Sysdig parser: Add new CSV and JSON formats

[valentijnscholten]

Description
Add support for reports created by the Sysdig CLI Scanner.
Fixes #11843

Test results
Added unit tests.

Documentation
Added docs page.

[github-actions]

This pull request has conflicts, please resolve those before we can evaluate the pull request.

[dryrunsecurity]

DryRun Security Summary

A review of Sysdig vulnerability parser patches revealed potential security concerns including input validation issues, information exposure risks, and error handling vulnerabilities across multiple files.

Expand for full summary

Summary: Multiple patches related to Sysdig vulnerability parsers and documentation were reviewed, introducing new parsing capabilities for Sysdig CLI and Reports vulnerability scanners across various files.

Security Findings:

1. Input Validation Concerns in dojo/tools/sysdig_cli/parser.py:

   • No explicit sanitization of input data before processing
   • Potential information exposure through detailed vulnerability logging
   • Broad exception handling in JSON parsing could mask security issues

2. Potential Information Exposure:

   • Commented-out fields might contain sensitive information like k8s cluster names or cloud provider account IDs
   • Detailed logging of vulnerability information could reveal system details

3. Decoding Considerations:

   • Use of .decode("utf-8") for byte content could be a potential vector for encoding-based attacks if not carefully implemented

4. File Type and Input Handling:

   • Restricts file processing to .csv and .json extensions
   • Validates CSV headers and column structures
   • Checks CVSS version and score processing

5. Error Handling Risks:

   • Broad exception handling in JSON parsing
   • Raises ValueError for unexpected file formats
   • Potential for masking underlying security issues

No hardcoded credentials or tokens were detected across the reviewed patches.

View PR in the DryRun Dashboard.

[github-actions]

Conflicts have been resolved. A maintainer will review the pull request shortly.

[mtesauro]

Approved