regscale-cli 6.21.2.0__py3-none-any.whl → 6.28.2.1__py3-none-any.whl

regscale/models/integration_models/flat_file_importer/__init__.py

@@ -32,10 +32,9 @@ from regscale.core.app.utils.app_utils import (
 from regscale.core.app.utils.parser_utils import safe_datetime_str
 from regscale.integrations.scanner_integration import ScannerIntegration
 from regscale.models import IssueStatus, Metadata, regscale_models
-from regscale.models.app_models.mapping import Mapping
 from regscale.models.regscale_models import Asset, File, IssueSeverity, Vulnerability
 
-logger = logging.getLogger(__name__)
+logger = logging.getLogger("regscale")
 
 DT_FORMAT = "%Y-%m-%d"
 
@@ -931,13 +930,13 @@ class FlatFileImporter(ABC):
         return dict_content
 
     @staticmethod
-    def determine_severity(s: str) -> str:
+    def determine_severity(s: Optional[str] = None) -> IssueSeverity:
         """
         Determine the CVSS severity of the vulnerability
 
-        :param str s: The severity
+        :param Optional[str] s: The severity, defaults to None
         :return: The severity
-        :rtype: str
+        :rtype: IssueSeverity
         """
         mapping = {
             "critical": IssueSeverity.Critical,
@@ -950,9 +949,7 @@ class FlatFileImporter(ABC):
             "info": IssueSeverity.NotAssigned,
             "unknown": IssueSeverity.NotAssigned,
         }
-        severity = "info"
-        if s:
-            severity = s.lower()
+        severity = s.lower() if s else "info"
         return mapping.get(severity, IssueSeverity.NotAssigned)
 
     @staticmethod

regscale/models/integration_models/nexpose.py

@@ -25,11 +25,11 @@ CVE = "CVEs"
 
 class Nexpose(FlatFileImporter):  # pylint: disable=too-many-instance-attributes
     """
-    Nexpose Scan information
+    Nexpose Scan information with FedRAMP POAM export support
     """
 
     def __init__(self, **kwargs):  # pylint: disable=R0902
-        self.name = kwargs.get("name")
+        self.name: str = kwargs.get("name", "Nexpose")
         self.vuln_title = VULNERABILITY_TITLE
         self.vuln_id = VULNERABILITY_ID
         self.cvss3_score = CVSS3_SCORE
@@ -46,13 +46,18 @@ class Nexpose(FlatFileImporter):  # pylint: disable=too-many-instance-attributes
             "Solution",
             "CVEs",
         ]
-        self.mapping_file = kwargs.get("mappings_path")
-        self.disable_mapping = kwargs.get("disable_mapping")
+        self.mapping_file: Optional[str] = kwargs.get("mappings_path")
+        self.disable_mapping: Optional[bool] = kwargs.get("disable_mapping")
+        file_path: Optional[str] = kwargs.get("file_path")
         self.validater = ImportValidater(
-            self.required_headers, kwargs.get("file_path"), self.mapping_file, self.disable_mapping
+            self.required_headers, file_path or "", self.mapping_file or "", self.disable_mapping or False
         )
         self.headers = self.validater.parsed_headers
         self.mapping = self.validater.mapping
+
+        # Store file path for property generation
+        self.file_path = kwargs.get("file_path")
+
         logger = create_logger()
         super().__init__(
             logger=logger,
@@ -127,6 +132,8 @@ class Nexpose(FlatFileImporter):  # pylint: disable=too-many-instance-attributes
         :return: IssueSeverity or None
         :rtype: Optional[IssueSeverity]
         """
+        if not text_severity:
+            return None
         if text_severity.lower() == "low":
             return IssueSeverity.Low
         if text_severity.lower() in ["medium", "moderate"]:
@@ -170,9 +177,30 @@ class Nexpose(FlatFileImporter):  # pylint: disable=too-many-instance-attributes
 
         return severity
 
-    def create_vuln(self, dat: Optional[dict] = None, **kwargs) -> Optional[IntegrationFinding]:
+    def get_source_file_path(self) -> Optional[str]:
         """
-        Create an IntegrationFinding from a row in the Prisma/Nexpose csv file
+        Get source file path for POAM ID generation
+
+        Returns file_path if set, None otherwise.
+        This supports FedRAMP POAM export logic that generates POAM IDs
+        based on source file path properties (e.g., pdf, signatures, campaign, etc.)
+
+        Note: Properties must be created separately after Issue creation using
+        Property.create() or bulk operations, as IntegrationFinding doesn't
+        directly support properties.
+
+        :return: Source file path string or None
+        :rtype: Optional[str]
+        """
+        if not self.file_path:
+            return None
+        return str(self.file_path)
+
+    def create_vuln(
+        self, dat: Optional[dict] = None, **kwargs
+    ) -> Optional[IntegrationFinding]:  # pylint: disable=unused-argument
+        """
+        Create an IntegrationFinding from a row in the Nexpose csv file
 
         :param Optional[dict] dat: Data row from CSV file, defaults to None
         :param kwargs: Additional keyword arguments
@@ -189,8 +217,6 @@ class Nexpose(FlatFileImporter):  # pylint: disable=too-many-instance-attributes
         # Determine severity using priority logic
         severity = self._determine_severity(dat)
 
-        # Find matching asset
-
         # Extract date information
         first_seen = (
             self.mapping.get_value(dat, self.first_seen)
@@ -216,7 +242,7 @@ class Nexpose(FlatFileImporter):  # pylint: disable=too-many-instance-attributes
                 cvss_score=cvss_score or 0.0,
                 cvss_v3_score=cvss3_score or 0.0,
                 cvss_v2_score=cvss_score or 0.0,
-                plugin_text=description[:255],
+                plugin_text=description[:255] if description else "",
                 remediation=self.mapping.get_value(dat, "Solution"),
                 category="Hardware",
                 status=IssueStatus.Open,

regscale/models/integration_models/qualys.py

@@ -7,9 +7,8 @@ import logging
 
 # pylint: disable=C0415
 import re
-from calendar import firstweekday
 from datetime import datetime
-from typing import Any, Iterator, List, Optional, TextIO, TypeVar, Union
+from typing import Iterator, List, Optional, TextIO, TypeVar, Union
 
 from openpyxl.reader.excel import load_workbook
 from pandas import Timestamp
@@ -119,7 +118,7 @@ class Qualys(FlatFileImporter):
         return IntegrationAsset(
             name=self.mapping.get_value(dat, DNS),
             ip_address=self.mapping.get_value(dat, IP),
-            status=AssetStatus.Active.value,
+            status=AssetStatus.Active,
             cpu=0,
             ram=0,
             asset_category="Hardware",
@@ -162,7 +161,7 @@ class Qualys(FlatFileImporter):
         description: str = self.mapping.get_value(dat, "Threat")
         title = self.mapping.get_value(dat, self.vuln_title)
         severity = self.mapping.get_value(dat, SEVERITY)
-        regscale_severity = map_qualys_severity_to_regscale(int(severity))[1]
+        regscale_severity, _ = map_qualys_severity_to_regscale(int(severity))
         if dat:
             finding = IntegrationFinding(
                 control_labels=[],  # Add an empty list for control_labels