sonar integration
 |           ssh
 |           utils
 ```

{devsecops_engine_tools-1.8.14 → devsecops_engine_tools-1.123.3}/devsecops_engine_tools/engine_core/src/applications/runner_engine_core.py

@@ -22,13 +22,21 @@ from devsecops_engine_tools.engine_core.src.infrastructure.driven_adapters.aws.s
 from devsecops_engine_tools.engine_core.src.infrastructure.driven_adapters.printer_pretty_table.printer_pretty_table import (
     PrinterPrettyTable,
 )
+from devsecops_engine_tools.engine_core.src.infrastructure.driven_adapters.syft.syft import (
+    Syft
+)
+from devsecops_engine_tools.engine_core.src.infrastructure.driven_adapters.cdxgen.cdxgen import (
+    CdxGen
+)
+from devsecops_engine_tools.engine_core.src.infrastructure.driven_adapters.risk_score.risk_score import (
+    RiskScore,
+) 
 import sys
 import argparse
 from devsecops_engine_tools.engine_utilities.utils.logger_info import MyLogger
 from devsecops_engine_tools.engine_utilities import settings
 from devsecops_engine_tools.version import version
 
-
 logger = MyLogger.__call__(**settings.SETTING_LOGGER).get_logger()
 
 
@@ -64,48 +72,95 @@ def get_inputs_from_cli(args):
         required=True,
         help="Platform where is executed",
     )
+    parser.add_argument(
+        "-rcs",
+        "--remote_config_source",
+        choices=["azure", "github", "local"],
+        type=str,
+        required=True,
+        help="Source of the remote config repo",
+    )
     parser.add_argument(
         "-rcf",
         "--remote_config_repo",
         type=str,
         required=True,
-        help="Name or Folder Path of Config Repo",
+        help="Name or Folder Path of Remote Config Repo",
+    )
+    parser.add_argument(
+        "-rcb",
+        "--remote_config_branch",
+        type=str,
+        required=False,
+        default="",
+        help="Name of the branch of Remote Config Repo",
     )
     parser.add_argument(
         "-t",
         "--tool",
+        choices=[
+            "nuclei",
+            "bearer",
+            "checkov",
+            "kics",
+            "kubescape",
+            "trufflehog",
+            "gitleaks",
+            "prisma",
+            "trivy",
+            "xray",
+            "dependency_check",
+            "kiuwan",
+        ],
+        type=str,
+        required=False,
+        help="Tool to execute according to the module",
+    )
+    parser.add_argument(
+        "-m",
+        "--module",
         choices=[
             "engine_iac",
             "engine_dast",
+            "engine_code",
             "engine_secret",
             "engine_dependencies",
             "engine_container",
             "engine_risk",
+            "engine_function",
         ],
         type=str,
         required=True,
-        help="Tool to execute",
+        help="Module to execute",
     )
     parser.add_argument(
         "-fp",
         "--folder_path",
         type=str,
         required=False,
-        help="Folder Path to scan, only apply engine_iac and engine_dependencies tools",
+        help="Folder Path to scan, only apply engine_iac, engine_code, engine_secret and engine_dependencies tools",
+    )
+    parser.add_argument(
+        "-tr",
+        "--terraform_repo_root",
+        type=str,
+        required=False,
+        help="Folder Path containing the terraform code used to generate a given plan file, only apply engine_iac with checkov",
     )
     parser.add_argument(
         "-p",
         "--platform",
-        type=parse_choices({"all", "docker", "k8s", "cloudformation", "openapi"}),
+        type=parse_choices({"all", "docker", "k8s", "cloudformation", "openapi", "terraform","serverless"}),
         required=False,
         default="all",
-        help="Platform to scan, only apply engine_iac tool",
+        help="Platform to scan, applies only to the engine_iac tool and it is possible to select several {all, docker, k8s, cloudformation, openapi, terraform}",
     )
     parser.add_argument(
         "--use_secrets_manager",
         choices=["true", "false"],
         type=str,
         required=False,
+        default="false",
         help="Use Secrets Manager to get the tokens",
     )
     parser.add_argument(
@@ -113,6 +168,7 @@ def get_inputs_from_cli(args):
         choices=["true", "false"],
         type=str,
         required=False,
+        default="false",
         help="Use Vulnerability Management to send the vulnerabilities to the platform",
     )
     parser.add_argument(
@@ -120,6 +176,7 @@ def get_inputs_from_cli(args):
         choices=["true", "false"],
         type=str,
         required=False,
+        default="false",
         help="Enable or Disable the send metrics to the driven adapter metrics",
     )
     parser.add_argument(
@@ -133,7 +190,7 @@ def get_inputs_from_cli(args):
     parser.add_argument(
         "--token_engine_container",
         required=False,
-        help="Token to execute engine_container if is necessary",
+        help="Token to execute engine_container if is necessary, accesskey:secretkey",
     )
     parser.add_argument(
         "--token_engine_dependencies",
@@ -143,11 +200,17 @@ def get_inputs_from_cli(args):
     parser.add_argument(
         "--token_external_checks",
         required=False,
-        help="Token for downloading external checks from engine_iac if is necessary. Ej: github:token, ssh:privatekey:pass",
+        help="Token for downloading external checks from engine_iac or engine_secret if is necessary. Ej: github_token:token, github_app:private_key, ssh:privatekey:pass",
+    )
+    parser.add_argument(
+        "--token_engine_code",
+        type=str,
+        required=False,
+        help="Password for connecting with the kiuwan platform. In order to get a kiuwan pass, go to the platform and select the pass of the account selected for the engine."
     )
     parser.add_argument(
         "--xray_mode",
-        choices=["scan", "audit"],
+        choices=["scan", "audit","build-scan"],
         required=False,
         default="scan",
         help="Mode to execute xray, only apply engine_dependencies xray tool",
@@ -157,12 +220,56 @@ def get_inputs_from_cli(args):
         required=False,
         help="Name of image to scan for engine_container",
     )
+    parser.add_argument(
+        "--dast_file_path",
+        required=False,
+        help="File path containing the configuration, structured according to the documentation, \
+        for the API or web application to be scanned by the DAST tool."
+    )
+    parser.add_argument(
+        "-c",
+        "--context",
+        choices=["true", "false"],
+        type=str,
+        required=False,
+        default="false",
+        help="Enable or disable context creation. Applies to engine_iac, engine_container and engine_dependencies. Default is false."
+    )
+    parser.add_argument(
+        "--docker_address",
+        required=False,
+        help="Address of the Docker daemon to connect to."
+    )
+
+    TOOLS = {
+        "engine_iac": ["checkov", "kics", "kubescape"],
+        "engine_secret": ["trufflehog", "gitleaks"],
+        "engine_container": ["prisma", "trivy"],
+        "engine_dependencies": ["xray", "dependency_check", "trivy"],
+        "engine_code": ["bearer", "kiuwan"],
+        "engine_dast": ["nuclei"],
+        "engine_risk": None,
+        "engine_function": ["prisma"],
+    }
+
     args = parser.parse_args()
+
+    if args.module in TOOLS and args.tool:
+        allowed_tools = TOOLS[args.module]
+        if allowed_tools is None:
+            parser.error(f"The tool flag should not be used with module {args.module}")
+        elif allowed_tools and (args.tool not in allowed_tools):
+            parser.error(f"Invalid value for tool. Allowed values for the provided module {args.module} are: {', '.join(allowed_tools)}")
+
     return {
         "platform_devops": args.platform_devops,
         "remote_config_repo": args.remote_config_repo,
+        "remote_config_branch": args.remote_config_branch,
+        "remote_config_source": args.remote_config_source,
         "tool": args.tool,
+        "module": args.module,
         "folder_path": args.folder_path,
+        "terraform_repo_root": args.terraform_repo_root,
         "platform": args.platform,
         "use_secrets_manager": args.use_secrets_manager,
         "use_vulnerability_management": args.use_vulnerability_management,
@@ -172,8 +279,12 @@ def get_inputs_from_cli(args):
         "token_engine_container": args.token_engine_container,
         "token_engine_dependencies": args.token_engine_dependencies,
         "token_external_checks": args.token_external_checks,
+        "token_engine_code": args.token_engine_code,
         "xray_mode": args.xray_mode,
-        "image_to_scan": args.image_to_scan
+        "image_to_scan": args.image_to_scan,
+        "dast_file_path": args.dast_file_path,
+        "context": args.context,
+        "docker_address": args.docker_address
     }
 
 
@@ -190,15 +301,28 @@ def application_core():
             "github": GithubActions(),
             "local": RuntimeLocal(),
         }.get(args["platform_devops"])
-        printer_table_gateway = PrinterPrettyTable()
+        remote_config_source_gateway = {
+            "azure": AzureDevops(),
+            "github": GithubActions(),
+            "local": RuntimeLocal(),
+        }.get(args["remote_config_source"])
         metrics_manager_gateway = S3Manager()
+        printer_table_gateway = PrinterPrettyTable()
+        sbom_tool_gateway = {
+            "syft": Syft(),
+            "cdxgen": CdxGen()
+        }
+        risk_score_gateway = RiskScore()
 
         init_engine_core(
             vulnerability_management_gateway,
             secrets_manager_gateway,
             devops_platform_gateway,
+            remote_config_source_gateway,
             printer_table_gateway,
             metrics_manager_gateway,
+            sbom_tool_gateway,
+            risk_score_gateway,
             args,
         )
     except Exception as e:
@@ -212,4 +336,4 @@ def application_core():
 
 
 if __name__ == "__main__":
-    application_core()
+    application_core()

devsecops_engine_tools-1.123.3/devsecops_engine_tools/engine_core/src/domain/model/component.py

@@ -0,0 +1,7 @@
+from dataclasses import dataclass
+
+
+@dataclass
+class Component:
+    name: str
+    version: str

devsecops_engine_tools-1.123.3/devsecops_engine_tools/engine_core/src/domain/model/exclusions.py

@@ -0,0 +1,20 @@
+from dataclasses import dataclass
+
+
+@dataclass
+class Exclusions:
+    def __init__(self, **kwargs):
+        self.id = kwargs.get("id", "")
+        self.where = kwargs.get("where", "all")
+        self.cve_id = kwargs.get("cve_id", "")
+        self.create_date = kwargs.get("create_date", "")
+        self.expired_date = kwargs.get("expired_date", "")
+        self.severity = kwargs.get("severity", "")
+        self.priority = kwargs.get("priority", "")
+        self.hu = kwargs.get("hu", "")
+        self.reason = kwargs.get("reason", "DevSecOps policy")
+        self.vm_id = kwargs.get("vm_id", "")
+        self.vm_id_url = kwargs.get("vm_id_url", "")
+        self.service = kwargs.get("service", "")
+        self.tags = kwargs.get("tags", [])
+        self.check_in_desc = kwargs.get("x86.image.name", [])

devsecops_engine_tools-1.123.3/devsecops_engine_tools/engine_core/src/domain/model/finding.py

@@ -0,0 +1,35 @@
+from enum import Enum
+from dataclasses import dataclass, field
+from typing import Optional
+
+class Category(Enum):
+    VULNERABILITY = "vulnerability"
+    COMPLIANCE = "compliance"
+
+@dataclass
+class Priority:
+    score: float
+    scale: str
+
+@dataclass(kw_only=True)
+class Finding:
+    id: str
+    cvss: str
+    where: str
+    description: str
+    severity: str
+    identification_date: str
+    published_date_cve: str
+    module: str
+    category: Category
+    requirements: str
