From bc7ccad27990e49463e35304ab56761c6a42f6fd Mon Sep 17 00:00:00 2001 From: Lili Kastilio Date: Wed, 18 Oct 2023 12:05:42 +0100 Subject: [PATCH] RELEASE (#207) minor: stop excluding code issues from being considered fixable --- jira.go | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/jira.go b/jira.go index 5432a43..c398d32 100644 --- a/jira.go +++ b/jira.go @@ -248,14 +248,18 @@ func openJiraTickets(flags flags, projectInfo jsn.Json, vulnsForJira map[string] for _, vulnForJira := range vulnsForJira { jsonVuln, _ := jsn.NewJson(vulnForJira) + + // determine if is code issue + issueType := jsonVuln.K("data").K("attributes").K("issueType").String().Value + isCodeIssue := strings.Contains(issueType, "code") // skip ticket creating if the vuln is not upgradable - if flags.optionalFlags.ifUpgradeAvailableOnly { + if flags.optionalFlags.ifUpgradeAvailableOnly && isCodeIssue == false { if jsonVuln.K("fixInfo").K("isUpgradable").Bool().Value == false { message := fmt.Sprintf("Skipping creating ticket for %s because no upgrade is available.", jsonVuln.K("issueData").K("title").String().Value) fullListNotCreatedIssue += displayErrorForIssue(vulnForJira, "ifUpgradeAvailableOnly", errors.New(message), "", customDebug) continue } - } else if flags.optionalFlags.ifAutoFixableOnly { + } else if flags.optionalFlags.ifAutoFixableOnly && isCodeIssue == false { // skip ticket creating if the vuln is not fixable if jsonVuln.K("fixInfo").K("isFixable").Bool().Value == false { message := fmt.Sprintf("Skipping creating ticket for %s because no fix is available.", jsonVuln.K("issueData").K("title").String().Value)