Steve Taylor

Results 114 issues of Steve Taylor

Add details around using Ortelius with CI/CD tools and principals. The documentation repo [ortelius/ortelius-docs](https://github.com/ortelius/ortelius-docs) and documentation [section](http://docs.ortelius.io/userguide/integrations/ci-cd_integrations/) is where the updates are needed.

hacktoberfest

helm is deleting the existing keypair secrets causing the deployment to hang. Need to supply the keypair for every deployment

triage
central node

The reports are currently doing a daily total and not a running total. Current [Log Metrics](https://console.cloud.google.com/monitoring/metrics-explorer?pageState=%7B%22xyChart%22:%7B%22dataSets%22:%5B%7B%22timeSeriesFilter%22:%7B%22filter%22:%22metric.type%3D%5C%22logging.googleapis.com%2Fuser%2FPyrsiaInstalls%5C%22%22,%22minAlignmentPeriod%22:%2260s%22,%22aggregations%22:%5B%7B%22perSeriesAligner%22:%22ALIGN_NONE%22,%22crossSeriesReducer%22:%22REDUCE_NONE%22,%22alignmentPeriod%22:%2260s%22,%22groupByFields%22:%5B%5D%7D,%7B%22perSeriesAligner%22:%22ALIGN_NONE%22,%22crossSeriesReducer%22:%22REDUCE_NONE%22,%22alignmentPeriod%22:%2260s%22,%22groupByFields%22:%5B%5D%7D%5D%7D,%22targetAxis%22:%22Y1%22,%22plotType%22:%22LINE%22%7D%5D,%22options%22:%7B%22mode%22:%22COLOR%22%7D,%22constantLines%22:%5B%5D,%22timeshiftDuration%22:%220s%22,%22y1Axis%22:%7B%22label%22:%22y1Axis%22,%22scale%22:%22LINEAR%22%7D%7D,%22isAutoRefresh%22:true,%22timeSelection%22:%7B%22timeRange%22:%226w%22%7D%7D&project=pyrsia-sandbox)

central node

### Suggestion details We should have the CLI that takes the image tag or digest and validates it against Pyrsia returning the details that Pyrsia knows about the image. Possilble...

enhancement
transparency log
docker

https://rustsec.org/advisories/RUSTSEC-2022-0081 We should replace the `json` crate with `serde_json` since `serde_json` is already being used elsewhere in the code.

triage

Use the [scec-mitre-mapping](https://github.com/ortelius/scec-mitre-mapping) microservice to determine the [Mitre Att&ck](https://attack.mitre.org/) Technique Number for a CVE. POST the CVE details (`details` key in the CVE json) to the `/msapi/mitre` endpoint with json...

Bounty

1. Capture the Jenkinfile, GH Action yml etc via the cli 2. Renender the Workflow on the Component Details

hacktoberfest
Bounty

**8 Bounty** [Environment struct](https://github.com/ortelius/scec-commons/blob/main/model/environment.go) updates: 1. add array of strings to the to include a list of url's to the telemetry "logs" being gathered for an environment. 2. add array...

hacktoberfest
Bounty

All component badges plus: 1. Language types, i.e. 45% NodeJS, 15% Python, 40% Golang 2. Risk by Language 3. Repeated Risk - 20% of the components have the same CVE/Risk

hacktoberfest
Bounty