data.hackerone_reportsplugin

[traut]

Description

HackerOne provides an API for the companies to pull the data about submitted vulnerability reports.

Use Case

The metrics from HackerOne are often used in the SecOps reports for assessing the enterprise's bug bounty program.

Requirements

• plugin configuration:
  • api_username -- (required) a string attribute
  • api_token -- (required) a string attribute
• plugin parameters:
  • supporting all filter parameters for Get All Reports request:
    • program -- (required) a string attribute
    • reporter -- (optional) a string attribute
    • assignee -- (optional) a string attribute
    • state -- (optional) a string attribute
    • ...
  • size -- (optional) an int parameter

size parameter is used for calculating number of pages to be fetched, if page_number (page[number] in the API) is not provided.

The plugin returns the list of reports, concatenated from multiple pages if needed.

The plugin should be a part of data.hackerone package.

Additional Information

• HackerOne Get All Reports endpoint