anti/DECNET
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(1.2): relocate ATT&CK bundle to decnet/data/, bump 19.0 -> 19.1

Browse Source 
Bundle pointer moved from repo root to decnet/data/ (with LICENSE.txt),
gitignored + fetched on demand (51MB, MITRE-licensed). Version pin bumped
19.0->19.1 with the new sha256; license unchanged. All _REPO_BUNDLE test
constants repointed. Fixes test-web failures after the repo-root bundle
was deleted.
This commit is contained in:
anti
2026-06-18 19:02:58 -04:00
parent a5e11f7d86
commit 1a765854ec
14 changed files with 28 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
tests/ttp/test_attack_bundle_validation.py
View File

@@ -20,7 +20,7 @@ from decnet.clustering import ukc
from decnet.ttp import attack_stix
from decnet.ttp.impl import intel_lifter
_REPO_BUNDLE = Path(__file__).resolve().parents[2] / "enterprise-attack-19.0.json"
_REPO_BUNDLE = Path(__file__).resolve().parents[2] / "decnet" / "data" / "enterprise-attack-19.1.json"
@pytest.fixture(autouse=True)

2
tests/ttp/test_attack_catalog.py
View File

@@ -19,7 +19,7 @@ from decnet.ttp import attack_stix
from decnet.ttp.attack_catalog import technique_name
_RULES_DIR = Path(__file__).resolve().parents[2] / "rules" / "ttp"
_REPO_BUNDLE = Path(__file__).resolve().parents[2] / "enterprise-attack-19.0.json"
_REPO_BUNDLE = Path(__file__).resolve().parents[2] / "decnet" / "data" / "enterprise-attack-19.1.json"
@pytest.fixture(scope="module", autouse=True)

2
tests/ttp/test_attack_license.py
View File

@@ -19,7 +19,7 @@ from decnet.ttp.attack_version import (
ATTACK_LICENSE_SHA256,
)
_REPO_BUNDLE = Path(__file__).resolve().parents[2] / "enterprise-attack-19.0.json"
_REPO_BUNDLE = Path(__file__).resolve().parents[2] / "decnet" / "data" / "enterprise-attack-19.1.json"
@pytest.fixture(autouse=True)

2
tests/ttp/test_attack_url.py
View File

@@ -15,7 +15,7 @@ import pytest
from decnet.ttp import attack_stix
_REPO_BUNDLE = Path(__file__).resolve().parents[2] / "enterprise-attack-19.0.json"
_REPO_BUNDLE = Path(__file__).resolve().parents[2] / "decnet" / "data" / "enterprise-attack-19.1.json"
@pytest.fixture(autouse=True)

2
tests/ttp/test_emit_attaches_mitre_url.py
View File

@@ -24,7 +24,7 @@ from decnet.ttp.impl._emit import emit_tags
from decnet.ttp.impl.rule_engine import CompiledRule
from decnet.ttp.store.base import RuleState
_REPO_BUNDLE = Path(__file__).resolve().parents[2] / "enterprise-attack-19.0.json"
_REPO_BUNDLE = Path(__file__).resolve().parents[2] / "decnet" / "data" / "enterprise-attack-19.1.json"
@pytest.fixture(autouse=True)

2
tests/ttp/test_groups_for_technique.py
View File

@@ -19,7 +19,7 @@ from decnet.web.router.ttp.api_get_groups_for_technique import (
api_groups_for_technique,
)
_REPO_BUNDLE = Path(__file__).resolve().parents[2] / "enterprise-attack-19.0.json"
_REPO_BUNDLE = Path(__file__).resolve().parents[2] / "decnet" / "data" / "enterprise-attack-19.1.json"
@pytest.fixture(autouse=True)

2
tests/ttp/test_intel_mappings.py
View File

@@ -31,7 +31,7 @@ from decnet.ttp.data.intel_loader import (
load_provider_mapping,
)
_REPO_BUNDLE = Path(__file__).resolve().parents[2] / "enterprise-attack-19.0.json"
_REPO_BUNDLE = Path(__file__).resolve().parents[2] / "decnet" / "data" / "enterprise-attack-19.1.json"
_DATA_DIR = Path(__file__).resolve().parents[2] / "decnet" / "ttp" / "data" / "intel"