Skip to content

security_finding_new

When a finding becomes exposed on a branch where it was not, without acceptance. This includes a return after its resolution on the branch, or after its acceptance, flagged by REOPENED being true. A finding first seen already accepted is not new.

Context

  • project - project - Project of the finding
  • branch - branch - Branch the finding is exposed on, or resolved on
  • SEVERITY - string - Severity of the finding: CRITICAL, HIGH, MEDIUM, LOW or UNKNOWN. As observed by the scan for a new finding, as last observed on the branch for a resolved one.
  • EXTERNAL_ID - string - Identifier given by the scanner to the finding (a CVE, a rule ID…)
  • LOCATION - string - Where the finding is (a package, a file, a URL…), without any version. May be empty.
  • SCANNER - string - Name of the scanner which reported the finding
  • KIND - string - Kind of scan which reported the finding: IMAGE, CODE, SECRETS, DAST, DEPENDENCIES or OTHER
  • REOPENED - string - true when the finding was known on the branch before (resolved there, or accepted there), false otherwise

Default template

New ${SEVERITY} finding ${EXTERNAL_ID} reported by ${SCANNER} on ${project}/${branch}, at ${LOCATION}.