Skip to content

Commit 5ebf242

Browse files
Whitespotsgitbook-bot
Whitespots
authored andcommitted
GITBOOK-573: No subject
1 parent 85d336f commit 5ebf242

28 files changed

+50
-8
lines changed

.gitbook/assets/image (1).png

21.6 KB
Loading

.gitbook/assets/image (180).png

488 KB
Loading

.gitbook/assets/image (181).png

111 KB
Loading

.gitbook/assets/image (182).png

275 KB
Loading

.gitbook/assets/image (183).png

250 KB
Loading

.gitbook/assets/image (4).png

149 KB
Loading

.gitbook/assets/image (6).png

1.71 KB
Loading
Loading
Loading
Loading
Loading
-5.63 KB
Loading
20.1 KB
Loading
-8.27 KB
Loading

.gitbook/assets/image (7) (1) (1).png

8.62 KB
Loading

.gitbook/assets/image (7) (1).png

-62.4 KB
Loading

.gitbook/assets/image (7).png

-14.2 KB
Loading

.gitbook/assets/image.png

-199 KB
Loading

SUMMARY.md

+3
Original file line numberDiff line numberDiff line change
@@ -51,6 +51,9 @@
5151
* [SLA](appsec-portal/features/security-metrics/metrics-settings/sla.md)
5252
* [CVSS](appsec-portal/features/security-metrics/cvss/README.md)
5353
* [CVSS Rule](appsec-portal/features/security-metrics/cvss/cvss-rule.md)
54+
* [Asset management](appsec-portal/features/asset-management/README.md)
55+
* [How to import repositories from version control](appsec-portal/features/asset-management/how-to-import-repositories-from-version-control.md)
56+
* [Default product](appsec-portal/features/asset-management/default-product.md)
5457
* [🎣 Auto Validator](appsec-portal/auto-validator/README.md)
5558
* [Rule creation](appsec-portal/auto-validator/rule-creation.md)
5659
* [Rules view](appsec-portal/auto-validator/rules-view.md)

appsec-portal/auditor/assets-view.md

+1-1
Original file line numberDiff line numberDiff line change
@@ -49,4 +49,4 @@ If you delete an Asset, the previously discovered findings from that Asset **rem
4949

5050
You can [**create** ](auditor-settings/product-asset-setting.md)a new Asset of the appropriate type by clicking the **Create icon** in the right panel.
5151

52-
<figure><img src="../../.gitbook/assets/image (7) (1) (1) (1) (1) (1).png" alt=""><figcaption></figcaption></figure>
52+
<figure><img src="../../.gitbook/assets/image (7) (1) (1) (1) (1) (1) (1).png" alt=""><figcaption></figcaption></figure>

appsec-portal/auditor/audits.md

+1-1
Original file line numberDiff line numberDiff line change
@@ -42,4 +42,4 @@ The same actions are available on the records as on the main Audits screen.
4242
When viewing a particular Asset, at the bottom of the screen you can also find all the audits performed on it. \
4343
The same actions with records are available as for the main audit screen
4444

45-
<figure><img src="../../.gitbook/assets/image (7) (1) (1) (1) (1).png" alt=""><figcaption></figcaption></figure>
45+
<figure><img src="../../.gitbook/assets/image (7) (1) (1) (1) (1) (1).png" alt=""><figcaption></figcaption></figure>
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,16 @@
1+
# Asset management
2+
3+
## General information
4+
5+
We support 5 types of assets:
6+
7+
<figure><img src="../../../.gitbook/assets/image.png" alt="" width="199"><figcaption></figcaption></figure>
8+
9+
Our platform uses them to manage scans and scan results.
10+
11+
This is how it works:
12+
13+
1. You create/import asset (for example any repository)
14+
2. Portal sends this repository in `REPOSITORY` variable to auditor
15+
3. Auditor performs scans and calls Portal's API endpoint with REPOSITORY parameter and a report from scanner
16+
4. Now portal knows where to put all asset-related vulnerabilities
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
# Default product
2+
3+
This is useful for all unsorted assets.
4+
5+
We kindly suggest you to create a product called "Unsorted" and set it as default from it's options page
6+
7+
<figure><img src="../../../.gitbook/assets/image (183).png" alt=""><figcaption></figcaption></figure>
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,16 @@
1+
# How to import repositories from version control
2+
3+
1. Be sure, that you have [set up the integration with your version control system](../../general-portal-settings/version-control.md)
4+
2. Navigate to Assets->Repositories page and click the "Import" button
5+
6+
<figure><img src="../../../.gitbook/assets/image (180).png" alt=""><figcaption></figcaption></figure>
7+
8+
3. Choose your integration
9+
10+
<figure><img src="../../../.gitbook/assets/image (181).png" alt="" width="375"><figcaption></figcaption></figure>
11+
12+
4. Assign products for repositories (or just keep [your default one](default-product.md))
13+
14+
<figure><img src="../../../.gitbook/assets/image (182).png" alt="" width="375"><figcaption></figcaption></figure>
15+
16+
5. That's it. Now you can run audits&#x20;

