IBM QRadar SOAR

IBM QRadar SOAR

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  resilient-community-apps GitHub Repo Out of Sync

    Posted Thu May 26, 2022 12:52 PM
    Edited by Liam Mahoney Thu May 26, 2022 12:53 PM
    All,

    I noticed the fn_whois_rdap app in the resilient-community-apps github repository is showing version 1.0.4 but the App Exchange has version 1.0.5 uploaded to it.

    I had forked this integration from the GitHub repo last December and we have been running a slightly modified version of it since then. Through some investigation this morning I discovered that my forked version of this app running in our app host had silently errored out and put itself into an unrecoverable state on 5/11/2022 after it was unable to connect to our SOAR platform which was down for an upgrade:

    2022-05-11 23:35:38,282 ERROR [stomp_component] Exiting due to unrecoverable error

    After a bit I figured out that our forked app is using the old `entrypoint.sh` file. I checked the IBM SOAR community apps GitHub repo and the app still has the old `entrypoint.sh` file there. I'm assuming the version downloaded through App Exchange would have the new `entrypoint.sh` file which would fix this issue, but I couldn't verify as it looks like the `entrypoint.sh` file isn't included in the zip file downloaded through there.


    The fix was simple enough once I figured out what the issue was.

    I'm wondering if the GitHub repository can be updated more regularly? This isn't my first time having an issue with the GitHub repo being out of sync: https://community.ibm.com/community/user/security/communities/community-home/digestviewer/viewthread?MessageKey=76d2d0f7-c486-4333-9c37-cd3057dd330d&CommunityKey=d2f71e8c-108e-4652-b59c-29d61af7163e#bm76d2d0f7-c486-4333-9c37-cd3057dd330d

    Thanks,



    ------------------------------
    Liam Mahoney
    ------------------------------


  • 2.  RE: resilient-community-apps GitHub Repo Out of Sync

    Posted Fri May 27, 2022 11:02 AM
    Hi Liam,

    Thank you for raising this

    Apologies that the solution was so trivial and that it was an oversight on our part to have the repos updated

    Normally the repo is updated on a monthly basis

    We will be updating our internal build architecture in the near future to auto sync the repo so hopefully this will alleviate any issues like this in the future

    ------------------------------
    Shane Curtin
    Apps Engineer - IBM Security SOAR
    ------------------------------

    Original Message


  • 3.  RE: resilient-community-apps GitHub Repo Out of Sync

    Posted Fri May 27, 2022 12:00 PM
    Shane,

    That's great news. Thanks for the info!

    ------------------------------
    Liam Mahoney
    ------------------------------

    Original Message