devsecops-engine-tools 1.8.15__tar.gz → 1.9.0__tar.gz

{devsecops_engine_tools-1.8.15 → devsecops_engine_tools-1.9.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: devsecops-engine-tools
-Version: 1.8.15
+Version: 1.9.0
 Summary: Tool for DevSecOps strategy
 Home-page: https://github.com/bancolombia/devsecops-engine-tools
 Author: Bancolombia DevSecOps Team

devsecops_engine_tools-1.9.0/devsecops_engine_tools/engine_core/src/domain/model/custom_level_vulnerability.py

@@ -0,0 +1,8 @@
+from devsecops_engine_tools.engine_core.src.domain.model.level_vulnerability import (
+    LevelVulnerability,
+)
+
+class CustomLevelVulnerability:
+    def __init__(self, data):
+        self.pattern_apps = data.get("PATTERN_APPS")
+        self.vulnerability = LevelVulnerability(data.get("VULNERABILITY"))

{devsecops_engine_tools-1.8.15 → devsecops_engine_tools-1.9.0}/devsecops_engine_tools/engine_core/src/domain/model/threshold.py

@@ -4,9 +4,13 @@ from devsecops_engine_tools.engine_core.src.domain.model.level_vulnerability imp
 from devsecops_engine_tools.engine_core.src.domain.model.level_compliance import (
     LevelCompliance,
 )
+from devsecops_engine_tools.engine_core.src.domain.model.custom_level_vulnerability import (
+    CustomLevelVulnerability,
+)
 
 class Threshold:
     def __init__(self, data):
         self.vulnerability = LevelVulnerability(data.get("VULNERABILITY"))
         self.compliance = LevelCompliance(data.get("COMPLIANCE"))
         self.cve = data.get("CVE",[])
+        self.custom_vulnerability = CustomLevelVulnerability(data.get("CUSTOM_VULNERABILITY")) if data.get("CUSTOM_VULNERABILITY") else None

{devsecops_engine_tools-1.8.15 → devsecops_engine_tools-1.9.0}/devsecops_engine_tools/engine_core/src/domain/usecases/break_build.py

@@ -1,4 +1,5 @@
 import sys
+import re
 from dataclasses import dataclass
 from functools import reduce
 
@@ -66,6 +67,9 @@ class BreakBuild:
             "compliances": {},
         }
 
+        if threshold.custom_vulnerability and bool(re.match(threshold.custom_vulnerability.pattern_apps, input_core.scope_pipeline, re.IGNORECASE)):
+            threshold.vulnerability = threshold.custom_vulnerability.vulnerability
+
         if len(findings_list) != 0:
             self._apply_policie_exception_new_vulnerability_industry(
                 findings_list, exclusions, args

{devsecops_engine_tools-1.8.15 → devsecops_engine_tools-1.9.0}/devsecops_engine_tools/engine_sast/engine_iac/src/domain/usecases/iac_scan.py

@@ -38,7 +38,7 @@ class IacScan:
         )
 
         findings_list, path_file_results = [], None
-        if skip_tool == "false":
+        if skip_tool is False:
             findings_list, path_file_results = self.tool_gateway.run_tool(
                 config_tool_iac,
                 folders_to_scan,
@@ -82,26 +82,21 @@ class IacScan:
 
     def complete_config_tool(self, data_file_tool, exclusions, tool, dict_args):
         config_tool = ConfigTool(json_data=data_file_tool)
-        skip_tool = "false"
 
         config_tool.exclusions = exclusions
         config_tool.scope_pipeline = self.devops_platform_gateway.get_variable(
             "pipeline_name"
         )
 
+        skip_tool = bool(re.match(config_tool.ignore_search_pattern, config_tool.scope_pipeline, re.IGNORECASE))
+
         if config_tool.exclusions.get("All") is not None:
             config_tool.exclusions_all = config_tool.exclusions.get("All").get(tool)
         if config_tool.exclusions.get(config_tool.scope_pipeline) is not None:
             config_tool.exclusions_scope = config_tool.exclusions.get(
                 config_tool.scope_pipeline
             ).get(tool)
-            skip_tool = (
-                "true"
-                if config_tool.exclusions.get(config_tool.scope_pipeline).get(
-                    "SKIP_TOOL"
-                )
-                else "false"
-            )
+            skip_tool = bool(config_tool.exclusions.get(config_tool.scope_pipeline).get("SKIP_TOOL"))
 
         if dict_args["folder_path"]:
             if (
@@ -117,9 +112,7 @@ class IacScan:
 
             folders_to_scan = [dict_args["folder_path"]]
         else:
-            folders_to_scan = self.search_folders(
-                config_tool.search_pattern, config_tool.ignore_search_pattern
-            )
+            folders_to_scan = self.search_folders(config_tool.search_pattern)
 
         if len(folders_to_scan) == 0:
             logger.warning(
@@ -129,12 +122,10 @@ class IacScan:
 
         return config_tool, folders_to_scan, skip_tool
 
-    def search_folders(self, search_pattern, ignore_pattern):
+    def search_folders(self, search_pattern):
         current_directory = os.getcwd()
         patron = (
-            "(?i)(?!.*(?:"
-            + "|".join(ignore_pattern)
-            + ")).*?("
+            "(?i).*?("
             + "|".join(search_pattern)
             + ").*$"
         )

{devsecops_engine_tools-1.8.15 → devsecops_engine_tools-1.9.0}/devsecops_engine_tools/engine_utilities/defect_dojo/domain/user_case/import_scan.py

@@ -90,7 +90,7 @@ class ImportScanUserCase:
 
         logger.debug(f"search Engagement name: {request.engagement_name}")
         engagement = self.__rest_engagement.get_engagements(request.engagement_name)
-        if engagement.results == []:
+        if engagement.results == [] or any(engagement.name != request.engagement_name for engagement in engagement.results):
             engagement = self.__rest_engagement.post_engagement(request.engagement_name, product_id)
             logger.debug(f"Egagement created: {engagement.name}")
         else:

devsecops_engine_tools-1.9.0/devsecops_engine_tools/version.py

@@ -0,0 +1 @@
+version = '1.9.0'

{devsecops_engine_tools-1.8.15 → devsecops_engine_tools-1.9.0}/devsecops_engine_tools.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: devsecops-engine-tools
-Version: 1.8.15
+Version: 1.9.0
 Summary: Tool for DevSecOps strategy
 Home-page: https://github.com/bancolombia/devsecops-engine-tools
 Author: Bancolombia DevSecOps Team

{devsecops_engine_tools-1.8.15 → devsecops_engine_tools-1.9.0}/devsecops_engine_tools.egg-info/SOURCES.txt

@@ -16,6 +16,7 @@ devsecops_engine_tools/engine_core/src/deployment/__init__.py
 devsecops_engine_tools/engine_core/src/deployment/infrastructure/__init__.py
 devsecops_engine_tools/engine_core/src/domain/__init__.py
 devsecops_engine_tools/engine_core/src/domain/model/__init__.py
+devsecops_engine_tools/engine_core/src/domain/model/custom_level_vulnerability.py
 devsecops_engine_tools/engine_core/src/domain/model/customs_exceptions.py
 devsecops_engine_tools/engine_core/src/domain/model/exclusions.py
 devsecops_engine_tools/engine_core/src/domain/model/finding.py

devsecops_engine_tools-1.8.15/devsecops_engine_tools/version.py

@@ -1 +0,0 @@
-version = '1.8.15'