devsecops-engine-tools 1.8.16__tar.gz → 1.9.0__tar.gz

{devsecops_engine_tools-1.8.16 → devsecops_engine_tools-1.9.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: devsecops-engine-tools
-Version: 1.8.16
+Version: 1.9.0
 Summary: Tool for DevSecOps strategy
 Home-page: https://github.com/bancolombia/devsecops-engine-tools
 Author: Bancolombia DevSecOps Team

devsecops_engine_tools-1.9.0/devsecops_engine_tools/engine_core/src/domain/model/custom_level_vulnerability.py

@@ -0,0 +1,8 @@
+from devsecops_engine_tools.engine_core.src.domain.model.level_vulnerability import (
+    LevelVulnerability,
+)
+
+class CustomLevelVulnerability:
+    def __init__(self, data):
+        self.pattern_apps = data.get("PATTERN_APPS")
+        self.vulnerability = LevelVulnerability(data.get("VULNERABILITY"))

{devsecops_engine_tools-1.8.16 → devsecops_engine_tools-1.9.0}/devsecops_engine_tools/engine_core/src/domain/model/threshold.py

@@ -4,9 +4,13 @@ from devsecops_engine_tools.engine_core.src.domain.model.level_vulnerability imp
 from devsecops_engine_tools.engine_core.src.domain.model.level_compliance import (
     LevelCompliance,
 )
+from devsecops_engine_tools.engine_core.src.domain.model.custom_level_vulnerability import (
+    CustomLevelVulnerability,
+)
 
 class Threshold:
     def __init__(self, data):
         self.vulnerability = LevelVulnerability(data.get("VULNERABILITY"))
         self.compliance = LevelCompliance(data.get("COMPLIANCE"))
         self.cve = data.get("CVE",[])
+        self.custom_vulnerability = CustomLevelVulnerability(data.get("CUSTOM_VULNERABILITY")) if data.get("CUSTOM_VULNERABILITY") else None

{devsecops_engine_tools-1.8.16 → devsecops_engine_tools-1.9.0}/devsecops_engine_tools/engine_core/src/domain/usecases/break_build.py

@@ -1,4 +1,5 @@
 import sys
+import re
 from dataclasses import dataclass
 from functools import reduce
 
@@ -66,6 +67,9 @@ class BreakBuild:
             "compliances": {},
         }
 
+        if threshold.custom_vulnerability and bool(re.match(threshold.custom_vulnerability.pattern_apps, input_core.scope_pipeline, re.IGNORECASE)):
+            threshold.vulnerability = threshold.custom_vulnerability.vulnerability
+
         if len(findings_list) != 0:
             self._apply_policie_exception_new_vulnerability_industry(
                 findings_list, exclusions, args

{devsecops_engine_tools-1.8.16 → devsecops_engine_tools-1.9.0}/devsecops_engine_tools/engine_sast/engine_iac/src/domain/usecases/iac_scan.py

@@ -82,13 +82,14 @@ class IacScan:
 
     def complete_config_tool(self, data_file_tool, exclusions, tool, dict_args):
         config_tool = ConfigTool(json_data=data_file_tool)
-        skip_tool = False
 
         config_tool.exclusions = exclusions
         config_tool.scope_pipeline = self.devops_platform_gateway.get_variable(
             "pipeline_name"
         )
 
+        skip_tool = bool(re.match(config_tool.ignore_search_pattern, config_tool.scope_pipeline, re.IGNORECASE))
+
         if config_tool.exclusions.get("All") is not None:
             config_tool.exclusions_all = config_tool.exclusions.get("All").get(tool)
         if config_tool.exclusions.get(config_tool.scope_pipeline) is not None:
@@ -96,8 +97,6 @@ class IacScan:
                 config_tool.scope_pipeline
             ).get(tool)
             skip_tool = bool(config_tool.exclusions.get(config_tool.scope_pipeline).get("SKIP_TOOL"))
-        
-        skip_tool = bool(re.match(config_tool.ignore_search_pattern, config_tool.scope_pipeline, re.IGNORECASE))
 
         if dict_args["folder_path"]:
             if (

devsecops_engine_tools-1.9.0/devsecops_engine_tools/version.py

@@ -0,0 +1 @@
+version = '1.9.0'

{devsecops_engine_tools-1.8.16 → devsecops_engine_tools-1.9.0}/devsecops_engine_tools.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: devsecops-engine-tools
-Version: 1.8.16
+Version: 1.9.0
 Summary: Tool for DevSecOps strategy
 Home-page: https://github.com/bancolombia/devsecops-engine-tools
 Author: Bancolombia DevSecOps Team

{devsecops_engine_tools-1.8.16 → devsecops_engine_tools-1.9.0}/devsecops_engine_tools.egg-info/SOURCES.txt

@@ -16,6 +16,7 @@ devsecops_engine_tools/engine_core/src/deployment/__init__.py
 devsecops_engine_tools/engine_core/src/deployment/infrastructure/__init__.py
 devsecops_engine_tools/engine_core/src/domain/__init__.py
 devsecops_engine_tools/engine_core/src/domain/model/__init__.py
+devsecops_engine_tools/engine_core/src/domain/model/custom_level_vulnerability.py
 devsecops_engine_tools/engine_core/src/domain/model/customs_exceptions.py
 devsecops_engine_tools/engine_core/src/domain/model/exclusions.py
 devsecops_engine_tools/engine_core/src/domain/model/finding.py

devsecops_engine_tools-1.8.16/devsecops_engine_tools/version.py

@@ -1 +0,0 @@
-version = '1.8.16'