Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Create Scheduler REST endpoint to fetch masked SecHub configuration at SecHub #3266

Open
Tracked by #3250
de-jcup opened this issue Jul 2, 2024 · 0 comments
Open
Tracked by #3250
Assignees

Comments

@de-jcup
Copy link
Member

de-jcup commented Jul 2, 2024

Situation

Sometimes administrators or users wants to know a SecHub configuration for a job. For example to check which kind of scans were configured, which files were excluded etc. But currently there is no dedicated way to handle this.

ℹ️ This is a sub issue of #3250

Wanted

Users and administrators shall be able to fetch a SecHub configuration for a created SecHub job.
But sensitive data shall be masked.

Solution

  • introduce new REST endpoint at scheduler domain
  • access only for administrators and users of the project
  • sensitive data (DAST login and remote data section credentials) must be masked.
  • audit log must be implemented
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant