Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

update: octoxlabs integration #37676

Merged
merged 11 commits into from
Dec 31, 2024

Conversation

ogulcanhero
Copy link
Contributor

Status

  • In Progress
  • Ready
  • In Hold - (Reason for hold)

Description

Octox Labs Cyber Security Asset Management platform XSoar Integration update.

Minimum version of Cortex XSOAR

  • 6.0.0
  • 6.1.0
  • 6.2.0
  • 6.5.0
  • 6.12.0

Must have

  • Tests
  • Documentation

@CLAassistant
Copy link

CLAassistant commented Dec 13, 2024

CLA assistant check
All committers have signed the CLA.

@content-bot content-bot added Contribution Thank you! Contributions are always welcome! External PR Partner Support Level Indicates that the contribution is for Partner supported pack labels Dec 13, 2024
@content-bot content-bot changed the base branch from master to contrib/ogulcanhero_octoxlabs December 13, 2024 13:51
@content-bot content-bot requested a review from MLainer1 December 13, 2024 13:51
@content-bot
Copy link
Collaborator

Thank you for your contribution. Your generosity and caring are unrivaled! Make sure to register your contribution by filling the Contribution Registration form, so our content wizard @MLainer1 will know the proposed changes are ready to be reviewed.
For your convenience, here is a link to the contributions SLAs document.

@content-bot
Copy link
Collaborator

Hi @ogulcanhero, thanks for contributing to the XSOAR marketplace. To receive credit for your generous contribution please follow this link.

Copy link
Contributor

@MLainer1 MLainer1 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you for your contribution.
A few notes:

  1. Make sure to add a human readable output for every command.
  2. Add tests for the new commands.

Let me know if you need any help/

description: 'Specific Scroll Id'
type: String
- contextPath: OctoxLabs.ScrolledApplications.results
description: 'List<Dict> Application information.'
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
description: 'List<Dict> Application information.'
description: 'List Application information.'

@@ -43,6 +50,10 @@ def run_command(
"octoxlabs-get-user-by-username": get_user_by_username,
"octoxlabs-get-groups": get_groups,
"octoxlabs-get-permissions": get_permissions,
"octoxlabs-search-scroll-devices": search_scroll_devices,
"octoxlabs-search-scroll-users-inventory": search_scroll_users,
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This command is missing from the .yml file

description: 'Specific Scroll Id'
type: String
- contextPath: OctoxLabs.ScrolledDevices.results
description: 'List<Dict> Device information.'
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
description: 'List<Dict> Device information.'
description: 'List Device information.'

- default:
description: 'Page.'
name: page
- default:
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

In the code it looks like there is a default size: 50. It is better to add this in the description

description: 'Fields.'
isArray: true
name: fields
- default:
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

In the code it looks like there is a default size: 1. It is better to add this in the description

description: 'Fields.'
isArray: true
name: fields
- default:
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

In the code it looks like there is a default size: 1. It is better to add this in the description

- default:
description: 'Page.'
name: page
- default:
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

In the code it looks like there is a default size: 50. It is better to add this in the description

@@ -28,7 +30,12 @@ def run_command(
"octoxlabs-get-discoveries": get_discoveries,
"octoxlabs-get-last-discovery": get_last_discovery,
"octoxlabs-search-devices": search_devices,
"octoxlabs-search-users-inventory": search_users_inventory,
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This command is missing from the .yml file

Comment on lines 9 to 10
# from Packs.Base.Scripts.CommonServerPython.CommonServerPython import CommandResults

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is it necessary?

Comment on lines +18 to +28
- name: https_proxy
display: HTTPS Proxy
required: false
type: 0
additionalinfo: Your HTTPS Proxy URL
- name: no_verify
required: false
type: 8
display: No Verify
additionalinfo: Don't Verify SSL

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Those 2 new parameters are not documented in the release notes

@MLainer1 MLainer1 added pending-demo Demo pending pending-contributor The PR is pending the response of its creator and removed pending-demo Demo pending labels Dec 15, 2024
@ogulcanhero
Copy link
Contributor Author

Hi @MLainer1, thank you for your review. I'm having a problem with the demisto-sdk lint command. When I run the code, I get the error lint() got an unexpected keyword argument 'console_log_threshold'. Is this a known bug?