appsec-portal/features/recommendations.md

+1-1
Original file line numberDiff line numberDiff line change
@@ -12,4 +12,4 @@ The recommendations are presented:
1212
* **CWE** (Common Weakness Enumerations) This section provides tailored recommendations using the top Common Weakness Enumerations (CWEs) to enhance your developer training. By focusing on these CWEs, you can guide your developers to identify and prevent critical security vulnerabilities.\
1313
View CWE recommendations for any product status using a simple filter
1414

15-
<figure><img src="../../.gitbook/assets/image (6).png" alt=""><figcaption></figcaption></figure>
15+
<figure><img src="../../.gitbook/assets/image (7).png" alt=""><figcaption></figcaption></figure>

appsec-portal/features/security-metrics/severity-statistics-dashboard.md

+3-3
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@
66

77
&#x20;**Severity Statistic view:**
88

9-
<figure><img src="../../../.gitbook/assets/image (7) (1).png" alt=""><figcaption></figcaption></figure>
9+
<figure><img src="../../../.gitbook/assets/image (7) (1) (1).png" alt=""><figcaption></figcaption></figure>
1010

1111
You can **customise your dashboard** based on your needs by clicking the **Metrics button** <img src="../../../.gitbook/assets/image (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1).png" alt="" data-size="line"> on the right panel:
1212

@@ -49,7 +49,7 @@ Trend history section will display data for the last month
4949

5050
<figure><img src="../../../.gitbook/assets/image (6) (1) (1) (1) (1) (1).png" alt=""><figcaption></figcaption></figure>
5151

52-
<figure><img src="../../../.gitbook/assets/image (7) (1) (1) (1).png" alt=""><figcaption></figcaption></figure>
52+
<figure><img src="../../../.gitbook/assets/image (7) (1) (1) (1) (1).png" alt=""><figcaption></figcaption></figure>
5353

5454
### Mean Time of Status Change
5555

@@ -73,7 +73,7 @@ Customise the view of the metric view using the Findings Status Change Time Stat
7373
<figure><img src="../../../.gitbook/assets/image (12) (1).png" alt=""><figcaption></figcaption></figure>
7474
* **Mean Time to Rejection** (**MTR**) measures the average time it takes for a finding to be _rejected_ after _creation_. It provides insights into the speed of handling findings that are determined to be false positives.
7575

76-
<figure><img src="../../../.gitbook/assets/image (7) (1) (1) (1) (1) (1) (1) (1).png" alt=""><figcaption></figcaption></figure>
76+
<figure><img src="../../../.gitbook/assets/image (7) (1) (1) (1) (1) (1) (1) (1) (1).png" alt=""><figcaption></figcaption></figure>
7777

7878
<figure><img src="../../../.gitbook/assets/image (13) (1).png" alt=""><figcaption></figcaption></figure>
7979
* **Mean Time to Remediation** (**MTTR**) calculates the average time it takes to _remediate_ vulnerabilities from the moment they are _verified_. A shorter MTTR indicates an efficient vulnerability resolution process.

appsec-portal/general-portal-settings/product-settings/product-asset.md

+1-1
Original file line numberDiff line numberDiff line change
@@ -53,7 +53,7 @@ In the **Host tab** enter **host IP**, for example 83.110.124.0
5353

5454
Click **Create**
5555

56-
<figure><img src="../../../.gitbook/assets/image (7).png" alt=""><figcaption></figcaption></figure>
56+
<figure><img src="../../../.gitbook/assets/image (7) (1).png" alt=""><figcaption></figcaption></figure>
5757

5858
<figure><img src="../../../.gitbook/assets/image (8).png" alt=""><figcaption></figcaption></figure>
5959

appsec-portal/post-install-configuration.md

+1-1
Original file line numberDiff line numberDiff line change
@@ -23,7 +23,7 @@ But keep in mind, that you will see only those repositories, which developers co
2323

2424
## Import repositories
2525

26-
If you want to scan all repositories by manual trigger - import them using this instruction and be ready to perform scans. [This is the guide](post-install-configuration.md#import-repositories)
26+
If you want to scan all repositories by manual trigger - import them using this instruction and be ready to perform scans. This is[ how you can do it](features/asset-management/how-to-import-repositories-from-version-control.md)
2727

2828
## Perform scans
2929

0 commit comments

Comments
 (0)