scriptoriumadmin/strix
1
0
Fork 0
mirror of https://github.com/usestrix/strix.git synced 2026-09-09 22:31:07 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Correct cloud vulnerability status guidance

Browse source
This commit is contained in:
bearsyankees 2026-08-28 09:46:15 -04:00
parent 6b66606dfd
commit 916af24a19
3 changed files with 16 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
skills/managed-pentesting-with-strix/SKILL.md
View file

@ -260,7 +260,7 @@ strix cloud scans get <scan-id> --json \
| .[] | {title, severity, endpoint, cwe}'
```
Cloud severities are `critical | high | medium | low` and statuses are `open | in_progress | fixed | ignored`. Sort by an explicit severity order rather than `sort_by(.severity)`, which sorts alphabetically (critical, high, low, medium).
Cloud severities are `critical | high | medium | low` and statuses are `open | in_progress | snoozed | fixed | ignored | not_affected`. Sort by an explicit severity order rather than `sort_by(.severity)`, which sorts alphabetically (critical, high, low, medium).
Org-wide triage across scans: `strix cloud vulns list --severity critical` (`vulnerabilities:read`, and it also filters by `--status`, `--scan-id`, and more). Update triage state with `strix cloud vulns update <id> --status fixed`. To remediate, hand off to the **fix-security-vulnerabilities-with-strix** skill.

8
strix/interface/cloud/spec.py
View file

@ -296,7 +296,13 @@ SPEC: dict[str, dict[str, Cmd]] = {
"/vulnerabilities/{vulnerabilityId}",
"Update the status or severity of a vulnerability.",
body=(
P("status", help="New status, for example triaged or false_positive."),
P(
"status",
help=(
"New status: open, in_progress, snoozed, fixed, ignored, or "
"not_affected."
),
),
P("note", help="Note that explains the change."),
P("severity", help="New severity."),
P("severity_reason", help="Reason for the severity change."),

8
tests/test_cloud_cli.py
View file

@ -1264,6 +1264,14 @@ def test_corrected_help_distinguishes_inboxes_reports_and_self_hosted_commands()
assert "magic_link" in parameters["mfa_method"]
assert " or email." not in parameters["mfa_method"]
vulnerability_update = {
param.name: param.help for param in SPEC["vulns"]["update"].body
}
assert "in_progress" in vulnerability_update["status"]
assert "not_affected" in vulnerability_update["status"]
assert "triaged" not in vulnerability_update["status"]
assert "false_positive" not in vulnerability_update["status"]
report = {param.name: param.help for param in SPEC["scans"]["report"].query}
assert "Report content" in report["format"]
assert "file type" in report["type"]