Skip to content

Evaluate legacy Vuln Mgmt data models looking for data integrity issues

Topic to Evaluate

We've run into several data integrity issues in Vulnerabilities migrated from Findings. Some of the code is not reading and/or writing some of the data. Data existed in the old model, but all code is not using the new model. And data from old needs to be migrated to new.

Based on synchronous discussions in the Threat Insights group, this issue was created to ensure that other data integrity issues do not exist between legacy and current data models.

Previous data integrity issues:

Tasks to Evaluate

Spike Timebox: 2 days.

  • Identify redundant information in the vulnerability DB structure (can be done in tandem with #223915 (closed))
  • Determine if existing data needs to be copied from its current location and create data migration issues for each of them(please make sure to propose a checksum mechanism to verify the migration was successful or at least a method to verify the record counts)
  • Identify the places in application logic where different places are using different data sources(which was the root cause of #223770) for the same entity(from the end-user perspective) and create issues for each inconsistent behavior with references to places in the codebase

Note: Please create an epic to attach all the issues which are the outcome of this issue if you end up with creating more than 1 issue.

Risks and Implementation Considerations

No risks are expected from performing these tasks.

Edited by Alan (Maciej) Paruszewski