ism_coverage_upsert
Create or update a coverage entry in the ISM manifest, recording how an information security control is met.
Instructions
Create or update one entry in the coverage manifest (.ism-coverage.toml).
The only tool that writes to disk. It rewrites the manifest file atomically and an
existing entry for the identifier is replaced whole. status must be one of
covered, partial, not-applicable, or deferred. Validates identifier against the
ISM DB, requires every attachment path to resolve on disk and every url and
attachment to carry a description. last_reviewed defaults to today. Returns the
action taken plus warnings and fails on validation errors.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| urls | No | ||
| files | No | ||
| status | Yes | ||
| commits | No | ||
| how_met | Yes | ||
| identifier | Yes | ||
| attachments | No | ||
| next_review | No | ||
| reviewed_by | No | ||
| project_path | No | ||
| last_reviewed | No | ||
| reviewed_against | No |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| ok | Yes | ||
| action | Yes | ||
| warnings | Yes | ||
| identifier | Yes |