diff --git a/aspm_cli/scan/sast.py b/aspm_cli/scan/sast.py index 8f5e879..eea440e 100644 --- a/aspm_cli/scan/sast.py +++ b/aspm_cli/scan/sast.py @@ -12,12 +12,12 @@ class SASTScanner: opengrep_image = os.getenv("SCAN_IMAGE", "public.ecr.aws/k9v9d5v2/accuknox/opengrepjob:0.1.0") - codeassure_image = os.getenv("CODEASSURE_IMAGE", "public.ecr.aws/k9v9d5v2/accuknox/ai-sast-codeassure-cli:0.1.1") + codeassure_image = os.getenv("CODEASSURE_IMAGE", "public.ecr.aws/k9v9d5v2/accuknox/ai-sast-codeassure-cli:0.3.0") result_file = "results.json" def __init__(self, command=None, container_mode=True, severity = None, repo_url=None, commit_ref=None, commit_sha=None, - pipeline_id=None, job_url=None, ai_analysis=True, codeassure_config=None,aiscan_severity=None): + pipeline_id=None, job_url=None, ai_analysis=False, codeassure_config=None,aiscan_severity=None): """ :param command: Raw OpenGrep CLI args (string) :param container_mode: Run in Docker if True, else use local binary diff --git a/aspm_cli/tool/download.py b/aspm_cli/tool/download.py index ee986f9..2262807 100644 --- a/aspm_cli/tool/download.py +++ b/aspm_cli/tool/download.py @@ -20,7 +20,7 @@ class ToolDownloader: "sq-sast": "https://github.com/accuknox/aspm-scanner-cli/releases/download/v0.10.1/sq-sast.tar.gz", "sast": "https://github.com/accuknox/aspm-scanner-cli/releases/download/v0.10.1/sast.tar.gz", "dast": "https://github.com/accuknox/aspm-scanner-cli/releases/download/v0.10.1/dast.tar.gz", - "codeassure": "https://github.com/accuknox/aspm-scanner-cli/releases/download/v0.14.2/codeassure.tar.gz" + "codeassure": "https://github.com/accuknox/aspm-scanner-cli/releases/download/v0.14.3/codeassure.tar.gz" }, } diff --git a/utils/prepare-aspm-scanners.sh b/utils/prepare-aspm-scanners.sh index 0433327..08ec8c4 100755 --- a/utils/prepare-aspm-scanners.sh +++ b/utils/prepare-aspm-scanners.sh @@ -134,7 +134,7 @@ echo "✅ OpenJDK ${JDK_VERSION} + ZAP ${ZAP_VERSION} packaged into '$DAST_TAR'" ### CodeAssure -> codeassure.tar.gz echo "=== [7/7] Building CodeAssure ===" CODEASSURE_REPO="https://github.com/accuknox/codeassure-cli.git" -CODEASSURE_VERSION="v0.1.1" +CODEASSURE_VERSION="v0.3.0" CODEASSURE_FOLDER="codeassure" CODEASSURE_TAR="codeassure.tar.gz" TEMP_CODEASSURE="temp_codeassure_build"