forked from brian1917/veracode-mitigation-copier
-
Notifications
You must be signed in to change notification settings - Fork 12
Open
Description
Summary
For traceability purposes, the plugin currently uses the application GUID within the copy comment, which is challenging to identify within Veracode. We would prefer the use of the application name instead.
proposal_comment = '(COPIED FROM APP {}) {}'.format(from_app_guid, mitigation_action['comment'])
Enhancement Request
- Current Behavior: The plugin uses the application GUID within the copy comment:
- Desired Behavior: Use the application name instead of the GUID, or provide data based on user input to the argument while executing the script.
- Implementation Suggestion: Modify the
MitigationCopier.pyscript to handle the value within the copy comment according to the argument provided: - If the user provides
--fromapp, present the application GUID. - If the user provides
--fromappname, present the application name in the copy comment.
Impact
This enhancement will make it easier to identify applications within Veracode, improving overall usability and traceability.
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels