splunk / github_app_for_splunk

A collection of dashboards and knowledge objects for Github data
MIT License
32 stars 25 forks source link

add color based severity and cve links #29

Closed hiimkyle closed 2 years ago

hiimkyle commented 2 years ago

added color by severity for security_alert_overview.xml and link the severities to the corresponding cve webpage

leftrightleft commented 2 years ago

This is a really good idea @hiimkyle. Taking a look now 👍

leftrightleft commented 2 years ago

Two questions for you @hiimkyle:

  1. Is it possible to only link to CVE.org if the alert type is Dependabot? We also display Code Scanning alerts in this same panel. The Code Scanning alerts don't contain CVEs
  2. The coloring per severity is awesome. Could you also capture medium and low severities? image
derkkila-splunk commented 2 years ago

The other item, I think we'll be adding Security Scanning to that list of Security issues in the near future as well. So might be better to find a way to link to the alert in GitHub, rather than the CVE directly.