From f7b899e1bbd49c553336dc53c8185f12a145cadf Mon Sep 17 00:00:00 2001
From: Madelon Dohmen <99282220+madelondohmen@users.noreply.github.com>
Date: Thu, 26 Sep 2024 13:47:47 +0200
Subject: [PATCH] Update a Boefje (#3521)

Signed-off-by: Donny Peeters <donny@bitestreams.com>
Co-authored-by: Donny Peeters <donny@bitestreams.com>
Co-authored-by: Donny Peeters <46660228+Donnype@users.noreply.github.com>
Co-authored-by: Jan Klopper <janklopper+underdark@gmail.com>
---
 boefjes/tests/integration/test_api.py         |   1 +
 .../integration/test_sql_repositories.py      |   8 +
 rocky/katalogus/client.py                     |  12 ++
 rocky/katalogus/templates/boefje_setup.html   |  17 +-
 .../templates/plugin_container_image.html     |  13 ++
 rocky/katalogus/urls.py                       |   7 +-
 rocky/katalogus/views/boefje_setup.py         | 183 +++++++++++++-----
 rocky/katalogus/views/plugin_detail.py        |   6 +
 rocky/rocky/locale/django.pot                 |  51 ++++-
 .../katalogus/test_katalogus_boefje_setup.py  |  64 ++++++
 .../katalogus/test_katalogus_create_boefje.py |  21 --
 rocky/tools/forms/boefje.py                   |   8 +-
 rocky/tools/forms/settings.py                 |  10 +-
 13 files changed, 315 insertions(+), 86 deletions(-)
 create mode 100644 rocky/tests/katalogus/test_katalogus_boefje_setup.py
 delete mode 100644 rocky/tests/katalogus/test_katalogus_create_boefje.py

diff --git a/boefjes/tests/integration/test_api.py b/boefjes/tests/integration/test_api.py
index 67cd3b95700..59f50b0a61c 100644
--- a/boefjes/tests/integration/test_api.py
+++ b/boefjes/tests/integration/test_api.py
@@ -151,6 +151,7 @@ def test_update_plugins(test_client, organisation):
 
     response = test_client.get(f"/v1/organisations/{organisation.id}/plugins/{boefje.id}")
     assert response.json()["description"] == "4"
+    assert response.json()["scan_level"] == 3
     assert response.json()["enabled"] is True
     assert response.json()["scan_level"] == 3
     assert response.json()["interval"] == 20
diff --git a/boefjes/tests/integration/test_sql_repositories.py b/boefjes/tests/integration/test_sql_repositories.py
index db69569da51..0bd76c21995 100644
--- a/boefjes/tests/integration/test_sql_repositories.py
+++ b/boefjes/tests/integration/test_sql_repositories.py
@@ -161,9 +161,17 @@ def test_bare_boefje_storage(plugin_storage):
 
     boefje.description = "4"
     boefje.scan_level = 3
+
     assert storage.boefje_by_id(boefje.id).description == "4"
     boefje.description = "4"
 
+    with plugin_storage as storage:
+        storage.update_boefje(boefje.id, {"scan_level": 3})
+
+    assert storage.boefje_by_id(boefje.id).scan_level == 3
+
+    boefje.description = "4"
+    boefje.scan_level = 3
     all_plugins = storage.get_all()
     assert all_plugins == [boefje]
 
diff --git a/rocky/katalogus/client.py b/rocky/katalogus/client.py
index 846e0739658..9cd9fa62b74 100644
--- a/rocky/katalogus/client.py
+++ b/rocky/katalogus/client.py
@@ -221,6 +221,18 @@ def create_plugin(self, plugin: Plugin) -> None:
         else:
             logger.info("Plugin %s could not be created", plugin.name)
 
+    def edit_plugin(self, plugin: Plugin) -> None:
+        response = self.session.patch(
+            f"{self.organization_uri}/boefjes/{plugin.id}",
+            content=plugin.model_dump_json(exclude_none=True),
+        )
+        response.raise_for_status()
+
+        if response.status_code == codes.CREATED:
+            logger.info("Plugin %s", plugin.name)
+        else:
+            logger.info("Plugin %s could not be created", plugin.name)
+
 
 def parse_boefje(boefje: dict) -> Boefje:
     scan_level = SCAN_LEVEL(boefje["scan_level"])
diff --git a/rocky/katalogus/templates/boefje_setup.html b/rocky/katalogus/templates/boefje_setup.html
index ecf96d52b47..48c2d75c0fe 100644
--- a/rocky/katalogus/templates/boefje_setup.html
+++ b/rocky/katalogus/templates/boefje_setup.html
@@ -11,6 +11,8 @@
             <div class="layout-form">
                 {% if boefje_variant %}
                     <h1>{% translate "Boefje variant setup" %}</h1>
+                {% elif edit_boefje_name %}
+                    <h1>{% translate "Edit" %} "{{ edit_boefje_name }}"</h1>
                 {% else %}
                     <h1>{% translate "Boefje setup" %}</h1>
                 {% endif %}
@@ -25,8 +27,19 @@ <h1>{% translate "Boefje setup" %}</h1>
                     {% include "partials/form/fieldset.html" with legend=fieldset_legend fields=form %}
 
                     <div class="button-container">
-                        <button type="submit">{% translate "Create variant" %}</button>
-                        <button type="button" class="ghost">{% translate "Discard variant" %}</button>
+                        {% if edit_boefje_name %}
+                            <button type="submit">{% translate "Save changes" %}</button>
+                            <a href="{% url "boefje_detail" organization_code=organization.code plugin_id=return_to_plugin_id %}"
+                               class="button ghost">{% translate "Discard changes" %}</a>
+                        {% elif boefje_variant %}
+                            <button type="submit">{% translate "Create variant" %}</button>
+                            <a href="{% url "boefje_detail" organization_code=organization.code plugin_id=return_to_plugin_id %}"
+                               class="button ghost">{% translate "Discard variant" %}</a>
+                        {% else %}
+                            <button type="submit">{% translate "Create new Boefje" %}</button>
+                            <a href="{% url "katalogus" organization_code=organization.code %}"
+                               class="button ghost">{% translate "Discard new Boefje" %}</a>
+                        {% endif %}
                     </div>
                 </form>
             </div>
diff --git a/rocky/katalogus/templates/plugin_container_image.html b/rocky/katalogus/templates/plugin_container_image.html
index b823ef14e3c..17ddba9b025 100644
--- a/rocky/katalogus/templates/plugin_container_image.html
+++ b/rocky/katalogus/templates/plugin_container_image.html
@@ -1,4 +1,5 @@
 {% load static %}
+{% load humanize %}
 {% load i18n %}
 
 <div>
@@ -44,6 +45,7 @@ <h3>{% translate "Variants" %}</h3>
                                     <th scope="col">{% translate "Name" %}</th>
                                     <th scope="col">{% translate "Scan level" %}</th>
                                     <th scope="col">{% translate "Status" %}</th>
+                                    <th scope="col">{% translate "Age" %}</th>
                                     <th scope="col"></th>
                                 </tr>
                             </thead>
@@ -70,6 +72,9 @@ <h3>{% translate "Variants" %}</h3>
                                                 <span class="label tags-color-4-medium">{% translate "Disabled" %}</span>
                                             {% endif %}
                                         </td>
+                                        <td>
+                                            <span title="{{ variant.created }} UTC">{{ variant.created|naturaltime }}</span>
+                                        </td>
                                         <td class="actions">
                                             <button class="expando-button"
                                                     data-icon-open-class="icon ti-chevron-down"
@@ -81,6 +86,8 @@ <h3>{% translate "Variants" %}</h3>
                                     </tr>
                                     <tr class="expando-row">
                                         <td colspan="5">
+                                            <h5>{% translate "Boefje ID" %}</h5>
+                                            <p>{{ variant.id }}</p>
                                             <h5>{% translate "Creation date" %}</h5>
                                             {% if variant.created %}
                                                 <p>{{ variant.created }}</p>
@@ -94,6 +101,12 @@ <h5>{% translate "Arguments" %}</h5>
                                             {% else %}
                                                 <p>{% translate "There are no arguments used for this Boefje variant." %}</p>
                                             {% endif %}
+                                            {% if perms.tools.can_add_boefje %}
+                                                <div class="horizontal-view toolbar">
+                                                    <a class="button ghost"
+                                                       href="{% url "edit_boefje" plugin_id=variant.id organization_code=organization.code %}"><span aria-hidden="true" class="icon ti-edit action-button"></span>{% translate "Edit variant" %}</a>
+                                                </div>
+                                            {% endif %}
                                         </td>
                                     </tr>
                                 {% endfor %}
diff --git a/rocky/katalogus/urls.py b/rocky/katalogus/urls.py
index 83b0f1f73bf..7d5943b8713 100644
--- a/rocky/katalogus/urls.py
+++ b/rocky/katalogus/urls.py
@@ -1,6 +1,6 @@
 from django.urls import path, re_path
 
-from katalogus.views.boefje_setup import AddBoefjeVariantView, AddBoefjeView
+from katalogus.views.boefje_setup import AddBoefjeVariantView, AddBoefjeView, EditBoefjeView
 from katalogus.views.change_clearance_level import ChangeClearanceLevel
 from katalogus.views.katalogus import (
     AboutPluginsView,
@@ -63,6 +63,11 @@
         BoefjeDetailView.as_view(),
         name="boefje_detail",
     ),
+    path(
+        "plugins/boefje/<plugin_id>/edit/",
+        EditBoefjeView.as_view(),
+        name="edit_boefje",
+    ),
     path(
         "plugins/normalizer/<plugin_id>/",
         NormalizerDetailView.as_view(),
diff --git a/rocky/katalogus/views/boefje_setup.py b/rocky/katalogus/views/boefje_setup.py
index 366ee1e4b1e..39333b7899a 100644
--- a/rocky/katalogus/views/boefje_setup.py
+++ b/rocky/katalogus/views/boefje_setup.py
@@ -23,39 +23,15 @@ def form_valid(self, form):
         """If the form is valid, redirect to the supplied URL."""
         form_data = form.cleaned_data
 
-        plugin_id = str(uuid.uuid4())
-        return_to_plugin_id = self.kwargs.get("plugin_id", plugin_id)
-
-        arguments = [] if form_data["oci_arguments"] == "" else form_data["oci_arguments"].split()
-        consumes = [] if form_data["consumes"] == "" else form_data["consumes"].strip("[]").replace("'", "").split(", ")
-        produces = [] if form_data["produces"] == "" else form_data["produces"].split(",")
-        produces = [p.strip() for p in produces]
-        input_objects = []
-
-        for input_object in consumes:
-            input_objects.append(type_by_name(input_object))
-
-        boefje = Boefje(
-            id=plugin_id,
-            name=form_data.get("name"),
-            created=str(datetime.now()),
-            description=form_data.get("description"),
-            enabled=False,
-            type="boefje",
-            scan_level=form_data["scan_level"],
-            consumes=input_objects,
-            produces=produces,
-            boefje_schema=form_data["boefje_schema"],
-            oci_image=form_data.get("oci_image"),
-            oci_arguments=arguments,
-        )
+        plugin = create_boefje_with_form_data(form_data, self.plugin_id, str(datetime.now()))
 
-        get_katalogus(self.organization.code).create_plugin(boefje)
+        get_katalogus(self.organization.code).create_plugin(plugin)
         query_params = urlencode({"new_variant": True})
 
         return redirect(
             reverse(
-                "boefje_detail", kwargs={"organization_code": self.organization.code, "plugin_id": return_to_plugin_id}
+                "boefje_detail",
+                kwargs={"organization_code": self.organization.code, "plugin_id": self.return_to_plugin_id},
             )
             + "?"
             + query_params
@@ -65,6 +41,12 @@ def form_valid(self, form):
 class AddBoefjeView(BoefjeSetupView):
     """View where the user can create a new Boefje"""
 
+    def setup(self, request, *args, **kwargs):
+        super().setup(request, *args, **kwargs)
+
+        self.plugin_id = str(uuid.uuid4())
+        self.return_to_plugin_id = self.plugin_id
+
     def get_context_data(self, **kwargs):
         context = super().get_context_data(**kwargs)
 
@@ -85,45 +67,150 @@ class AddBoefjeVariantView(BoefjeSetupView):
     def setup(self, request, *args, **kwargs):
         super().setup(request, *args, **kwargs)
 
-        plugin_id = self.kwargs["plugin_id"]
+        self.plugin_id = str(uuid.uuid4())
+        self.return_to_plugin_id = self.kwargs.get("plugin_id")
         katalogus = get_katalogus(self.organization.code)
-        self.plugin = katalogus.get_plugin(plugin_id)
-        consumes = []
+        self.plugin = katalogus.get_plugin(self.return_to_plugin_id)
 
