-
Notifications
You must be signed in to change notification settings - Fork 31
Description
Enhancement Request
With the release of OpenText Core Application Security 26.1 we now have support to add/update Scan attributes:
Customers can now add custom attributes (e.g., Git commit ID, build ID) to scans, making it easier to trace results to specific code changes or deployments and to filter or report on scans in CI/CD workflows. For more information, see "Adding an Attribute" in the Core Application Security User Guide.
This is available via the API endpoint PUT /api/v3scans/{scanId}
To expose this capability we could add an additional command for scan updates, e.g.:
fcli fod xxx-scan update scan-id --attributes ...
Since this feature is intended to support the addition of commit id's, build-ids etc so they can be used in Dasboarding, metrics and so on, it would also be good if we could update fcli fod action run ci to automatically update these attributes with information it has already discovery (maybe exposed via UPDATE_SCAN_ATTRS) environment variable or similar.