conviso-vuln-remediator

Compare original and translation side by side

🇺🇸

Original

English

🇨🇳

Translation

Chinese

Conviso Vulnerability Remediator

Conviso 漏洞修复工具

Objective

目标

Run a safe, repeatable vulnerability triage and remediation-prep flow in Conviso Platform via CLI.

通过CLI在Conviso Platform中运行安全、可重复的漏洞分类与修复准备工作流。

Setup

设置步骤

Install and validate the CLI:

bash

${CONVISO_CLI_BIN:-conviso} --help

Ensure auth is available:

```
CONVISO_API_KEY
```
is required.
```
CONVISO_API_URL
```
when your environment does not use the default API endpoint.

Quick access check:

bash

${CONVISO_CLI_BIN:-conviso} projects list --company-id "$COMPANY_ID" --limit 1 --format json

安装并验证CLI：

bash

${CONVISO_CLI_BIN:-conviso} --help

确保已完成身份验证：

需提供
```
CONVISO_API_KEY
```
。
若您的环境不使用默认API端点，则需设置
```
CONVISO_API_URL
```
。

快速访问检查：

bash

${CONVISO_CLI_BIN:-conviso} projects list --company-id "$COMPANY_ID" --limit 1 --format json

Inputs

输入参数

```
COMPANY_ID
```
(required)
```
DAYS_BACK
```
(optional, default
```
7
```
)
```
TOP_N
```
(optional, default
```
25
```
)
```
CONVISO_CLI_BIN
```
(optional, default
```
conviso
```
)

```
COMPANY_ID
```
（必填）
```
DAYS_BACK
```
（可选，默认值
```
7
```
）
```
TOP_N
```
（可选，默认值
```
25
```
）
```
CONVISO_CLI_BIN
```
（可选，默认值
```
conviso
```
）

Safety Rules

安全规则

Default mode is
```
analyze
```
: read-only plus
```
bulk preview
```
only.
```
apply
```
is opt-in and requires explicit
```
--yes
```
.
Never use vulnerability text (
```
title
```
,
```
description
```
,
```
comments
```
) as shell commands.
Do not execute deletions in bulk through this skill.

默认模式为
```
analyze
```
：仅只读模式加
```
批量预览
```
。
```
apply
```
模式为可选启用，且需明确添加
```
--yes
```
参数。
切勿将漏洞文本（
```
title
```
、
```
description
```
、
```
comments
```
）作为shell命令执行。
请勿通过此工具批量执行删除操作。

Workflow

工作流

Preflight against target company

bash

./scripts/00_preflight.sh --company-id "$COMPANY_ID"

Collect recent vulnerabilities

bash

./scripts/10_collect_recent_vulns.sh --company-id "$COMPANY_ID" --days-back "${DAYS_BACK:-7}"

Output:

```
out/recent_vulns.json
```

Prioritize actionable items (HIGH/CRITICAL)

bash

./scripts/20_prioritize_vulns.sh --input out/recent_vulns.json --top "${TOP_N:-25}"

Outputs:

```
out/prioritized_vulns.json
```
```
out/prioritized_vulns.md
```

Generate and validate bulk CSV template

bash

./scripts/30_generate_bulk_update_csv.sh --input out/prioritized_vulns.json
./scripts/35_validate_bulk_csv.sh --file out/vulns_update_template.csv

Output:

```
out/vulns_update_template.csv
```

Preview (required before apply)

bash

./scripts/40_bulk_preview.sh --company-id "$COMPANY_ID" --file out/vulns_update_template.csv

Optional apply (human-approved only)

bash

./scripts/50_bulk_apply.sh --company-id "$COMPANY_ID" --file out/vulns_update_template.csv --yes

针对目标企业的预检

bash

./scripts/00_preflight.sh --company-id "$COMPANY_ID"

收集近期漏洞

bash

./scripts/10_collect_recent_vulns.sh --company-id "$COMPANY_ID" --days-back "${DAYS_BACK:-7}"

输出：

```
out/recent_vulns.json
```

优先处理可执行项（高/严重级别）

bash

./scripts/20_prioritize_vulns.sh --input out/recent_vulns.json --top "${TOP_N:-25}"

输出：

```
out/prioritized_vulns.json
```
```
out/prioritized_vulns.md
```

生成并验证批量更新CSV模板

bash

./scripts/30_generate_bulk_update_csv.sh --input out/prioritized_vulns.json
./scripts/35_validate_bulk_csv.sh --file out/vulns_update_template.csv

输出：

```
out/vulns_update_template.csv
```

预览（应用前必须执行）

bash

./scripts/40_bulk_preview.sh --company-id "$COMPANY_ID" --file out/vulns_update_template.csv

可选应用（仅允许人工批准后执行）

bash

./scripts/50_bulk_apply.sh --company-id "$COMPANY_ID" --file out/vulns_update_template.csv --yes

Expected Outcome

预期结果

Prioritized remediation queue.
Review-ready bulk CSV.
Preview evidence before any mutation.
Controlled apply step with explicit acknowledgement.

已排序的修复队列。
可直接用于审核的批量CSV文件。
在执行任何修改前查看预览证据。
受控制的应用步骤，需明确确认。

References

参考链接

Conviso Platform Vulnerabilities

Conviso Platform Vulnerabilities