regscale-cli 6.21.0.0__py3-none-any.whl → 6.21.2.0__py3-none-any.whl

regscale/integrations/commercial/wizv2/issue.py

@@ -262,12 +262,12 @@ class WizIssue(WizVulnerabilityIntegration):
             return "Wiz-Event"
         if not name:
             return f"Wiz-{service_type}-Event"
-        event_match = re.match(r"^([A-Za-z\s]+?)\s+(?:detection|event|alert|activity)", name)
+        event_match = re.match(r"^([A-Za-z\s]+?)\s+(detection|event|alert|activity)", name)
         if not event_match:
             return f"Wiz-{service_type}-Event"
 
         event_type = event_match.group(1).strip()
-        if event_type == "Suspicious activity":
+        if event_type == "Suspicious" and event_match.group(2).strip().lower() == "activity":
             return f"Wiz-{service_type}-SuspiciousActivity"
 
         event_type = "".join(word.capitalize() for word in event_type.split())

regscale/integrations/commercial/wizv2/parsers.py

@@ -76,11 +76,12 @@ def get_software_name_from_cpe(wiz_entity_properties: Dict, name: str) -> Dict:
     """
     cpe_info_dict = {
         "name": name,
+        "part": None,
         "software_name": None,
         "software_version": None,
         "software_vendor": None,
     }
-    if "cpe" in wiz_entity_properties.keys() and wiz_entity_properties.get("cpe"):
+    if "cpe" in wiz_entity_properties and wiz_entity_properties.get("cpe"):
         cpe_info_dict = extract_product_name_and_version(wiz_entity_properties.get("cpe", ""))
         cpe_info_dict["name"] = name
     return cpe_info_dict
@@ -349,7 +350,7 @@ def get_ip_address(
     ip6_address = None
     dns = None
     url = None
-    if "address" in wiz_entity_properties.keys():
+    if "address" in wiz_entity_properties:
         if wiz_entity_properties.get("addressType") == "IPV4":
             ip4_address = wiz_entity_properties.get("address")
         elif wiz_entity_properties.get("addressType") == "IPV6":