feat: add fcli fpr module for local FPR file operations#987
Open
SangameshV wants to merge 5 commits intodev/v3.xfrom
Open
feat: add fcli fpr module for local FPR file operations#987SangameshV wants to merge 5 commits intodev/v3.xfrom
SangameshV wants to merge 5 commits intodev/v3.xfrom
Conversation
…ng custom tags via --custom-tags in fcli fpr issue audit
0d2ab0e to
34bd740
Compare
… add command aliases
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Introduces a new
fcli fprcommand tree that operates directly on local.fpr files without requiring an SSC or FoD session.
Commands:
fcli fpr issue list- List vulnerabilities from an FPRfcli fpr issue get- Get full details for a single issue;use
--embed=historyto includeaudit revision, comments, and the
ClientAuditTrail tag-change history
fcli fpr issue count- Count issues by categoryfcli fpr issue audit- Audit one or more issues in-placevia
--instance-ids(comma-separated),with
--analysis,--comment,--suppress, and optional--user(defaults to the OS username)
fcli fpr apply-remediations- Apply auto-remediations from an FPRImplementation details:
fcli-fprGradle module wired through gradle.properties,fcli-app/build.gradle.kts, and FCLIRootCommands.
fcli-aviator-common(FprHandle, FPRProcessor, StreamingFVDLProcessor, AuditProcessor).
auditIssue()that skips revision bump and TagHistory write whenthe tag value is unchanged (idempotent re-audits).
saveAuditXml()is now atomic: serialization happens in memoryfirst, so a failed transform never corrupts the FPR.
TagHistoryEntryfor full audit history.--analysisis validated case-insensitively against the canonicalSSC values and canonicalized in the output.
__action__= AUDITED or UNCHANGED.