AttackIQ / SigmAIQ

A pySigma wrapper and langchain toolkit for automatic rule creation/translation
https://attackiq.com
GNU Lesser General Public License v2.1
66 stars 9 forks source link

Upstream error List from pyparsing #12

Open Melantrix opened 2 weeks ago

Melantrix commented 2 weeks ago

Hi,

A fresh docker i have build is not launching because of an error:

     from sigmaiq import SigmAIQBackend
   File "/usr/local/lib/python3.13/site-packages/sigmaiq/__init__.py", line 1, in <module>
     from .sigmaiq_backend_factory import SigmAIQBackend
   File "/usr/local/lib/python3.13/site-packages/sigmaiq/sigmaiq_backend_factory.py", line 5, in <module>
     from sigma.collection import SigmaCollection
   File "/usr/local/lib/python3.13/site-packages/sigma/collection.py", line 5, in <module>
     from sigma.rule import SigmaRule
   File "/usr/local/lib/python3.13/site-packages/sigma/rule.py", line 9, in <module>
     from sigma.types import SigmaType, SigmaNull, SigmaString, SigmaNumber, sigma_type
   File "/usr/local/lib/python3.13/site-packages/sigma/types.py", line 8, in <module>
     from sigma.exceptions import SigmaRuleLocation, SigmaValueError, SigmaRegularExpressionError, SigmaTypeError
   File "/usr/local/lib/python3.13/site-packages/sigma/exceptions.py", line 5, in <module>
     from pyparsing import List
 ImportError: cannot import name 'List' from 'pyparsing' (/usr/local/lib/python3.13/site-packages/pyparsing/__init__.py)

As far as i can see this is an upstream error fixed here: https://github.com/SigmaHQ/pySigma/issues/290

However, my guess is that the SigmAIQBackend package must be updated on pypi (current version on there is 0.4.2 from october 10th).

Can you please merge the fix and update the package on pypi?

slincoln-aiq commented 2 weeks ago

Hello,

I just release a new version (0.4.3) that pins pySigma to the latest version (0.11.17) instead of 0.11.14. As noted in pySigma's release notes for 0.11.17, this should fix the pyparsing import issue. If it does not, please let me know!

Thanks,