All notable changes to this project will be documented in this file.
The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.
- Vuln Export API changed, making the default behavior undesirable.
- Added default age to exports for Tenable.io. It's possible to override this with the
tenable.tio_age
parameter. - Added ability to transform tags into asset attributes #74 #80
- If no custom fields are listed, then the script will fail. set a default null list if unspecified.
- Added ability to pass custom field definitions from the config without overloading the existing ones (additive definitions)
- Always add all asset attributes to the vuln doc (open AND fixed).
- Added ability to merge asset data into vuln instance tickets
- Added ability to set Jira priority based on severity.
- Removed accidental test value used for force a failure condition.
- Added ability to ignore Jira Cloud API errors via config setting.
- The Jira Field id should reliably return on the first match
- Asset tag support for Tenable.io
- Autoclosing of terminated and deleted assets
- Additional debug reporting.
- Closing methods are now more centralized.
- Patch publication wasn't a screen field.
- First Seen and Last Seen in Tenable.io is actually first_found and last_found #45
- Added Patch Publication Date to base config #45
- Addition of admin checking in CLI broke IO integration. #42
- Optional support for filtering based on VPR #41
- Optional auto-closing of accepted risks #8
- Logging if the IO API Keys aren't tied to an admin-level account.
- Added optional parameter to ignore accepted risks in Tenable.io #8
- Added
--troubleshoot
commandline flag to generate output to use to help issue resolution.
- Tenable Platform custom field wasn't getting the appropriate value in JQL searches, resulting in duplication #16
- Embedded config referred to "Device IPv4" instead of "Device IPv4 Addresses" #15
- Info logging will now output the field, screens, and tab IDs.
- Jira field lengths cannot exceed 32767 chars. #13
- Generified the Issue closing error log to avoid type mismatches #4
- Setup-only mode to support configuration generation #1
- Tenable.sc support for ticket creation and management #2
- pyYAML compiled loaders switched for interpreted ones for compatability #7
- Screen pagination wasn't being handled properly #3
- pyYAML wasn't defined as a requirement #6
- Closed transition states are now configurable. #4
- Support for a separate setup job #1
- Initial Version