Skip to content

Commit 205692e

Browse files
authored
Add Cyberwatch Galeax Parser (#12105)
* Added Cyberwatch Parser (#7) Cyberwatch parser : Fixed CVEs and Security issues handling, added components and mitigated findings Changed Setting for Dedup algorithm removed shashum Fixed parser bug with filters Added Epss score as %, added CAPEC and ATTACKS Fix linter and code format Co-authored-by: Amine <amine@galeax.com> * Fix parser name, Add assert on epss score and cwe * Fixed references --------- Co-authored-by: Amine <amine@galeax.com>
1 parent 3e16c41 commit 205692e

File tree

9 files changed

+819
-0
lines changed

9 files changed

+819
-0
lines changed
Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,14 @@
1+
---
2+
title: "Cyberwatch (Galeax)"
3+
toc_hide: true
4+
---
5+
The Cyberwatch (Galeax) Parser is used to import Cyberwatch scan results into DefectDojo. It accepts a JSON input that can be generated by the [Cyberwatch-API-DefectDojo](https://github.com/Galeax/Cyberwatch-API-DefectDojo) tool created by Galeax.
6+
7+
The JSON file should include the following keys:
8+
- **cves**: A list of CVE entries.
9+
- **security_issues**: A list of security issue entries.
10+
11+
For each CVE and security issue found in the JSON input, the parser creates a corresponding finding in DefectDojo.
12+
13+
### Sample Scan Data
14+
Sample Cybwerwatch Galeax Scan scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/cyberwatch).

dojo/settings/settings.dist.py

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1347,6 +1347,7 @@ def saml2_attrib_map_format(din):
13471347
"KrakenD Audit Scan": ["description", "mitigation", "severity"],
13481348
"Red Hat Satellite": ["description", "severity"],
13491349
"Qualys Hacker Guardian Scan": ["title", "severity", "description"],
1350+
"Cyberwatch scan (Galeax)": ["title", "description", "severity"],
13501351
}
13511352

13521353
# Override the hardcoded settings here via the env var
@@ -1417,6 +1418,7 @@ def saml2_attrib_map_format(din):
14171418
"Threagile risks report": True,
14181419
"HCL AppScan on Cloud SAST XML": True,
14191420
"AWS Inspector2 Scan": True,
1421+
"Cyberwatch scan (Galeax)": True,
14201422
}
14211423

14221424
# List of fields that are known to be usable in hash_code computation)
@@ -1598,6 +1600,7 @@ def saml2_attrib_map_format(din):
15981600
"PTART Report": DEDUPE_ALGO_UNIQUE_ID_FROM_TOOL,
15991601
"Red Hat Satellite": DEDUPE_ALGO_HASH_CODE,
16001602
"Qualys Hacker Guardian Scan": DEDUPE_ALGO_HASH_CODE,
1603+
"Cyberwatch scan (Galeax)": DEDUPE_ALGO_HASH_CODE,
16011604
}
16021605

16031606
# Override the hardcoded settings here via the env var

dojo/tools/cyberwatch_galeax/__init__.py

Whitespace-only changes.

0 commit comments

Comments
 (0)