Merge pull request #16 from SocketDev/eric/true-up-action-inputs

added the rest of the documented inputs to the action.yaml

Author: flowstate

action.yml

@@ -4,12 +4,53 @@ author: "Douglas Coburn"
 runs:
   using: "docker"
   image: "Dockerfile"
-  
+
 inputs:
   github_token:
     description: "GitHub token to post comments on PRs"
     required: true
 
+  # Enable Settings
+  python_sast_enabled:
+    description: "Enable Python SAST analysis"
+    required: false
+    default: "false"
+
+  golang_sast_enabled:
+    description: "Enable Golang SAST analysis"
+    required: false
+    default: "false"
+
+  javascript_sast_enabled:
+    description: "Enable JavaScript SAST analysis"
+    required: false
+    default: "false"
+
+  dockerfile_enabled:
+    description: "Enable Dockerfile analysis"
+    required: false
+    default: "false"
+
+  image_enabled:
+    description: "Enable image scanning"
+    required: false
+    default: "false"
+
+  secret_scanning_enabled:
+    description: "Enable secret scanning"
+    required: false
+    default: "false"
+
+  # Docker Configuration
+  docker_images:
+    description: "Comma-separated list of Docker images to scan"
+    required: false
+    default: ""
+  dockerfiles:
+    description: "Comma-separated list of Dockerfiles to scan"
+    required: false
+    default: ""
+
   # Trufflehog Configuration
   trufflehog_exclude_dir:
     description: "Comma-separated list of directories to exclude in Trufflehog"
@@ -19,6 +60,10 @@ inputs:
     description: "Rules to enable in Trufflehog"
     required: false
     default: ""
+  trufflehog_show_unverified:
+    description: "Show unverified secrets in Trufflehog results"
+    required: false
+    default: "false"
 
   # Bandit Configuration
   bandit_exclude_dir:
@@ -60,7 +105,30 @@ inputs:
     required: false
     default: ""
 
+  # Log Forwarding Configuration
+  sumo_logic_enabled:
+    description: "Enable Sumo Logic log forwarding"
+    required: false
+    default: "false"
+  sumo_logic_http_source_url:
+    description: "HTTP source URL for Sumo Logic"
+    required: false
+    default: ""
+
+  # Microsoft Sentinel Configuration
+  ms_sentinel_enabled:
+    description: "Enable Microsoft Sentinel log forwarding"
+    required: false
+    default: "false"
+  ms_sentinel_workspace_id:
+    description: "Workspace ID for Microsoft Sentinel"
+    required: false
+    default: "REPLACE_ME"
+  ms_sentinel_shared_key:
+    description: "Shared key for Microsoft Sentinel"
+    required: false
+    default: "REPLACE_ME"
+
 branding:
   icon: "shield"
   color: "blue"
-

src/core/__init__.py

@@ -7,19 +7,13 @@
 log = logging.getLogger("socket-external-tool")
 log.addHandler(logging.NullHandler())
 
-__all__ = [
-    "marker",
-    "__version__",
-    "__author__",
-    "log",
-    "base_github"
-]
-
-__version__ = "1.0.15"
+__all__ = ["marker", "__version__", "__author__", "log", "base_github"]
+
+__version__ = "1.0.16"
 __author__ = "socket.dev"
 base_github = "https://github.com"
 
-marker = f"<!--Socket External Tool Runner: REPLACE_ME -->"
+marker = "<!--Socket External Tool Runner: REPLACE_ME -->"
 
 
 class BaseTool:
@@ -29,12 +23,7 @@ class BaseTool:
     @classmethod
     def process_output(cls, data: dict, cwd: str, plugin_name: str = "") -> dict:
         results = data.get(cls.result_key, [])
-        metrics = {
-            "tests": {},
-            "severities": {},
-            "output": [],
-            "events": []
-        }
+        metrics = {"tests": {}, "severities": {}, "output": [], "events": []}
 
         for test in results:
             test_result = cls.result_class(**test, cwd=cwd)
@@ -67,8 +56,9 @@ def get_test_name(test_result):
         return "test_result"
 
     @classmethod
-    def create_output(cls, data: dict, marker: str, repo: str, commit: str, cwd: str, show_unverified=None) -> (
-    Union[str, None], dict):
+    def create_output(
+        cls, data: dict, marker: str, repo: str, commit: str, cwd: str, show_unverified=None
+    ) -> (Union[str, None], dict):
         """Formats output as properly structured Markdown."""
 
         # Determine if the connector supports the show_verified argument
@@ -93,7 +83,8 @@ def create_output(cls, data: dict, marker: str, repo: str, commit: str, cwd: str
             for output in result["output"]:
                 file_link = (
                     f"[{output.file}]({output.url.replace('REPO_REPLACE', repo).replace('COMMIT_REPLACE', commit)})"
-                    if hasattr(output, "url") else f"`{output.file}`"
+                    if hasattr(output, "url")
+                    else f"`{output.file}`"
                 )
                 has_first_line = output.__dict__.get("has_first_line", False)
                 if has_first_line and not set_first_line:
@@ -105,7 +96,7 @@ def create_output(cls, data: dict, marker: str, repo: str, commit: str, cwd: str
                     md.new_line(f"**Severity**: `{output.__dict__.get('severity', 'N/A')}`")
                     md.new_line(f"**Filename:** {file_link}")
                 else:
-                    source = output.__dict__.get('issue_text', '').replace('REPLACE_FILE_LINK', file_link)
+                    source = output.__dict__.get("issue_text", "").replace("REPLACE_FILE_LINK", file_link)
                     issue_text = f"{source.replace('REPO_REPLACE', repo).replace('COMMIT_REPLACE', commit)}"
                     md.new_line(issue_text)
 
@@ -120,4 +111,3 @@ def create_output(cls, data: dict, marker: str, repo: str, commit: str, cwd: str
             output_str = md.file_data_text.lstrip()
 
         return result, output_str
-