Overview
When Nucleus creates or updates a ticket, it can attach a CSV file containing details about the affected assets and finding instances. This CSV provides a portable, machine-readable snapshot of the ticket's scope.
Supported Connectors
Connector | CSV Attachment Support |
|---|---|
Jira (Cloud & Datacenter) | ✓ Supported |
ServiceNow App | ✓ Supported |
Azure DevOps | ✓ Supported |
Zendesk | ✓ Supported |
Bitbucket | ✓ Supported |
GitHub Issues | ✗ Not supported by external system |
GitLab Issues | ✗ Not supported by external system |
PagerDuty | ✗ Not supported by external system |
Default CSV Columns
Column | Description |
|---|---|
Asset Name | Name of the affected asset (the finding instance) |
IP Address | IP address of the asset |
MAC Address | MAC address of the asset |
Domain | Domain name of the asset |
Operating System | OS of the asset |
Finding Name | Name of the vulnerability |
CVE | Associated CVE identifier(s) |
CVSS Score | CVSS score for the finding |
Severity | Severity level (Critical, High, Medium, Low) |
Exploitable | Whether the finding is exploitable (Yes/No) |
Scan Type | Source scanner type |
Finding Package | Affected software package |
Package Version | Version of the affected package |
Package Fix Versions | Available fix versions |
Port | Affected port (if applicable) |
Path | File or URL path (if applicable) |
Service | Affected service (if applicable) |
Discovered | Date the finding was discovered |
Due Date | Remediation due date |
Remediated | Remediation status (YES/NO) |
Finding Output | Scanner output details |
Extra Data | Additional metadata |
Optional Columns
Opt-in Feature
Support for optional columns are an opt-in feature, please contact support or your Customer Service Representative to enable for your organization.
Additional columns can be enabled:
Organization Setting | Column(s) Added |
|---|---|
Include Risk Score in Tickets | Nucleus Risk Score for this Vulnerability |
Include Snyk URL in Tickets | Finding in Snyk |
Include AWS Metadata in Tickets | Dynamic |
Include Checkmarx One Metadata in Tickets | Checkmarx One Deep Link, Checkmarx One SAST Scan Link, Checkmarx One SCA Scan Link |
Order of optional columns when multiple are enabled is alphabetical and appended at the end of the existing CSV default column set:
Nucleus Risk Score (if enabled)
Snyk Finding URL (if enabled)
AWS metadata fields (if enabled, sorted alphabetically)
Checkmarx One fields (if enabled, in fixed order: Deep Link, SAST Scan Link, SCA Scan Link)