Skip to content

Issue with coping Approved mitigation #29

@arpitrameshwarlalkothari-tomtom

Description

Currently, the copier copies the Approved mitigation into the destination application as Proposed instead of Approved. In addition, The Accepted Mitigation comment is also not copied.

I have noticed this behavior for SAST scan results.

The following warning is noted in the MitigationCopier.log:

WARNING - update_mitigation_info_rest - Cannot copy APPROVED mitigation for Flaw ID <FLAWID> in <APPLICATIONID>

I was able to make it work by adding 'APPROVED' in the 'ALLOWED_ACTIONS'
ALLOWED_ACTIONS = ['COMMENT', 'FP', 'APPDESIGN', 'OSENV', 'NETENV', 'REJECTED', 'ACCEPTED', 'LIBRARY', 'ACCEPTRISK', 'APPROVE', 'REJECT', 'BYENV', 'BYDESIGN', 'LEGAL', 'COMMERCIAL', 'EXPERIMENTAL', 'INTERNAL', 'APPROVED']

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions