Security metrics from GitHub

[Oli]

I'd like to use the security scorecard with GitHub security vulnerabilities rather than Snyk.

At present I can see this information in Jira under the development tab, but not in Compass.

Is this possible or planned for the future? 

I would like:

Open critical severity vulnerabilities

Open high severity vulnerabilities

from GitHub

Ideally, if possible:

MTTR critical severity vulnerabilities

MTTR high severity vulnerabilities

as provided for Snyk.

Thanks

[Tomislav Tobijas]

Hey @Oli ,

On top of what Val said, here are the integration articles for Snyk and GitHub:

• Integrate Compass with Snyk 
• Integrate Compass with GitHub 

But yeah... Compass currently supports only these metrics through the Snyk integration. I've tried checking open feature requests, but I couldn't find anything related to GitHub security vulnerability support.

Now, what I usually do in case there isn't an open feature request is to reach out to the Support team, explain my requirement, and in like 99% of cases, they open a new feature request for me :)

Cheers,
Tobi

[Valerie Knapp]

Hi @Oli , thanks for your post.

There is a roadmap for Compass here - https://www.atlassian.com/roadmap/cloud?selectedProduct=compass& .

I will tag the Atlassian person from this post to see if they can recommend the best way to give suggestions for new features / developments.

Best wishes

@Katie Silver please see Oli's comments. Is there a good way to get these suggestions onto Atlassian's radar?

Cheers

[Daniel Phelan]

This would be great to get on Compass radar.

The Vulnerabilities are showing in JIRA so it's nearly there - just get them into Compass next.

[Anthony Morais]

Hi Oli 

As Valerie said,this doc can help you: https://www.atlassian.com/roadmap/cloud?selectedProduct=compass&