dojo/tools/intsights/json_handler.py - master - Art86/DefectDojo-DevSecOps

dojo/tools/intsights/json_handler.py

51 строка2 KB

kiblik

Ruff: add and fix COM (#10086)

03 июл 2024, 23:16

03 июл 2024, 23:16876070f

import json


class IntSightsJSONParser:
    def _parse_json(self, json_file) -> [dict]:
        """
        Parses entries from the JSON object into a list of alerts
        Args:
            json_file: The JSON file object to parse
        Returns:
            A list of alerts [dict()]
        """
        alerts = []

        original_alerts = json.load(json_file)
        for original_alert in original_alerts.get("Alerts", []):
            alert = {}
            alert["alert_id"] = original_alert["_id"]
            alert["title"] = original_alert["Details"]["Title"]
            alert["description"] = original_alert["Details"]["Description"]
            alert["severity"] = original_alert["Details"]["Severity"]
            alert["type"] = original_alert["Details"]["Type"]
            alert["source_date"] = original_alert["Details"]["Source"].get(
                "Date", "None provided",
            )
            alert["report_date"] = original_alert.get(
                "FoundDate", "None provided",
            )
            alert["network_type"] = original_alert["Details"]["Source"].get(
                "NetworkType",
            )
            alert["source_url"] = original_alert["Details"]["Source"].get(
                "URL",
            )
            alert["assets"] = ",".join(
                [item.get("Value") for item in original_alert["Assets"]],
            )
            alert["tags"] = original_alert["Details"].get("Tags")
            alert["status"] = (
                "Closed"
                if original_alert["Closed"].get("IsClosed")
                else "Open"
            )
            alert["alert_link"] = (
                f"https://dashboard.intsights.com/#/threat-command/alerts?search="
                f'{original_alert["_id"]}'
            )

            alerts.append(alert)

        return alerts