devsecops-engine-tools 1.81.1__tar.gz → 1.82.0__tar.gz

{devsecops_engine_tools-1.81.1 → devsecops_engine_tools-1.82.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: devsecops-engine-tools
-Version: 1.81.1
+Version: 1.82.0
 Summary: Tool for DevSecOps strategy
 Home-page: https://github.com/bancolombia/devsecops-engine-tools
 Author: Bancolombia DevSecOps Team

{devsecops_engine_tools-1.81.1 → devsecops_engine_tools-1.82.0}/devsecops_engine_tools/engine_sca/engine_dependencies/src/infrastructure/driven_adapters/dependency_check/dependency_check_tool.py

@@ -142,8 +142,9 @@ class DependencyCheckTool(ToolGateway):
         pattern = get_artifacts.excluded_files(
             remote_config, pipeline_name, exclusion, "DEPENDENCY_CHECK"
         )
+        ignore_files = remote_config.get("IGNORE_FILES", [])
         to_scan = get_artifacts.find_artifacts(
-            to_scan, pattern, remote_config["DEPENDENCY_CHECK"]["PACKAGES_TO_SCAN"]
+            to_scan, pattern, remote_config["DEPENDENCY_CHECK"]["PACKAGES_TO_SCAN"], ignore_files
         )
 
         if not to_scan:

{devsecops_engine_tools-1.81.1 → devsecops_engine_tools-1.82.0}/devsecops_engine_tools/engine_sca/engine_dependencies/src/infrastructure/driven_adapters/xray_tool/xray_manager_scan.py

@@ -194,8 +194,9 @@ class XrayScan(ToolGateway):
             pattern = get_artifacts.excluded_files(
                 remote_config, pipeline_name, exclusion, "XRAY"
             )
+            ignore_files = remote_config.get("IGNORE_FILES", [])
             to_scan = get_artifacts.find_artifacts(
-                to_scan, pattern, remote_config["XRAY"]["PACKAGES_TO_SCAN"]
+                to_scan, pattern, remote_config["XRAY"]["PACKAGES_TO_SCAN"], ignore_files
             )
             cwd = os.getcwd()
             if not to_scan:

{devsecops_engine_tools-1.81.1 → devsecops_engine_tools-1.82.0}/devsecops_engine_tools/engine_sca/engine_dependencies/src/infrastructure/helpers/get_artifacts.py

@@ -33,6 +33,25 @@ class GetArtifacts:
 
         return pattern
 
+    def filter_ignored_files(self, files_list, ignore_files):
+        if not ignore_files:
+            return files_list
+            
+        filtered_files = []
+        for file_path in files_list:
+            should_ignore = False
+            file_name = os.path.basename(file_path)
+            
+            for ignore_pattern in ignore_files:
+                if (re.search(ignore_pattern, file_name, re.IGNORECASE) or re.search(ignore_pattern, file_path, re.IGNORECASE)):
+                    should_ignore = True
+                    break
+                    
+            if not should_ignore:
+                filtered_files.append(file_path)
+                
+        return filtered_files
+
     def find_packages(self, pattern, packages, working_dir):
         packages_list = []
         files_list = []
@@ -69,7 +88,7 @@ class GetArtifacts:
             shutil.copy2(file, target)
             logger.debug(f"File to scan: {file}")
 
-    def find_artifacts(self, to_scan, pattern, packages):
+    def find_artifacts(self, to_scan, pattern, packages, ignore_files=None):
         dir_to_scan_path = os.path.join(to_scan, "dependencies_to_scan")
         if os.path.exists(dir_to_scan_path):
             shutil.rmtree(dir_to_scan_path)
@@ -77,6 +96,11 @@ class GetArtifacts:
 
         packages_list, files_list = self.find_packages(pattern, packages, to_scan)
 
+        if ignore_files:
+            filtered_files_list = self.filter_ignored_files(files_list, ignore_files)
+        else:
+            filtered_files_list = files_list
+
         for package in packages_list:
             tar_path = os.path.join(
                 dir_to_scan_path,
@@ -88,8 +112,8 @@ class GetArtifacts:
             )
             self.compress_and_mv(tar_path, package)
 
-        if len(files_list):
-            self.move_files(dir_to_scan_path, files_list)
+        if len(filtered_files_list):
+            self.move_files(dir_to_scan_path, filtered_files_list)
 
         files = os.listdir(dir_to_scan_path)
         files = [
@@ -102,8 +126,12 @@ class GetArtifacts:
             file_to_scan = os.path.join(dir_to_scan_path, "file_to_scan.tar")
             self.compress_and_mv(file_to_scan, dir_to_scan_path)
             files_string = ", ".join(files)
-            logger.debug(f"Files to scan: {files_string}")
             print(f"Files to scan: {files_string}")
+
+            if ignore_files and len(filtered_files_list) < len(files_list):
+                ignored_files = set([os.path.basename(f) for f in files_list if f not in filtered_files_list])
+                files_ignore_string = ", ".join(ignored_files)
+                print(f"Files ignored: {files_ignore_string}")
         else:
             logger.warning("No artifacts found")
 

devsecops_engine_tools-1.82.0/devsecops_engine_tools/version.py

@@ -0,0 +1 @@
+version = '1.82.0'

{devsecops_engine_tools-1.81.1 → devsecops_engine_tools-1.82.0}/devsecops_engine_tools.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: devsecops-engine-tools
-Version: 1.81.1
+Version: 1.82.0
 Summary: Tool for DevSecOps strategy
 Home-page: https://github.com/bancolombia/devsecops-engine-tools
 Author: Bancolombia DevSecOps Team

devsecops_engine_tools-1.81.1/devsecops_engine_tools/version.py

@@ -1 +0,0 @@
-version = '1.81.1'