Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

BIG UPDATE. Reference pull request for full details. #49

Merged
merged 1 commit into from
Mar 29, 2024

Conversation

crodriguez6497
Copy link
Collaborator

-Updated all SQL statements to parameterized queries.
-Added additional logic and validation to IAVM Number field. If an IAVM number is provided, an icon is generated with a link to the VRAM IAV Release Details page. An IAV Comply By Datepicker is also displayed and IAV Comply By Date becomes a required field once an IAVM number is provided.
-Added functionality to update a POAM Asset List with any applicable assets that have findings in STIG Manager based off of Vulnerability ID.
-Added STIG Manager findings section. The primary "FINDINGS GRID" tab displays the results of a query to STIG Managers' collections/{collectionId}/findings and stigs/rules/${ruleId}. This is aggregated by groupId with acceptedOnly = false. Additional projections for "collections/{collectionId}/findings" include assets and stigs while projections for "stigs/rules/${ruleId}" include check, and fix.

Ultimately this displays a grid that includes Group ID, Rule Title, Benchmark ID, Severity and Asset Count of all findings. When expanding a row it displays a list of affected assets. ADDITIONALLY, the far right column has a "Create or Update POAM" button. When clicked, a draft POAM will be opened with the "Source Identifying Control Vulnerability", "STIG Title", "Source Identifying Control Vulnerability - ID #", "Raw Severity Value", and the Asset List filled out. Additionally, Discussion, Check, and Fix are compiled into a textarea. A toggle will appear at the top of the POAM to "View STIG Manager Check Data" if this data is available. The secondary "FINDINGS CHART" tab displays a chart view of the severity of all findings. Chart design/style is similar to other C-PAT charts and also includes export functionality. Filters have been added beneath both the grid and the chart to filter the findings based off of whether a POAM already exists or not. All column titles are sortable. Primary use case: filter by Severity high-low find items without an existing poam.

@crodriguez6497 crodriguez6497 merged commit 57e405d into main Mar 29, 2024
1 check passed
@crodriguez6497 crodriguez6497 deleted the CHRIS_DEV branch March 29, 2024 21:16
crodriguez6497 added a commit that referenced this pull request Jun 4, 2024
BIG UPDATE.  Reference pull request for full details.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant