regscale-cli 6.27.1.0__py3-none-any.whl → 6.27.3.0__py3-none-any.whl

tests/regscale/integrations/commercial/wizv2/test_wizv2.py

@@ -522,6 +522,35 @@ class TestWizVulnerabilityIntegration(unittest.TestCase):
         severity = WizVulnerabilityIntegration.get_issue_severity("Unknown")
         self.assertEqual(severity, regscale_models.IssueSeverity.Low)
 
+    def test_get_issue_severity_none_maps_to_not_assigned(self, mock_parent_init):
+        """Test REG-17981: Handle NONE severity from Wiz config findings."""
+        severity = WizVulnerabilityIntegration.get_issue_severity("None")
+        self.assertEqual(severity, regscale_models.IssueSeverity.NotAssigned)
+
+    @patch("regscale.integrations.commercial.wizv2.scanner.WizVulnerabilityIntegration.authenticate")
+    def test_should_process_finding_by_severity_none_treated_as_informational(
+        self, mock_authenticate, mock_parent_init
+    ):
+        """Test REG-17981: NONE severity should be treated as informational for filtering."""
+        mock_authenticate.return_value = None
+        integration = WizVulnerabilityIntegration(plan_id=self.plan_id)
+        self._initialize_scanner_attributes(integration)
+        integration.app.config["scanners"] = {"wiz": {"minimumSeverity": "low"}}
+        # NONE severity should be filtered out when min is "low" (treated as informational)
+        self.assertFalse(integration.should_process_finding_by_severity("NONE"))
+
+    @patch("regscale.integrations.commercial.wizv2.scanner.WizVulnerabilityIntegration.authenticate")
+    def test_should_process_finding_by_severity_none_allowed_with_informational(
+        self, mock_authenticate, mock_parent_init
+    ):
+        """Test REG-17981: NONE severity should be allowed when min severity is informational."""
+        mock_authenticate.return_value = None
+        integration = WizVulnerabilityIntegration(plan_id=self.plan_id)
+        self._initialize_scanner_attributes(integration)
+        integration.app.config["scanners"] = {"wiz": {"minimumSeverity": "informational"}}
+        # NONE severity should be processed when min is "informational"
+        self.assertTrue(integration.should_process_finding_by_severity("NONE"))
+
     @patch("regscale.integrations.commercial.wizv2.scanner.WizVulnerabilityIntegration.authenticate")
     def test_should_process_finding_by_severity_critical(self, mock_authenticate, mock_parent_init):
         mock_authenticate.return_value = None
@@ -687,6 +716,63 @@ class TestWizVulnerabilityIntegration(unittest.TestCase):
         asset_id = integration.get_asset_id_from_node(node, WizVulnerabilityType.VULNERABILITY)
         self.assertIsNone(asset_id)
 
+    @patch("regscale.integrations.commercial.wizv2.scanner.WizVulnerabilityIntegration.authenticate")
+    def test_get_asset_id_with_none_value_returns_none(self, mock_authenticate, mock_parent_init):
+        """Test REG-17981: Handle None value for asset container without AttributeError."""
+        from regscale.integrations.commercial.wizv2.core.constants import WizVulnerabilityType
+
+        mock_authenticate.return_value = None
+        integration = WizVulnerabilityIntegration(plan_id=self.plan_id)
+        node = {"vulnerableAsset": None}
+        asset_id = integration.get_asset_id_from_node(node, WizVulnerabilityType.VULNERABILITY)
+        self.assertIsNone(asset_id)
+
+    @patch("regscale.integrations.commercial.wizv2.scanner.WizVulnerabilityIntegration.authenticate")
+    def test_get_asset_id_with_none_resource_returns_none(self, mock_authenticate, mock_parent_init):
+        """Test REG-17981: Handle None value for resource field without AttributeError."""
+        from regscale.integrations.commercial.wizv2.core.constants import WizVulnerabilityType
+
+        mock_authenticate.return_value = None
+        integration = WizVulnerabilityIntegration(plan_id=self.plan_id)
+        node = {"resource": None}
+        asset_id = integration.get_asset_id_from_node(node, WizVulnerabilityType.CONFIGURATION)
+        self.assertIsNone(asset_id)
+
+    @patch("regscale.integrations.commercial.wizv2.scanner.WizVulnerabilityIntegration.authenticate")
+    def test_get_asset_id_with_non_dict_value_returns_none(self, mock_authenticate, mock_parent_init):
+        """Test REG-17981: Handle non-dict value for asset container without AttributeError."""
+        from regscale.integrations.commercial.wizv2.core.constants import WizVulnerabilityType
+
+        mock_authenticate.return_value = None
+        integration = WizVulnerabilityIntegration(plan_id=self.plan_id)
+        # Test with a string value instead of dict
+        node = {"vulnerableAsset": "not-a-dict"}
+        asset_id = integration.get_asset_id_from_node(node, WizVulnerabilityType.VULNERABILITY)
+        self.assertIsNone(asset_id)
+
+    @patch("regscale.integrations.commercial.wizv2.scanner.WizVulnerabilityIntegration.authenticate")
+    def test_get_provider_unique_id_with_none_value_returns_none(self, mock_authenticate, mock_parent_init):
+        """Test REG-17981: Handle None value in get_provider_unique_id_from_node without AttributeError."""
+        from regscale.integrations.commercial.wizv2.core.constants import WizVulnerabilityType
+
+        mock_authenticate.return_value = None
+        integration = WizVulnerabilityIntegration(plan_id=self.plan_id)
+        node = {"vulnerableAsset": None}
+        provider_id = integration.get_provider_unique_id_from_node(node, WizVulnerabilityType.VULNERABILITY)
+        self.assertIsNone(provider_id)
+
+    @patch("regscale.integrations.commercial.wizv2.scanner.WizVulnerabilityIntegration.authenticate")
+    def test_get_provider_unique_id_with_non_dict_returns_none(self, mock_authenticate, mock_parent_init):
+        """Test REG-17981: Handle non-dict value in get_provider_unique_id_from_node without AttributeError."""
+        from regscale.integrations.commercial.wizv2.core.constants import WizVulnerabilityType
+
+        mock_authenticate.return_value = None
+        integration = WizVulnerabilityIntegration(plan_id=self.plan_id)
+        # Test with a list value instead of dict
+        node = {"vulnerableAsset": ["not", "a", "dict"]}
+        provider_id = integration.get_provider_unique_id_from_node(node, WizVulnerabilityType.VULNERABILITY)
+        self.assertIsNone(provider_id)
+
     @patch("regscale.integrations.commercial.wizv2.scanner.WizVulnerabilityIntegration.authenticate")
     def test_get_provider_unique_id_standard(self, mock_authenticate, mock_parent_init):
         from regscale.integrations.commercial.wizv2.core.constants import WizVulnerabilityType