bancolombia / bancolombia/devsecops-engine-tools
add custom id in engine iac
Open
Nobody has claimed this yet.
Improvement
Review/Pending
- Dominant language
- Python
- Stars
- 42
- Forks
- 19
- Avg merge
- 8h 38m
- Merged PRs (30d)
- 8
Description
Description
Add custom id from to vulnerabilities from checkov tool in engine iac when vulnerabilities will send to vulnerability manager platform
Why do you consider it necessary?
This is necessary to show to developers the real id of vulnerability and simplify the way to consult it to remediate
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
No file or test is named. Start by tracing the Checkov vulnerability flow in the engine IaC integration and where findings are sent to the vulnerability manager platform. Done means the platform receives each finding with Checkov’s real vulnerability ID so developers can use it for remediation.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- devops, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100