Examples with Filter com.checkmarx.sdk.dto.sast.Filter used on opensource projects

Example 1 with Filter

use of com.checkmarx.sdk.dto.sast.Filter in project cx-flow by checkmarx-ltd.

the class ConfigurationOverrider method overrideFilters.

private void overrideFilters(FlowOverride flowOverride, ScanRequest request, Map<String, String> overrideReport) {
    Optional.ofNullable(flowOverride.getFilters()).ifPresent(override -> {
        FilterFactory filterFactory = new FilterFactory();
        ControllerRequest controllerRequest = new ControllerRequest(override.getSeverity(), override.getCwe(), override.getCategory(), override.getStatus(), override.getState());
        FilterConfiguration filterConfig = filterFactory.getFilter(controllerRequest, null);
        request.setFilter(filterConfig);
        String filterDescr;
        List<Filter> simpleFilters = Optional.ofNullable(filterConfig).map(FilterConfiguration::getSastFilters).map(EngineFilterConfiguration::getSimpleFilters).orElse(null);
        if (CollectionUtils.isNotEmpty(simpleFilters)) {
            filterDescr = simpleFilters.stream().map(Object::toString).collect(Collectors.joining(","));
        } else {
            filterDescr = "EMPTY";
        }
        overrideReport.put("filters", filterDescr);
    });
}

Example 2 with Filter

use of com.checkmarx.sdk.dto.sast.Filter in project cx-flow by checkmarx-ltd.

the class ScanSteps method prepareFilterList.

private LinkedList prepareFilterList(String filterStr, Filter.Type type) {
    LinkedList filterList = new LinkedList<String>();
    String[] filterSplitArr = new String[1];
    if (filterStr.contains(",")) {
        filterSplitArr = filterStr.split(",");
    } else {
        filterSplitArr[0] = filterStr;
    }
    for (String currfilter : filterSplitArr) {
        Filter filter = new Filter(type, currfilter);
        filters.add(new Filter(type, currfilter));
        filterList.add(filter);
    }
    return filterList;
}

Example 3 with Filter

use of com.checkmarx.sdk.dto.sast.Filter in project cx-flow by checkmarx-ltd.

the class RunPublishProcessSteps method setResultsAndFilters.

@Given("there are {int} findings from which {int} results match the filter")
public void setResultsAndFilters(int totalResults, int matchingResults) {
    findingsType = FindingsType.DIFFERENT_SEVERITIES;
    numOfFindings = matchingResults;
    this.totalResults = totalResults;
    needFilter = true;
    Filter filter = Filter.builder().type(Filter.Type.SEVERITY).value("High").build();
    filters = Collections.singletonList(filter);
}

Example 4 with Filter

use of com.checkmarx.sdk.dto.sast.Filter in project cx-flow by checkmarx-ltd.

the class RunPublishProcessSteps method verifyNumOfIssuesForSeverities.

@Then("verify results contains {int}, {int}, {int}, {int} for severities {}")
public void verifyNumOfIssuesForSeverities(int high, int medium, int low, int info, String severities) {
    List<Filter> filters = createFiltersFromString(severities, Filter.Type.SEVERITY);
    Map<Filter.Severity, Integer> actualJira = jiraUtils.getIssuesPerSeverity(jiraProperties.getProject());
    for (Filter filter : filters) {
        Filter.Severity severity = Filter.Severity.valueOf(filter.getValue().toUpperCase());
        switch(severity) {
            case HIGH:
                Assert.assertEquals("HIGH issues does not match", (int) actualJira.get(Filter.Severity.HIGH), high);
                break;
            case MEDIUM:
                Assert.assertEquals("Medium issues does not match", (int) actualJira.get(Filter.Severity.MEDIUM), medium);
                break;
            case LOW:
                Assert.assertEquals("Medium issues does not match", (int) actualJira.get(Filter.Severity.LOW), low);
                break;
            case INFO:
                Assert.assertEquals("Medium issues does not match", (int) actualJira.get(Filter.Severity.INFO), info);
                break;
        }
    }
}

Example 5 with Filter

use of com.checkmarx.sdk.dto.sast.Filter in project cx-flow by checkmarx-ltd.

the class FlowControllerTest method testScanApiWithFilters.

@ParameterizedTest
@MethodSource("generateDataForScanApi")
public void testScanApiWithFilters(String filterSeverity, String filterCwe, String filterOwasp, String filterType, String filterStatus, String id) {
    FlowController.CxScanRequest request = getScanRequestWithDefaults();
    List<Filter> filters = prepareScanApiFilters(filterSeverity, filterCwe, filterOwasp, filterType, filterStatus);
    request.setFilters(filters);
    ResponseEntity<EventResponse> response = flowController.initiateScan(request, flowProperties.getToken());
    ArgumentCaptor<ScanRequest> captor = ArgumentCaptor.forClass(ScanRequest.class);
    verify(flowService).initiateAutomation(captor.capture());
    ScanRequest actual = captor.getValue();
    assertScanApiFilters(actual.getFilter().getSastFilters().getSimpleFilters(), filters);
    assertOKResponse(response);
}