regscale-cli 6.21.2.0__py3-none-any.whl → 6.28.2.1__py3-none-any.whl

regscale/integrations/commercial/wizv2/compliance/__init__.py

@@ -0,0 +1,15 @@
+"""Compliance-specific functionality for Wiz integration."""
+
+from regscale.integrations.commercial.wizv2.compliance.helpers import (
+    AssetConsolidator,
+    ControlAssessmentProcessor,
+    ControlImplementationCache,
+    IssueFieldSetter,
+)
+
+__all__ = [
+    "AssetConsolidator",
+    "ControlAssessmentProcessor",
+    "ControlImplementationCache",
+    "IssueFieldSetter",
+]

regscale/integrations/commercial/wizv2/{policy_compliance_helpers.py → compliance/helpers.py}

@@ -266,32 +266,39 @@ class IssueFieldSetter:
             )
 
             for impl in implementations:
-                if not hasattr(impl, "controlID") or not impl.controlID:
-                    continue
-
-                # Check cache for security control
-                security_control = self.cache.get_security_control(impl.controlID)
-                if not security_control:
-                    security_control = regscale_models.SecurityControl.get_object(object_id=impl.controlID)
-                    if security_control:
-                        self.cache.set_security_control(impl.controlID, security_control)
-
-                if security_control and hasattr(security_control, "controlId"):
-                    from regscale.integrations.commercial.wizv2.policy_compliance import WizPolicyComplianceIntegration
-
-                    impl_control_id = WizPolicyComplianceIntegration._normalize_control_id_string(
-                        security_control.controlId
-                    )
-
-                    if impl_control_id == control_id:
-                        logger.debug(f"✓ Found control implementation {impl.id} for control {control_id}")
-                        return impl.id
+                if impl_id := self._check_implementation_match(impl, control_id):
+                    return impl_id
 
             return None
         except Exception as e:
             logger.error(f"Error finding control implementation for {control_id}: {e}")
             return None
 
+    def _check_implementation_match(self, impl, control_id: str) -> Optional[int]:
+        """Check if implementation matches the control ID."""
+        if not hasattr(impl, "controlID") or not impl.controlID:
+            return None
+
+        # Check cache for security control
+        security_control = self.cache.get_security_control(impl.controlID)
+        if not security_control:
+            security_control = regscale_models.SecurityControl.get_object(object_id=impl.controlID)
+            if security_control:
+                self.cache.set_security_control(impl.controlID, security_control)
+
+        if not security_control or not hasattr(security_control, "controlId"):
+            return None
+
+        from regscale.integrations.commercial.wizv2.policy_compliance import WizPolicyComplianceIntegration
+
+        impl_control_id = WizPolicyComplianceIntegration._normalize_control_id_string(security_control.controlId)
+
+        if impl_control_id == control_id:
+            logger.debug(f"✓ Found control implementation {impl.id} for control {control_id}")
+            return impl.id
+
+        return None
+
     def _get_or_find_assessment_id(self, impl_id: int) -> Optional[int]:
         """
         Get assessment ID from cache or database.
@@ -480,22 +487,26 @@ class ControlAssessmentProcessor:
             assessments = regscale_models.Assessment.get_all_by_parent(parent_id=impl_id, parent_module="controls")
 
             for assessment in assessments:
-                if hasattr(assessment, "actualFinish") and assessment.actualFinish:
-                    try:
-                        if isinstance(assessment.actualFinish, str):
-                            assessment_date = regscale_string_to_datetime(assessment.actualFinish).date()
-                        elif hasattr(assessment.actualFinish, "date"):
-                            assessment_date = assessment.actualFinish.date()
-                        else:
-                            assessment_date = assessment.actualFinish
+                if assessment_date := self._get_assessment_date(assessment):
+                    if assessment_date == today:
+                        self.cache.set_assessment(impl_id, assessment)
+                        return assessment
 
-                        if assessment_date == today:
-                            self.cache.set_assessment(impl_id, assessment)
-                            return assessment
-                    except Exception:
-                        continue
+            return None
+        except Exception:
+            return None
 
