From 7ebb334f73fed2e986d61f2fe1687516362a17b4 Mon Sep 17 00:00:00 2001 From: nishfath <81247855+nishfath@users.noreply.github.com> Date: Mon, 3 Oct 2022 11:12:24 -0400 Subject: [PATCH 1/4] Add files via upload --- ngsast.yaml | 27 +++++++++++++++++++++++++++ 1 file changed, 27 insertions(+) create mode 100644 ngsast.yaml diff --git a/ngsast.yaml b/ngsast.yaml new file mode 100644 index 0000000..f938a3a --- /dev/null +++ b/ngsast.yaml @@ -0,0 +1,27 @@ +ngsast: + - app: + name: shiftleft-java-demo + language: JAVA + policy: io.shiftleft/shiftleft-java-demo + modify-findings: + - my_modification_rule + - default: + policy: io.shiftleft/defaultWithDict +finding-modifications: + my_modification_rule: + filter: + category: + - Sensitive Data Leak + type: + - vuln + severity: + - critical + tags: + - key: cvss_score + value: 5 + - key: severity + value: medium + - key: cvss_31_severity_rating + value: medium + - key: some-custom-tag + value: todo \ No newline at end of file From 4127213eff460e3c61fe92f5379530145803b620 Mon Sep 17 00:00:00 2001 From: nishfath <81247855+nishfath@users.noreply.github.com> Date: Mon, 3 Oct 2022 11:17:45 -0400 Subject: [PATCH 2/4] Update ngsast.yaml --- ngsast.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/ngsast.yaml b/ngsast.yaml index f938a3a..bef9add 100644 --- a/ngsast.yaml +++ b/ngsast.yaml @@ -15,7 +15,7 @@ finding-modifications: type: - vuln severity: - - critical + - High tags: - key: cvss_score value: 5 @@ -24,4 +24,4 @@ finding-modifications: - key: cvss_31_severity_rating value: medium - key: some-custom-tag - value: todo \ No newline at end of file + value: todo From 3789f41c0a68369a0815d8d2859a915ff765b7d2 Mon Sep 17 00:00:00 2001 From: nishfath <81247855+nishfath@users.noreply.github.com> Date: Mon, 3 Oct 2022 12:13:25 -0400 Subject: [PATCH 3/4] Update ngsast.yaml --- ngsast.yaml | 7 ++----- 1 file changed, 2 insertions(+), 5 deletions(-) diff --git a/ngsast.yaml b/ngsast.yaml index bef9add..e376d64 100644 --- a/ngsast.yaml +++ b/ngsast.yaml @@ -5,8 +5,6 @@ ngsast: policy: io.shiftleft/shiftleft-java-demo modify-findings: - my_modification_rule - - default: - policy: io.shiftleft/defaultWithDict finding-modifications: my_modification_rule: filter: @@ -20,8 +18,7 @@ finding-modifications: - key: cvss_score value: 5 - key: severity - value: medium + value: moderate - key: cvss_31_severity_rating value: medium - - key: some-custom-tag - value: todo + From 9d79c4ec0fead6ca342060a1e585d844992f38ba Mon Sep 17 00:00:00 2001 From: nishfath <81247855+nishfath@users.noreply.github.com> Date: Mon, 3 Oct 2022 12:29:37 -0400 Subject: [PATCH 4/4] Update ngsast.yaml --- ngsast.yaml | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/ngsast.yaml b/ngsast.yaml index e376d64..bef9add 100644 --- a/ngsast.yaml +++ b/ngsast.yaml @@ -5,6 +5,8 @@ ngsast: policy: io.shiftleft/shiftleft-java-demo modify-findings: - my_modification_rule + - default: + policy: io.shiftleft/defaultWithDict finding-modifications: my_modification_rule: filter: @@ -18,7 +20,8 @@ finding-modifications: - key: cvss_score value: 5 - key: severity - value: moderate + value: medium - key: cvss_31_severity_rating value: medium - + - key: some-custom-tag + value: todo