-        for input_object in list(self.plugin.consumes):
-            consumes.append(input_object.__name__)
+    def get_initial(self):
+        initial = super().get_initial()
 
-        self.initial = {
-            "oci_image": self.plugin.oci_image,
-            "oci_arguments": " ".join(self.plugin.oci_arguments),
-            "boefje_schema": self.plugin.boefje_schema,
-            "consumes": consumes,
-            "produces": ", ".join(self.plugin.produces),
-            "scan_level": self.plugin.scan_level,
-        }
+        consumes = []
 
-    def get_form(self, form_class=None) -> BoefjeAddForm:
-        if form_class is None:
-            form_class = self.get_form_class()
+        for input_object in self.plugin.consumes:
+            consumes.append(input_object.__name__)
 
-        form = super().get_form(form_class)
-        form.fields["oci_image"].disabled = True
+        initial["oci_image"] = self.plugin.oci_image
+        initial["oci_arguments"] = " ".join(self.plugin.oci_arguments)
+        initial["boefje_schema"] = self.plugin.boefje_schema
+        initial["consumes"] = consumes
+        initial["produces"] = ", ".join(self.plugin.produces)
+        initial["scan_level"] = self.plugin.scan_level
 
-        return form
+        return initial
 
     def get_context_data(self, **kwargs):
         context = super().get_context_data(**kwargs)
         context["boefje_variant"] = True
+        context["return_to_plugin_id"] = self.return_to_plugin_id
 
         context["breadcrumbs"] = [
             {"url": reverse("katalogus", kwargs={"organization_code": self.organization.code}), "text": "KAT-alogus"},
+            {
+                "url": reverse(
+                    "boefje_detail",
+                    kwargs={"organization_code": self.organization.code, "plugin_id": self.return_to_plugin_id},
+                ),
+                "text": "Boefje detail page",
+            },
             {
                 "url": reverse(
                     "boefje_variant_setup",
-                    kwargs={"organization_code": self.organization.code, "plugin_id": self.plugin.id},
+                    kwargs={"organization_code": self.organization.code, "plugin_id": self.return_to_plugin_id},
                 ),
                 "text": "Boefje variant setup",
             },
         ]
 
         return context
+
+
+class EditBoefjeView(BoefjeSetupView):
+    """View where the user can update a Boefje."""
+
+    def setup(self, request, *args, **kwargs):
+        super().setup(request, *args, **kwargs)
+
+        plugin_id = self.kwargs.get("plugin_id")
+        katalogus = get_katalogus(self.organization.code)
+        self.plugin = katalogus.get_plugin(plugin_id)
+
+    def get_initial(self):
+        initial = super().get_initial()
+
+        consumes = []
+
+        for input_object in self.plugin.consumes:
+            consumes.append(input_object.__name__)
+
+        initial["name"] = self.plugin.name
+        initial["description"] = self.plugin.description
+        initial["oci_image"] = self.plugin.oci_image
+        initial["oci_arguments"] = " ".join(self.plugin.oci_arguments)
+        initial["boefje_schema"] = self.plugin.boefje_schema
+        initial["consumes"] = consumes
+        initial["produces"] = ", ".join(self.plugin.produces)
+        initial["scan_level"] = self.plugin.scan_level
+
+        return initial
+
+    def form_valid(self, form):
+        """If the form is valid, redirect to the supplied URL."""
+        form_data = form.cleaned_data
+        plugin = create_boefje_with_form_data(form_data, self.kwargs.get("plugin_id"), self.plugin.created)
+
+        get_katalogus(self.organization.code).edit_plugin(plugin)
+
+        return redirect(
+            reverse("boefje_detail", kwargs={"organization_code": self.organization.code, "plugin_id": plugin.id})
+        )
+
+    def get_context_data(self, **kwargs):
+        context = super().get_context_data(**kwargs)
+        context["edit_boefje_name"] = self.plugin.name
+        context["return_to_plugin_id"] = self.plugin.id
+
+        context["breadcrumbs"] = [
+            {
+                "url": reverse("katalogus", kwargs={"organization_code": self.organization.code}),
+                "text": "KAT-alogus",
+            },
+            {
+                "url": reverse(
+                    "boefje_detail",
+                    kwargs={
+                        "organization_code": self.organization.code,
+                        "plugin_id": self.plugin.id,
+                    },
+                ),
+                "text": self.plugin.name,
+            },
+            {
+                "url": reverse(
+                    "edit_boefje",
+                    kwargs={
+                        "organization_code": self.organization.code,
+                        "plugin_id": self.plugin.id,
+                    },
+                ),
+                "text": 'Edit "' + self.plugin.name + '"',
+            },
+        ]
+
+        return context
+
+
+def create_boefje_with_form_data(form_data, plugin_id: str, created: str):
+    arguments = [] if form_data["oci_arguments"] == "" else form_data["oci_arguments"].split()
+    consumes = [] if form_data["consumes"] == "" else form_data["consumes"].strip("[]").replace("'", "").split(", ")
+    produces = [] if form_data["produces"] == "" else form_data["produces"].split(",")
+    produces = [p.strip() for p in produces]
+    input_objects = []
+
+    for input_object in consumes:
+        input_objects.append(type_by_name(input_object))
+
+    return Boefje(
+        id=plugin_id,
+        name=form_data.get("name"),
+        created=created,
+        description=form_data.get("description"),
+        enabled=False,
+        type="boefje",
+        scan_level=form_data["scan_level"],
+        consumes=input_objects,
+        produces=produces,
+        boefje_schema=form_data["boefje_schema"],
+        oci_image=form_data.get("oci_image"),
+        oci_arguments=arguments,
+    )
diff --git a/rocky/katalogus/views/plugin_detail.py b/rocky/katalogus/views/plugin_detail.py
index 99bf4a71042..477061c8869 100644
--- a/rocky/katalogus/views/plugin_detail.py
+++ b/rocky/katalogus/views/plugin_detail.py
@@ -2,6 +2,7 @@
 from typing import Any
 
 from account.mixins import OrganizationView
+from dateutil import parser
 from django.contrib import messages
 from django.http import FileResponse
 from django.shortcuts import redirect
@@ -130,6 +131,11 @@ def get_context_data(self, **kwargs):
         context = super().get_context_data(**kwargs)
         context["new_variant"] = self.request.GET.get("new_variant")
         context["variants"] = get_katalogus(self.organization.code).get_plugins(oci_image=self.plugin.oci_image)
+
+        for variant in context["variants"]:
+            if variant.created:
+                variant.created = parser.isoparse(variant.created)
+
         context["select_ooi_filter_form"] = SelectOOIFilterForm
         if "show_all" in self.request.GET:
             context["select_oois_form"] = SelectOOIForm(
diff --git a/rocky/rocky/locale/django.pot b/rocky/rocky/locale/django.pot
index 21ab47bdbec..9fff3655431 100644
--- a/rocky/rocky/locale/django.pot
+++ b/rocky/rocky/locale/django.pot
@@ -714,6 +714,13 @@ msgstr ""
 msgid "Boefje variant setup"
 msgstr ""
 
+#: katalogus/templates/boefje_setup.html
+#: rocky/templates/organizations/organization_member_list.html
+#: rocky/templates/organizations/organization_settings.html
+#: rocky/views/ooi_edit.py rocky/views/organization_edit.py
+msgid "Edit"
+msgstr ""
+
 #: katalogus/templates/boefje_setup.html
 msgid "Boefje setup"
 msgstr ""
@@ -729,6 +736,14 @@ msgid ""
 "                    "
 msgstr ""
 
+#: katalogus/templates/boefje_setup.html
+msgid "Save changes"
+msgstr ""
+
+#: katalogus/templates/boefje_setup.html
+msgid "Discard changes"
+msgstr ""
+
 #: katalogus/templates/boefje_setup.html
 msgid "Create variant"
 msgstr ""
@@ -737,6 +752,14 @@ msgstr ""
 msgid "Discard variant"
 msgstr ""
 
+#: katalogus/templates/boefje_setup.html
+msgid "Create new Boefje"
+msgstr ""
+
+#: katalogus/templates/boefje_setup.html
+msgid "Discard new Boefje"
+msgstr ""
+
 #: katalogus/templates/boefjes.html katalogus/templates/normalizers.html
 msgid "available"
 msgstr ""
@@ -1160,6 +1183,10 @@ msgstr ""
 msgid "Status"
 msgstr ""
 
+#: katalogus/templates/plugin_container_image.html
+msgid "Age"
+msgstr ""
+
 #: katalogus/templates/plugin_container_image.html
 msgid "current"
 msgstr ""
@@ -1190,6 +1217,10 @@ msgstr ""
 msgid "Open details"
 msgstr ""
 
+#: katalogus/templates/plugin_container_image.html
+msgid "Boefje ID"
+msgstr ""
+
 #: katalogus/templates/plugin_container_image.html
 #: reports/templates/report_overview/report_history_table.html
 #: reports/templates/report_overview/subreports_table.html
@@ -1215,6 +1246,10 @@ msgstr ""
 msgid "There are no arguments used for this Boefje variant."
 msgstr ""
 
+#: katalogus/templates/plugin_container_image.html
+msgid "Edit variant"
+msgstr ""
+
 #: katalogus/templates/plugin_container_image.html
 msgid "This Boefje has no variants yet."
 msgstr ""
@@ -4433,7 +4468,15 @@ msgstr ""
 
 #: tools/forms/settings.py
 msgid ""
-"<p>A description of the boefje explaining in short what it can do. This will "
+"<p>The name of the Docker image. For example: <i>'ghcr.io/minvws/openkat/"
+"nmap'</i>. In OpenKAT, all Boefjes with the same container image will be "
+"seen as 'variants' and will be shown together on the Boefje detail page. </"
+"p> "
+msgstr ""
+
+#: tools/forms/settings.py
+msgid ""
+"<p>A description of the Boefje explaining in short what it can do. This will "
 "both be displayed inside the KAT-alogus and on the Boefje details page.</p> "
 msgstr ""
 
@@ -5732,12 +5775,6 @@ msgstr ""
 msgid "Assigned clearance level"
 msgstr ""
 
-#: rocky/templates/organizations/organization_member_list.html
-#: rocky/templates/organizations/organization_settings.html
-#: rocky/views/ooi_edit.py rocky/views/organization_edit.py
-msgid "Edit"
-msgstr ""
-
 #: rocky/templates/organizations/organization_member_list.html
 msgid "Super user"
 msgstr ""
diff --git a/rocky/tests/katalogus/test_katalogus_boefje_setup.py b/rocky/tests/katalogus/test_katalogus_boefje_setup.py
new file mode 100644
index 00000000000..204afe63fe4
--- /dev/null
+++ b/rocky/tests/katalogus/test_katalogus_boefje_setup.py
@@ -0,0 +1,64 @@
+from katalogus.views.boefje_setup import AddBoefjeVariantView, AddBoefjeView, EditBoefjeView
+from pytest_django.asserts import assertContains
+
+from tests.conftest import setup_request
+
+
+def test_boefje_setup(rf, superuser_member):
+    request = setup_request(rf.get("boefje_setup"), superuser_member.user)
+    response = AddBoefjeView.as_view()(request, organization_code=superuser_member.organization.code)
+
+    assert response.status_code == 200
+    assertContains(response, "Boefje setup")
+    assertContains(response, "Container image")
+    assertContains(response, "Name")
+    assertContains(response, "Description")
+    assertContains(response, "Arguments")
+    assertContains(response, "JSON Schema")
+    assertContains(response, "Input object type")
+    assertContains(response, "Output mime types")
+    assertContains(response, "Clearance level")
+    assertContains(response, "Create new Boefje")
+
+
+def test_boefje_variant_setup(rf, superuser_member, boefje_dns_records, mocker):
+    katalogus_mocker = mocker.patch("katalogus.client.KATalogusClientV1")()
+    katalogus_mocker.get_plugin.return_value = boefje_dns_records
+    request = setup_request(rf.get("boefje_variant_setup"), superuser_member.user)
+    response = AddBoefjeVariantView.as_view()(
+        request, organization_code=superuser_member.organization.code, plugin_id=boefje_dns_records.id
+    )
+
+    assert response.status_code == 200
+    assertContains(response, "Boefje variant setup")
+    assertContains(response, "Container image")
+    assertContains(response, "Name")
+    assertContains(response, "Description")
+    assertContains(response, "Arguments")
+    assertContains(response, "JSON Schema")
+    assertContains(response, "Input object type")
+    assertContains(response, "Output mime types")
+    assertContains(response, "Clearance level")
+    assertContains(response, "Create variant")
+
+
+def test_edit_boefje_view(rf, superuser_member, boefje_dns_records, mocker):
+    katalogus_mocker = mocker.patch("katalogus.client.KATalogusClientV1")()
+    katalogus_mocker.get_plugin.return_value = boefje_dns_records
+    request = setup_request(rf.get("edit_boefje"), superuser_member.user)
+    response = EditBoefjeView.as_view()(
+        request, organization_code=superuser_member.organization.code, plugin_id=boefje_dns_records.id
+    )
+
+    assert response.status_code == 200
+    assertContains(response, "Edit")
+    assertContains(response, boefje_dns_records.name)
+    assertContains(response, "Container image")
+    assertContains(response, "Name")
+    assertContains(response, "Description")
+    assertContains(response, "Arguments")
+    assertContains(response, "JSON Schema")
+    assertContains(response, "Input object type")
+    assertContains(response, "Output mime types")
+    assertContains(response, "Clearance level")
+    assertContains(response, "Save changes")
diff --git a/rocky/tests/katalogus/test_katalogus_create_boefje.py b/rocky/tests/katalogus/test_katalogus_create_boefje.py
deleted file mode 100644
index 8229e375571..00000000000
--- a/rocky/tests/katalogus/test_katalogus_create_boefje.py
+++ /dev/null
@@ -1,21 +0,0 @@
-from katalogus.views.boefje_setup import BoefjeSetupView
-from pytest_django.asserts import assertContains
-
-from tests.conftest import setup_request
-
-
-def test_boefje_setup(rf, superuser_member):
-    request = setup_request(rf.get("boefje_setup"), superuser_member.user)
-    response = BoefjeSetupView.as_view()(request, organization_code=superuser_member.organization.code)
-
-    assert response.status_code == 200
-    assertContains(response, "Boefje setup")
-    assertContains(response, "Container image")
-    assertContains(response, "Name")
-    assertContains(response, "Description")
-    assertContains(response, "Arguments")
-    assertContains(response, "JSON Schema")
-    assertContains(response, "Input object type")
-    assertContains(response, "Output mime types")
-    assertContains(response, "Clearance level")
-    assertContains(response, "Create variant")
diff --git a/rocky/tools/forms/boefje.py b/rocky/tools/forms/boefje.py
index a9f7c156a9a..dafe970a092 100644
--- a/rocky/tools/forms/boefje.py
+++ b/rocky/tools/forms/boefje.py
@@ -6,6 +6,7 @@
 from tools.forms.base import BaseRockyForm
 from tools.forms.settings import (
     BOEFJE_CONSUMES_HELP_TEXT,
+    BOEFJE_CONTAINER_IMAGE_HELP_TEXT,
     BOEFJE_DESCRIPTION_HELP_TEXT,
     BOEFJE_PRODUCES_HELP_TEXT,
     BOEFJE_SCAN_LEVEL_HELP_TEXT,
@@ -19,12 +20,7 @@ class BoefjeAddForm(BaseRockyForm):
     oci_image = forms.CharField(
         required=True,
         label=_("Container image"),
-        widget=forms.TextInput(
-            attrs={
-                "description": "The name of the Docker image. For example: ghcr.io/minvws/openkat/nmap",
-                "aria-describedby": "input-description",
-            }
-        ),
+        help_text=BOEFJE_CONTAINER_IMAGE_HELP_TEXT,
     )
     name = forms.CharField(
         required=True,
diff --git a/rocky/tools/forms/settings.py b/rocky/tools/forms/settings.py
index 887d6aba855..7ce8ca7b091 100644
--- a/rocky/tools/forms/settings.py
+++ b/rocky/tools/forms/settings.py
@@ -59,9 +59,17 @@
     "Select a datetime to change the view to represent that moment in time."
 )
 
+BOEFJE_CONTAINER_IMAGE_HELP_TEXT = mark_safe(
+    _(
+        "<p>The name of the Docker image. For example: <i>'ghcr.io/minvws/openkat/nmap'</i>. "
+        "In OpenKAT, all Boefjes with the same container image will be seen as 'variants' and will be "
+        "shown together on the Boefje detail page. </p> "
+    )
+)
+
 BOEFJE_DESCRIPTION_HELP_TEXT = mark_safe(
     _(
-        "<p>A description of the boefje explaining in short what it can do. "
+        "<p>A description of the Boefje explaining in short what it can do. "
         "This will both be displayed inside the KAT-alogus and on the Boefje details page.</p> "
     )
 )