From 7ca427527c825ce693e0e407105145693661c688 Mon Sep 17 00:00:00 2001 From: rmurray-r7 Date: Thu, 19 Dec 2024 16:08:40 +0000 Subject: [PATCH] duo sdk and vuln (#3017) --- plugins/duo_admin/.CHECKSUM | 6 +++--- plugins/duo_admin/Dockerfile | 2 +- plugins/duo_admin/bin/komand_duo_admin | 2 +- plugins/duo_admin/help.md | 1 + plugins/duo_admin/plugin.spec.yaml | 5 +++-- plugins/duo_admin/setup.py | 2 +- 6 files changed, 10 insertions(+), 8 deletions(-) diff --git a/plugins/duo_admin/.CHECKSUM b/plugins/duo_admin/.CHECKSUM index 68eca0be81..a13791cdb4 100644 --- a/plugins/duo_admin/.CHECKSUM +++ b/plugins/duo_admin/.CHECKSUM @@ -1,7 +1,7 @@ { - "spec": "f47b7b4bc59db3b5f839955535a59660", - "manifest": "087aa32ede6b854cd63bda601038017a", - "setup": "6628c0c3a6eb2e3828cdcc104e0c08d2", + "spec": "73c2331db15a7ec15ca36e7e166746d4", + "manifest": "672f0da4df4edb87ab669d69e435c5c7", + "setup": "8a8919e13bd1afe4849427d3dae6dbf4", "schemas": [ { "identifier": "add_user/schema.py", diff --git a/plugins/duo_admin/Dockerfile b/plugins/duo_admin/Dockerfile index ec2b1d2937..12be6872d5 100644 --- a/plugins/duo_admin/Dockerfile +++ b/plugins/duo_admin/Dockerfile @@ -1,4 +1,4 @@ -FROM --platform=linux/amd64 rapid7/insightconnect-python-3-plugin:6.1.2 +FROM --platform=linux/amd64 rapid7/insightconnect-python-3-plugin:6.2.2 LABEL organization=rapid7 LABEL sdk=python diff --git a/plugins/duo_admin/bin/komand_duo_admin b/plugins/duo_admin/bin/komand_duo_admin index bc35783421..884065b098 100755 --- a/plugins/duo_admin/bin/komand_duo_admin +++ b/plugins/duo_admin/bin/komand_duo_admin @@ -6,7 +6,7 @@ from sys import argv Name = "Duo Admin API" Vendor = "rapid7" -Version = "5.0.1" +Version = "5.0.2" Description = "[Duo](https://duo.com/)'s Trusted Access platform verifies the identity of your users with two-factor authentication and security health of their devices before they connect to the apps they use. Using the Duo plugin for InsightConnect will allow Duo user management within automation workflows" diff --git a/plugins/duo_admin/help.md b/plugins/duo_admin/help.md index eeb8315cdd..710d67a9d2 100644 --- a/plugins/duo_admin/help.md +++ b/plugins/duo_admin/help.md @@ -1010,6 +1010,7 @@ Many actions in this plugin take a User ID as input. A User ID is not the userna # Version History +* 5.0.2 - Updated SDK to the latest version (v6.2.2) | Address vulnerabilities * 5.0.1 - Update to enable Plugin as FedRAMP ready | Update SDK (`6.1.2`) * 5.0.0 - Updated to include latest SDK v5.5.5 | Removing Unused fields from User Object * 4.4.2 - Updated to include latest SDK v5.4.9 | Task `Monitor Logs` updated to increase max lookback cutoff to 7 days diff --git a/plugins/duo_admin/plugin.spec.yaml b/plugins/duo_admin/plugin.spec.yaml index fbb05ea2ed..dcf6087613 100644 --- a/plugins/duo_admin/plugin.spec.yaml +++ b/plugins/duo_admin/plugin.spec.yaml @@ -11,7 +11,7 @@ status: [] supported_versions: ["Duo Admin API 2024-09-17"] sdk: type: full - version: 6.1.2 + version: 6.2.2 user: nobody description: "[Duo](https://duo.com/)'s Trusted Access platform verifies the identity of your users with two-factor authentication and security health of their devices before they connect to the apps they use. Using the Duo plugin for InsightConnect will allow Duo user management within automation workflows" @@ -29,7 +29,7 @@ key_features: requirements: - "Two secret keys - `integration key` and `secret key`" - "`API hostname`" -version: 5.0.1 +version: 5.0.2 connection_version: 4 resources: source_url: https://github.com/rapid7/insightconnect-plugins/tree/master/plugins/duo_admin @@ -50,6 +50,7 @@ references: troubleshooting: "Many actions in this plugin take a User ID as input. A User ID is not the username - instead it's a unique identifier e.g. DU9I6T0F7R2S1J4XZHHA. A User ID can be obtained by passing a username to the Get User Status action." version_history: +- "5.0.2 - Updated SDK to the latest version (v6.2.2) | Address vulnerabilities" - "5.0.1 - Update to enable Plugin as FedRAMP ready | Update SDK (`6.1.2`)" - "5.0.0 - Updated to include latest SDK v5.5.5 | Removing Unused fields from User Object" - "4.4.2 - Updated to include latest SDK v5.4.9 | Task `Monitor Logs` updated to increase max lookback cutoff to 7 days" diff --git a/plugins/duo_admin/setup.py b/plugins/duo_admin/setup.py index a964d66928..e89795d678 100644 --- a/plugins/duo_admin/setup.py +++ b/plugins/duo_admin/setup.py @@ -3,7 +3,7 @@ setup(name="duo_admin-rapid7-plugin", - version="5.0.1", + version="5.0.2", description="[Duo](https://duo.com/)'s Trusted Access platform verifies the identity of your users with two-factor authentication and security health of their devices before they connect to the apps they use. Using the Duo plugin for InsightConnect will allow Duo user management within automation workflows", author="rapid7", author_email="",