Merge branch 'master' into patch-1

tenable · May 21, 2024 · a54a78a · a54a78a
2 parents 380ff8c + ad62f86
commit a54a78a
Show file tree

Hide file tree

Showing 176 changed files with 4,223 additions and 2,916 deletions.
diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS
@@ -1,2 +1,2 @@
 # any approval goes through the following
-*       @tenable/pytenable-approvers
+*       @tenable/ecosystem-approvers
diff --git a/.github/workflows/testing.yml b/.github/workflows/testing.yml
@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        python-version: ["3.7", "3.8", "3.9", "3.10"]
+        python-version: ["3.7", "3.8", "3.9", "3.10", "3.11", "3.12"]
     steps:
       - uses: actions/checkout@v2
       - name: Set up Python ${{ matrix.python-version }}
@@ -80,7 +80,7 @@ jobs:
       - uses: snyk/actions/setup@master
       - uses: actions/setup-python@v2
         with:
-          python-version: 3.8
+          python-version: "3.10"
       - name: Setup environment
         run: pip install -r requirements.txt
       - name: Snyk Library check

diff --git a/.readthedocs.yml b/.readthedocs.yml
@@ -1,8 +1,13 @@
 version: 2
 sphinx:
   configuration: docs/conf.py
+
+build:
+  os: ubuntu-22.04
+  tools:
+    python: "3.7"
+
 python:
-  version: '3.7'
   install:
   - requirements: docs/requirements.txt
   - method: pip

diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -4,12 +4,106 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.4.22]
+
+### Added
+- Support for New ACR APIs (#654)
+- Added Implicit WAS exclude for Tenable Security Center (#763)
+- Support for `currentPassword` field in SC Users API.
+
+[1.4.21]: https://github.com/tenable/pyTenable/compare/1.4.21...1.4.22
+
+## [1.4.21]
+
+### Added
+- Support for new Compliance Export Enhancement fields in Vulnerability Management.
+- Support for `currentPassword` field in SC Users API.
+
+[1.4.21]: https://github.com/tenable/pyTenable/compare/1.4.20...1.4.21
+
+## [1.4.20]
+
+### Fixed
+- Bug that causes pyTenable to error out when `srcInterface` or `dstInterface` values in `events` object in OT is non-null.
+
+[1.4.20]: https://github.com/tenable/pyTenable/compare/1.4.19...1.4.20
+
+
+## [1.4.19]
+
+### Added
+- Support for `inactivity_timeout` during a Security Center scan creation.
+- Loosened up validations on the preference object in Security Center policies API.
+
+[1.4.19]: https://github.com/tenable/pyTenable/compare/1.4.18...1.4.19
+
+## [1.4.18]
+
+### Added
+- Support for `file_type` property in `upload` method in Vulnerability Management Credentials API.
+
+[1.4.18]: https://github.com/tenable/pyTenable/compare/1.4.17...1.4.18
+
+## [1.4.17]
+
+### Fixed
+- Vulnerability `CVE-2023-38325` by upgrading the test dependency `requests-pkcs12`.
+
+### Added
+- Support for `include_open_ports` property in Vulnerability Management asset export request.
+
+[1.4.17]: https://github.com/tenable/pyTenable/compare/1.4.16...1.4.17
+
+## [1.4.16]
+
+ ### Fixed
+- Pagination bug in the Tenable OT Security Exports - Plugin Query.
+
+[1.4.16]: https://github.com/tenable/pyTenable/compare/1.4.15...1.4.16
+
+## [1.4.15]
+
+### Added
+- New Tenable OT Security Exports package #742
+
+[1.4.15]: https://github.com/tenable/pyTenable/compare/1.4.14...1.4.15
+
+## [1.4.14]
+
+### Added
+- Support for `source` and `severity_modification_type` filters to Vulnerability Management vulnerability export.
+- Support for filtering out hidden assets from Operational technology asset `list` method by default.
+- Product Rebranding in the SDK documentation.
+
+### Deprecated
+- Support for V3 Vulnerability Management API methods.
+
+[1.4.14]: https://github.com/tenable/pyTenable/compare/1.4.13...1.4.14
+
+## [1.4.13]
+
+### Added
+- Support for exporting Web App Scan Results.
+
+[1.4.13]: https://github.com/tenable/pyTenable/compare/1.4.12...1.4.13
+
+## [1.4.12]
+
+### Added
+- Support for Python 3.11
+
+### Fixed
+- `tsc.analysis.scan(1)` not honoring Scan ID with Tenable.sc 6.0.0.
+- pyTenable crashes when pagination key with a null value is in the HTTP response in Tenable.io v3 APIs.
+
+[1.4.12]: https://github.com/tenable/pyTenable/compare/1.4.11...1.4.12
+
 ## [1.4.11]
 
 ### Added
 - Support for Scan UUID (`last_scan_id`) filter for assets exports.
 
-[1.4.11]: https://github.com/tenable/pyTenable/compare/1.4.10...1.4.11 
+[1.4.11]: https://github.com/tenable/pyTenable/compare/1.4.10...1.4.11
 
 ## [1.4.10]
 
@@ -26,7 +120,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Python 3.6 references from all documentation.
 - `search_host_audit()` method from `io/v3/explore/findings`.
 
-[1.4.10]: https://github.com/tenable/pyTenable/compare/1.4.9...1.4.10 
+[1.4.10]: https://github.com/tenable/pyTenable/compare/1.4.9...1.4.10
 
 ## [1.4.9]
 ### Added
@@ -47,15 +141,15 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Support for Python Version 3.6.
 
 
- [1.4.9]: https://github.com/tenable/pyTenable/compare/1.4.8...1.4.9 
+ [1.4.9]: https://github.com/tenable/pyTenable/compare/1.4.8...1.4.9
 
 ## [1.4.8]
 ### Added
 
 - Support for Role Based Access Control endpoints.
 - Support for specifying Agent UUIDs instead of numeric IDs for bulk group addition.
 
-[1.4.8]: https://github.com/tenable/pyTenable/compare/1.4.7...1.4.8 
+[1.4.8]: https://github.com/tenable/pyTenable/compare/1.4.7...1.4.8
 
 ## [1.4.7]
 ### Added

diff --git a/README.rst b/README.rst
@@ -5,7 +5,7 @@ Welcome to pyTenable's documentation!
    :target: https://github.com/tenable/pyTenable/actions
 .. image:: https://img.shields.io/pypi/v/pytenable.svg
    :target: https://pypi.org/project/pyTenable/
-.. image:: https://img.shields.io/badge/python-3.7%203.8%203.9-blue
+.. image:: https://img.shields.io/badge/python-3.7%203.8%203.9%203.10%203.11-blue
    :target: https://pypi.org/project/pyTenable/
 .. image:: https://img.shields.io/pypi/dm/pytenable
    :target: https://github.com/tenable/pytenable

diff --git a/docs/api/io/was.rst b/docs/api/io/was.rst
@@ -0,0 +1,4 @@
+.. automodule:: tenable.io.was.api
+
+
+.. automodule:: tenable.io.was.iterator
diff --git a/docs/api/nessus/index.rst b/docs/api/nessus/index.rst
@@ -1,3 +1,6 @@
+Tenable Nessus
+==========
+
 .. important::
     The Nessus Package is currently a Technology Preview
 

diff --git a/docs/api/ot/exports.rst b/docs/api/ot/exports.rst
@@ -0,0 +1 @@
+.. automodule:: tenable.ot.exports.api
diff --git a/docs/api/ot/index.rst b/docs/api/ot/index.rst
@@ -1,10 +1,11 @@
-Tenable.ot
+Tenable OT Security
 ==========
 .. toctree::
     :hidden:
     :glob:
 
     graphql
+    exports
     schema
 
 .. automodule:: tenable.ot
diff --git a/docs/api/ot/schema.rst b/docs/api/ot/schema.rst
diff --git a/docs/conf.py b/docs/conf.py
@@ -184,7 +184,7 @@ def setup(app):
 }
 
 extlinks = {
-    'devportal': ('https://developer.tenable.com/reference#%s', 'devportal'),
-    'sc-api': ('https://docs.tenable.com/sccv/api/%s', 'sc-api'),
+    'devportal': ('https://developer.tenable.com/reference/%s', 'devportal'),
+    'sc-api': ('https://docs.tenable.com/security-center/api/%s', 'sc-api'),
     'requests': ('https://requests.readthedocs.io/en/master/%s', 'requests'),
 }
diff --git a/examples/io/download_scans/requirements.txt b/examples/io/download_scans/requirements.txt
@@ -1,3 +1,4 @@
 pytenable>=0.3.20
 arrow>=0.13.0
-Click>=7.0
+Click>=7.0
+requests>=2.32.0 # not directly required, pinned by Snyk to avoid a vulnerability
diff --git a/requirements.txt b/requirements.txt
@@ -6,5 +6,6 @@ restfly>=1.4.5
 marshmallow>=3.8
 python-box>=4.0
 defusedxml>=0.5.0
-urllib3>=1.26.5
+urllib3==1.26.18
 typing-extensions>=3.10.0.2
+requests-toolbelt==1.0.0
diff --git a/setup.py b/setup.py
@@ -30,10 +30,11 @@
         "Topic :: Software Development :: Libraries",
         "Topic :: Software Development :: Libraries :: Application Frameworks",
         "License :: OSI Approved :: MIT License",
-        "Programming Language :: Python :: 3.7",
         "Programming Language :: Python :: 3.8",
         "Programming Language :: Python :: 3.9",
         "Programming Language :: Python :: 3.10",
+        "Programming Language :: Python :: 3.11",
+        "Programming Language :: Python :: 3.12",
     ],
     keywords="tenable tenable_io securitycenter containersecurity",
     packages=find_packages(exclude=["docs", "tests", "tests.*"]),
@@ -45,8 +46,9 @@
         'marshmallow>=3.8',
         'python-box>=4.0',
         'defusedxml>=0.5.0',
-        'urllib3>=1.26.5',
+        'urllib3>=1.26.18',
         'typing-extensions>=4.0.1',
         'dataclasses>=0.8;python_version=="3.6"',
+        'requests-toolbelt>=1.0.0'
     ],
 )
diff --git a/tenable/ad/__init__.py b/tenable/ad/__init__.py
@@ -1,8 +1,8 @@
 '''
-Tenable.ad
+Tenable Identity Exposure
 ==========
 
-This package covers the Tenable.ad interface.
+This package covers the Tenable Identity Exposure interface.
 
 .. autoclass:: TenableAD
     :members:

diff --git a/tenable/ad/about.py b/tenable/ad/about.py
@@ -2,7 +2,7 @@
 About
 =====
 
-Methods described in this section relate to the the about API.
+Methods described in this section relate to the About API.
 These methods can be accessed at ``TenableAD.about``.
 
 .. rst-class:: hide-signature
@@ -17,7 +17,7 @@ class AboutAPI(APIEndpoint):
 
     def version(self) -> str:
         '''
-        Returns the version of the connected Tenable.ad instance.
+        Returns the version of the connected Tenable Identity Exposure instance.
 
         Examples:
 

diff --git a/tenable/ad/api_keys.py b/tenable/ad/api_keys.py
@@ -2,7 +2,7 @@
 APIKeys
 =======
 
-Methods described in this section relate to the the APIKeys API.
+Methods described in this section relate to the APIKeys API.
 These methods can be accessed at ``TenableAD.api_keys``.
 
 .. rst-class:: hide-signature

diff --git a/tenable/ad/category/api.py b/tenable/ad/category/api.py
@@ -2,7 +2,7 @@
 Category
 ========
 
-Methods described in this section relate to the the category API.
+Methods described in this section relate to the category API.
 These methods can be accessed at ``TenableAD.category``.
 
 .. rst-class:: hide-signature

diff --git a/tenable/ad/checker/api.py b/tenable/ad/checker/api.py
@@ -2,7 +2,7 @@
 Checker
 =======
 
-Methods described in this section relate to the the checker API.
+Methods described in this section relate to the checker API.
 These methods can be accessed at ``TenableAD.checker``.
 
 .. rst-class:: hide-signature

diff --git a/tenable/ad/checker_option/api.py b/tenable/ad/checker_option/api.py
@@ -2,7 +2,7 @@
 Checker Option
 ==============
 
-Methods described in this section relate to the the checker option API.
+Methods described in this section relate to the checker option API.
 These methods can be accessed at ``TenableAD.checker_option``.
 
 .. rst-class:: hide-signature

diff --git a/tenable/ad/dashboard/api.py b/tenable/ad/dashboard/api.py
@@ -2,7 +2,7 @@
 Dashboard
 =========
 
-Methods described in this section relate to the the dashboard API.
+Methods described in this section relate to the dashboard API.
 These methods can be accessed at ``TenableAD.dashboard``.
 
 .. rst-class:: hide-signature

diff --git a/tenable/ad/directories/api.py b/tenable/ad/directories/api.py
@@ -2,7 +2,7 @@
 Directory
 =========
 
-Methods described in this section relate to the the directory API.
+Methods described in this section relate to the directory API.
 These methods can be accessed at ``TenableAD.directories``.
 
 .. rst-class:: hide-signature

diff --git a/tenable/ad/infrastructure/api.py b/tenable/ad/infrastructure/api.py
@@ -2,7 +2,7 @@
 Infrastructure
 ==============
 
-Methods described in this section relate to the the infrastructure API.
+Methods described in this section relate to the infrastructure API.
 These methods can be accessed at ``TenableAD.infrastructure``.
 
 .. rst-class:: hide-signature

diff --git a/tenable/ad/reason/api.py b/tenable/ad/reason/api.py
@@ -1,7 +1,7 @@
 '''
 Reason
 ======
-Methods described in this section relate to the the reason API.
+Methods described in this section relate to the reason API.
 These methods can be accessed at ``TenableAD.reason``.
 
 .. rst-class:: hide-signature

diff --git a/tenable/ad/saml_configuration/api.py b/tenable/ad/saml_configuration/api.py
@@ -2,7 +2,7 @@
 SAML Configuration
 ==================
 
-Methods described in this section relate to the the SAML Configuration API.
+Methods described in this section relate to the SAML Configuration API.
 These methods can be accessed at ``TenableAD.saml_configuration``.
 
 .. rst-class:: hide-signature

diff --git a/tenable/ad/score/api.py b/tenable/ad/score/api.py
@@ -2,7 +2,7 @@
 Score
 =====
 
-Methods described in this section relate to the the score API.
+Methods described in this section relate to the score API.
 These methods can be accessed at ``TenableAD.score``.
 
 .. rst-class:: hide-signature
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1,4 @@
		.. automodule:: tenable.io.was.api


		.. automodule:: tenable.io.was.iterator