Skip to content

Use application name Instead of guid for better traceability within Veracode #32

@arpitkothari-hub

Description

@arpitkothari-hub

Summary

For traceability purposes, the plugin currently uses the application GUID within the copy comment, which is challenging to identify within Veracode. We would prefer the use of the application name instead.
proposal_comment = '(COPIED FROM APP {}) {}'.format(from_app_guid, mitigation_action['comment'])

Enhancement Request

  • Current Behavior: The plugin uses the application GUID within the copy comment:
  • Desired Behavior: Use the application name instead of the GUID, or provide data based on user input to the argument while executing the script.
  • Implementation Suggestion: Modify the MitigationCopier.py script to handle the value within the copy comment according to the argument provided:
  • If the user provides --fromapp, present the application GUID.
  • If the user provides --fromappname, present the application name in the copy comment.

Impact

This enhancement will make it easier to identify applications within Veracode, improving overall usability and traceability.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions