Skip to content

Jira· tessellate.atlassian.net · SEC

Findings become tickets, and come back verified

38 tickets opened in 7 days · 12 closed by a verified fix · project SEC

Working

Connected by Adaeze on 5 Oct

SEC-131 · Done in Jira · waiting for a rescan

SEC-131 is Done in Jira, and Monday's scan will say if it's fixed

Ifeoma marked the origin IP fix done. We don't close a finding on someone's word: the next complete scan checks whether the origin still answers, then closes it in both places.

See the finding

When a ticket opens

The rules, in plain words

Project SEC · tessellate.atlassian.net · 3 of 5 on

  • When a finding is proven exploitable, then open a Highest ticket in SEC for its owner team.
  • When a critical or high finding is on a host straight onto the internet, then open a ticket in SEC for its owner team.
  • When a finding passes its fix-by date, then raise its ticket to Highest and comment.
  • When you ask a vendor for a fix, then open a tracking ticket in SEC.
  • When a pull request check blocks a merge, then comment on the pull request only, no ticket.

The connection

Connected by Adaeze on 5 Oct

tessellate.atlassian.net · SEC