🎉 Add fix_available to AnchoreEngine (#13060)

Author: manuel-sommer

dojo/tools/anchore_engine/parser.py

@@ -46,12 +46,12 @@ def get_findings_with_metadata(self, data, test):
                 severity = "Info"
 
             mitigation = "No fix available."
-
+            fix_available = False
             if item.get("fixAvailable") and item["fixAvailable"] != "None":
                 mitigation = f"Upgrade to: {' or '.join(item['fixAvailable'].split(','))}\n\n"
                 mitigation += f"URL: {item.get('link', 'None')}"
+                fix_available = True
             cvssv3_base_score = item.get("nvdCvssBaseScore")
-
             if isinstance(cvssv3_base_score, str) and cvssv3_base_score.replace(".", "", 1).isdigit():
                 cvssv3_base_score = float(cvssv3_base_score)
             elif not isinstance(cvssv3_base_score, int | float):
@@ -87,6 +87,7 @@ def get_findings_with_metadata(self, data, test):
                     static_finding=True,
                     dynamic_finding=False,
                     vuln_id_from_tool=vulnerability_id,
+                    fix_available=fix_available,
                 )
 
                 if vulnerability_id:
@@ -142,7 +143,9 @@ def get_findings_without_metadata(self, data, test):
                 "Upgrade to " + item["package_name"] + " " + item["fix"] + "\n"
             )
             mitigation += "URL: " + item["url"] + "\n"
-
+            fix_available = True
+            if item["fix"] == "None":
+                fix_available = False
             cvssv3_base_score = None
             if item["feed"] == "nvdv2" or item["feed"] == "vulnerabilities":
                 if "nvd_data" in item and len(item["nvd_data"]) > 0:
@@ -213,6 +216,7 @@ def get_findings_without_metadata(self, data, test):
                     static_finding=True,
                     dynamic_finding=False,
                     vuln_id_from_tool=item.get("vuln"),
+                    fix_available=fix_available,
                 )
                 if vulnerability_id:
                     find.unsaved_vulnerability_ids = [vulnerability_id]

unittests/tools/test_anchore_engine_parser.py

@@ -21,6 +21,8 @@ def test_anchore_engine_parser_has_many_findings(self):
             parser = AnchoreEngineParser()
             findings = parser.get_findings(testfile, Test())
             self.assertEqual(23, len(findings))
+            finding = findings[5]
+            self.assertEqual(finding.fix_available, True)
 
     def test_anchore_engine_parser_has_many_findings_2_4_1(self):
         with (get_unit_tests_scans_path("anchore_engine") / "many_vulns_2.4.1.json").open(encoding="utf-8") as testfile:
@@ -34,6 +36,7 @@ def test_anchore_engine_parser_has_many_findings_2_4_1(self):
             self.assertEqual(6.7, finding.cvssv3_score)
             self.assertEqual(1, len(finding.unsaved_vulnerability_ids))
             self.assertEqual("CVE-2020-13776", finding.unsaved_vulnerability_ids[0])
+            self.assertEqual(finding.fix_available, False)
 
     def test_anchore_engine_parser_new_fomrat_issue_11552(self):
         with (get_unit_tests_scans_path("anchore_engine") / "new_format_issue_11552.json").open(encoding="utf-8") as testfile: