snyk: add attributes.{ignored,status,updated_at} field values to fingerprint

[efd6]

Proposed commit message

See title.

This is a resurrection of #14430.

Checklist

• I have reviewed tips for building integrations and this pull request is aligned with them.
• I have verified that all data streams collect metrics or logs.
• I have added an entry to my package's changelog.yml file.
• I have verified that Kibana version constraints are current according to guidelines.
• I have verified that any added dashboard complies with Kibana's Dashboard good practices

Author's Checklist

• [ ]

How to test this PR locally

Related issues

• Closes [snyk]: Fingerprint should include the status #14356

Screenshots

[elastic-vault-github-plugin-prod]

🚀 Benchmarks report

To see the full report comment with /test benchmark fullreport

[elasticmachine]

Pinging @elastic/security-service-integrations (Team:Security-Service Integrations)

[clement-fouque]

I'm not able to validate it's working as expecting since I still have this issue: #14342

[clement-fouque]

After some more investigation, I'm blocked with this new issue: #15006

[elasticmachine]

💚 Build Succeeded

• Buildkite Build
• Commit: 6615f48

History

• 💚 Build #30216 succeeded ecd49b9

cc @efd6

[elastic-sonarqube]

Quality Gate passed

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
100.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube

[efd6]

@clement-fouque #15006 is now fixed and I do not have enough information to be able to work on #14342. Can you review this now? Should I close this and redo it again later?

[clement-fouque]

Sorry I didn't understand that you were waiting from me. I'll get back to you next week.

[clement-fouque]

I was able to test and it's not working. I believe it's because filtering is made on created_afterand not on updated_after. Therefore, the "update call" is not made.

Since created_at = updated_at when an issue is created, I believe we can change from created_at to updated_at in

integrations/packages/snyk/data_stream/issues/agent/stream/cel.yml.hbs

Line 79 in 687a39b

?"created_after": (has(state.?cursor.last_created) && !has(state.?cursor.last_updated)) ?

[efd6]

With that change, this will be a breaking change.