tenable / integration-jira-cloud

67 stars 52 forks source link

Issues in Jira not updating when patching vulnerabilities #229

Closed jhonny606 closed 4 months ago

jhonny606 commented 1 year ago

I did the integration, and when I run the command tenable-jira config.yaml it imports Tenable vulnerabilities into Jira. So far so good. However, when correcting a vulnerability, instead of closing or completing the issue (updating its status) it duplicates/creates a new issue in Jira, and does not resolve the issue, even if the vulnerability is listed as fixed in Tenable. Can you help?

jhonny606 commented 1 year ago

Config.yaml:

tenable:
  # Tenable.io or API Access Key
  access_key: ********

  # Tenable.io or API Secret Key
  secret_key: ********

jira:
  # The API Token to use to authenticate to the Jira application
  api_token: ************

  # The User that will be authenticaing to the Jira application
  api_username: ************

  # The address pointing to the Jira application.
  address: ******.atlassian.net

project:
  # The lead account id for the primary user for the project.
  leadAccountId: ***********

# The following log definitions are optional.  Only specify these if you want
# to change the default logging behavior of only outputting warnings and errors
# to the screen.
log:
  # What is the logging level desired?  Available levels are:
  #   debug, info, warn, error
  # The default level if unspecified is "warn"
  level: debug

  # If you would like the log output to goto a file instead of standard output,
  # then specify the filename here:
  filename: *******/logfile.log

# The following section is optional.  You should only specify this section if
# you would like the bridge to run as a service with it's own timer.
service:
  # How many hours should we wait between jobs?  Note setting this to a
  # non-zero number will result in imports past the initial import will use
  # time of the last completed import as the basis for last observed.
  interval: 1
screen:
  jira_ids:
    - 10139
    - 10140
    - 10016
    - 10017
quantumuser23 commented 1 year ago

Same here. Vulnerability Management board is up, on Tenable.io side the vulnerbaility is gone for the endpoint.

Logs: 2023-09-13 13:02:22,114 tenable_jira.transform.Tio2Jira INFO Closing Issues Marked as Fixed. 2023-09-13 13:02:22,114 tenable.io.TenableIO DEBUG Request: {"method": "POST", "url": "https://cloud.tenable.com/vulns/export", "params": {}, "body": {"num_assets": 1000, "include_unlicensed": true, "filters": {"last_fixed": 1699577600, "severity": ["high", "critical"], "state": ["fixed"]}}} 2023-09-13 13:02:22,489 urllib3.connectionpool DEBUG https://cloud.tenable.com:443 "POST /vulns/export HTTP/1.1" 200 None 2023-09-13 13:02:22,489 tenable.io.TenableIO DEBUG vulns export job 33b22d4d-72aa-4cdc-a7bd-86ac30ab8b0a initiated 2023-09-13 13:02:22,489 tenable.io.TenableIO DEBUG Request: {"method": "GET", "url": "https://cloud.tenable.com/vulns/export/33b22d4d-72aa-4cdc-a7bd-86ac30ab8b0a/status", "params": {}, "body": {}} 2023-09-13 13:02:22,833 urllib3.connectionpool DEBUG https://cloud.tenable.com:443 "GET /vulns/export/33b22d4d-72aa-4cdc-a7bd-86ac30ab8b0a/status HTTP/1.1" 200 None 2023-09-13 13:02:22,848 tenable.io.exports.iterator.ExportsIterator DEBUG vulns export 33b22d4d-72aa-4cdc-a7bd-86ac30ab8b0a is currenty FINISHED 2023-09-13 13:02:22,848 tenable.io.exports.iterator.ExportsIterator DEBUG {'uuid': '33b22d4d-72aa-4cdc-a7bd-86ac30ab8b0a', 'status': 'FINISHED', 'chunks_available': [], 'chunks_failed': [], 'chunks_cancelled': [], 'total_chunks': 0, 'chunks_available_count': 0, 'empty_chunks_count': 0, 'finished_chunks': 0, 'filters': {'severity': ['HIGH', 'CRITICAL'], 'state': ['FIXED'], 'tags': {}, 'since': 0, 'first_found': 0, 'last_found': 0, 'last_fixed': 1699577600, 'first_seen': 0, 'last_seen': 0, 'indexed_at': 0, 'indexed_at_end_value': 0}, 'num_assets_per_chunk': 1000, 'created': 1694574143420, 'chunks_unfinished': []} and [] 2023-09-13 13:02:22,848 root INFO Sleeping for 3600 seconds

Looks like it's not doing much for closing those marked as "Fixed", which I'm guessing is on Tenable side. Anyone know where to see that?