s1-shift-left-cli 0.5.2__tar.gz → 0.5.3__tar.gz

{s1_shift_left_cli-0.5.2 → s1_shift_left_cli-0.5.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: s1_shift_left_cli
-Version: 0.5.2
+Version: 0.5.3
 Summary: SentinelOne CNS CLI is an extension of our vision to shift-left security with SentinelOne CNS.
 License: Proprietary
 Author: pingsafe-dev

{s1_shift_left_cli-0.5.2 → s1_shift_left_cli-0.5.3}/pyproject.toml

@@ -8,7 +8,7 @@ name = "s1_shift_left_cli"
 packages = [
     { include = "s1_cns_cli", from = "src" }
 ]
-version = "0.5.2" # update version in src/s1_cns_cli/version.py as well
+version = "0.5.3" # update version in src/s1_cns_cli/version.py as well
 authors = ["pingsafe-dev <dev@pingsafe.com>"]
 description = "SentinelOne CNS CLI is an extension of our vision to shift-left security with SentinelOne CNS."
 readme = "PYPI_README.md"

{s1_shift_left_cli-0.5.2 → s1_shift_left_cli-0.5.3}/src/s1_cns_cli/cli/scan/vulnerability.py

@@ -124,10 +124,41 @@ def vulnerability_pre_evaluation(args, cache_directory):
     if not vuln_scan_enabled:
         raise ScanNotEnabledException("vuln scan is disabled")
 
+
+def group_vulnerabilities_by_cve(findings):
+    """
+    Group vulnerability findings by their unique characteristics (CVE ID, package, version, etc.)
+    and combine paths from duplicate entries into a single paths array.
+    """
+    grouped = {}
+    
+    for finding in findings:
+        # Create a unique key based on CVE characteristics
+        key = (
+            finding.get("id", ""),
+            finding.get("package", ""),
+            finding.get("version", ""),
+        )
+        
+        if key in grouped:
+            # Merge paths from duplicate entries
+            existing_paths = set(grouped[key].get("paths", []))
+            new_paths = set(finding.get("paths", []))
+            combined_paths = sorted(list(existing_paths.union(new_paths)))
+            grouped[key]["paths"] = combined_paths
+        else:
+            # First occurrence of this CVE, store it
+            grouped[key] = finding.copy()
+    
+    return list(grouped.values())
+
+
 def vulnerability_post_evaluation(args, findings, global_config_data, vulnerability_config_data):
     exit_code = 0
     if len(findings) > 0:
-        sorted_findings = sorted(findings, key=get_priority)
+        # Group findings by CVE ID to combine duplicate entries with different paths
+        grouped_findings = group_vulnerabilities_by_cve(findings)
+        sorted_findings = sorted(grouped_findings, key=get_priority)
         actionable_findings, _ = get_actionable_and_non_actionable(sorted_findings,
                                                                    vulnerability_config_data["severity"])
 

s1_shift_left_cli-0.5.3/src/s1_cns_cli/version.py

@@ -0,0 +1,2 @@
+version = "0.5.3" # update version in pyproject.toml
+build_type = "pypi" # "pypi"/"testpypi"/"local"

s1_shift_left_cli-0.5.2/src/s1_cns_cli/version.py

@@ -1,2 +0,0 @@
-version = "0.5.2" # update version in pyproject.toml
-build_type = "pypi" # "pypi"/"testpypi"/"local"