+    def _get_assessment_date(self, assessment):
+        """Extract date from assessment actualFinish field."""
+        if not hasattr(assessment, "actualFinish") or not assessment.actualFinish:
             return None
+
+        try:
+            if isinstance(assessment.actualFinish, str):
+                return regscale_string_to_datetime(assessment.actualFinish).date()
+            if hasattr(assessment.actualFinish, "date"):
+                return assessment.actualFinish.date()
+            return assessment.actualFinish
         except Exception:
             return None
 
@@ -511,8 +522,14 @@ class ControlAssessmentProcessor:
         result_color = "#d32f2f" if result == "Fail" else "#2e7d32"
         bg_color = "#ffebee" if result == "Fail" else "#e8f5e8"
 
-        html_parts = [
-            f"""
+        header_html = self._create_report_header(control_id, result, result_color, bg_color, len(compliance_items))
+        summary_html = self._create_report_summary(compliance_items) if compliance_items else ""
+
+        return "\n".join([header_html, summary_html])
+
+    def _create_report_header(self, control_id: str, result: str, result_color: str, bg_color: str, total: int) -> str:
+        """Create HTML header section for assessment report."""
+        return f"""
             <div style="margin-bottom: 20px; padding: 15px; border: 2px solid {result_color};
                         border-radius: 5px; background-color: {bg_color};">
                 <h3 style="margin: 0 0 10px 0; color: {result_color};">
@@ -522,34 +539,24 @@ class ControlAssessmentProcessor:
                    <span style="color: {result_color}; font-weight: bold;">{result}</span></p>
                 <p><strong>Assessment Date:</strong> {self.scan_date}</p>
                 <p><strong>Framework:</strong> {self.framework}</p>
-                <p><strong>Total Policy Assessments:</strong> {len(compliance_items)}</p>
+                <p><strong>Total Policy Assessments:</strong> {total}</p>
             </div>
             """
-        ]
-
-        if compliance_items:
-            pass_count = len(
-                [
-                    item
-                    for item in compliance_items
-                    if hasattr(item, "compliance_result")
-                    and item.compliance_result in ["PASS", "PASSED", "pass", "passed"]
-                ]
-            )
-            fail_count = len(compliance_items) - pass_count
 
-            unique_resources = set()
-            unique_policies = set()
+    def _create_report_summary(self, compliance_items: List[Any]) -> str:
+        """Create HTML summary section for assessment report."""
+        pass_count = len(
+            [
+                item
+                for item in compliance_items
+                if hasattr(item, "compliance_result") and item.compliance_result in ["PASS", "PASSED", "pass", "passed"]
+            ]
+        )
+        fail_count = len(compliance_items) - pass_count
 
-            for item in compliance_items:
-                if hasattr(item, "resource_id"):
-                    unique_resources.add(item.resource_id)
-                if hasattr(item, "description") and item.description:
-                    policy_desc = item.description[:50] + "..." if len(item.description) > 50 else item.description
-                    unique_policies.add(policy_desc)
+        unique_resources, unique_policies = self._extract_unique_items(compliance_items)
 
-            html_parts.append(
-                f"""
+        return f"""
             <div style="margin-top: 20px;">
                 <h4>Assessment Summary</h4>
                 <p><strong>Policy Assessments:</strong> {len(compliance_items)} total</p>
@@ -559,6 +566,17 @@ class ControlAssessmentProcessor:
                 <p><strong>Failing:</strong> <span style="color: #d32f2f;">{fail_count}</span></p>
             </div>
             """
-            )
 
-        return "\n".join(html_parts)
+    def _extract_unique_items(self, compliance_items: List[Any]):
+        """Extract unique resources and policies from compliance items."""
+        unique_resources = set()
+        unique_policies = set()
+
+        for item in compliance_items:
+            if hasattr(item, "resource_id"):
+                unique_resources.add(item.resource_id)
+            if hasattr(item, "description") and item.description:
+                policy_desc = item.description[:50] + "..." if len(item.description) > 50 else item.description
+                unique_policies.add(policy_desc)
+
+        return unique_resources, unique_policies