🎉 Add 'fix_available' field to legitify (#13791)

Author: manuel-sommer

dojo/tools/legitify/parser.py

@@ -53,16 +53,21 @@ def get_findings(self, file, test):
                         endpoints.add(Endpoint.from_uri(url))
 
             if is_finding:
+                remediation_steps = policy_info.get("remediationSteps", [])
+                fix_available = False
+                if remediation_steps:
+                    fix_available = True
                 finding = Finding(
                     description=policy_info.get("description", ""),
                     dynamic_finding=False,
                     impact="\n".join(policy_info.get("threat", [])),
-                    mitigation="\n".join(policy_info.get("remediationSteps", [])),
+                    mitigation="\n".join(remediation_steps),
                     references="\n".join(references),
                     severity=self.severity_mapper(policy_info.get("severity", "LOW")),
                     static_finding=True,
                     title=f'{policy_info.get("namespace", "").capitalize()} | {policy_info.get("title", "")}',
                     vuln_id_from_tool=policy_info.get("policyName", None),
+                    fix_available=fix_available,
                 )
                 finding.unsaved_endpoints = list(endpoints)
                 findings.append(finding)

unittests/tools/test_legitify_parser.py

@@ -16,6 +16,7 @@ def test_parse_file_with_many_findings(self):
                 self.assertEqual("Repository | Default Branch Should Require Code Review", finding.title)
                 self.assertFalse(finding.dynamic_finding)
                 self.assertTrue(finding.static_finding)
+                self.assertTrue(finding.fix_available)
             for finding in findings:
                 for endpoint in finding.unsaved_endpoints:
                     endpoint.clean()
@@ -32,6 +33,7 @@ def test_parse_file_with_one_finding(self):
                 self.assertEqual("Repository | Default Branch Should Require Code Review", finding.title)
                 self.assertFalse(finding.dynamic_finding)
                 self.assertTrue(finding.static_finding)
+                self.assertTrue(finding.fix_available)
             for finding in findings:
                 for endpoint in finding.unsaved_endpoints:
                     endpoint.clean()