search

tenable / integration-jira-cloud

67 stars 52 forks source link

Support to sync Audit findings #270

Open captainfalcon23 opened 3 months ago

captainfalcon23 commented 3 months ago

Hello! Just wondering if there are plans to support syncing of audit findings?

SteveMcGrath commented 3 months ago

Let me add this to the backlog.

SteveMcGrath commented 3 months ago

So looking into this new, audit findings in TSC should just pull. TVM would likely require a completely new mapping and a lot of effort to make this work.

Trying to decide if audit findings shoudl be within the same project, a different project, and how we should map these out as the fields in TVM are very different between compliance and vuln findings.

SteveMcGrath commented 2 months ago

so an update here, after a lot of investigating it seems to make more sense to have a separate project for the audit findings. the data is sufficiently different enough that it doesn't seem to neatly line up at all.

captainfalcon23 commented 2 months ago

When we previously used T.SC, we did sync the audit findings, but noticed it would always create duplicates, so stopped that.

Interesting that the data doesn’t line up, I know when you go to an asset and export all data it all (vulns and audit findings) gets exported nicely into a CSV.

Obviously I don’t have enough insight into this project, or how the tenable API works, but if you feel it needs to be a seperate project, then so be it :) Happy to help if needed!