simonec73 / threatsmanager

Threats Manager Platform Core libraries and SDK
MIT License
72 stars 14 forks source link

Export For Azure Dev Ops Features #88

Open rsrinivasanhome opened 5 days ago

rsrinivasanhome commented 5 days ago

Is your feature request related to a problem? Please describe. We are not using Azure Dev Ops but using the csv file it generates to push into jira. Now we face 2 issues.

1)Special characters visible in the csv "
" - > \n "'" -> ' " " - > (space) """ -> ' Can we have some config which will prevent these special characters from being exported ?

2) Need Affected Objects along with Description

The csv contains 4 columns

1)WorkItem 2)Title 3)Description 4)State

Now if this were pushed into the ticket tracking application we would just know the mitigation but not know how many times it needs to be applied and where .

In the Summary Report we have a field name - "Affected Objects"

Can we have the data in "Affected Objects" concatenated with Description (column 3)

With this change any ticketing tool should be able to consume the csv file generated .

simonec73 commented 5 days ago

For the first point, I might do something, but you must provide a better explanation of what are the problems you are seeing, and the type of changes you need. For example, it seems reasonable to change the quote char with the single quote, but is that what you are asking? On the other hand, I do not understand what most of the changes you are requiring, including " " - > (space) means. And please, consider that if there is something that is too specific to your use scenario, I might not support it.

For the second point, I fear I cannot help you because it is too specific of your use-case. You might want to create an Extension to generate a CSV file with exactly the characteristics you need.

rsrinivasanhome commented 5 days ago

Issue 1 Let me explain then issue with more details. Here is an example Mitigation text image After export "short term for azure devops" button click . Below csv created image

Issue 2 I have 2 mitigations one for each instance. image image But when ticket is visible in Azure DevOps I will not know fix is required for both instances

Sample threat model and CSV export onethreatmodel.tm.txt sampleCsv.csv.txt