New Parser: Kiuwan SCA Scan

docs/content/en/integrations/parsers/file/kiuwan-sca.md

@@ -0,0 +1,26 @@
+---
+title: "Kiuwan Scanner (SCA i.e. \"Insights\")"
+toc_hide: true
+---
+Import Kiuwan Insights Scan in JSON format. Export via API endpoint `insights/analysis/security` as json and create a file for importing to DefectDojo.
+
+### Example Code
+
+Data can be fetched from the [Kiuwan REST API](https://static.kiuwan.com/rest-api/kiuwan-rest-api.html) like this:
+
+```
+import requests, json
+headers = {'Authorization': 'Basic $KIUWAN_TOKEN', 'Accept' : 'application/json'}
+
+appName = "Test"
+analysisCode = "A-111-1111111111"
+
+URL = "https://api.kiuwan.com/insights/analysis/security?analysisCode=" + analysisCode + "&application=" + appName
+response = requests.get(url = URL, headers = headers)
+jsonResponse = r.json()
+data = jsonResponse["data"]
+saveFile("result.json", json.dumps(data, indent=2))
+```
+
+### Sample Scan Data
+Sample Kiuwan Scanner scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/kiuwan-sca).

docs/content/en/integrations/parsers/file/kiuwan.md

@@ -1,8 +1,8 @@
 ---
-title: "Kiuwan Scanner"
+title: "Kiuwan Scanner (SAST)"
 toc_hide: true
 ---
-Import Kiuwan Scan in CSV format. Export as CSV Results on Kiuwan.
+Import Kiuwan SAST Scan in CSV format. Export as CSV Results on Kiuwan, or via the [Kiuwan REST API](https://static.kiuwan.com/rest-api/kiuwan-rest-api.html) endpoint `vulnerabilities/export` (type=csv).
 
 ### Sample Scan Data
-Sample Kiuwan Scanner scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/kiuwan).
+Sample Kiuwan Scanner scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/kiuwan).

dojo/settings/settings.dist.py

@@ -1250,7 +1250,8 @@ def saml2_attrib_map_format(dict):
     'Snyk Code Scan': ['vuln_id_from_tool', 'file_path'],
     'Bearer CLI': ['title', 'severity'],
     'Nancy Scan': ['title', 'vuln_id_from_tool'],
-    'Wiz Scan': ['title', 'description', 'severity']
+    'Wiz Scan': ['title', 'description', 'severity'],
+    'Kiuwan SCA Scan': ['description', 'severity', 'component_name', 'component_version', 'cwe']
 }
 
 # Override the hardcoded settings here via the env var
@@ -1467,6 +1468,7 @@ def saml2_attrib_map_format(dict):
     'Nosey Parker Scan': DEDUPE_ALGO_UNIQUE_ID_FROM_TOOL_OR_HASH_CODE,
     'Bearer CLI': DEDUPE_ALGO_HASH_CODE,
     'Wiz Scan': DEDUPE_ALGO_HASH_CODE,
+    'Kiuwan SCA Scan': DEDUPE_ALGO_HASH_CODE,
 }
 
 # Override the hardcoded settings here via the env var

dojo/tools/kiuwan_sca/parser.py

@@ -0,0 +1,89 @@
+import json
+import hashlib
+
+from dojo.models import Finding
+
+__author__ = "mwager"
+
+
+class KiuwanSCAParser:
+    SEVERITY = {
+        "-": "Low",
+        "LOW": "Low",
+        "MEDIUM": "Medium",
+        "HIGH": "High",
+        "CRITICAL": "Critical",
+        "Low": "Low",
+        "Medium": "Medium",
+        "High": "High",
+        "Critical": "Critical"
+    }
+
+    def get_scan_types(self):
+        return ["Kiuwan SCA Scan"]
+
+    def get_label_for_scan_types(self, scan_type):
+        return scan_type
+
+    def get_description_for_scan_types(self, scan_type):
+        return "Import Kiuwan Insights Scan in JSON format. Export as JSON using Kiuwan REST API."
+
+    def get_findings(self, filename, test):
+        data = json.load(filename)
+        dupes = dict()
+
+        for row in data:
+            # if a finding was "muted" in the Kiuwan UI, we ignore it (e.g. marked as false positive)
+            if row["muted"] is True:
+                continue
+
+            finding = Finding(test=test)
+            finding.unique_id_from_tool = row["id"]
+            finding.cve = row["cve"]
+            finding.description = row["description"]
+            finding.severity = self.SEVERITY[row["securityRisk"]]
+
+            if "components" in row and len(row["components"]) > 0:
+                finding.component_name = row["components"][0]["artifact"]
+                finding.component_version = row["components"][0]["version"]
+                finding.title = finding.component_name + " v" + str(finding.component_version)
+
+            if not finding.title:
+                finding.title = row["cve"]
+
+            if "cwe" in row:
+                try:
+                    finding.cwe = int(row["cwe"].replace("CWE-", ""))
+                except Exception:
+                    pass
+
+            if "epss_score" in row:
+                finding.epss_score = row["epss_score"]
+            if "epss_percentile" in row:
+                finding.epss_percentile = row["epss_percentile"]
+
+            if "cVSSv3BaseScore" in row:
+                finding.cvssv3_score = float(row["cVSSv3BaseScore"])
+
+            finding.references = "See Kiuwan Web UI"
+            finding.mitigation = "See Kiuwan Web UI"
+            finding.static_finding = True
+
+            key = hashlib.sha256(
+                (
+                    finding.description
+                    + "|"
+                    + finding.severity
+                    + "|"
+                    + finding.component_name
+                    + "|"
+                    + finding.component_version
+                    + "|"
+                    + str(finding.cwe)
+                ).encode("utf-8")
+            ).hexdigest()
+
+            if key not in dupes:
+                dupes[key] = finding
+
+        return list(dupes.values())