Enhance documentation on configuration and first usage about steady HOT 6 CLOSED

@Naramsim: Thank you very much for "cleaning up" my issue :) Was too late I suppose...

from steady.

Hello @Naramsim

unfortunately I had no time yet to continue working. I just got trough the regular docs and will go for next steps this week hopefully. Will keep you informed about my progress / findings ...

from steady.

I suspect part of the confusion arises from the fact that we have very prominent tutorials dedicated to workspace setup before all the others. Now, in itself, setting a workspace is not something that a user would consider a "top level objective" and in fact, workspaces are only a prerequisite for the actual analyses that Vulas supports. I think we should move those tutorials after the actual "getting started" tutorials (scanning Java apps with....).

@gmeinwik do you think that would have helped you?

from steady.

First of all, I am happy to see that you managed to build and run the various backend components. Let us know if you see any room for improvements, your feedback would be much appreciated.

I agree that the display of the workspace token, rather than its name, is a little confusing. There are a couple of frontend changes in the current development pipeline, and I believe this is among them.

We can also update the documentation to say more clearly that the setup is completed once you have created the workspace. In general, I would advice to use our GitHub pages documentation available at https://sap.github.io/vulnerability-assessment-tool/.

Right now, you're all set to perform some scans using, for instance, the Maven plugin. Please follow the quickstart guides available at https://sap.github.io/vulnerability-assessment-tool/user/tutorials/.

from steady.

Hello @gmeinwik, have you tried to import the vulnerability database?

https://sap.github.io/vulnerability-assessment-tool/vuln_db/tutorials/vuln_db_tutorial/#batch-import-from-knowledge-base

from steady.

Hello @gmeinwik, I'm closing this issue. Feel free to re-open it and suggest us how to improve our docs/tutorials. Thanks for having tried vulnerability-assessment-tool

from steady.