Skip to content

security_finding_resolved

When a finding exposed on a branch is no longer reported by the latest scan of this branch. The deletion of a branch resolves nothing.

Context

  • project - project - Project of the finding
  • branch - branch - Branch the finding is exposed on, or resolved on
  • SEVERITY - string - Severity of the finding: CRITICAL, HIGH, MEDIUM, LOW or UNKNOWN. As observed by the scan for a new finding, as last observed on the branch for a resolved one.
  • EXTERNAL_ID - string - Identifier given by the scanner to the finding (a CVE, a rule ID…)
  • LOCATION - string - Where the finding is (a package, a file, a URL…), without any version. May be empty.
  • SCANNER - string - Name of the scanner which reported the finding
  • KIND - string - Kind of scan which reported the finding: IMAGE, CODE, SECRETS, DAST, DEPENDENCIES or OTHER
  • REOPENED - string - true when the finding was known on the branch before (resolved there, or accepted there), false otherwise

Default template

Finding ${EXTERNAL_ID} (${SEVERITY}) reported by ${SCANNER} is resolved on ${project}/${branch}, at ${LOCATION}.