capabilities.work

Xray Triage Violation

A 3-step recipe with JFrog. We can help you get access.

Recipe · 3 steps

Xray Triage Violation

with JFrog

Fetch violations and create an ignore rule for a known CVE.

  1. Query security violations for the watch at or above the supplied minimum severity.
  2. Create a time-bound ignore rule for the supplied CVE scoped to the watch.
  3. Read the ignore rule back to confirm it was created.
What you'll need to have ready
  • watchName: The watch whose violations to query.
  • minSeverity: The minimum severity to filter violations by.
  • cve: The CVE identifier to create an ignore rule for.
  • expirationDate: The expiration date-time for the ignore rule.
For your developer

Arazzo workflow jfrog:triage-violation, 3 operations: getViolations → createIgnoreRule → getIgnoreRule. Specs on APIs.io.