Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Provide MITRE descriptions by assistent description for report #3709

Open
6 tasks
Tracked by #3707
de-jcup opened this issue Dec 6, 2024 · 0 comments
Open
6 tasks
Tracked by #3707

Provide MITRE descriptions by assistent description for report #3709

de-jcup opened this issue Dec 6, 2024 · 0 comments

Comments

@de-jcup
Copy link
Member

de-jcup commented Dec 6, 2024

Situation

After

the assistant domain will only provide manual entries for CWE ids and languages.

Wanted

We want SecHub to provide automatically MITRE information via the assistant describe endpoints.
The information shall be automatically fetched when assistant descriptions are wanted for a report.

Solution

  • Introduce database table inside assistant domain which holds MITRE information
  • GET call for describe fetches MITRE data from cache (db) or - if not already in cache - loads data from MITRE and stores in cache
  • The cache has an optional valid-until timestamp. When cache entry is outdated, the entry shall be refreshed if possible
  • Write concept documentation for MITRE data fetching and caching
  • Write integration test (but with mocked mitre service)
  • Write wire mock test (to simulate mitre website results)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant