added process.env.ZAP_RISK_CODE

Enterprise-CMCS · Jun 6, 2023 · c6ff896 · c6ff896
1 parent 5ba8fe1
commit c6ff896
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/.github/workflows/parse_zap_outputs.cjs b/.github/workflows/parse_zap_outputs.cjs
@@ -23,7 +23,7 @@ function parseZapOutput(jsonData) {
             const { uri, method, param, attack, evidence, otherinfo } = instance;
             instanceDescription += `URI: ${uri}\nMethod: ${method}\nParam: ${param}\nAttack: ${attack}\nEvidence: ${evidence}\nOtherInfo: ${otherinfo}\n\n`;
           }
-            if (alert.riskcode === '2' ) {
+            if (alert.riskcode === process.env.ZAP_RISK_CODE ) {
                 vulnerabilities.push({
                   name: alert.name.concat(': ', data.site[0]['@host']).replace(/-/g, ''),
                   solution: alert.solution.replace(/<\/?p>/g, ''),
@@ -44,7 +44,7 @@ function parseZapOutput(jsonData) {
 async function createJiraTicket(vulnerability) {
 
   // Search if a ticket already exist
-  let jqlQuery = `project = "${process.env.JIRA_PROJECT_KEY}" AND summary ~ "MCR - SNYK ${vulnerability.name}" AND created >= startOfDay("-60d") AND status NOT IN ("Closed")`;
+  let jqlQuery = `project = "${process.env.JIRA_PROJECT_KEY}" AND summary ~ "MCR - SNYK ${vulnerability.name}" AND created >= startOfDay("-60d") AND status NOT IN ("Closed", "Canceled")`;
 
   let searchResult = await jira.searchJira(jqlQuery);