fix(asm): fix actions processing from RC [backport 2.9]

ddtrace/appsec/_remoteconfiguration.py

@@ -121,6 +121,7 @@ def _appsec_rules_data(features: Mapping[str, Any], test_tracer: Optional[Tracer
         _add_rules_to_list(features, "rules_override", "rules override", ruleset)
         _add_rules_to_list(features, "scanners", "scanners", ruleset)
         _add_rules_to_list(features, "processors", "processors", ruleset)
+        _add_rules_to_list(features, "actions", "actions", ruleset)
         if ruleset:
             return tracer._appsec_processor._update_rules({k: v for k, v in ruleset.items() if v is not None})
 

releasenotes/notes/actions_from_RC-08744fc9e91a8c02.yaml

@@ -0,0 +1,4 @@
+---
+fixes:
+  - |
+    ASM: This fix resolves an issue where an org could not customize actions through remote config.

tests/appsec/appsec/test_remoteconfiguration.py

@@ -985,9 +985,22 @@ def test_rc_rules_data(tracer):
         config = {
             "rules_data": [],
             "custom_rules": [],
+            "actions": [],
             "rules": json.load(dd_rules)["rules"],
+            "rules_override": [],
+            "scanners": [],
+            "processors": [],
+            "ignore": [],
         }
-        assert _appsec_rules_data(config, tracer)
+        with mock.patch("ddtrace.appsec._processor.AppSecSpanProcessor._update_rules", autospec=True) as mock_update:
+            mock_update.reset_mock()
+            _appsec_rules_data(config, tracer)
+            calls = mock_update.mock_calls
+            for v in config:
+                if v == "ignore":
+                    assert v not in calls[-1][1][1]
+                else:
+                    assert v in calls[-1][1][1]
 
 
 def test_rc_rules_data_error_empty(tracer):