Perform actions when aqua scan detects security vulnerabilities with solutions #1147
Conversation
valituguran
changed the title
valituguran
changed the title
| aquaJsonMap.resources.each { it -> | ||
| (it as Map).vulnerabilities.each { vul -> | ||
| Map vulnerability = vul as Map | ||
| if ((vulnerability?.exploit_type as String)?.equalsIgnoreCase("remote") |
There was a problem hiding this comment.
Use constant for "remote" and "critical"
| @@ -199,13 +215,28 @@ class ScanWithAquaStage extends Stage { | |||
| [ title: "Messages", value: prepareMessageToBitbucket(messages), ] | |||
| ]) | |||
| } | |||
| if (actionableVulnerabilities?.size() > 0) { | |||
There was a problem hiding this comment.
Why not add a new message per actionableVulnerabilitie like: title: "Explotable vulnerability", value: Information about the vulnerability (using prepareMessageToBitbucket)
There was a problem hiding this comment.
We need this specific entry to be present in the data structure as a marker: {
"title": "Blocking",
"type": "TEXT",
"value": "Yes"
}
| value: "Yes" | ||
| ]) | ||
| } else { | ||
| data.put("messages", [ |
There was a problem hiding this comment.
Try to avoid duplicate parts. If "messages" is needed, add it and later add the information
|
|
||
| bitbucket.createCodeInsightReport(data, context.repoName, context.gitCommit) | ||
| } | ||
|
|
||
| private createBitbucketCodeInsightReport(String messages) { | ||
| String title = "Aqua Security" | ||
| String details = "There was some problems with Aqua:" | ||
| String details = "There were some problems with Aqua" |
There was a problem hiding this comment.
Maintain the ":" at the end (to be coherent with other messages -the fix of was is right-):
|
Release Manager with a component containing security vulnerabilities with a solution:
Single component containing security vulnerabilities with a solution:
|
…solutions (#1147) Fail pipeline in case of remote critical with solution vulnerabilities.
…solutions (#1147) Fail pipeline in case of remote critical with solution vulnerabilities.
Actions performed: