SOAR-18473: bump SDK and address vulnerabilities

rapid7 · Dec 17, 2024 · f7341bc · f7341bc
1 parent 839a2ea
commit f7341bc
Show file tree

Hide file tree

Showing 6 changed files with 13 additions and 42 deletions.
diff --git a/plugins/string/.CHECKSUM b/plugins/string/.CHECKSUM
@@ -1,7 +1,7 @@
 {
-	"spec": "2d872dd50b19daa898791255146106af",
-	"manifest": "922ea555f44944378c4f1b096747bd0c",
-	"setup": "c44b119f9f8f9981c367bc04a6dc9234",
+	"spec": "66e9ce90ef486ea29f7113995ed701ab",
+	"manifest": "1ec5f5cb6f45039155f589eb516e4e2b",
+	"setup": "9db7a8efac3085fd9937946ee94a5cec",
 	"schemas": [
 		{
 			"identifier": "length/schema.py",

diff --git a/plugins/string/Dockerfile b/plugins/string/Dockerfile
@@ -1,4 +1,4 @@
-FROM --platform=linux/amd64 rapid7/insightconnect-python-3-slim-plugin:6.1.0
+FROM --platform=linux/amd64 rapid7/insightconnect-python-3-slim-plugin:6.2.2
 
 LABEL organization=rapid7
 LABEL sdk=python

diff --git a/plugins/string/bin/komand_string b/plugins/string/bin/komand_string
@@ -6,7 +6,7 @@ from sys import argv
 
 Name = "String Operations"
 Vendor = "rapid7"
-Version = "1.4.1"
+Version = "1.4.2"
 Description = "The String plugin provides common programmatic string operations"
 
 

diff --git a/plugins/string/help.md b/plugins/string/help.md
@@ -1,8 +1,6 @@
 # Description
 
-The String Operations plugin allows easy manipulation of string data.
-
-This plugin utilizes the Python 3 String library [set of methods](https://docs.python.org/3/library/stdtypes.html#string-methods).
+The String plugin provides common programmatic string operations
 
 # Key Features
 
@@ -168,7 +166,7 @@ Example output:
 
 #### Split String to List
 
-This action is used to convert a string to a list of strings.
+This action is used to converts a string to a list of strings
 
 ##### Input
 
@@ -207,15 +205,7 @@ Example output:
 
 #### Split String to Object
 
-This action is used to convert a string to an object containing key:value strings.
-
-Any input requiring more than a single key:value pair, e.g. `USER=Bob` needs to use the `block_delimiter` option.
-In this case, the input string is split by the `block_delimiter` character first, and the resulting items are then split
-by the `string_delimiter` option. Stripping of double-quotes is automatically applied in this situation for each item before the plugin returns it.
-
-The [output schema object](https://docs.komand.com/v0.42.1/docs/python-script-plugins#section-configure-the-plugin-output-schema) on the action's page can be modified to pre-populate the workflow with the names of the keys.
-It allows users the ability to use the green selector and choose a specific variable later in the workflow by name.
-[Input templating](https://docs.komand.com/docs/input-templating) would need to be used to obtain variables by name otherwise.
+This action is used to converts a string to an object containing key:value strings
 
 ##### Input
 
@@ -251,27 +241,6 @@ Example output:
 }
 ```
 
-Here is another example with a slightly more complex string input that contains multiple key:value pairs.
-These pairs are separated from each other by a space, and the keys and values within each pair are separated by an equal sign:
-
-```
-Computer_ID="bef41e8b-47b8-e188-8e43-3a2b662dd55d" Computer_Name="dgdemo\RGWin64" Computer_Type="Windows"
-```
-
-Setting `block_delimiter` to ` ` and `string_delimiter` to `=` will return the information presented in the example below.
-
-Example output:
-
-```
-{
-  "object": {
-    "Computer_ID": "bef41e8b-47b8-e188-8e43-3a2b662dd55d",
-    "Computer_Name": "dgdemo\RGWin64",
-    "Computer_Type": "Windows"
-  }
-}
-```
-
 #### Trim
 
 This action is used to trim a string of leading and trailing whitespace
@@ -352,6 +321,7 @@ There may be complex string manipulation needs that are likely outside the scope
 
 # Version History
 
+* 1.4.2 - Updated SDK to the latest version (v6.2.2) | Address vulnerabilities
 * 1.4.1 - Initial updates for fedramp compliance | Updated SDK to the latest version
 * 1.4.0 - New action Replace
 * 1.3.1 - Update to v4 Python plugin runtime

diff --git a/plugins/string/plugin.spec.yaml b/plugins/string/plugin.spec.yaml
@@ -4,7 +4,7 @@ products: [insightconnect]
 name: string
 title: String Operations
 description: The String plugin provides common programmatic string operations
-version: 1.4.1
+version: 1.4.2
 connection_version: 1
 vendor: rapid7
 support: community
@@ -25,14 +25,15 @@ hub_tags:
   features: []
 sdk:
   type: slim
-  version: 6.1.0
+  version: 6.2.2
   user: nobody
 key_features:
   - "Split a string to a list of elements"
   - "Split a string to an object"
   - "Upper case, lower case, and trim a string"
   - "Replace parts of a string"
 version_history:
+  - "1.4.2 - Updated SDK to the latest version (v6.2.2) | Address vulnerabilities"
   - "1.4.1 - Initial updates for fedramp compliance | Updated SDK to the latest version"
   - "1.4.0 - New action Replace"
   - "1.3.1 - Update to v4 Python plugin runtime"

diff --git a/plugins/string/setup.py b/plugins/string/setup.py
@@ -3,7 +3,7 @@
 
 
 setup(name="string-rapid7-plugin",
-      version="1.4.1",
+      version="1.4.2",
       description="The String plugin provides common programmatic string operations",
       author="rapid7",
       author_email="",