Gitlab/Github - Labels not applied to scan results of severity: informational / info

[marcandre-larochelle-bell]

Description

The labels are not applied to scan results of severity: informational / info for the Gitlab Issue Tracker, potentially the same issue for Github.

Expected Behavior

Labels are assigned to the Gitlab issues

Actual Behavior

No labels assigned due to these lines of code:

cx-flow/src/main/java/com/checkmarx/flow/custom/GitLabIssueTracker.java

Lines 402 to 416 in b2c3c93

	private String getString(ScanResults.XIssue resultIssue) {
	String label = "NA";
	try {
	Map<FindingSeverity, String> findingsPerSeverity = properties.getIssueslabel();
	for (Map.Entry<FindingSeverity, String> entry : findingsPerSeverity.entrySet()) {
	if (resultIssue.getSeverity().equalsIgnoreCase(entry.getKey().toString())) {
	label = entry.getValue();
	break;
	}
	}
	} catch (Exception e) {
	return label;
	}
	return label;
	}

cx-flow/src/main/java/com/checkmarx/flow/config/FindingSeverity.java

Lines 3 to 5 in b2c3c93

	public enum FindingSeverity {
	HIGH, MEDIUM, LOW, INFO
	}

The FindingSeverity enum contains "INFO", but the scan results returns "Informational", thus when the compare is done on line 407:

cx-flow/src/main/java/com/checkmarx/flow/custom/GitLabIssueTracker.java

Line 407 in b2c3c93

if (resultIssue.getSeverity().equalsIgnoreCase(entry.getKey().toString())) {

It doesn't match and no labels are applied later on.

Reproduction

Run a scan for a Gitlab project with the --gitlab.issueslabel.info="any-label" parameter

Environment Details

Docker image: CxFlow 1.7.0-17