diff --git a/socketsecurity/__init__.py b/socketsecurity/__init__.py index c45bd51..c545116 100644 --- a/socketsecurity/__init__.py +++ b/socketsecurity/__init__.py @@ -1,3 +1,3 @@ __author__ = 'socket.dev' -__version__ = '2.0.40' +__version__ = '2.0.41' diff --git a/socketsecurity/core/__init__.py b/socketsecurity/core/__init__.py index e16b35d..67cf0e2 100644 --- a/socketsecurity/core/__init__.py +++ b/socketsecurity/core/__init__.py @@ -801,7 +801,6 @@ def add_package_alerts_to_collection(self, package: Package, alerts_collection: alert = Alert(**alert_item) props = getattr(self.config.all_issues, alert.type, default_props) introduced_by = self.get_source_data(package, packages) - issue_alert = Issue( pkg_type=package.type, pkg_name=package.name, diff --git a/socketsecurity/core/messages.py b/socketsecurity/core/messages.py index 25a29d8..435afe5 100644 --- a/socketsecurity/core/messages.py +++ b/socketsecurity/core/messages.py @@ -3,6 +3,7 @@ import re from pathlib import Path +from docutils.nodes import title from mdutils import MdUtils from prettytable import PrettyTable @@ -233,10 +234,21 @@ def create_security_comment_sarif(diff) -> dict: # Create a unique rule id and name by appending the manifest file. unique_rule_id = f"{base_rule_id} ({mf})" rule_name = f"Alert {base_rule_id} ({mf})" - - short_desc = (f"{alert.props.get('note', '')}

Suggested Action:
{alert.suggestion}" + props = {} + if hasattr(alert, 'props'): + props = alert.props + suggestion = '' + if hasattr(alert, 'suggestion'): + suggestion = alert.suggestion + alert_title = '' + if hasattr(alert, 'title'): + alert_title = alert.title + description = '' + if hasattr(alert, 'description'): + description = alert.description + short_desc = (f"{props.get('note', '')}

Suggested Action:
{suggestion}" f"
{socket_url}") - full_desc = "{} - {}".format(alert.title, alert.description.replace('\r\n', '
')) + full_desc = "{} - {}".format(alert_title, description.replace('\r\n', '
')) if unique_rule_id not in rules_map: rules_map[unique_rule_id] = {