securewithtrace 0.45.0 → 0.46.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +6 -2
- package/dist/index.js +1262 -406
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -269,6 +269,10 @@ tracecli pentest findings get --pentest PT-3 --finding PTF-7
|
|
|
269
269
|
# Mark a finding in progress, then remediated when the fix is ready for retest
|
|
270
270
|
tracecli pentest findings status-update --pentest PT-3 --finding 7 --status IN_PROGRESS
|
|
271
271
|
tracecli pentest findings status-update --pentest PT-3 --finding 7 --status REMEDIATED
|
|
272
|
+
|
|
273
|
+
# Or accept the risk instead; the note is the required rationale
|
|
274
|
+
tracecli pentest findings status-update --pentest PT-3 --finding 7 --status ACCEPTED \
|
|
275
|
+
--note "Internal-only endpoint behind SSO; residual risk accepted"
|
|
272
276
|
```
|
|
273
277
|
|
|
274
278
|
Flags for `pentest list`:
|
|
@@ -301,8 +305,8 @@ Flags for `pentest findings status-update`:
|
|
|
301
305
|
|------|-----------|-------------|
|
|
302
306
|
| `--pentest <id>` | | Pentest display ID (e.g. `PT-3`) or UUID (required) |
|
|
303
307
|
| `--finding <id>` | | Finding number (e.g. `PTF-7`) or UUID (required) |
|
|
304
|
-
| `--status <status>` | | `IN_PROGRESS` or `
|
|
305
|
-
| `--note <text>` | | Optional context when reporting remediation |
|
|
308
|
+
| `--status <status>` | | `IN_PROGRESS`, `REMEDIATED`, or `ACCEPTED_WITH_CONTROLS` (`ACCEPTED` works too) (required) |
|
|
309
|
+
| `--note <text>` | | Optional context when reporting remediation; required rationale when accepting |
|
|
306
310
|
| `--output <format>` | `-o` | Output format: `text` (default), `json` |
|
|
307
311
|
|
|
308
312
|
### Upgrades
|