Skip to content
This repository was archived by the owner on Dec 5, 2025. It is now read-only.

[backend][POC] Remove labels from playbooks (#6669) #1013

Closed
SouadHadjiat wants to merge 2 commits into from
Closed

[backend][POC] Remove labels from playbooks (#6669) #1013

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
3a019e9
[backend][POC] Remove labels from playbooks (#6669)
SarahBocognano Oct 3, 2025
0d0289a
[client] fix formatting
SouadHadjiat Oct 13, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 6 additions & 4 deletions pycti/utils/opencti_stix2.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2763,7 +2763,7 @@ def apply_opencti_operation(self, item, operation):
if source_ids is None:
source_ids = item["merge_source_ids"]
self.opencti.stix.merge(id=target_id, object_ids=source_ids)
elif operation == "patch":
elif operation == "patch" or operation == "upsert_patch":
self.apply_patch(item=item)
elif operation == "pir_flag_element":
id = item["id"]
Expand Down Expand Up @@ -2840,10 +2840,12 @@ def import_item(
opencti_operation = self.opencti.get_attribute_in_extension(
"opencti_operation", item
)
if opencti_operation is not None:
if opencti_operation is None and "opencti_operation" in item:
opencti_operation = item["opencti_operation"]
if opencti_operation is not None and opencti_operation == "upsert_patch":
self.apply_opencti_operation(item, opencti_operation)
if opencti_operation is not None and opencti_operation != "upsert_patch":
self.apply_opencti_operation(item, opencti_operation)
elif "opencti_operation" in item:
self.apply_opencti_operation(item, item["opencti_operation"])
elif item["type"] == "relationship":
# Import relationship
self.import_relationship(item, update, types)
Expand Down