Security metrics from GitHub

Question

I'd like to use the security scorecard with GitHub security vulnerabilities rather than Snyk.

At present I can see this information in Jira under the development tab, but not in Compass.

Is this possible or planned for the future?

I would like:

Open critical severity vulnerabilitiesOpen high severity vulnerabilitiesfrom GitHub

Ideally, if possible:

MTTR critical severity vulnerabilitiesMTTR high severity vulnerabilitiesas provided for Snyk.Thanks

Daniel Phelan · Answer

This would be great to get on Compass radar.

The Vulnerabilities are showing in JIRA so it's nearly there - just get them into Compass next.

Anthony Morais · Answer

Hi Oli

As Valerie said,this doc can help you: https://www.atlassian.com/roadmap/cloud?selectedProduct=compass&

Tomislav Tobijas · Answer

Hey @Oli ,

On top of what Val said, here are the integration articles for Snyk and GitHub:

* Integrate Compass with Snyk 
* Integrate Compass with GitHub

But yeah... Compass currently supports only these metrics through the Snyk integration. I've tried checking open feature requests, but I couldn't find anything related to GitHub security vulnerability support.

Now, what I usually do in case there isn't an open feature request is to reach out to the Support team, explain my requirement, and in like 99% of cases, they open a new feature request for me :)

Cheers,
Tobi