[Cloud Security] Backport 221247 backport qualys related changes #221302

alexreal1314 · 2025-05-22T18:14:02Z

Summary

This PR backports changes related to Qualys VMDR added integration support that were merged to version 9.1.0.

PRs backported:

[Cloud Security] 198669 add support for multiple CVEs and improve vulnerability data grid, flyout and contextual flyout UI #213039
[Cloud Security ] 12165 update UI handling of multiple CVEs and package fields #216411

Identify risks

Thorough sanity check need to be made before merging since a lot of conflicts were fixed manually.

…out not opening

…tagrid and flyout

…ability to CVE ID column header

update flyout overview tab to support multiple cves, published date move to be above alerts section

…it tests

…alues update insights tab vulnerabilities column names fix redirect from insights tab to vulnerabilties findings page

…tle cell render

…unctions

…StatusBadge

…lues

…out not opening

…tagrid and flyout

…ability to CVE ID column header

update flyout overview tab to support multiple cves, published date move to be above alerts section

…it tests

…alues update insights tab vulnerabilities column names fix redirect from insights tab to vulnerabilties findings page

…unctions

… for multil values fields fix severity utility function types

…vulnerabilities data table

kibanamachine · 2025-05-22T22:44:10Z

Cloud deployment initiated, see credentials at: https://buildkite.com/elastic/kibana-deploy-cloud-from-pr/builds/187

elasticmachine · 2025-05-23T10:04:30Z

Pinging @elastic/kibana-cloud-security-posture (Team:Cloud Security)

kc13greiner · 2025-05-23T13:00:37Z

Kibana Security was tagged for review (Im not sure why KB machine tagged us 🤷‍♂️ ) and the PR LGTM, but I figured this would be best for Cloud Security to review

maxcold · 2025-05-23T13:31:12Z

Tested with Qualys data, found one issue which might be related to backporting: the filtering of the page by CVE id sometimes (not for all CVEs and I couldn't find a pattern) crashes the page. Refreshing the page with the same filter then works fine. I will investigate if Alex won't be available

maxcold

changes introduced in the backport are tested, the backport should be ready to be merged

maxcold · 2025-05-27T08:33:50Z

...plugins/cloud_security_posture/public/pages/vulnerabilities/latest_vulnerabilities_table.tsx


  const createVulnerabilityRuleFn = (rowIndex: number) => {
-    const vulnerabilityFinding = getCspVulnerabilityFinding(rows[rowIndex].raw._source);
+    const vulnerabilityFinding = getCspVulnerabilityFinding(rows[rowIndex]?.raw._source);


This fixes the issue I brought up in the comments, now the backport should be ready to go

elasticmachine · 2025-05-27T09:08:06Z

💚 Build Succeeded

Metrics [docs]

Module Count

Fewer modules leads to a faster build time

id	before	after	diff
`cloudSecurityPosture`	696	707	+11
`securitySolution`	7283	7292	+9
total			+20

Public APIs missing comments

Total count of every public API that lacks a comment. Target amount is 0. Run node scripts/build_api_docs --plugin [yourplugin] --stats comments for more detailed information.

id	before	after	diff
`@kbn/cloud-security-posture`	93	109	+16
`@kbn/cloud-security-posture-common`	120	124	+4
total			+20

Async chunks

Total size of all lazy-loaded chunks that will be downloaded as the user navigates the app

id	before	after	diff
`cloudSecurityPosture`	492.7KB	504.1KB	+11.4KB
`securitySolution`	9.2MB	9.2MB	+4.7KB
total			+16.1KB

Unknown metric groups

API count

id	before	after	diff
`@kbn/cloud-security-posture`	93	110	+17
`@kbn/cloud-security-posture-common`	122	126	+4
total			+21

History

💚 Build #302232 succeeded fae2ccd
💔 Build #302220 failed 62e273c
💔 Build #301896 failed f3def2a
💔 Build #301864 failed a5801f9
💔 Build #301849 failed 37577c6

alexreal1314 added 30 commits May 22, 2025 13:03

add handling of missing vulnerability.id in the data grid and fix fly…

476473f

…out not opening

add handling of severity to be case insensitive in vulnerabilities da…

23a5477

…tagrid and flyout

update vulnerabilities data grid - add title column and rename Vulner…

249335c

…ability to CVE ID column header

add support for multiple cve in the flyout header

3dece0c

update flyout overview tab to support multiple cves, published date move to be above alerts section

fix i18n translation files and create util function

6a11ca3

fix vulnerabilities serverity flyout display, add test ids and fix un…

096a3c6

…it tests

add normalizeSeverity function unit tests

4123bd4

fix check types errors

8a1f1fe

update contextual flyout severity mapping to handle inensitive case v…

a1c5bb7

…alues update insights tab vulnerabilities column names fix redirect from insights tab to vulnerabilties findings page

fix conflicts and update insights tab vulnerabilities table id and ti…

f8c0efb

…tle cell render

add unit tests to composeQueryFilters and normalizeSeverity utility f…

9745523

…unctions

fix barrel imports and fix types of utility function used by Severity…

087e503

…StatusBadge

fix finding matching refernce in case of multiple vulnerability.id va…

7dd29aa

…lues

add handling of missing vulnerability.id in the data grid and fix fly…

3fd2b7a

…out not opening

add handling of severity to be case insensitive in vulnerabilities da…

f69eab4

…tagrid and flyout

update vulnerabilities data grid - add title column and rename Vulner…

35a4ac6

…ability to CVE ID column header

add support for multiple cve in the flyout header

09f1c54

update flyout overview tab to support multiple cves, published date move to be above alerts section

fix i18n translation files and create util function

40add3c

fix vulnerabilities serverity flyout display, add test ids and fix un…

59bf54f

…it tests

add normalizeSeverity function unit tests

3d62632

fix check types errors

89bf2aa

update contextual flyout severity mapping to handle inensitive case v…

e8e5055

…alues update insights tab vulnerabilities column names fix redirect from insights tab to vulnerabilties findings page

add unit tests to composeQueryFilters and normalizeSeverity utility f…

47e5f14

…unctions

update grouping package to flattern results based on params - usefull…

99f638b

… for multil values fields fix severity utility function types

remove barrel imports and rename hooks file name

fac8df9

remove runetime mapping casting when grouping

0e8fc47

move flattening logic to kbn-grouping package

c27ec9e

add component that renders multi value fields in vulnerability data-grid

f5acb04

add filter and copy action to popver badges for multi value fields

4d4a106

create popver table items component to display multi value fields in …

6d08921

…vulnerabilities data table

kibanamachine requested a review from a team May 22, 2025 18:14

alexreal1314 changed the base branch from main to 8.19 May 22, 2025 18:15

fix redirect to vulnerabilities table to usage package ecs fields

22e1432

alexreal1314 added Team:Cloud Security Cloud Security team related ci:cloud-deploy Create or update a Cloud deployment Feature:Cloud-Security Cloud Security related features labels May 22, 2025

fix import issues

f4250c3

alexreal1314 force-pushed the backport-221247-backport-qualys-related-changes branch from a5801f9 to f4250c3 Compare May 22, 2025 21:20

alexreal1314 marked this pull request as ready for review May 23, 2025 10:04

alexreal1314 requested a review from kibanamachine as a code owner May 23, 2025 10:04

alexreal1314 added backport:skip This PR does not require backporting release_note:skip Skip the PR/issue when compiling release notes labels May 23, 2025

alexreal1314 mentioned this pull request May 23, 2025

[Cloud Security] backport Qualys related changes to 8.19 #221247

Closed

kc13greiner requested review from a team and removed request for a team May 23, 2025 12:58

fix bug when applying filters from vulnerabilities table

62e273c

alexreal1314 force-pushed the backport-221247-backport-qualys-related-changes branch from f3def2a to 62e273c Compare May 24, 2025 07:20

fix lint errors

fae2ccd

alexreal1314 force-pushed the backport-221247-backport-qualys-related-changes branch from 9bdc1ec to fae2ccd Compare May 25, 2025 14:43

Merge branch '8.19' into backport-221247-backport-qualys-related-changes

37a6bc7

maxcold approved these changes May 27, 2025

View reviewed changes

maxcold requested review from a team and removed request for kibanamachine May 27, 2025 08:35

maxcold merged commit de8e153 into 8.19 May 27, 2025
8 checks passed

maxcold deleted the backport-221247-backport-qualys-related-changes branch May 27, 2025 10:21

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

[Cloud Security] Backport 221247 backport qualys related changes #221302

[Cloud Security] Backport 221247 backport qualys related changes #221302

Uh oh!

alexreal1314 commented May 22, 2025 •

edited

Loading

Uh oh!

kibanamachine commented May 22, 2025

Uh oh!

elasticmachine commented May 23, 2025

Uh oh!

kc13greiner commented May 23, 2025

Uh oh!

maxcold commented May 23, 2025

Uh oh!

maxcold left a comment

Uh oh!

maxcold May 27, 2025

Uh oh!

elasticmachine commented May 27, 2025 •

edited

Loading

API count

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

6 participants

[Cloud Security] Backport 221247 backport qualys related changes #221302

[Cloud Security] Backport 221247 backport qualys related changes #221302

Uh oh!

Conversation

alexreal1314 commented May 22, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Identify risks

Uh oh!

kibanamachine commented May 22, 2025

Uh oh!

elasticmachine commented May 23, 2025

Uh oh!

kc13greiner commented May 23, 2025

Uh oh!

maxcold commented May 23, 2025

Uh oh!

maxcold left a comment

Choose a reason for hiding this comment

Uh oh!

maxcold May 27, 2025

Choose a reason for hiding this comment

Uh oh!

elasticmachine commented May 27, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

💚 Build Succeeded

Metrics [docs]

Module Count

Public APIs missing comments

Async chunks

API count

History

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

6 participants

alexreal1314 commented May 22, 2025 •

edited

Loading

elasticmachine commented May 27, 2025 •

edited

Loading