@MLainer1
Copy link
Contributor

Hi @MLainer1, thank you for your review. I'm having a problem with the demisto-sdk lint command. When I run the code, I get the error lint() got an unexpected keyword argument 'console_log_threshold'. Is this a known bug?

Hi @ogulcanhero, it is a known issue, and a fix will be out in the next few days.
You can use the pre-commit command in the mean time.

@ogulcanhero
Copy link
Contributor Author

Hi @MLainer1, I have 2 questions;

  • Pre-commit is completely passed in my local, I couldn't understand the reason for the error here.
  • Is there anything I need to do for the Legacy Validate test?

Thank You!

@MLainer1
Copy link
Contributor

Hi @ogulcanhero, are you running the demisto-sdk pre-commit command? Is your demisto-sdk up to date with the latest version?

@ogulcanhero
Copy link
Contributor Author

Hi @MLainer1 ,
Yes, I use demisto-sdk pre-commit and I am sure that demisto-sdk is in the latest version because when I had a problem with lint, the first thing I did was to update demisto-sdk.

@MLainer1
Copy link
Contributor

@ogulcanhero It looks like the pre-commit fails to add a dot at the end of some sentences. I think that adding that manually shouldn't take more than a few minutes.

@ogulcanhero
Copy link
Contributor Author

Hi @MLainer1,
I think everything is ok. When can you merge.
Thank You!

@MLainer1
Copy link
Contributor

MLainer1 commented Dec 22, 2024

Hi @ogulcanhero, let's schedule a demo to review your changes and make sure everything works as expected. I'll reach out through DFIR to schedule it.

@MLainer1 MLainer1 added the pending-demo Demo pending label Dec 22, 2024
@MLainer1 MLainer1 added post-demo and removed pending-demo Demo pending labels Dec 30, 2024
@ogulcanhero
Copy link
Contributor Author

Hi @MLainer1 ,
Thank you for the review. Is it possible for us to make the improvements you mentioned for now in the next version because our customer has been waiting for the features we added for a long time?
Have a nice day!

@MLainer1
Copy link
Contributor

@ogulcanhero Yes, as the code works and my suggestions are for the visibility of the commands (human readable and better error management)

@MLainer1 MLainer1 added the ready-for-instance-test In contribution PRs, this label will cause a trigger of a build with a modified pack from the PR. label Dec 30, 2024
@content-bot
Copy link
Collaborator

For the Reviewer: Trigger build request has been accepted for this contribution PR.

@content-bot
Copy link
Collaborator

For the Reviewer: Successfully created a pipeline in GitLab with url: https://gitlab.xdr.pan.local/xdr/cortex-content/content/-/pipelines/1893944

@content-bot content-bot removed the ready-for-instance-test In contribution PRs, this label will cause a trigger of a build with a modified pack from the PR. label Dec 30, 2024
@MLainer1
Copy link
Contributor

@ogulcanhero, is the PR finished on your side?

@ogulcanhero
Copy link
Contributor Author

Yes @MLainer1 , Thank you!

@MLainer1 MLainer1 self-requested a review December 31, 2024 07:57
@MLainer1 MLainer1 merged commit 375fcf7 into demisto:contrib/ogulcanhero_octoxlabs Dec 31, 2024
32 checks passed
@content-bot content-bot mentioned this pull request Dec 31, 2024
10 tasks
Copy link

Thank you for your contribution. Your external PR has been merged and the changes are now included in an internal PR for further review. The internal PR will be merged to the master branch within 3 business days.

MLainer1 pushed a commit that referenced this pull request Dec 31, 2024
* initial: scroll

* add: new commands

* add: tests and fix docs and typo func names

* fix: version number

* fix: pre-commit problems

* add: new tests for coverage

* fix: yml file descriptions

* fix: yml file descriptions-2

---------

Co-authored-by: ogulcanhero <[email protected]>
Co-authored-by: ahmet kotan <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Contribution Form Filled Whether contribution form filled or not. Contribution Thank you! Contributions are always welcome! docs-approved External PR Partner Support Level Indicates that the contribution is for Partner supported pack Partner Partner-Approved pending-contributor The PR is pending the response of its creator post-demo
Projects
None yet
Development

Successfully merging this pull request may close these issues.

7 participants