+    tool: str
+    priority: Optional[Priority] = field(default=None)
+
+@dataclass(kw_only=True)
+class EngineCodeFinding(Finding):
+    analysis_url: str
+    analysis_code: str
+    label: str
+    application_business_value: str
+    defect_type: str

{devsecops_engine_tools-1.8.14 → devsecops_engine_tools-1.123.3}/devsecops_engine_tools/engine_core/src/domain/model/gateway/devops_platform_gateway.py

@@ -3,7 +3,7 @@ from abc import ABCMeta, abstractmethod
 
 class DevopsPlatformGateway(metaclass=ABCMeta):
     @abstractmethod
-    def get_remote_config(self, repository, path):
+    def get_remote_config(self, repository, path, branch):
         "get_remote_config"
 
     @abstractmethod
@@ -21,6 +21,10 @@ class DevopsPlatformGateway(metaclass=ABCMeta):
     @abstractmethod
     def get_base_compact_remote_config_url(self, remote_config_repo):
         "get_base_compact_remote_config_url"
+    
+    @abstractmethod
+    def get_build_pipeline_execution_url(self):
+        "get_build_pipeline_execution_url"
 
     @abstractmethod
     def get_variable(self, variable):

{devsecops_engine_tools-1.8.14 → devsecops_engine_tools-1.123.3}/devsecops_engine_tools/engine_core/src/domain/model/gateway/metrics_manager_gateway.py

@@ -3,5 +3,5 @@ from abc import ABCMeta, abstractmethod
 
 class MetricsManagerGateway(metaclass=ABCMeta):
     @abstractmethod
-    def send_metrics(self, config_tool, tool, file_path):
+    def send_metrics(self, config_tool, module, file_path):
         "send_metrics"

{devsecops_engine_tools-1.8.14 → devsecops_engine_tools-1.123.3}/devsecops_engine_tools/engine_core/src/domain/model/gateway/printer_table_gateway.py

@@ -8,7 +8,7 @@ from devsecops_engine_tools.engine_core.src.domain.model.report import (
 
 class PrinterTableGateway(metaclass=ABCMeta):
     @abstractmethod
-    def print_table_findings(self, finding_list: "list[Finding]"):
+    def print_table_findings(self, finding_list: "list[Finding]", break_build_manager):
         "print_table_findings"
 
     @abstractmethod

devsecops_engine_tools-1.123.3/devsecops_engine_tools/engine_core/src/domain/model/gateway/risk_score_gateway.py

@@ -0,0 +1,7 @@
+from abc import ABCMeta, abstractmethod
+
+
+class RiskScoreGateway(metaclass=ABCMeta):
+    @abstractmethod
+    def get_risk_score(self, finding_list, config_tool, module):
+        "get_risk_score"

devsecops_engine_tools-1.123.3/devsecops_engine_tools/engine_core/src/domain/model/gateway/sbom_manager.py

@@ -0,0 +1,11 @@
+from abc import ABCMeta, abstractmethod
+from devsecops_engine_tools.engine_core.src.domain.model.component import (
+    Component,
+)
+
+class SbomManagerGateway(metaclass=ABCMeta):
+    @abstractmethod
+    def get_components(
+        self, artifact, config, service_name
+    ) -> "list[Component]":
+        "get_components"

{devsecops_engine_tools-1.8.14 → devsecops_engine_tools-1.123.3}/devsecops_engine_tools/engine_core/src/domain/model/gateway/vulnerability_management_gateway.py

@@ -1,7 +1,7 @@
 from abc import ABCMeta, abstractmethod
 
 from devsecops_engine_tools.engine_core.src.domain.model.vulnerability_management import VulnerabilityManagement
-
+from devsecops_engine_tools.engine_core.src.domain.model.gateway.devops_platform_gateway import DevopsPlatformGateway
 
 class VulnerabilityManagementGateway(metaclass=ABCMeta):
     @abstractmethod
@@ -10,6 +10,10 @@ class VulnerabilityManagementGateway(metaclass=ABCMeta):
     ):
         "send_vulnerability_management"
 
+    @abstractmethod
+    def get_product_type_pipeline(self, pipeline, dict_args, secret_tool, config_tool):
+        "get_product_type_pipeline"
+
     @abstractmethod
     def get_findings_excepted(
         self, service, dict_args, secret_tool, config_tool
@@ -27,3 +31,15 @@ class VulnerabilityManagementGateway(metaclass=ABCMeta):
         self, engagement_name, dict_args, secret_tool, config_tool
     ):
         "get_active_engagements"
+
+    @abstractmethod
+    def send_sbom_components(
+        self, sbom_components, service, dict_args, secret_tool, config_tool
+    ):
+        "send_sbom_components"
+
+    @abstractmethod
+    def get_black_list(
+        self, dict_args, secret_tool, config_tool
+    ):
+        "get_black_list"

{devsecops_engine_tools-1.8.14 → devsecops_engine_tools-1.123.3}/devsecops_engine_tools/engine_core/src/domain/model/input_core.py

@@ -9,4 +9,5 @@ class InputCore:
     path_file_results: str
     custom_message_break_build: str
     scope_pipeline: str
+    scope_service: str
     stage_pipeline: str

devsecops_engine_tools-1.123.3/devsecops_engine_tools/engine_core/src/domain/model/level_priority.py

@@ -0,0 +1,6 @@
+class LevelPriority:
+    def __init__(self, data_priority):
+        self.very_critical_priority = data_priority.get("Very Critical")
+        self.critical_priority = data_priority.get("Critical")
+        self.high_priority = data_priority.get("High")
+        self.medium_low_priority = data_priority.get("Medium Low")

{devsecops_engine_tools-1.8.14 → devsecops_engine_tools-1.123.3}/devsecops_engine_tools/engine_core/src/domain/model/report.py

@@ -4,6 +4,8 @@ from dataclasses import dataclass
 @dataclass
 class Report:
     def __init__(self, **kwargs):
+        self.vm_id = kwargs.get("vm_id", "")
+        self.vm_id_url = kwargs.get("vm_id_url", "")
         self.id = kwargs.get("id", [])
         self.vuln_id_from_tool = kwargs.get("vuln_id_from_tool", "")
         self.where = kwargs.get("where", "")
@@ -26,9 +28,12 @@ class Report:
         self.vul_description = kwargs.get("vul_description", "")
         self.risk_accepted = kwargs.get("risk_accepted", "")
         self.false_p = kwargs.get("false_p", "")
+        self.out_of_scope = kwargs.get("out_of_scope", "")
         self.service = kwargs.get("service", "")
         self.reason = kwargs.get("reason", "")
         self.component_name = kwargs.get("component_name", "")
         self.component_version = kwargs.get("component_version", "")
         self.file_path = kwargs.get("file_path", "")
-        self.endpoints = kwargs.get("endpoints", "")
+        self.endpoints = kwargs.get("endpoints", "")
+        self.unique_id_from_tool = kwargs.get("unique_id_from_tool", "")
+        self.out_of_scope = kwargs.get("out_of_scope", "")

{devsecops_engine_tools-1.8.14 → devsecops_engine_tools-1.123.3}/devsecops_engine_tools/engine_core/src/domain/model/threshold.py

@@ -1,3 +1,6 @@
+from devsecops_engine_tools.engine_core.src.domain.model.level_priority import (
+    LevelPriority
+)
 from devsecops_engine_tools.engine_core.src.domain.model.level_vulnerability import (
     LevelVulnerability,
 )
@@ -7,6 +10,9 @@ from devsecops_engine_tools.engine_core.src.domain.model.level_compliance import
 
 class Threshold:
     def __init__(self, data):
-        self.vulnerability = LevelVulnerability(data.get("VULNERABILITY"))
+        self.vulnerability = LevelVulnerability(data.get("VULNERABILITY")) 
         self.compliance = LevelCompliance(data.get("COMPLIANCE"))
         self.cve = data.get("CVE",[])
+        self.name = data.get("NAME", "default")
+        self.quality_vulnerability_management = data.get("QUALITY_VULNERABILITY_MANAGEMENT") if data.get("QUALITY_VULNERABILITY_MANAGEMENT") else None
+        self.priority = LevelPriority(data.get("PRIORITY")) if data.get("PRIORITY") else None

{devsecops_engine_tools-1.8.14 → devsecops_engine_tools-1.123.3}/devsecops_engine_tools/engine_core/src/domain/model/vulnerability_management.py

@@ -10,11 +10,16 @@ class VulnerabilityManagement:
     dict_args: any
     secret_tool: any
     config_tool: any
+    repository_provider: str
     source_code_management_uri: str
     base_compact_remote_config_url: str
+    sonar_instance: any
     access_token: str
     version: str
     build_id: str
     branch_tag: str
     commit_hash: str
     environment: str
+    vm_product_type_name: str
+    vm_product_name: str
+    vm_product_description: str