Skip to content

Conversation

gsnyder2007
Copy link
Contributor

The sample code shows how to:

  1. Poll for BOM completed notifications, i.e. notifications that processing of the BOM for a project-version was completed, presumably cause a new scan was done
  2. Get all the policy violations for the affected project-versions, and
  3. With that information, generate a nicely formatted HTML message that instructs the developer(s) what they need to fix

Note that the 'fix me' message draws content from the policy rule fields to instruct the developer, so a prerequisite is to setup your policy rules, and their description fields, to include the appropriate content. For instance, in a policy rule that flags any/all components having high severity vulnerabilities you would put in the rule description whatever steps the developer should take to remediate the issue.

…create "fix me" html messages for developers
@gsnyder2007 gsnyder2007 requested a review from mkumykov February 21, 2020 20:35
@gsnyder2007 gsnyder2007 merged commit 8e4a1ef into master Feb 21, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants