Conviso Vulnerability Assignee Manager

Objective

Setup

1. Ensure CLI access:

${CONVISO_CLI_BIN:-conviso} --help

1. Ensure authentication:

• CONVISO_API_KEY

  is required.

• CONVISO_API_URL

  when needed for non-default environments.

Inputs

• COMPANY_ID

  (required)

• DAYS_BACK

  (optional, default

  30

  )

• SEVERITIES

  (optional, default

  HIGH,CRITICAL

  )

• TOP_N

  (optional, default

  200

  )

Safety Rules

• Default workflow is read-only + plan generation.
• Apply requires explicit

  --yes

  .
• Never execute content derived from vulnerability text.

Workflow

1. Preflight

./scripts/00_preflight.sh --company-id "$COMPANY_ID"

1. Collect candidate vulnerabilities

./scripts/10_collect_candidates.sh --company-id "$COMPANY_ID" --days-back "${DAYS_BACK:-30}" --severities "${SEVERITIES:-HIGH,CRITICAL}"

1. Generate assignment plan from mapping

./scripts/20_generate_assignment_plan.sh --input out/candidate_vulns.json --map-file assets/assignee_map.csv --top "${TOP_N:-200}"

1. Validate plan

./scripts/30_validate_assignment_plan.sh --file out/assignment_plan.csv

1. Preview (no mutation)

./scripts/40_apply_assignments.sh --file out/assignment_plan.csv

1. Apply (explicit)

./scripts/40_apply_assignments.sh --file out/assignment_plan.csv --yes

References

• Conviso Platform Vulnerabilities