We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 2fe01b2 commit 667096fCopy full SHA for 667096f
README.md
@@ -35,6 +35,23 @@ findings:
35
status: "SUPPRESED"
36
```
37
38
+The yaml file can be autogenerated from existing suppressions using this `awscli` command with `yq`.
39
+Feel free to remove `title` and `resource_id` keys. I use those as inline comments.
40
+Remember the `findings` parent key.
41
+
42
+```bash
43
+aws securityhub get-findings \
44
+ --filters '{"WorkflowStatus": [{"Value": "SUPPRESSED", "Comparison": "EQUALS"}] }' \
45
+ --query 'Findings.{
46
+ id: Id,
47
+ product_arn: ProductArn,
48
+ note: { text: Note.Text },
49
+ workflow: { status: `"SUPPRESSED"` }
50
+ title: Title,
51
+ resource_id: Resources[0].Id,
52
+ }' | yq -P . > findings.yaml
53
+```
54
55
---
56
57
<!-- BEGIN_TF_DOCS -->
0 commit comments