Skip to content

AE-1120: Dedicated Central Security Configuration Loader #260

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 2 commits into
base: master
Choose a base branch
from

Conversation

YanWittmann
Copy link
Contributor

@YanWittmann YanWittmann commented May 28, 2025

Created a new Central Security Policy Configuration loader system that builds on and expands the features of the current system.
Applied the new CspLoader on every mojo that requires a Security Policy with backwards compatibility by leaving the old parameters in place.

Advisor Periodic enrichment

  • replace local advisoryProviders with security policy file parameter includeAdvisoryProviders
  • replace local includeAdvisoryTypes with security policy file parameter includeAdvisoryTypes
  • replace local vulnerabilityAdvisoryFilter with security policy file parameter includeVulnerabilitiesWithAdvisoryProviders

Vulnerability Report

  • replace local generateOverviewTablesForAdvisories with a new security policy file parameter generateOverviewTablesForAdvisories

…pLoader and moved generateOverviewTablesForAdvisories to CSP

Signed-off-by: ywittmann <[email protected]>
@@ -170,7 +170,8 @@ private static void generateInventoryReports(DocumentDescriptor documentDescript
if (generateOverviewTablesForAdvisories != null) {
try {
// FIXME-RTU: discuss with Karsten how we want to pass the list of providers & how to list them in the yaml
report.addGenerateOverviewTablesForAdvisoriesByMap(convertToJSONArray(generateOverviewTablesForAdvisories));
// YWI: check whether the implementation I provided works for you, the generateOverviewTablesForAdvisories are now a parameter in the security policy
report.getSecurityPolicy().getGenerateOverviewTablesForAdvisories().putAll(convertToJSONArray(generateOverviewTablesForAdvisories));
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

How can I select the config? There may be several and a default.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants