Skip to content
This repository was archived by the owner on Apr 20, 2022. It is now read-only.

Commit e13edc7

Browse files
authored
Bug/package sha1 and vul level bug (#128)
* Update entrypoint.sh * merge main * fix: python package sha1 and vul_level bug * fix: python package sha1 and vul_level bug
1 parent a1f88d2 commit e13edc7

File tree

1 file changed

+9
-2
lines changed

1 file changed

+9
-2
lines changed

core/tasks.py

Lines changed: 9 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -39,6 +39,7 @@
3939
from core.plugins.export_report import ExportPort
4040
from dongtai.models.project_report import ProjectReport
4141
import requests
42+
from hashlib import sha1
4243

4344
LANGUAGE_MAP = {
4445
"JAVA": 1,
@@ -399,7 +400,7 @@ def sca_scan_asset(asset):
399400

400401
if len(levels) > 0:
401402

402-
if 'high' in levels:
403+
if 'critical' in levels:
403404
level = 'high'
404405
elif 'high' in levels:
405406
level = 'high'
@@ -409,7 +410,8 @@ def sca_scan_asset(asset):
409410
level = 'low'
410411
else:
411412
level = 'info'
412-
413+
else:
414+
level = 'info'
413415
new_level = IastVulLevel.objects.get(name=level)
414416
if asset.level != new_level:
415417
asset.level = IastVulLevel.objects.get(name=level)
@@ -450,6 +452,7 @@ def update_one_sca(agent_id, package_path, package_signature, package_name, pack
450452
asset_count = Asset.objects.values("id").filter(signature_value=package_signature,
451453
agent__in=current_version_agents).count()
452454
else:
455+
package_signature = sha_1('-'.join([package_name, version]))
453456
asset_count = Asset.objects.values("id").filter(package_name=package_name,
454457
version=version,
455458
agent__in=current_version_agents).count()
@@ -499,6 +502,10 @@ def update_all_sca():
499502
except Exception as e:
500503
logger.error(f'SCA离线检测出错,错误原因:{e}')
501504

505+
def sha_1(raw):
506+
h = sha1()
507+
h.update(raw.encode('utf-8'))
508+
return h.hexdigest()
502509

503510
def is_alive(agent_id, timestamp):
504511
"""

0 commit comments

Comments
 (0)