Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Active Vulnerability Detection #357

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Conversation

dylankilkenny
Copy link
Member

No description provided.

Signed-off-by: dylankilkenny <dylankilkenny95@gmail.com>
Copy link
Contributor

@zanbel zanbel left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@dylankilkenny looks great! made some minor copy suggestions


The Asset Settings page offers two main settings to manage how Defender handles asset security: Automatically Generate Report and Vulnerability Detection.

==== Automatically Generate Report
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I suggest being more descriptive in the title and using "Automatically Trigger Report for Pull Requests"

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The "Auto Run" header doesn't align with the text below. I suggest using "Auto Trigger"


In the Repositories tab, you can view all the repositories where the app is currently installed, helping you track where the app is actively conducting code analysis. If you need to make changes to the repositories that the app has access to, a convenient link takes you directly to the GitHub settings page of the app, facilitating effortless repository management.
==== Vulnerability Detection
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

title "Active Vulnerability Detection and Notification"

In the Repositories tab, you can view all the repositories where the app is currently installed, helping you track where the app is actively conducting code analysis. If you need to make changes to the repositories that the app has access to, a convenient link takes you directly to the GitHub settings page of the app, facilitating effortless repository management.
==== Vulnerability Detection

Vulnerability Detection provides a robust security measure by automatically scanning your assets for new critical vulnerabilities as they are discovered. This setting is applicable to both GitHub repositories and smart contracts. To enable this feature, users must activate the setting and select a specific branch to be monitored for GitHub assets. Key features of Vulnerability Detection include:
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

"Active Vulnerability Detection and Notification provides a robust security measure by automatically scanning your assets for new vulnerabilities.
This setting is applicable to both GitHub repositories and smart contracts. To enable this feature for Github repositories assets, you must activate the setting and select a specific branch to be monitored."


Vulnerability Detection provides a robust security measure by automatically scanning your assets for new critical vulnerabilities as they are discovered. This setting is applicable to both GitHub repositories and smart contracts. To enable this feature, users must activate the setting and select a specific branch to be monitored for GitHub assets. Key features of Vulnerability Detection include:

* *Automated Scanning*: Leveraging Defender's advanced scanning capabilities, this feature detects vulnerabilities in smart contracts, whether they are disclosed or undisclosed. When our team becomes aware of a new vulnerability, we promptly update our scanning algorithms to detect it.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Automated Scanning: Leveraging Defender's advanced smart contracts scanning capabilities, when our team becomes aware of a new vulnerability, whether disclosed or undisclosed, we promptly update our scanning algorithms to detect it. We then scan all assets configured to be monitored

Vulnerability Detection provides a robust security measure by automatically scanning your assets for new critical vulnerabilities as they are discovered. This setting is applicable to both GitHub repositories and smart contracts. To enable this feature, users must activate the setting and select a specific branch to be monitored for GitHub assets. Key features of Vulnerability Detection include:

* *Automated Scanning*: Leveraging Defender's advanced scanning capabilities, this feature detects vulnerabilities in smart contracts, whether they are disclosed or undisclosed. When our team becomes aware of a new vulnerability, we promptly update our scanning algorithms to detect it.
* *Automated Alerts*: Upon detection of a vulnerability, automated email notifications are sent to account administrators, alerting them to the potential risk. The notifications include relevant information tailored to the nature of the vulnerability and may also inform administrators if their smart contracts are unaffected.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Automated Notification: Once the automatic scanning is completed an automated system notification email will be sent to inform you whether the vulnerability was detected in your monitored assets. If detected, the notifications include relevant information tailored to the nature of the vulnerability.


* *Automated Scanning*: Leveraging Defender's advanced scanning capabilities, this feature detects vulnerabilities in smart contracts, whether they are disclosed or undisclosed. When our team becomes aware of a new vulnerability, we promptly update our scanning algorithms to detect it.
* *Automated Alerts*: Upon detection of a vulnerability, automated email notifications are sent to account administrators, alerting them to the potential risk. The notifications include relevant information tailored to the nature of the vulnerability and may also inform administrators if their smart contracts are unaffected.
* *Risk Mitigation*: To aid in addressing and mitigating detected vulnerabilities, notifications may include suggestions for risk mitigation, providing actionable steps for administrators to protect their smart contracts and associated assets.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Risk Mitigation: When detected, to aid in addressing and mitigating detected vulnerabilities, notifications may include suggestions for risk mitigation, providing actionable steps for administrators to protect their smart contracts and associated assets.

* *Automated Alerts*: Upon detection of a vulnerability, automated email notifications are sent to account administrators, alerting them to the potential risk. The notifications include relevant information tailored to the nature of the vulnerability and may also inform administrators if their smart contracts are unaffected.
* *Risk Mitigation*: To aid in addressing and mitigating detected vulnerabilities, notifications may include suggestions for risk mitigation, providing actionable steps for administrators to protect their smart contracts and associated assets.

By enabling Vulnerability Detection, users benefit from continuous, automated scanning and timely notifications, empowering them to respond quickly to new threats and maintain the security of their smart contracts and GitHub repositories. This proactive approach ensures that users can stay ahead of potential vulnerabilities and safeguard their code effectively.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

By enabling Active Vulnerability Detection and Notification for your assets, you can benefit from continuous, automated scanning and timely notifications, empowering you to respond quickly to new threats and maintain the security of your smart contracts and GitHub repositories. This proactive approach ensures that you can stay ahead of potential vulnerabilities and safeguard your code effectively.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants