1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
|
{
"srtsetting" : [
{
"_comment_" : "NOTE: this would normally connect to your organization's documentation HTML page for SRTool",
"name" : "SRTOOL_DOCUMENATION_URL",
"helptext" : "The SRTool top bar documentation link",
"value" : "/srtgui/guided_tour/"
},
{
"_comment_" : "NOTE: this is how you can insert your organization's logo in the top bar",
"name" : "SRTOOL_LOCAL_LOGO",
"helptext" : "The ACME Corp added logo",
"value" : "ACME,/static/img/acme_logo.png,/acme"
},
{
"name" : "SRTOOL_DEFECT_ADD",
"helptext" : "Script: Add an existing defect to SRTool defect database, '--add defect'",
"value" : "bin/acme/srtool_defect.py --add"
},
{
"name" : "SRTOOL_DEFECT_DEL",
"helptext" : "Script: Delete an existing defect from SRTool defect database, '--del defect'",
"value" : "bin/acme/srtool_defect.py --del"
},
{
"name" : "SRTOOL_DEFECT_NEW",
"helptext" : "Script: create defect '--new program summary description priority components urllink'",
"value" : "bin/acme/srtool_defect.py --new"
},
{
"name" : "SRTOOL_DEFECT_SAMPLENAME",
"helptext" : "Text schema of an example defect",
"value" : "54321"
},
{
"name" : "SRTOOL_DEFECT_DOESNOTIMPACT",
"helptext" : "Comment message to mark CVEs that do not affect the products",
"value" : "It doesn't impact ACME"
},
{
"name" : "SRTOOL_DEFECT_TOOL",
"helptext" : "The registered script to manage defects",
"value" : "bin/acme/srtool_defect.py"
},
{
"name" : "SRTOOL_DEFECT_URLBASE",
"helptext" : "The url base lookup for the external defect tool",
"value" : "https://bugzilla.acme.org/show_bug.cgi?id="
},
{
"name" : "SRT_EMAIL_SMTP",
"helptext" : "The ACME SMTP server",
"value" : "smtp.acme.com"
},
{
"name" : "SRT_EMAIL_USER",
"helptext" : "The ACME email user account",
"value" : "srt_manager"
},
{
"_comment_" : "Fetch from environment",
"name" : "SRT_EMAIL_PASSWD",
"helptext" : "The ACME email user password",
"value" : ""
},
{
"name" : "SRT_EMAIL_FROM",
"helptext" : "The ACME email 'from' address",
"value" : "srt.manager@acme.com"
}
],
"datasource" : [
{
"_comment_" : "ACME will process its own product file into the SRTool, thank you very much",
"key" : "0100-acme-products",
"data" : "product",
"source" : "acme",
"name" : "Products",
"description" : "ACME Product Table",
"cve_filter" : "",
"init" : "bin/acme/srtool_acme.py --init-products --file bin/acme/acme-products.json",
"update" : "",
"lookup" : "",
"update_frequency" : "5",
"update_time" : "{}"
},
{
"_comment_" : "All organizations should use the built-in parser for user tables (e.g. password hashing)",
"key" : "0101-acme-users",
"data" : "users",
"source" : "acme",
"name" : "Users",
"description" : "ACME Sample User Table",
"cve_filter" : "",
"init" : "file:bin/acme/acme-users.json",
"update" : "",
"lookup" : "",
"update_frequency" : "5",
"update_time" : "{}"
}
]
}
|