CVE Cleanup
Overview
CVE Data Cleanup Tool - Find and fix multi-CVE issue records, sync from custom fields.
Commands
| Command | Description |
|---|---|
regscale cve-cleanup discover | Discover Issues with multiple CVEs in the CVE field. Scans for Issues where the CVE field contains comma or newline delimited values, which need to be cleaned up. |
regscale cve-cleanup fix | Fix Issues with multiple CVEs. For Issues with duplicate CVEs: Updates to keep only the first CVE. For Issues with different CVEs: Creates new Issues for each additional CVE. By default runs in dry- |
regscale cve-cleanup sync-from-custom-field | Sync vulnerabilities and issues from custom field CVE data. Reads CVE values from a specified custom field on Issues and creates corresponding Vulnerability and Issue records without duplicates. Rec |
regscale cve-cleanup discover
regscale cve-cleanup discoverDiscover Issues with multiple CVEs in the CVE field.
Scans for Issues where the CVE field contains comma or newline delimited values, which need to be cleaned up.
regscale cve-cleanup discover [OPTIONS]
| Flag | Type | Required | Default | Description |
|---|---|---|---|---|
--parent-id | integer | No | — | Filter by parent ID (e.g., security plan ID) |
--parent-module | text | No | — | Filter by parent module (e.g., 'securityplans') |
--output | path | No | — | Export results to CSV file |
regscale cve-cleanup fix
regscale cve-cleanup fixFix Issues with multiple CVEs.
For Issues with duplicate CVEs: Updates to keep only the first CVE. For Issues with different CVEs: Creates new Issues for each additional CVE.
By default runs in dry-run mode. Use --confirm to actually make changes.
regscale cve-cleanup fix [OPTIONS]
| Flag | Type | Required | Default | Description |
|---|---|---|---|---|
--parent-id | integer | No | — | Filter by parent ID (e.g., security plan ID) |
--parent-module | text | No | — | Filter by parent module (e.g., 'securityplans') |
--dry-run | boolean | No | true | Show what would be changed without making changes (default: True) |
--confirm | boolean | No | false | Actually perform the cleanup (disables dry-run) |
regscale cve-cleanup sync-from-custom-field
regscale cve-cleanup sync-from-custom-fieldSync vulnerabilities and issues from custom field CVE data.
Reads CVE values from a specified custom field on Issues and creates corresponding Vulnerability and Issue records without duplicates.
Records are mapped to assets based on the assetIdentifier field.
Example: regscale cve-cleanup sync-from-custom-field --parent-id 123 --custom-field-name "CVE List" --dry-run
regscale cve-cleanup sync-from-custom-field [OPTIONS]
| Flag | Type | Required | Default | Description |
|---|---|---|---|---|
--parent-id | integer | Yes | — | Parent ID (e.g., security plan ID) |
--parent-module | text | No | securityplans | Parent module (default: 'securityplans') |
--custom-field-name | text | Yes | — | Name of the custom field containing CVE data |
--create-vulnerabilities, --no-vulnerabilities | boolean | No | true | Create missing vulnerabilities (default: True) |
--create-issues, --no-issues | boolean | No | true | Create missing issues (default: True) |
--dry-run | boolean | No | true | Show what would be created without making changes (default: True) |
--confirm | boolean | No | false | Actually perform the sync (disables dry-run) |
Updated about 5 hours ago