Skip to content

Commit 8e1ae6e

Browse files
Update Burp Scan to use Hashcode Dedupe (#11419)
* add burp scan to hashcode dedupe * remove file_path * Add release notes --------- Co-authored-by: Cody Maffucci <46459665+Maffooch@users.noreply.github.com>
1 parent 60816ab commit 8e1ae6e

File tree

2 files changed

+15
-1
lines changed

2 files changed

+15
-1
lines changed

docs/content/en/open_source/upgrading/2.44.md

Lines changed: 13 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,4 +4,16 @@ toc_hide: true
44
weight: -20250203
55
description: No special instructions.
66
---
7-
There are no special instructions for upgrading to 2.44.x. Check the [Release Notes](https://github.com/DefectDojo/django-DefectDojo/releases/tag/2.44.0) for the contents of the release.
7+
8+
### Hash Code changes
9+
10+
The Burp parser now has a custom deduplication configuration to make deduplication more accurate. To recalculate the hash code and deduplicate existing Burp findings, please execute the following command:
11+
12+
`docker compose exec uwsgi /bin/bash -c "python manage.py dedupe.py --parser "Burp Scan" --hash_code_only`
13+
14+
This command has various command line arguments to tweak its behavior, for example to trigger a run of the deduplication process.
15+
See [dedupe.py](https://github.com/DefectDojo/django-DefectDojo/blob/master/dojo/management/commands/dedupe.py) for more information.
16+
17+
---
18+
19+
Check the [Release Notes](https://github.com/DefectDojo/django-DefectDojo/releases/tag/2.44.0) for the contents of the release.

dojo/settings/settings.dist.py

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1202,6 +1202,7 @@ def saml2_attrib_map_format(dict):
12021202
"Aqua Scan": ["severity", "vulnerability_ids", "component_name", "component_version"],
12031203
"Bandit Scan": ["file_path", "line", "vuln_id_from_tool"],
12041204
"Burp Enterprise Scan": ["title", "severity", "cwe"],
1205+
"Burp Scan": ["title", "severity", "vuln_id_from_tool"],
12051206
"CargoAudit Scan": ["vulnerability_ids", "severity", "component_name", "component_version", "vuln_id_from_tool"],
12061207
"Checkmarx Scan": ["cwe", "severity", "file_path"],
12071208
"Checkmarx OSA": ["vulnerability_ids", "component_name"],
@@ -1425,6 +1426,7 @@ def saml2_attrib_map_format(dict):
14251426
"Burp REST API": DEDUPE_ALGO_UNIQUE_ID_FROM_TOOL,
14261427
"Bandit Scan": DEDUPE_ALGO_HASH_CODE,
14271428
"Burp Enterprise Scan": DEDUPE_ALGO_HASH_CODE,
1429+
"Burp Scan": DEDUPE_ALGO_HASH_CODE,
14281430
"CargoAudit Scan": DEDUPE_ALGO_HASH_CODE,
14291431
"Checkmarx Scan detailed": DEDUPE_ALGO_UNIQUE_ID_FROM_TOOL,
14301432
"Checkmarx Scan": DEDUPE_ALGO_HASH_CODE,

0 commit comments

Comments
 (0)