cmcdevitt

(function() {
	var _days = gs.getProperty('sn_vul_qualys.qualys_desc_days');
	var grOld = new GlideRecord('sn_vul_qualys_discrepancy');
	grOld.addQuery('sys_updated_on', '<=', gs.daysAgo(_days));
	grOld.query();
	grOld.deleteMultiple();
})();

//Uses a system property that is an integer. Example 7, delte anything 7 days or older
//This example runs in a schedule job

cmcdevitt

var grvit = new GlideRecord('sn_vul_vulnerable_item');
	grvit.addQuery('cmdb_ci', '2dc1c018dbd5ab4047a0a422ca9619c0');
    grvit.query();
	while(grvit.next()){
    grvit.state = 3; // Closed
    grvit.substate  = 5; // Cancled
    grvit.close_notes = "Closed by System becouse CI Status was set to Retired";
    grvit.update();
    }

cmcdevitt

//DO NOT Use last_found. Qualys + SN consolidate findings into a single vit. The last_found field is update multiple times, one per finding, per load.
(function(){
	var closing = 0;
	var _days = gs.getProperty('sn_vul.close_vit_days');
	var grvit = new GlideRecord('sn_vul_vulnerable_item');
	grvit.addQuery('state',1); //Open
	grvit.addQuery('source','Qualys');
	grvit.addQuery('last_found', '<=', gs.daysAgo(_days));
	grvit.query();
	while(grvit.next()){

cmcdevitt

(function executeRule(current, previous /*null when async*/) {
	
	var grvit = new GlideRecord('sn_vul_vulnerable_item');
	grvit.addQuery('cmdb_ci', current.sys_id);
	grvit.query();
	while(grvit.next()){
		grvit.state = 3; //Closed
		grvit.substate  = 5; //Cancled
		grvit.close_notes = "Closed by System becouse CI Status was set to Retired";
		grvit.update();

cmcdevitt

//These ***two*** function have the same code that needs to be update 
//getCINames: function(ciIdList) {}
//getIPMapForCIs: function(ciIdList, ipMap) {)

var nicIP = new GlideRecord("cmdb_ci_ip_address");
nicIP.addQuery("nic", "IN", nicIdList.join(","));
//CM The Default Qualys API does not accept IPv6 addresses. Only return IPv4
nicIP.addQuery("ip_version", 4); //<--Fix
nicIP.query();

cmcdevitt

Create new UI Action with the name "Approve" (Insert and Stay)
Table: Approval [sysapproval_approver]
Order 50
Action Name approver
Same boxes Checeded as original approve
Plus Client checked
OnClick: onSubmit()
Condition: current.state == 'requested' && current.source_table == "sn_vul_change_approval" && current.sys_created_by == gs.getUserName()
Script:
function onSubmit() {

cmcdevitt

<?xml version="1.0" encoding="utf-8" ?>
<j:jelly trim="false" xmlns:j="jelly:core" xmlns:g="glide" xmlns:j2="null" xmlns:g2="null">

	
	<!-- NOTE the tag attributes VALUES must be wraped in a string: foo='bar' OR foo='${"bar"}' -->
	<!-- JELLY set tag, Attributes "var,value" -->
	<j:set var='jvar_somevar' value='100'/>
	
	<!-- This is a comment -->
	<p>This is html ${" and JEXL"} AND $[" SN JEXL!"]</p>

cmcdevitt

//<g:ui_form> and other g:ui_x components work with the Processing Script
//Processing script automaticaly accesseses the 'value' attrib of the 'name' html attrib
gs.info("CM***: " + hidden_one + " " + hidden_two + "***");

//GlideSession
var session = gs.getSession();
gs.info("CM***: Client IP " + session.getClientIP());
gs.info("CM***: URL " + session.getUrlOnStack());//Returns null / undefined?
//Send data in the Session
gs.info("CM***:" + session.getClientData('in_session_ui_page')); //See ui page

cmcdevitt

/*sn_vul_reference
Vulnerability Reference

Qualys Software Entry:
Vendor: oracle
Product: mysql
Note: V0.01 Prototype
Relys on u_product, u_vendor on sn_vul_third_party_entry
As it turns out a Qualys record can have more then one vendor and more then one product per QID...

cmcdevitt

/*
Expect: {si: [26.44628,26,44628,50,"Business Impact"]}
1. Start with everything hidden
- Everyting starts with display:none 
2. Loop though object and review one span at a time
-THEN display:inline-block
3. Set span length based on % from object
- width:20%
<span id="b1" class="bar-1" style="display:inline-block;width:20%;height:100%;
box-sizing:border-box;float:left;font-weight:bold;font-family:arial,sans-serif;padding:10px;background:#F7B334;">