Steve Lohr

Results 13 comments of Steve Lohr

having the same issue, would be great to have this implemented or explained

more and more users are adopting buildkit to run it in their Azure Pipelines, so now we see quite a few errors like "Gradle build daemon disappeared unexpectedly (it may...

> @schdief I'm not sure you want to see all the pods by default, as if you have a lot of replicas, that's a _lot_ of screen estate, and for...

> Is this from a kustomization or a helmrelease? Kustomization (using Weave GitOps 0.33) this is the yaml ``` apiVersion: apps/v1 kind: Deployment metadata: annotations: deployment.kubernetes.io/revision: "2" creationTimestamp: 2023-10-06T11:11:28Z generation:...

would also be interested in using Azure DevOps managed identities/service principals

doesn't seem to me like a nice feature, but a necessary change: - https://github.com/crossplane/provider-azure/issues/322 - https://github.com/crossplane/provider-azure/issues/292 today I tried my first steps with crossplane on azure and it stopped pretty...

@manuel-sommer the fpr is a zip itself, you can just unzip it and then parse it (audit.fvdl) we currently parse it ourselves like this with kotlin: ``` fun parseFortifyArchive(inputStream: InputStream):...

@manuel-sommer the xml report can only be generated with the legacy fortify reporter (page 26): https://www.microfocus.com/documentation/fortify-static-code-analyzer-and-tools/2310/SCA_Apps_Tools_23.1.0.pdf, as the current reporter can not export xml (page 23): https://www.microfocus.com/documentation/fortify-static-code-analyzer-and-tools/2310/SCA_Apps_Tools_23.1.0.pdf additionally, the result...

> Got it, thank you for the insights @schdief . One more question: the relevant file to parse within fdr is always audit.fvdl ? yes, that is the one we...

> @schdief: How can I translate the Default Severity to DefectDojo severity ranking (Low, Medium, High, Critical) ? this is our current implementation ``` val severity = when { (impact...