Back to Details

conviso-vuln-assignee-manager

Compare original and translation side by side

🇺🇸

Original

English
🇨🇳

Translation

Chinese

Conviso Vulnerability Assignee Manager

Conviso 漏洞负责人管理器

Objective

目标

Assign responsible owners to vulnerabilities using deterministic mapping rules.
通过确定性映射规则为漏洞分配对应的负责人。

Setup

设置

  1. Ensure CLI access:
bash
${CONVISO_CLI_BIN:-conviso} --help
  1. Ensure authentication:
  • CONVISO_API_KEY
    is required.
  • CONVISO_API_URL
    when needed for non-default environments.
  1. 确保拥有CLI访问权限：
bash
${CONVISO_CLI_BIN:-conviso} --help
  1. 确保完成身份验证：
  • CONVISO_API_KEY
    是必填项。
  • 对于非默认环境，需要配置 
    CONVISO_API_URL
    。

Inputs

输入参数

  • COMPANY_ID
    (required)
  • DAYS_BACK
    (optional, default 
    30
    )
  • SEVERITIES
    (optional, default 
    HIGH,CRITICAL
    )
  • TOP_N
    (optional, default 
    200
    )
  • COMPANY_ID
    （必填）
  • DAYS_BACK
    （可选，默认值 
    30
    ）
  • SEVERITIES
    （可选，默认值 
    HIGH,CRITICAL
    ）
  • TOP_N
    （可选，默认值 
    200
    ）

Safety Rules

安全规则

  • Default workflow is read-only + plan generation.
  • Apply requires explicit 
    --yes
    .
  • Never execute content derived from vulnerability text.
  • 默认工作流为只读模式并生成执行计划。
  • 应用分配需要明确添加 
    --yes
    参数。
  • 绝不执行从漏洞文本衍生的内容。

Workflow

工作流

  1. Preflight
bash
./scripts/00_preflight.sh --company-id "$COMPANY_ID"
  1. Collect candidate vulnerabilities
bash
./scripts/10_collect_candidates.sh --company-id "$COMPANY_ID" --days-back "${DAYS_BACK:-30}" --severities "${SEVERITIES:-HIGH,CRITICAL}"
  1. Generate assignment plan from mapping
bash
./scripts/20_generate_assignment_plan.sh --input out/candidate_vulns.json --map-file assets/assignee_map.csv --top "${TOP_N:-200}"
  1. Validate plan
bash
./scripts/30_validate_assignment_plan.sh --file out/assignment_plan.csv
  1. Preview (no mutation)
bash
./scripts/40_apply_assignments.sh --file out/assignment_plan.csv
  1. Apply (explicit)
bash
./scripts/40_apply_assignments.sh --file out/assignment_plan.csv --yes
  1. 预检
bash
./scripts/00_preflight.sh --company-id "$COMPANY_ID"
  1. 收集候选漏洞
bash
./scripts/10_collect_candidates.sh --company-id "$COMPANY_ID" --days-back "${DAYS_BACK:-30}" --severities "${SEVERITIES:-HIGH,CRITICAL}"
  1. 根据映射生成分配计划
bash
./scripts/20_generate_assignment_plan.sh --input out/candidate_vulns.json --map-file assets/assignee_map.csv --top "${TOP_N:-200}"
  1. 验证计划
bash
./scripts/30_validate_assignment_plan.sh --file out/assignment_plan.csv
  1. 预览（无变更）
bash
./scripts/40_apply_assignments.sh --file out/assignment_plan.csv
  1. 应用分配（需明确确认）
bash
./scripts/40_apply_assignments.sh --file out/assignment_plan.csv --yes

References

参考资料