diff --git a/docs/content/en/connecting_your_tools/parsers/file/acunetix.md b/docs/content/en/connecting_your_tools/parsers/file/acunetix.md index 97a2124e8ac..bca5abbd815 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/acunetix.md +++ b/docs/content/en/connecting_your_tools/parsers/file/acunetix.md @@ -5,4 +5,10 @@ toc_hide: true This parser imports the Acunetix Scanner with xml output or Acunetix 360 Scanner with JSON output. ### Sample Scan Data -Sample Acunetix Scanner scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/acunetix). \ No newline at end of file +Sample Acunetix Scanner scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/acunetix). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/anchore_engine.md b/docs/content/en/connecting_your_tools/parsers/file/anchore_engine.md index 1d264c0b589..202e5ababb6 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/anchore_engine.md +++ b/docs/content/en/connecting_your_tools/parsers/file/anchore_engine.md @@ -41,3 +41,12 @@ All properties are strings and are required by the parser. As the parser evolved ### Sample Scan Data Sample Anchore-Engine scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/anchore_engine) + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- severity +- component name +- component version +- file path diff --git a/docs/content/en/connecting_your_tools/parsers/file/anchore_enterprise.md b/docs/content/en/connecting_your_tools/parsers/file/anchore_enterprise.md index 78d3441eb5c..19266a52fbd 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/anchore_enterprise.md +++ b/docs/content/en/connecting_your_tools/parsers/file/anchore_enterprise.md @@ -5,4 +5,12 @@ toc_hide: true Anchore-CLI JSON policy check report format. ### Sample Scan Data -Sample Anchore Enterprise Policy Check scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/anchore_enterprise). \ No newline at end of file +Sample Anchore Enterprise Policy Check scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/anchore_enterprise). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- severity +- component name +- file path diff --git a/docs/content/en/connecting_your_tools/parsers/file/anchore_grype.md b/docs/content/en/connecting_your_tools/parsers/file/anchore_grype.md index cdfdbcf73dc..5dde0ca9a1e 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/anchore_grype.md +++ b/docs/content/en/connecting_your_tools/parsers/file/anchore_grype.md @@ -189,4 +189,12 @@ All properties are expected as strings and are required by the parser. ~~~ ### Sample Scan Data -Sample Grype scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/anchore_grype). \ No newline at end of file +Sample Grype scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/anchore_grype). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- severity +- component name +- component version diff --git a/docs/content/en/connecting_your_tools/parsers/file/anchorectl_policies.md b/docs/content/en/connecting_your_tools/parsers/file/anchorectl_policies.md index 18dc798e633..653c291d795 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/anchorectl_policies.md +++ b/docs/content/en/connecting_your_tools/parsers/file/anchorectl_policies.md @@ -14,4 +14,12 @@ anchorectl policy evaluate -o json > policy_report.json ``` ### Sample Scan Data -Sample AnchoreCTL Policies Report scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/anchorectl_policies). \ No newline at end of file +Sample AnchoreCTL Policies Report scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/anchorectl_policies). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- severity +- component name +- file path diff --git a/docs/content/en/connecting_your_tools/parsers/file/anchorectl_vulns.md b/docs/content/en/connecting_your_tools/parsers/file/anchorectl_vulns.md index 7f41b0e0a47..bec4cac19fd 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/anchorectl_vulns.md +++ b/docs/content/en/connecting_your_tools/parsers/file/anchorectl_vulns.md @@ -5,4 +5,13 @@ toc_hide: true AnchoreCTLs JSON vulnerability report format ### Sample Scan Data -Sample AnchoreCTL Vuln Report scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/anchorectl_vulns). \ No newline at end of file +Sample AnchoreCTL Vuln Report scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/anchorectl_vulns). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- severity +- component name +- component version +- file path diff --git a/docs/content/en/connecting_your_tools/parsers/file/appcheck_web_application_scanner.md b/docs/content/en/connecting_your_tools/parsers/file/appcheck_web_application_scanner.md index 5d003c8c4ec..eaa51a765ff 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/appcheck_web_application_scanner.md +++ b/docs/content/en/connecting_your_tools/parsers/file/appcheck_web_application_scanner.md @@ -5,4 +5,10 @@ toc_hide: true Accepts AppCheck Web Application Scanner output in .json format. ### Sample Scan Data -Sample AppCheck Web Application Scanner scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/appcheck_web_application_scanner). \ No newline at end of file +Sample AppCheck Web Application Scanner scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/appcheck_web_application_scanner). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- severity diff --git a/docs/content/en/connecting_your_tools/parsers/file/appspider.md b/docs/content/en/connecting_your_tools/parsers/file/appspider.md index 0fd952c0f0d..d041baad95c 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/appspider.md +++ b/docs/content/en/connecting_your_tools/parsers/file/appspider.md @@ -6,4 +6,13 @@ Use the VulnerabilitiesSummary.xml file found in the zipped report download. ### Sample Scan Data -Sample AppSpider (Rapid7) scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/appspider). \ No newline at end of file +Sample AppSpider (Rapid7) scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/appspider). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/aqua.md b/docs/content/en/connecting_your_tools/parsers/file/aqua.md index d63b94ca6e4..4408126d07c 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/aqua.md +++ b/docs/content/en/connecting_your_tools/parsers/file/aqua.md @@ -36,3 +36,11 @@ Those JSON files will only list vulnerabilities. Thus, DefectDojo parser will no ### Sample Scan Data Sample Aqua scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/aqua). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- severity +- vulnerability ids +- component name +- component version diff --git a/docs/content/en/connecting_your_tools/parsers/file/arachni.md b/docs/content/en/connecting_your_tools/parsers/file/arachni.md index 0c48e534d13..0fcb71515ec 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/arachni.md +++ b/docs/content/en/connecting_your_tools/parsers/file/arachni.md @@ -11,4 +11,12 @@ arachni_reporter --reporter 'json' js.com.afr {{< /highlight >}} ### Sample Scan Data -Sample Arachni Scanner scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/arachni). \ No newline at end of file +Sample Arachni Scanner scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/arachni). +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/asff.md b/docs/content/en/connecting_your_tools/parsers/file/asff.md index de830908aa2..8f54db8314d 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/asff.md +++ b/docs/content/en/connecting_your_tools/parsers/file/asff.md @@ -10,4 +10,13 @@ Reference: https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub- Prowler tool can generate this format with option `-M json-asff`. ### Sample Scan Data -Sample AWS Security Finding Format (ASFF) scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/asff). \ No newline at end of file +Sample AWS Security Finding Format (ASFF) scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/asff). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/auditjs.md b/docs/content/en/connecting_your_tools/parsers/file/auditjs.md index 03ed4e4bf8e..5dd7f1dbd18 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/auditjs.md +++ b/docs/content/en/connecting_your_tools/parsers/file/auditjs.md @@ -9,4 +9,13 @@ auditjs ossi --json > auditjs_report.json {{< /highlight >}} ### Sample Scan Data -Sample AuditJS (OSSIndex) scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/auditjs). \ No newline at end of file +Sample AuditJS (OSSIndex) scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/auditjs). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/aws_inspector2.md b/docs/content/en/connecting_your_tools/parsers/file/aws_inspector2.md index d7507b61688..648235abb97 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/aws_inspector2.md +++ b/docs/content/en/connecting_your_tools/parsers/file/aws_inspector2.md @@ -22,3 +22,10 @@ Detailed API response format can be obtained [here](https://docs.aws.amazon.com/ ### Sample Scan Data Sample AWS Inspector2 findings can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/aws_inspector2). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- severity +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/aws_prowler.md b/docs/content/en/connecting_your_tools/parsers/file/aws_prowler.md index 628b657ef07..3750f60e1b3 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/aws_prowler.md +++ b/docs/content/en/connecting_your_tools/parsers/file/aws_prowler.md @@ -5,4 +5,13 @@ toc_hide: true Prowler file can be imported as a CSV (`-M csv`) or JSON (`-M json`) file. ### Sample Scan Data -Sample AWS Prowler Scanner scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/aws_prowler). \ No newline at end of file +Sample AWS Prowler Scanner scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/aws_prowler). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/aws_prowler_v3plus.md b/docs/content/en/connecting_your_tools/parsers/file/aws_prowler_v3plus.md index 687d9faf586..a5c4d27eb86 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/aws_prowler_v3plus.md +++ b/docs/content/en/connecting_your_tools/parsers/file/aws_prowler_v3plus.md @@ -160,4 +160,13 @@ The parser expects an array of assessments. All properties are strings and are r ~~~ ### Sample Scan Data -Unit tests of AWS Prowler v3 JSON and Prowler v4 JSON-OCSF can be found at https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/aws_prowler_v3. \ No newline at end of file +Unit tests of AWS Prowler v3 JSON and Prowler v4 JSON-OCSF can be found at https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/aws_prowler_v3. + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/awssecurityhub.md b/docs/content/en/connecting_your_tools/parsers/file/awssecurityhub.md index d67fe1d9604..0e23b312370 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/awssecurityhub.md +++ b/docs/content/en/connecting_your_tools/parsers/file/awssecurityhub.md @@ -19,4 +19,13 @@ AWS Security Hub integrates with multiple AWS Tools. Thus, you can retrieve find AWS Security Hub Parser does import the affected service ARNs as hosts to DefectDojo. However, as ARNs contain invalid digits for hosts, the ARN is changed slightly. ":", " " & "/" are replaced by "_". ### Sample Scan Data -Sample scan data for testing purposes can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/awssecurityhub). \ No newline at end of file +Sample scan data for testing purposes can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/awssecurityhub). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/azure_security_center_recommendations.md b/docs/content/en/connecting_your_tools/parsers/file/azure_security_center_recommendations.md index c4bffbd7a3a..2651ebc6347 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/azure_security_center_recommendations.md +++ b/docs/content/en/connecting_your_tools/parsers/file/azure_security_center_recommendations.md @@ -5,4 +5,13 @@ toc_hide: true Azure Security Center recommendations can be exported from the user interface in CSV format. ### Sample Scan Data -Sample Azure Security Center Recommendations Scan scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/azure_security_center_recommendations). \ No newline at end of file +Sample Azure Security Center Recommendations Scan scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/azure_security_center_recommendations). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/bandit.md b/docs/content/en/connecting_your_tools/parsers/file/bandit.md index 70fde4b58b0..18643765bb4 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/bandit.md +++ b/docs/content/en/connecting_your_tools/parsers/file/bandit.md @@ -64,4 +64,11 @@ All properties are expected as strings, except "metrics" properties, which are e ~~~ ### Sample Scan Data -Sample Bandit scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/bandit). \ No newline at end of file +Sample Bandit scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/bandit). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- file path +- line +- vuln id from tool diff --git a/docs/content/en/connecting_your_tools/parsers/file/bearer_cli.md b/docs/content/en/connecting_your_tools/parsers/file/bearer_cli.md index 8fd8457a403..f57af98f1ec 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/bearer_cli.md +++ b/docs/content/en/connecting_your_tools/parsers/file/bearer_cli.md @@ -10,4 +10,10 @@ To export a .json file from Bearer CLI, pass "-f json" to your Bearer command See Bearer documentation: https://docs.bearer.com/reference/commands/ ### Sample Scan Data -Sample Bearer scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/bearer) \ No newline at end of file +Sample Bearer scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/bearer). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- severity diff --git a/docs/content/en/connecting_your_tools/parsers/file/blackduck.md b/docs/content/en/connecting_your_tools/parsers/file/blackduck.md index 7f8226fd1e6..6c5b4406f04 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/blackduck.md +++ b/docs/content/en/connecting_your_tools/parsers/file/blackduck.md @@ -11,4 +11,12 @@ produce findings that bear file locations information. information. ### Sample Scan Data -Sample Blackduck Hub scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/blackduck). \ No newline at end of file +Sample Blackduck Hub scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/blackduck). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- vulnerability ids +- component name +- component version diff --git a/docs/content/en/connecting_your_tools/parsers/file/blackduck_binary_analysis.md b/docs/content/en/connecting_your_tools/parsers/file/blackduck_binary_analysis.md index 4d272b2d5be..516628f8f6a 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/blackduck_binary_analysis.md +++ b/docs/content/en/connecting_your_tools/parsers/file/blackduck_binary_analysis.md @@ -20,4 +20,13 @@ Black Duck Binary Analysis can also detect if sensitive information like email a * Import a single BDBA vulnerabilty csv results file into DefectDojo leveraging the UI, REST API, or drivers such as [pwn_defectdojo_importscan](https://github.com/0dayInc/pwn/blob/master/bin/pwn_defectdojo_importscan) or [pwn_defectdojo_reimportscan](https://github.com/0dayInc/pwn/blob/master/bin/pwn_defectdojo_reimportscan). ### Sample Scan Data -Sample Blackduck Binary Analysis scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/blackduck_binary_analysis). \ No newline at end of file +Sample Blackduck Binary Analysis scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/blackduck_binary_analysis). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/blackduck_component_risk.md b/docs/content/en/connecting_your_tools/parsers/file/blackduck_component_risk.md index 0a8ff1e7b1e..6f0322eb920 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/blackduck_component_risk.md +++ b/docs/content/en/connecting_your_tools/parsers/file/blackduck_component_risk.md @@ -5,4 +5,13 @@ toc_hide: true Upload the zip file containing the security.csv and files.csv. ### Sample Scan Data -Sample Blackduck Component Risk scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/blackduck_component_risk). \ No newline at end of file +Sample Blackduck Component Risk scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/blackduck_component_risk). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/brakeman.md b/docs/content/en/connecting_your_tools/parsers/file/brakeman.md index ca708641383..68528bbd9ad 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/brakeman.md +++ b/docs/content/en/connecting_your_tools/parsers/file/brakeman.md @@ -5,4 +5,13 @@ toc_hide: true Import Brakeman Scanner findings in JSON format. ### Sample Scan Data -Sample Brakeman Scan scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/brakeman). \ No newline at end of file +Sample Brakeman Scan scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/brakeman). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/bugcrowd.md b/docs/content/en/connecting_your_tools/parsers/file/bugcrowd.md index a04076f853e..86fc3f34311 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/bugcrowd.md +++ b/docs/content/en/connecting_your_tools/parsers/file/bugcrowd.md @@ -5,4 +5,13 @@ toc_hide: true Import Bugcrowd results in CSV format. ### Sample Scan Data -Sample Bugcrowd scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/bugcrowd). \ No newline at end of file +Sample Bugcrowd scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/bugcrowd). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/bundler_audit.md b/docs/content/en/connecting_your_tools/parsers/file/bundler_audit.md index 04d8bceb423..f854657d2ba 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/bundler_audit.md +++ b/docs/content/en/connecting_your_tools/parsers/file/bundler_audit.md @@ -5,4 +5,13 @@ toc_hide: true Import the text output generated with bundle-audit check ### Sample Scan Data -Sample Bundler-Audit scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/bundler_audit). \ No newline at end of file +Sample Bundler-Audit scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/bundler_audit). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/burp.md b/docs/content/en/connecting_your_tools/parsers/file/burp.md index ba8ccbe0f3a..0a43859a0cd 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/burp.md +++ b/docs/content/en/connecting_your_tools/parsers/file/burp.md @@ -41,4 +41,11 @@ All XML elements are required and will be parsed as strings. ~~~ ### Sample Scan Data -Sample Burp scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/burp). \ No newline at end of file +Sample Burp scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/burp). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- severity +- vuln id from tool diff --git a/docs/content/en/connecting_your_tools/parsers/file/burp_api.md b/docs/content/en/connecting_your_tools/parsers/file/burp_api.md index 686e781b043..13882b1f1a8 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/burp_api.md +++ b/docs/content/en/connecting_your_tools/parsers/file/burp_api.md @@ -5,4 +5,13 @@ toc_hide: true Import Burp REST API scan data in JSON format (/scan/[task_id] endpoint). ### Sample Scan Data -Sample Burp REST API scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/burp_api). \ No newline at end of file +Sample Burp REST API scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/burp_api). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/burp_dastardly.md b/docs/content/en/connecting_your_tools/parsers/file/burp_dastardly.md index 418ad5f7861..bf0c29f0fa0 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/burp_dastardly.md +++ b/docs/content/en/connecting_your_tools/parsers/file/burp_dastardly.md @@ -8,4 +8,13 @@ DefectDojo parser accepts Burp Dastardly Scans as an XML output. Dastardly is a free, lightweight web application security scanner for your CI/CD pipeline. It is designed specifically for web developers, and checks your application for seven security issues that are likely to interest you during software development. Dastardly is based on the same scanner as Burp Suite (Burp Scanner). ### Sample Scan Data -Sample Burp Dastardly scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/burp_dastardly). \ No newline at end of file +Sample Burp Dastardly scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/burp_dastardly). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/burp_graphql.md b/docs/content/en/connecting_your_tools/parsers/file/burp_graphql.md index 0139eaac612..1f97fa64951 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/burp_graphql.md +++ b/docs/content/en/connecting_your_tools/parsers/file/burp_graphql.md @@ -105,4 +105,13 @@ Example GraphQL query to get issue details: {{< /highlight >}} ### Sample Scan Data -Sample Burp GraphQL scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/burp_graphql). \ No newline at end of file +Sample Burp GraphQL scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/burp_graphql). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/burp_suite_dast.md b/docs/content/en/connecting_your_tools/parsers/file/burp_suite_dast.md index 484f7463a4a..f17f7ef7460 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/burp_suite_dast.md +++ b/docs/content/en/connecting_your_tools/parsers/file/burp_suite_dast.md @@ -105,3 +105,10 @@ Sample Burp Suite DAST Scan scans can be found [here](https://github.com/DefectD ### Link to Tool [Burp Suite DAST](https://portswigger.net/burp/dast) + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- severity +- cwe diff --git a/docs/content/en/connecting_your_tools/parsers/file/cargo_audit.md b/docs/content/en/connecting_your_tools/parsers/file/cargo_audit.md index d56b41200c8..c5070fcc508 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/cargo_audit.md +++ b/docs/content/en/connecting_your_tools/parsers/file/cargo_audit.md @@ -5,4 +5,13 @@ toc_hide: true Import JSON output of cargo-audit scan report ### Sample Scan Data -Sample CargoAudit Scan scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/cargo_audit). \ No newline at end of file +Sample CargoAudit Scan scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/cargo_audit). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- vulnerability ids +- severity +- component name +- component version +- vuln id from tool diff --git a/docs/content/en/connecting_your_tools/parsers/file/checkmarx.md b/docs/content/en/connecting_your_tools/parsers/file/checkmarx.md index 679adf935f9..086bfad0265 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/checkmarx.md +++ b/docs/content/en/connecting_your_tools/parsers/file/checkmarx.md @@ -14,4 +14,11 @@ That will generate three files, two of which are needed for defectdojo. Build th Data for SAST, SCA and KICS are supported. ### Sample Scan Data -Sample Checkmarx scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/checkmarx). \ No newline at end of file +Sample Checkmarx scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/checkmarx). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- cwe +- severity +- file path diff --git a/docs/content/en/connecting_your_tools/parsers/file/checkmarx_cxflow_sast.md b/docs/content/en/connecting_your_tools/parsers/file/checkmarx_cxflow_sast.md index b984b7dd694..8d66b385e53 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/checkmarx_cxflow_sast.md +++ b/docs/content/en/connecting_your_tools/parsers/file/checkmarx_cxflow_sast.md @@ -20,3 +20,10 @@ cx-flow: ### Sample Scan Data Sample Checkmarx CxFlow SAST scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/checkmarx_cxflow_sast). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- vuln id from tool +- file path +- line diff --git a/docs/content/en/connecting_your_tools/parsers/file/checkmarx_one.md b/docs/content/en/connecting_your_tools/parsers/file/checkmarx_one.md index 9012eb576f6..7868d5b2c36 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/checkmarx_one.md +++ b/docs/content/en/connecting_your_tools/parsers/file/checkmarx_one.md @@ -148,3 +148,9 @@ Sample Checkmarx One scans can be found [here](https://github.com/DefectDojo/dja ### Link To Tool - [Checkmarx One](https://checkmarx.com/product/application-security-platform/) - [Checkmarx One Documentation](https://checkmarx.com/resource/documents/en/34965-68516-checkmarx-one-documentation-portal.html) + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- vulnerability ids +- component name diff --git a/docs/content/en/connecting_your_tools/parsers/file/checkov.md b/docs/content/en/connecting_your_tools/parsers/file/checkov.md index 8c45815da14..b1c08715148 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/checkov.md +++ b/docs/content/en/connecting_your_tools/parsers/file/checkov.md @@ -49,4 +49,13 @@ JSON files can be created from the Checkov CLI: https://www.checkov.io/2.Basics/ ~~~ ### Sample Scan Data -Sample Checkov scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/checkov). \ No newline at end of file +Sample Checkov scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/checkov). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/chefinspect.md b/docs/content/en/connecting_your_tools/parsers/file/chefinspect.md index 193dbb17817..a9c6f0a11b4 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/chefinspect.md +++ b/docs/content/en/connecting_your_tools/parsers/file/chefinspect.md @@ -9,3 +9,12 @@ DefectDojo parser accepts Chef Inspect log scan data as a .log or .txt file. ### Sample Scan Data Sample Chef Inspect logs can be found at https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/chefinspect + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/clair.md b/docs/content/en/connecting_your_tools/parsers/file/clair.md index 7c7ac5baefc..7a3164789a6 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/clair.md +++ b/docs/content/en/connecting_your_tools/parsers/file/clair.md @@ -5,4 +5,12 @@ toc_hide: true You can import JSON reports of Docker image vulnerabilities found by a Clair scan or the Clair Klar client. ### Sample Scan Data -Sample Clair Scan scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/clair). \ No newline at end of file +Sample Clair Scan scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/clair). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- vulnerability ids +- description +- severity diff --git a/docs/content/en/connecting_your_tools/parsers/file/cloudsploit.md b/docs/content/en/connecting_your_tools/parsers/file/cloudsploit.md index 8e178efdffa..425330bbb42 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/cloudsploit.md +++ b/docs/content/en/connecting_your_tools/parsers/file/cloudsploit.md @@ -5,4 +5,10 @@ toc_hide: true From: https://github.com/aquasecurity/cloudsploit . Import the JSON output. ### Sample Scan Data -Sample Cloudsploit (AquaSecurity) scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/cloudsploit). \ No newline at end of file +Sample Cloudsploit (AquaSecurity) scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/cloudsploit). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/cobalt.md b/docs/content/en/connecting_your_tools/parsers/file/cobalt.md index c17f0f662a5..aefaaff6b57 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/cobalt.md +++ b/docs/content/en/connecting_your_tools/parsers/file/cobalt.md @@ -5,4 +5,13 @@ toc_hide: true CSV Report ### Sample Scan Data -Sample Cobalt.io Scan scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/cobalt). \ No newline at end of file +Sample Cobalt.io Scan scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/cobalt). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/codechecker.md b/docs/content/en/connecting_your_tools/parsers/file/codechecker.md index 912fdcab269..239cd18900b 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/codechecker.md +++ b/docs/content/en/connecting_your_tools/parsers/file/codechecker.md @@ -21,4 +21,13 @@ CodeChecker analyze ./codechecker.log -o /path/to/codechecker/analyzer/output/di ``` ### Sample Scan Data -Sample Codechecker Report native scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/codechecker). \ No newline at end of file +Sample Codechecker Report native scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/codechecker). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/codeql.md b/docs/content/en/connecting_your_tools/parsers/file/codeql.md index ed26dc1571f..f6844cda3c6 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/codeql.md +++ b/docs/content/en/connecting_your_tools/parsers/file/codeql.md @@ -10,3 +10,12 @@ codeql database analyze db python-security-and-quality.qls --sarif-add-snippets The same can be achieved by running the CodeQL GitHub action with the `add-snippet` property set to true. + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/contrast.md b/docs/content/en/connecting_your_tools/parsers/file/contrast.md index bf667bc7bd0..6a6eb8aa708 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/contrast.md +++ b/docs/content/en/connecting_your_tools/parsers/file/contrast.md @@ -5,4 +5,13 @@ toc_hide: true CSV Report ### Sample Scan Data -Sample Contrast Scanner scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/contrast). \ No newline at end of file +Sample Contrast Scanner scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/contrast). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/coverity_api.md b/docs/content/en/connecting_your_tools/parsers/file/coverity_api.md index 8d72942a292..0a10a6b2906 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/coverity_api.md +++ b/docs/content/en/connecting_your_tools/parsers/file/coverity_api.md @@ -13,4 +13,13 @@ Currently these columns are mandatory: Other supported attributes: `cwe`, `displayFile`, `occurrenceCount` and `firstDetected` ### Sample Scan Data -Sample Coverity API scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/coverity_api). \ No newline at end of file +Sample Coverity API scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/coverity_api). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/coverity_scan.md b/docs/content/en/connecting_your_tools/parsers/file/coverity_scan.md index 63cca6964f6..a914075fd57 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/coverity_scan.md +++ b/docs/content/en/connecting_your_tools/parsers/file/coverity_scan.md @@ -11,4 +11,13 @@ Documentation for CLI can be found [here](https://sig-product-docs.synopsys.com/ Run `coverity scan --project-dir --local --local-format json` to create the JSON report. ### Sample Scan Data -Sample Coverity scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/coverity_scan). \ No newline at end of file +Sample Coverity scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/coverity_scan). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/crashtest_security.md b/docs/content/en/connecting_your_tools/parsers/file/crashtest_security.md index cce1b524cf6..56d56e3beb1 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/crashtest_security.md +++ b/docs/content/en/connecting_your_tools/parsers/file/crashtest_security.md @@ -5,4 +5,13 @@ toc_hide: true Import JSON Report Import XML Report in JUnit Format ### Sample Scan Data -Sample Crashtest Security scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/crashtest_security). \ No newline at end of file +Sample Crashtest Security scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/crashtest_security). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/cred_scan.md b/docs/content/en/connecting_your_tools/parsers/file/cred_scan.md index 7a52a74b141..5ad1e67edbc 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/cred_scan.md +++ b/docs/content/en/connecting_your_tools/parsers/file/cred_scan.md @@ -5,4 +5,13 @@ toc_hide: true Import CSV credential scanner reports ### Sample Scan Data -Sample CredScan Report scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/cred_scan). \ No newline at end of file +Sample CredScan Report scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/cred_scan). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/crunch42.md b/docs/content/en/connecting_your_tools/parsers/file/crunch42.md index e8aa1b1e556..9647d3f9f6b 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/crunch42.md +++ b/docs/content/en/connecting_your_tools/parsers/file/crunch42.md @@ -5,4 +5,13 @@ toc_hide: true Import JSON findings from Crunch42 vulnerability scan tool. ### Sample Scan Data -Sample Crunch42 Scan scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/crunch42). \ No newline at end of file +Sample Crunch42 Scan scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/crunch42). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/cyberwatch_galeax.md b/docs/content/en/connecting_your_tools/parsers/file/cyberwatch_galeax.md index f664459a4ec..c6e22181a24 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/cyberwatch_galeax.md +++ b/docs/content/en/connecting_your_tools/parsers/file/cyberwatch_galeax.md @@ -11,4 +11,11 @@ The JSON file should include the following keys: For each CVE and security issue found in the JSON input, the parser creates a corresponding finding in DefectDojo. ### Sample Scan Data -Sample Cybwerwatch Galeax Scan scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/cyberwatch). \ No newline at end of file +Sample Cybwerwatch Galeax Scan scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/cyberwatch). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- description +- severity diff --git a/docs/content/en/connecting_your_tools/parsers/file/cyclonedx.md b/docs/content/en/connecting_your_tools/parsers/file/cyclonedx.md index d0d6a4e61a2..fc36aad7a95 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/cyclonedx.md +++ b/docs/content/en/connecting_your_tools/parsers/file/cyclonedx.md @@ -28,4 +28,11 @@ cyclonedx-py {{< /highlight >}} ### Sample Scan Data -Sample CycloneDX scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/cyclonedx). \ No newline at end of file +Sample CycloneDX scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/cyclonedx). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- vuln id from tool +- component name +- component version diff --git a/docs/content/en/connecting_your_tools/parsers/file/dawnscanner.md b/docs/content/en/connecting_your_tools/parsers/file/dawnscanner.md index bc3682cf9a8..96b1d8dce82 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/dawnscanner.md +++ b/docs/content/en/connecting_your_tools/parsers/file/dawnscanner.md @@ -5,4 +5,13 @@ toc_hide: true Import report in JSON generated with -j option ### Sample Scan Data -Sample DawnScanner scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/dawnscanner). \ No newline at end of file +Sample DawnScanner scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/dawnscanner). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/deepfence_threatmapper.md b/docs/content/en/connecting_your_tools/parsers/file/deepfence_threatmapper.md index 84044fb72b4..362c8dc92e5 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/deepfence_threatmapper.md +++ b/docs/content/en/connecting_your_tools/parsers/file/deepfence_threatmapper.md @@ -5,4 +5,11 @@ toc_hide: true Import compliance, malware, secret, vulnerability reports from [Deepfence Threatmapper](https://github.com/deepfence/ThreatMapper) in XLSX file format. ### Sample Scan Data -Sample Threatmapper scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/deepfence_threatmapper). In this link are both .xlsx and .csv listed. They contain the same content, but csv can be read in the Browser, but only xlsx is supported by the parser. \ No newline at end of file +Sample Threatmapper scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/deepfence_threatmapper). In this link are both .xlsx and .csv listed. They contain the same content, but csv can be read in the Browser, but only xlsx is supported by the parser. + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- description +- severity diff --git a/docs/content/en/connecting_your_tools/parsers/file/dependency_check.md b/docs/content/en/connecting_your_tools/parsers/file/dependency_check.md index ddc631a1279..f4f56ce8325 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/dependency_check.md +++ b/docs/content/en/connecting_your_tools/parsers/file/dependency_check.md @@ -10,4 +10,11 @@ OWASP Dependency Check output can be imported in Xml format. This parser ingests * Related vulnerable dependencies are tagged with `related` tag. ### Sample Scan Data -Sample Dependency Check scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/dependency_check). \ No newline at end of file +Sample Dependency Check scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/dependency_check). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- file path diff --git a/docs/content/en/connecting_your_tools/parsers/file/dependency_track.md b/docs/content/en/connecting_your_tools/parsers/file/dependency_track.md index 147d0afe4b5..908458899d8 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/dependency_track.md +++ b/docs/content/en/connecting_your_tools/parsers/file/dependency_track.md @@ -11,4 +11,11 @@ imported in JSON format. See here for more info on this JSON format: ### Sample Scan Data -Sample Dependency Track scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/dependency_track). \ No newline at end of file +Sample Dependency Track scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/dependency_track). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- component name +- component version +- vulnerability ids diff --git a/docs/content/en/connecting_your_tools/parsers/file/detect_secrets.md b/docs/content/en/connecting_your_tools/parsers/file/detect_secrets.md index b9a54199389..871cc02cef5 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/detect_secrets.md +++ b/docs/content/en/connecting_your_tools/parsers/file/detect_secrets.md @@ -5,4 +5,13 @@ toc_hide: true Import of JSON report from ### Sample Scan Data -Sample Detect-secrets scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/detect_secrets). \ No newline at end of file +Sample Detect-secrets scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/detect_secrets). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/dockerbench.md b/docs/content/en/connecting_your_tools/parsers/file/dockerbench.md index f4f2840fa75..c192a179e0c 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/dockerbench.md +++ b/docs/content/en/connecting_your_tools/parsers/file/dockerbench.md @@ -6,4 +6,13 @@ Import JSON reports of OWASP [docker-bench-security](https://github.com/docker/d docker-bench-security is a script that make tests based on [CIS Docker Benchmark](https://www.cisecurity.org/benchmark/docker/). ### Sample Scan Data -Sample docker-bench-security Scanner scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/dockerbench). \ No newline at end of file +Sample docker-bench-security Scanner scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/dockerbench). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/dockle.md b/docs/content/en/connecting_your_tools/parsers/file/dockle.md index b3944b174da..a02f8e4b601 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/dockle.md +++ b/docs/content/en/connecting_your_tools/parsers/file/dockle.md @@ -6,4 +6,11 @@ Import JSON container image linter reports ### Sample Scan Data -Sample Dockle Report scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/dockle). \ No newline at end of file +Sample Dockle Report scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/dockle). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- description +- vuln id from tool diff --git a/docs/content/en/connecting_your_tools/parsers/file/drheader.md b/docs/content/en/connecting_your_tools/parsers/file/drheader.md index 26789703c9f..42a52cc0cea 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/drheader.md +++ b/docs/content/en/connecting_your_tools/parsers/file/drheader.md @@ -6,4 +6,10 @@ Import of JSON report from ### Sample Scan Data -Sample DrHeader scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/drheader). \ No newline at end of file +Sample DrHeader scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/drheader). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/dsop.md b/docs/content/en/connecting_your_tools/parsers/file/dsop.md index cbee05be1b1..1e7a0f3e5ac 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/dsop.md +++ b/docs/content/en/connecting_your_tools/parsers/file/dsop.md @@ -5,4 +5,9 @@ toc_hide: true Import XLSX findings from DSOP vulnerability scan pipelines. ### Sample Scan Data -Sample DSOP Scan scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/dsop). \ No newline at end of file +Sample DSOP Scan scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/dsop). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- vulnerability ids diff --git a/docs/content/en/connecting_your_tools/parsers/file/edgescan.md b/docs/content/en/connecting_your_tools/parsers/file/edgescan.md index dccd42fef99..9391dcaa9b1 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/edgescan.md +++ b/docs/content/en/connecting_your_tools/parsers/file/edgescan.md @@ -4,3 +4,12 @@ toc_hide: true --- Import Edgescan vulnerabilities by JSON file or [API - no file required](../../api/edgescan) + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/eslint.md b/docs/content/en/connecting_your_tools/parsers/file/eslint.md index 8bf3dbcafa0..8b6410b3754 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/eslint.md +++ b/docs/content/en/connecting_your_tools/parsers/file/eslint.md @@ -5,4 +5,13 @@ toc_hide: true ESLint Json report format (-f json) ### Sample Scan Data -Sample ESLint scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/eslint). \ No newline at end of file +Sample ESLint scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/eslint). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/fortify.md b/docs/content/en/connecting_your_tools/parsers/file/fortify.md index ec4bd4da241..9fede87689d 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/fortify.md +++ b/docs/content/en/connecting_your_tools/parsers/file/fortify.md @@ -25,4 +25,13 @@ Once this is complete, you can run the following command on your .fpr file to ge required XML: ```bash ./path/to/ReportGenerator -format xml -f /path/to/output.xml -source /path/to/downloaded/artifact.fpr -template DefaultReportDefinitionAllIssues.xml -``` \ No newline at end of file +``` + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/gcloud_artifact_scan.md b/docs/content/en/connecting_your_tools/parsers/file/gcloud_artifact_scan.md index cb752af29c5..dc1ead4ef53 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/gcloud_artifact_scan.md +++ b/docs/content/en/connecting_your_tools/parsers/file/gcloud_artifact_scan.md @@ -9,4 +9,13 @@ Once a scan is completed, results can be pulled via API/gcloud https://cloud.goo DefectDojo parser accepts Google Cloud Artifact Vulnerability Scan data as a .json file. ### Sample Scan Data -Sample reports can be found at https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/gcloud_artifact_scan \ No newline at end of file +Sample reports can be found at https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/gcloud_artifact_scan + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/generic.md b/docs/content/en/connecting_your_tools/parsers/file/generic.md index 6a4de5e1782..8952e83858b 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/generic.md +++ b/docs/content/en/connecting_your_tools/parsers/file/generic.md @@ -144,4 +144,13 @@ Example: ``` ### Sample Scan Data -Sample Generic Findings Import scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/generic). \ No newline at end of file +Sample Generic Findings Import scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/generic). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/ggshield.md b/docs/content/en/connecting_your_tools/parsers/file/ggshield.md index 4f106162e5e..08ff52a323f 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/ggshield.md +++ b/docs/content/en/connecting_your_tools/parsers/file/ggshield.md @@ -5,4 +5,13 @@ toc_hide: true Import [Ggshield](https://github.com/GitGuardian/ggshield) findings in JSON format. ### Sample Scan Data -Sample Ggshield scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/ggshield). \ No newline at end of file +Sample Ggshield scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/ggshield). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/github_vulnerability.md b/docs/content/en/connecting_your_tools/parsers/file/github_vulnerability.md index 8e4f3a8222e..71350815e95 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/github_vulnerability.md +++ b/docs/content/en/connecting_your_tools/parsers/file/github_vulnerability.md @@ -211,4 +211,13 @@ def get_dependabot_alerts_repository(repo, owner): ``` ### Sample Scan Data -Sample Github Vulnerability scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/github_vulnerability). \ No newline at end of file +Sample Github Vulnerability scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/github_vulnerability). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- severity +- component name +- vulnerability ids +- file path diff --git a/docs/content/en/connecting_your_tools/parsers/file/gitlab_api_fuzzing.md b/docs/content/en/connecting_your_tools/parsers/file/gitlab_api_fuzzing.md index 9ef8535dace..7a4803138f8 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/gitlab_api_fuzzing.md +++ b/docs/content/en/connecting_your_tools/parsers/file/gitlab_api_fuzzing.md @@ -5,4 +5,13 @@ toc_hide: true GitLab API Fuzzing Report report file can be imported in JSON format (option --json) ### Sample Scan Data -Sample GitLab API Fuzzing Report Scan scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/gitlab_api_fuzzing). \ No newline at end of file +Sample GitLab API Fuzzing Report Scan scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/gitlab_api_fuzzing). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/gitlab_container_scan.md b/docs/content/en/connecting_your_tools/parsers/file/gitlab_container_scan.md index 5ff26c7573a..df8be563f3c 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/gitlab_container_scan.md +++ b/docs/content/en/connecting_your_tools/parsers/file/gitlab_container_scan.md @@ -5,4 +5,13 @@ toc_hide: true GitLab Container Scan report file can be imported in JSON format (option --json) ### Sample Scan Data -Sample GitLab Container Scan scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/gitlab_container_scan). \ No newline at end of file +Sample GitLab Container Scan scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/gitlab_container_scan). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/gitlab_dast.md b/docs/content/en/connecting_your_tools/parsers/file/gitlab_dast.md index b3abcfcc8a4..e28b69abc49 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/gitlab_dast.md +++ b/docs/content/en/connecting_your_tools/parsers/file/gitlab_dast.md @@ -5,4 +5,13 @@ toc_hide: true GitLab DAST Report in JSON format (option --json) ### Sample Scan Data -Sample GitLab DAST Report scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/gitlab_dast). \ No newline at end of file +Sample GitLab DAST Report scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/gitlab_dast). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/gitlab_dep_scan.md b/docs/content/en/connecting_your_tools/parsers/file/gitlab_dep_scan.md index bb5e9bfe30b..e490565d2f2 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/gitlab_dep_scan.md +++ b/docs/content/en/connecting_your_tools/parsers/file/gitlab_dep_scan.md @@ -5,4 +5,13 @@ toc_hide: true Import Dependency Scanning Report vulnerabilities in JSON format: https://docs.gitlab.com/ee/user/application_security/dependency_scanning/#reports-json-format ### Sample Scan Data -Sample GitLab Dependency Scanning Report scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/gitlab_dep_scan). \ No newline at end of file +Sample GitLab Dependency Scanning Report scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/gitlab_dep_scan). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- vulnerability ids +- file path +- component name +- component version diff --git a/docs/content/en/connecting_your_tools/parsers/file/gitlab_sast.md b/docs/content/en/connecting_your_tools/parsers/file/gitlab_sast.md index e592da480a4..8d618be57b2 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/gitlab_sast.md +++ b/docs/content/en/connecting_your_tools/parsers/file/gitlab_sast.md @@ -5,4 +5,13 @@ toc_hide: true Import SAST Report vulnerabilities in JSON format: https://docs.gitlab.com/ee/user/application_security/sast/#reports-json-format ### Sample Scan Data -Sample GitLab SAST Report scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/gitlab_sast). \ No newline at end of file +Sample GitLab SAST Report scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/gitlab_sast). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/gitlab_secret_detection_report.md b/docs/content/en/connecting_your_tools/parsers/file/gitlab_secret_detection_report.md index f3a0d2dc99a..9f0fab9d42c 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/gitlab_secret_detection_report.md +++ b/docs/content/en/connecting_your_tools/parsers/file/gitlab_secret_detection_report.md @@ -5,4 +5,13 @@ toc_hide: true GitLab Secret Detection Report file can be imported in JSON format (option --json). ### Sample Scan Data -Sample GitLab Secret Detection Report scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/gitlab_secret_detection_report). \ No newline at end of file +Sample GitLab Secret Detection Report scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/gitlab_secret_detection_report). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/gitleaks.md b/docs/content/en/connecting_your_tools/parsers/file/gitleaks.md index 00b067e4677..daf9958b84e 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/gitleaks.md +++ b/docs/content/en/connecting_your_tools/parsers/file/gitleaks.md @@ -5,4 +5,13 @@ toc_hide: true Import Gitleaks findings in JSON format. ### Sample Scan Data -Sample Gitleaks scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/gitleaks). \ No newline at end of file +Sample Gitleaks scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/gitleaks). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/gosec.md b/docs/content/en/connecting_your_tools/parsers/file/gosec.md index fbe5bcbf2e2..2ad6a90cae4 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/gosec.md +++ b/docs/content/en/connecting_your_tools/parsers/file/gosec.md @@ -5,4 +5,13 @@ toc_hide: true Import Gosec Scanner findings in JSON format. ### Sample Scan Data -Sample Gosec Scanner scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/gosec). \ No newline at end of file +Sample Gosec Scanner scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/gosec). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/govulncheck.md b/docs/content/en/connecting_your_tools/parsers/file/govulncheck.md index 8637fc2a429..b4aeb9b3dff 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/govulncheck.md +++ b/docs/content/en/connecting_your_tools/parsers/file/govulncheck.md @@ -5,4 +5,13 @@ toc_hide: true JSON vulnerability report generated by govulncheck tool, using a command like `govulncheck -json . >> report.json` ### Sample Scan Data -Sample Govulncheck scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/govulncheck). \ No newline at end of file +Sample Govulncheck scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/govulncheck). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/h1.md b/docs/content/en/connecting_your_tools/parsers/file/h1.md index 1b4628c1658..0e255825acc 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/h1.md +++ b/docs/content/en/connecting_your_tools/parsers/file/h1.md @@ -5,4 +5,10 @@ toc_hide: true Import HackerOne cases findings in JSON format (vulnerability disclosure parser) or Bug Bounties in JSON or CSV format (bug bounty parser) ### Sample Scan Data -Sample HackerOne Cases scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/h1). \ No newline at end of file +Sample HackerOne Cases scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/h1). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- severity diff --git a/docs/content/en/connecting_your_tools/parsers/file/hadolint.md b/docs/content/en/connecting_your_tools/parsers/file/hadolint.md index ccc60f7b637..9de0f020e8a 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/hadolint.md +++ b/docs/content/en/connecting_your_tools/parsers/file/hadolint.md @@ -5,4 +5,13 @@ toc_hide: true Hadolint Dockerfile scan in json format. ### Sample Scan Data -Sample Hadolint scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/hadolint). \ No newline at end of file +Sample Hadolint scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/hadolint). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/harbor_vulnerability.md b/docs/content/en/connecting_your_tools/parsers/file/harbor_vulnerability.md index 33878003bd0..97ed0272b3b 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/harbor_vulnerability.md +++ b/docs/content/en/connecting_your_tools/parsers/file/harbor_vulnerability.md @@ -6,4 +6,13 @@ Import findings from Harbor registry container scan: ### Sample Scan Data -Sample Harbor Vulnerability scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/harbor_vulnerability). \ No newline at end of file +Sample Harbor Vulnerability scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/harbor_vulnerability). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/hcl_appscan.md b/docs/content/en/connecting_your_tools/parsers/file/hcl_appscan.md index 2a837039553..234f0a7ef3a 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/hcl_appscan.md +++ b/docs/content/en/connecting_your_tools/parsers/file/hcl_appscan.md @@ -5,4 +5,10 @@ toc_hide: true The HCL Appscan has the possibility to export the results in PDF, XML and CSV formats within the portal. However, this parser only supports the import of XML generated from HCL Appscan on cloud. ### Sample Scan Data -Sample HCL Appscan scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/hcl_appscan). \ No newline at end of file +Sample HCL Appscan scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/hcl_appscan). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/hcl_asoc_sast.md b/docs/content/en/connecting_your_tools/parsers/file/hcl_asoc_sast.md index da86383ee37..795e479feb4 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/hcl_asoc_sast.md +++ b/docs/content/en/connecting_your_tools/parsers/file/hcl_asoc_sast.md @@ -6,3 +6,11 @@ HCL Appscan on Cloud can export the results in PDF, XML and CSV formats but this ### Sample Scan Data Sample HCL AppScan on Cloud SAST scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/hcl_asoc_sast). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- file path +- line +- severity diff --git a/docs/content/en/connecting_your_tools/parsers/file/horusec.md b/docs/content/en/connecting_your_tools/parsers/file/horusec.md index b347bef33e0..06a71880b57 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/horusec.md +++ b/docs/content/en/connecting_your_tools/parsers/file/horusec.md @@ -12,4 +12,12 @@ References: * [GitHub repository](https://github.com/ZupIT/horusec) ### Sample Scan Data -Sample Horusec scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/horusec). \ No newline at end of file +Sample Horusec scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/horusec). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- description +- file path +- line diff --git a/docs/content/en/connecting_your_tools/parsers/file/humble.md b/docs/content/en/connecting_your_tools/parsers/file/humble.md index e2e4faaec80..cba72702a2e 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/humble.md +++ b/docs/content/en/connecting_your_tools/parsers/file/humble.md @@ -6,4 +6,9 @@ Import JSON report of the Humble scanner ### Sample Scan Data -Sample Humble Report scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/humble). \ No newline at end of file +Sample Humble Report scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/humble). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title diff --git a/docs/content/en/connecting_your_tools/parsers/file/huskyci.md b/docs/content/en/connecting_your_tools/parsers/file/huskyci.md index 660e00505b4..fb774a0ab41 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/huskyci.md +++ b/docs/content/en/connecting_your_tools/parsers/file/huskyci.md @@ -6,4 +6,13 @@ Import JSON reports from [HuskyCI]() ### Sample Scan Data -Sample HuskyCI Report scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/huskyci). \ No newline at end of file +Sample HuskyCI Report scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/huskyci). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/hydra.md b/docs/content/en/connecting_your_tools/parsers/file/hydra.md index abd5a644d89..26290d300d6 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/hydra.md +++ b/docs/content/en/connecting_your_tools/parsers/file/hydra.md @@ -40,4 +40,10 @@ Sample JSON report: ``` ### Sample Scan Data -Sample Hydra scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/hydra). \ No newline at end of file +Sample Hydra scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/hydra). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/ibm_app.md b/docs/content/en/connecting_your_tools/parsers/file/ibm_app.md index 71ffd51815a..853e3770404 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/ibm_app.md +++ b/docs/content/en/connecting_your_tools/parsers/file/ibm_app.md @@ -5,4 +5,13 @@ toc_hide: true XML file from IBM App Scanner. ### Sample Scan Data -Sample IBM AppScan DAST scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/ibm_app). \ No newline at end of file +Sample IBM AppScan DAST scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/ibm_app). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/immuniweb.md b/docs/content/en/connecting_your_tools/parsers/file/immuniweb.md index 40f3c893967..9dbfec3b3eb 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/immuniweb.md +++ b/docs/content/en/connecting_your_tools/parsers/file/immuniweb.md @@ -5,4 +5,13 @@ toc_hide: true XML or JSON Scan Result File from [Immuniweb Scan](https://www.immuniweb.com/). ### Sample Scan Data -Sample Immuniweb Scan scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/immuniweb). \ No newline at end of file +Sample Immuniweb Scan scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/immuniweb). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/intsights.md b/docs/content/en/connecting_your_tools/parsers/file/intsights.md index 64b6e58860e..a31ff0ce916 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/intsights.md +++ b/docs/content/en/connecting_your_tools/parsers/file/intsights.md @@ -62,4 +62,13 @@ Example: } ### Sample Scan Data -Sample IntSights Report scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/intsights). \ No newline at end of file +Sample IntSights Report scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/intsights). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/invicti.md b/docs/content/en/connecting_your_tools/parsers/file/invicti.md index c0ffda1a48e..2527847606f 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/invicti.md +++ b/docs/content/en/connecting_your_tools/parsers/file/invicti.md @@ -7,3 +7,10 @@ Vulnerabilities List - JSON report ### Sample Scan Data Sample Invicti scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/invicti). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- description +- severity diff --git a/docs/content/en/connecting_your_tools/parsers/file/jfrog_xray_api_summary_artifact.md b/docs/content/en/connecting_your_tools/parsers/file/jfrog_xray_api_summary_artifact.md index e99f5f4da61..75452a0421c 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/jfrog_xray_api_summary_artifact.md +++ b/docs/content/en/connecting_your_tools/parsers/file/jfrog_xray_api_summary_artifact.md @@ -10,4 +10,13 @@ Accepts a JSON File, generated from the JFrog Artifact Summary API Call. Sample JFrog Xray API Summary Artifact Scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/jfrog_xray_api_summary_artifact). ### Link To Tool -See JFrog Documentation: https://jfrog.com/help/r/jfrog-rest-apis/summary \ No newline at end of file +See JFrog Documentation: https://jfrog.com/help/r/jfrog-rest-apis/summary + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/jfrog_xray_on_demand_binary_scan.md b/docs/content/en/connecting_your_tools/parsers/file/jfrog_xray_on_demand_binary_scan.md index 438bf065a39..c324e5d4069 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/jfrog_xray_on_demand_binary_scan.md +++ b/docs/content/en/connecting_your_tools/parsers/file/jfrog_xray_on_demand_binary_scan.md @@ -9,4 +9,11 @@ JFrog file documentation: https://jfrog.com/help/r/jfrog-cli/on-demand-binary-scan ### Sample Scan Data -Sample JFrog Xray On Demand Binary Scan scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/jfrog_xray_on_demand_binary_scan). \ No newline at end of file +Sample JFrog Xray On Demand Binary Scan scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/jfrog_xray_on_demand_binary_scan). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- component name +- component version diff --git a/docs/content/en/connecting_your_tools/parsers/file/jfrog_xray_unified.md b/docs/content/en/connecting_your_tools/parsers/file/jfrog_xray_unified.md index b8b55db0e79..f8301db839a 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/jfrog_xray_unified.md +++ b/docs/content/en/connecting_your_tools/parsers/file/jfrog_xray_unified.md @@ -5,4 +5,12 @@ toc_hide: true Import the JSON format for the \"Security & Compliance | Reports\" export. Jfrog's Xray tool is an add-on to their Artifactory repository that does Software Composition Analysis, see https://www.jfrog.com/confluence/display/JFROG/JFrog+Xray for more information. \"Xray Unified\" refers to Xray Version 3.0 and later. ### Sample Scan Data -Sample JFrog XRay Unified scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/jfrog_xray_unified). \ No newline at end of file +Sample JFrog XRay Unified scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/jfrog_xray_unified). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- vulnerability ids +- file path +- component name +- component version diff --git a/docs/content/en/connecting_your_tools/parsers/file/jfrogxray.md b/docs/content/en/connecting_your_tools/parsers/file/jfrogxray.md index c3cb126fa20..c97181ac58d 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/jfrogxray.md +++ b/docs/content/en/connecting_your_tools/parsers/file/jfrogxray.md @@ -5,4 +5,12 @@ toc_hide: true Import the JSON format for the \"Security Export\" file. Use this importer for Xray version 2.X ### Sample Scan Data -Sample JFrogXRay scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/jfrogxray). \ No newline at end of file +Sample JFrogXRay scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/jfrogxray). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- description +- component name +- component version diff --git a/docs/content/en/connecting_your_tools/parsers/file/kics.md b/docs/content/en/connecting_your_tools/parsers/file/kics.md index 370421cce84..18f5a5eecad 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/kics.md +++ b/docs/content/en/connecting_your_tools/parsers/file/kics.md @@ -5,4 +5,13 @@ toc_hide: true Import of JSON report from ### Sample Scan Data -Sample KICS Scanner scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/kics). \ No newline at end of file +Sample KICS Scanner scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/kics). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- file path +- line +- severity +- description +- title diff --git a/docs/content/en/connecting_your_tools/parsers/file/kiuwan.md b/docs/content/en/connecting_your_tools/parsers/file/kiuwan.md index af7ade87da2..b45544fc1ad 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/kiuwan.md +++ b/docs/content/en/connecting_your_tools/parsers/file/kiuwan.md @@ -6,3 +6,12 @@ Import Kiuwan SAST Scan in CSV format. Export as CSV Results on Kiuwan, or via t ### Sample Scan Data Sample Kiuwan Scanner scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/kiuwan). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- description +- severity +- component name +- component version +- cwe diff --git a/docs/content/en/connecting_your_tools/parsers/file/kiuwan_sca.md b/docs/content/en/connecting_your_tools/parsers/file/kiuwan_sca.md index 08709ad134d..1e1d6874718 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/kiuwan_sca.md +++ b/docs/content/en/connecting_your_tools/parsers/file/kiuwan_sca.md @@ -24,3 +24,12 @@ saveFile("result.json", json.dumps(data, indent=2)) ### Sample Scan Data Sample Kiuwan Scanner scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/kiuwan_sca). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/krakend_audit.md b/docs/content/en/connecting_your_tools/parsers/file/krakend_audit.md index 9598ce343b8..130794e84fa 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/krakend_audit.md +++ b/docs/content/en/connecting_your_tools/parsers/file/krakend_audit.md @@ -8,4 +8,11 @@ krakend audit -c krakend.json -f "{{ marshal . }}" >> recommendations.json ``` ### Sample Scan Data -Sample KrakenD Audit scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/krakend_audit). \ No newline at end of file +Sample KrakenD Audit scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/krakend_audit). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- description +- mitigation +- severity diff --git a/docs/content/en/connecting_your_tools/parsers/file/kubeaudit.md b/docs/content/en/connecting_your_tools/parsers/file/kubeaudit.md index cefffcbc4a9..d0e0f4a0626 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/kubeaudit.md +++ b/docs/content/en/connecting_your_tools/parsers/file/kubeaudit.md @@ -5,4 +5,13 @@ toc_hide: true Kubeaudit is a command line tool and a Go package to audit Kubernetes clusters for various different security concerns. The output of of Kubeaudit which is supported within this parser is JSON. The tool can be found [here](https://github.com/Shopify/kubeaudit) ### Sample Scan Data -Sample Kubeaudit scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/kubeaudit). \ No newline at end of file +Sample Kubeaudit scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/kubeaudit). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/kubebench.md b/docs/content/en/connecting_your_tools/parsers/file/kubebench.md index 89e1e3c3a6b..57054a2850c 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/kubebench.md +++ b/docs/content/en/connecting_your_tools/parsers/file/kubebench.md @@ -5,4 +5,11 @@ toc_hide: true Import JSON reports of Kubernetes CIS benchmark scans. ### Sample Scan Data -Sample kube-bench Scanner scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/kubebench). \ No newline at end of file +Sample kube-bench Scanner scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/kubebench). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- vuln id from tool +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/kubehunter.md b/docs/content/en/connecting_your_tools/parsers/file/kubehunter.md index 08f932d5f86..926596a27dd 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/kubehunter.md +++ b/docs/content/en/connecting_your_tools/parsers/file/kubehunter.md @@ -5,4 +5,10 @@ toc_hide: true Import JSON reports of kube-hunter scans. Use "kube-hunter --report json" to produce the report in json format. ### Sample Scan Data -Sample kubeHunter Scanner scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/kubehunter). \ No newline at end of file +Sample kubeHunter Scanner scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/kubehunter). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/kubescape.md b/docs/content/en/connecting_your_tools/parsers/file/kubescape.md index fefb7cd476d..41e44279e34 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/kubescape.md +++ b/docs/content/en/connecting_your_tools/parsers/file/kubescape.md @@ -7,4 +7,10 @@ Kubescape is a K8s open-source tool providing a Kubernetes single pane of glass, The parser supports json output files ### Sample Scan Data -Sample Kubescape scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/kubescape). \ No newline at end of file +Sample Kubescape scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/kubescape). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- component name diff --git a/docs/content/en/connecting_your_tools/parsers/file/legitify.md b/docs/content/en/connecting_your_tools/parsers/file/legitify.md index bb9b2970aee..e9eaa111c9f 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/legitify.md +++ b/docs/content/en/connecting_your_tools/parsers/file/legitify.md @@ -6,4 +6,11 @@ toc_hide: true This DefectDojo parser accepts JSON files (in flattened format) from Legitify. For further details regarding the results, please consult the relevant [documentation](https://github.com/Legit-Labs/legitify?tab=readme-ov-file#output-options). ### Sample Scan Data -Sample scan data for testing purposes can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/legitify). \ No newline at end of file +Sample scan data for testing purposes can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/legitify). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- endpoints +- severity diff --git a/docs/content/en/connecting_your_tools/parsers/file/mend.md b/docs/content/en/connecting_your_tools/parsers/file/mend.md index 2ec28770586..a2706f7fbd5 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/mend.md +++ b/docs/content/en/connecting_your_tools/parsers/file/mend.md @@ -13,3 +13,10 @@ Unit tests for Mend JSON files can be found at https://github.com/DefectDojo/dja See documentation: https://docs.mend.io/bundle/unified_agent/page/example_of_a_unified_agent_json_report.html *Formerly known as Whitesource.* + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- severity +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/meterian.md b/docs/content/en/connecting_your_tools/parsers/file/meterian.md index bf2d3bea8bc..852e71a286b 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/meterian.md +++ b/docs/content/en/connecting_your_tools/parsers/file/meterian.md @@ -5,4 +5,13 @@ toc_hide: true The Meterian JSON report output file can be imported. ### Sample Scan Data -Sample Meterian Scanner scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/meterian). \ No newline at end of file +Sample Meterian Scanner scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/meterian). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- cwe +- component name +- component version +- description +- severity diff --git a/docs/content/en/connecting_your_tools/parsers/file/microfocus_webinspect.md b/docs/content/en/connecting_your_tools/parsers/file/microfocus_webinspect.md index e087e4267e8..faa515c5d84 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/microfocus_webinspect.md +++ b/docs/content/en/connecting_your_tools/parsers/file/microfocus_webinspect.md @@ -5,4 +5,13 @@ toc_hide: true Import XML report ### Sample Scan Data -Sample Microfocus Webinspect Scanner scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/microfocus_webinspect). \ No newline at end of file +Sample Microfocus Webinspect Scanner scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/microfocus_webinspect). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/mobsf.md b/docs/content/en/connecting_your_tools/parsers/file/mobsf.md index 44985929fdb..7bbbf564a0c 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/mobsf.md +++ b/docs/content/en/connecting_your_tools/parsers/file/mobsf.md @@ -5,4 +5,11 @@ toc_hide: true Export a JSON file using the API, api/v1/report\_json. ### Sample Scan Data -Sample MobSF Scanner scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/mobsf). \ No newline at end of file +Sample MobSF Scanner scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/mobsf). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- description +- severity diff --git a/docs/content/en/connecting_your_tools/parsers/file/mobsf_scorecard.md b/docs/content/en/connecting_your_tools/parsers/file/mobsf_scorecard.md index 947228d9402..0878c58b7b7 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/mobsf_scorecard.md +++ b/docs/content/en/connecting_your_tools/parsers/file/mobsf_scorecard.md @@ -5,4 +5,11 @@ toc_hide: true Export a JSON file using the API, api/v1/report_json. ### Sample Scan Data -Sample MobSF Scorecard Scanner scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/mobsf_scorecard). \ No newline at end of file +Sample MobSF Scorecard Scanner scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/mobsf_scorecard). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- description +- severity diff --git a/docs/content/en/connecting_your_tools/parsers/file/mobsfscan.md b/docs/content/en/connecting_your_tools/parsers/file/mobsfscan.md index 7209f80b403..2c39d114287 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/mobsfscan.md +++ b/docs/content/en/connecting_your_tools/parsers/file/mobsfscan.md @@ -5,4 +5,13 @@ toc_hide: true Import JSON report from ### Sample Scan Data -Sample Mobsfscan scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/mobsfscan). \ No newline at end of file +Sample Mobsfscan scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/mobsfscan). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- severity +- cwe +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/mozilla_observatory.md b/docs/content/en/connecting_your_tools/parsers/file/mozilla_observatory.md index 3d1150821d3..f82b43524ad 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/mozilla_observatory.md +++ b/docs/content/en/connecting_your_tools/parsers/file/mozilla_observatory.md @@ -5,4 +5,13 @@ toc_hide: true Import JSON report. ### Sample Scan Data -Sample Mozilla Observatory Scanner scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/mozilla_observatory). \ No newline at end of file +Sample Mozilla Observatory Scanner scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/mozilla_observatory). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/ms_defender.md b/docs/content/en/connecting_your_tools/parsers/file/ms_defender.md index 7e9f65373ea..acf087f5245 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/ms_defender.md +++ b/docs/content/en/connecting_your_tools/parsers/file/ms_defender.md @@ -8,4 +8,10 @@ This parser helps to parse Microsoft Defender Findings and supports two types of
However, if you have a fast changing environment with a huge number of vulnerabilities and endpoints, it is recommended to leave the folder machines/ empty. Then, for stability reasons the machine info is skipped and only the machineID is added to the finding. ### Sample Scan Data -Sample MS Defender Parser scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/ms_defender). \ No newline at end of file +Sample MS Defender Parser scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/ms_defender). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/nancy.md b/docs/content/en/connecting_your_tools/parsers/file/nancy.md index 55376df5392..5a41f75abaf 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/nancy.md +++ b/docs/content/en/connecting_your_tools/parsers/file/nancy.md @@ -17,3 +17,9 @@ Sample Nancy scans can be found [here](https://github.com/DefectDojo/django-Defe ### Link To Tool See Nancy on GitHub: https://github.com/sonatype-nexus-community/nancy + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- vuln id from tool diff --git a/docs/content/en/connecting_your_tools/parsers/file/netsparker.md b/docs/content/en/connecting_your_tools/parsers/file/netsparker.md index 09aebb72487..2e6a6e4e0d6 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/netsparker.md +++ b/docs/content/en/connecting_your_tools/parsers/file/netsparker.md @@ -9,4 +9,13 @@ Vulnerabilities List - JSON report ### Sample Scan Data -Sample Netsparker scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/netsparker). \ No newline at end of file +Sample Netsparker scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/netsparker). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/neuvector.md b/docs/content/en/connecting_your_tools/parsers/file/neuvector.md index 5acf03267a2..19f874a0c88 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/neuvector.md +++ b/docs/content/en/connecting_your_tools/parsers/file/neuvector.md @@ -5,4 +5,12 @@ toc_hide: true Imports compliance scans returned by REST API. ### Sample Scan Data -Sample NeuVector (compliance) scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/neuvector). \ No newline at end of file +Sample NeuVector (compliance) scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/neuvector). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- severity +- component name +- component version diff --git a/docs/content/en/connecting_your_tools/parsers/file/neuvector_compliance.md b/docs/content/en/connecting_your_tools/parsers/file/neuvector_compliance.md index cce614b2f90..be04ef31853 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/neuvector_compliance.md +++ b/docs/content/en/connecting_your_tools/parsers/file/neuvector_compliance.md @@ -5,4 +5,11 @@ toc_hide: true JSON output of /v1/scan/{entity}/{id} endpoint ### Sample Scan Data -Sample NeuVector (REST) scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/neuvector_compliance). \ No newline at end of file +Sample NeuVector (REST) scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/neuvector_compliance). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- vuln id from tool +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/nexpose.md b/docs/content/en/connecting_your_tools/parsers/file/nexpose.md index db8de53d81b..74fcae1abde 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/nexpose.md +++ b/docs/content/en/connecting_your_tools/parsers/file/nexpose.md @@ -108,3 +108,11 @@ Sample Nexpose XML 2.0 (Rapid7) scans can be found in the [unit test example sca ### Link To Tool - [Rapid7 Nexpose](https://www.rapid7.com/products/nexpose/) - [Nexpose Documentation](https://docs.rapid7.com/nexpose/) + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- severity +- vulnerability ids +- cwe diff --git a/docs/content/en/connecting_your_tools/parsers/file/nikto.md b/docs/content/en/connecting_your_tools/parsers/file/nikto.md index 09bcce9c10a..b5cee95475d 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/nikto.md +++ b/docs/content/en/connecting_your_tools/parsers/file/nikto.md @@ -12,4 +12,13 @@ The current parser support 3 sources: See: https://github.com/sullo/nikto ### Sample Scan Data -Sample Nikto scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/nikto). \ No newline at end of file +Sample Nikto scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/nikto). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/nmap.md b/docs/content/en/connecting_your_tools/parsers/file/nmap.md index cada9ad2d3c..7a14e478fa6 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/nmap.md +++ b/docs/content/en/connecting_your_tools/parsers/file/nmap.md @@ -5,4 +5,13 @@ toc_hide: true XML output (use -oX) ### Sample Scan Data -Sample Nmap scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/nmap). \ No newline at end of file +Sample Nmap scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/nmap). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/noseyparker.md b/docs/content/en/connecting_your_tools/parsers/file/noseyparker.md index 69abfb99b00..ac3c9024759 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/noseyparker.md +++ b/docs/content/en/connecting_your_tools/parsers/file/noseyparker.md @@ -28,4 +28,13 @@ The parser only accepts .jsonl reports. Each line of the JSON Lines file from No ### Sample Scan Data -Sample scan data for testing purposes can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/noseyparker). \ No newline at end of file +Sample scan data for testing purposes can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/noseyparker). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/npm_audit.md b/docs/content/en/connecting_your_tools/parsers/file/npm_audit.md index bb157db2833..e14c343a9d0 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/npm_audit.md +++ b/docs/content/en/connecting_your_tools/parsers/file/npm_audit.md @@ -28,3 +28,12 @@ Sample NPM Audit scans can be found [here](https://github.com/DefectDojo/django- ### Link To Tool See NPM-Audit-Report on GitHub: https://github.com/npm/npm-audit-report/ + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- severity +- file path +- vulnerability ids +- cwe diff --git a/docs/content/en/connecting_your_tools/parsers/file/npm_audit_7_plus.md b/docs/content/en/connecting_your_tools/parsers/file/npm_audit_7_plus.md index a4b4a090b08..c1abccfdd01 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/npm_audit_7_plus.md +++ b/docs/content/en/connecting_your_tools/parsers/file/npm_audit_7_plus.md @@ -24,3 +24,11 @@ Sample NPM Audit scans can be found [here](https://github.com/DefectDojo/django- ### Link To Tool See NPM-Audit-Report on GitHub: https://github.com/npm/npm-audit-report/ + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- severity +- cwe +- vuln id from tool diff --git a/docs/content/en/connecting_your_tools/parsers/file/nsp.md b/docs/content/en/connecting_your_tools/parsers/file/nsp.md index 916495ecdf2..e494d35eadc 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/nsp.md +++ b/docs/content/en/connecting_your_tools/parsers/file/nsp.md @@ -5,4 +5,13 @@ toc_hide: true Node Security Platform (NSP) output file can be imported in JSON format. ### Sample Scan Data -Sample Node Security Platform scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/nsp). \ No newline at end of file +Sample Node Security Platform scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/nsp). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/nuclei.md b/docs/content/en/connecting_your_tools/parsers/file/nuclei.md index 3e63a2b9429..94a0fa4480a 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/nuclei.md +++ b/docs/content/en/connecting_your_tools/parsers/file/nuclei.md @@ -5,4 +5,12 @@ toc_hide: true Import JSON output of nuclei scan report ### Sample Scan Data -Sample Nuclei scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/nuclei). \ No newline at end of file +Sample Nuclei scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/nuclei). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- severity +- component name diff --git a/docs/content/en/connecting_your_tools/parsers/file/openscap.md b/docs/content/en/connecting_your_tools/parsers/file/openscap.md index 220f27d66e0..cf4abf932d6 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/openscap.md +++ b/docs/content/en/connecting_your_tools/parsers/file/openscap.md @@ -5,4 +5,13 @@ toc_hide: true Import Openscap Vulnerability Scan in XML formats. ### Sample Scan Data -Sample Openscap Vulnerability Scan scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/openscap). \ No newline at end of file +Sample Openscap Vulnerability Scan scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/openscap). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/openvas.md b/docs/content/en/connecting_your_tools/parsers/file/openvas.md index 73fcbcebc17..b0153900161 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/openvas.md +++ b/docs/content/en/connecting_your_tools/parsers/file/openvas.md @@ -5,4 +5,13 @@ toc_hide: true You can either upload the exported results of an OpenVAS Scan in a .csv or .xml format. ### Sample Scan Data -Sample OpenVAS scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/openvas). \ No newline at end of file +Sample OpenVAS scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/openvas). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/ort.md b/docs/content/en/connecting_your_tools/parsers/file/ort.md index 2aac161efd3..f1ee0ae69c0 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/ort.md +++ b/docs/content/en/connecting_your_tools/parsers/file/ort.md @@ -5,4 +5,13 @@ toc_hide: true Import Outpost24 endpoint vulnerability scan in XML format. ### Sample Scan Data -Sample ORT evaluated model Importer scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/ort). \ No newline at end of file +Sample ORT evaluated model Importer scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/ort). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/ossindex_devaudit.md b/docs/content/en/connecting_your_tools/parsers/file/ossindex_devaudit.md index cb007e5a3e3..664a33327b1 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/ossindex_devaudit.md +++ b/docs/content/en/connecting_your_tools/parsers/file/ossindex_devaudit.md @@ -6,4 +6,13 @@ Import JSON formatted output from \[OSSIndex Devaudit\](). ### Sample Scan Data -Sample OssIndex Devaudit scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/ossindex_devaudit). \ No newline at end of file +Sample OssIndex Devaudit scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/ossindex_devaudit). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/osv_scanner.md b/docs/content/en/connecting_your_tools/parsers/file/osv_scanner.md index d0e90c2b11d..02aaade0bd0 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/osv_scanner.md +++ b/docs/content/en/connecting_your_tools/parsers/file/osv_scanner.md @@ -5,4 +5,11 @@ toc_hide: true Use [OSV-Scanner](https://github.com/google/osv-scanner) to find existing vulnerabilities affecting your project's dependencies. ### Sample Scan Data -Sample OSV Scanner output can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/osv_scanner). \ No newline at end of file +Sample OSV Scanner output can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/osv_scanner). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- description +- severity diff --git a/docs/content/en/connecting_your_tools/parsers/file/outpost24.md b/docs/content/en/connecting_your_tools/parsers/file/outpost24.md index 2c0f974f02e..6f6d6e1bd53 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/outpost24.md +++ b/docs/content/en/connecting_your_tools/parsers/file/outpost24.md @@ -5,4 +5,13 @@ toc_hide: true Import Outpost24 endpoint vulnerability scan in XML format. ### Sample Scan Data -Sample Outpost24 Scan scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/outpost24). \ No newline at end of file +Sample Outpost24 Scan scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/outpost24). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/php_security_audit_v2.md b/docs/content/en/connecting_your_tools/parsers/file/php_security_audit_v2.md index 1abcb0e741c..7e395653854 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/php_security_audit_v2.md +++ b/docs/content/en/connecting_your_tools/parsers/file/php_security_audit_v2.md @@ -5,4 +5,13 @@ toc_hide: true Import PHP Security Audit v2 Scan in JSON format. ### Sample Scan Data -Sample PHP Security Audit v2 scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/php_security_audit_v2). \ No newline at end of file +Sample PHP Security Audit v2 scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/php_security_audit_v2). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/php_symfony_security_check.md b/docs/content/en/connecting_your_tools/parsers/file/php_symfony_security_check.md index 27552cb8395..0bbfc0875a4 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/php_symfony_security_check.md +++ b/docs/content/en/connecting_your_tools/parsers/file/php_symfony_security_check.md @@ -5,4 +5,10 @@ toc_hide: true Import results from the PHP Symfony Security Checker. ### Sample Scan Data -Sample PHP Symfony Security Checker scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/php_symfony_security_check). \ No newline at end of file +Sample PHP Symfony Security Checker scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/php_symfony_security_check). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- vulnerability ids diff --git a/docs/content/en/connecting_your_tools/parsers/file/pip_audit.md b/docs/content/en/connecting_your_tools/parsers/file/pip_audit.md index 96b9b250d58..0eb3b483237 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/pip_audit.md +++ b/docs/content/en/connecting_your_tools/parsers/file/pip_audit.md @@ -40,3 +40,10 @@ Sample pip-audit Scan scans can be found [here](https://github.com/DefectDojo/dj ### Link To Tool [pip-audit](https://pypi.org/project/pip-audit/) + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- vuln id from tool +- component name +- component version diff --git a/docs/content/en/connecting_your_tools/parsers/file/pmd.md b/docs/content/en/connecting_your_tools/parsers/file/pmd.md index ebb4d951764..366fe1b57b7 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/pmd.md +++ b/docs/content/en/connecting_your_tools/parsers/file/pmd.md @@ -5,4 +5,13 @@ toc_hide: true CSV Report ### Sample Scan Data -Sample PMD Scan scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/pmd). \ No newline at end of file +Sample PMD Scan scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/pmd). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/popeye.md b/docs/content/en/connecting_your_tools/parsers/file/popeye.md index 82dbdd89582..5c90937d0f4 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/popeye.md +++ b/docs/content/en/connecting_your_tools/parsers/file/popeye.md @@ -65,4 +65,10 @@ To match it to DefectDojo severity formula, Secerity 0 (Ok) findings from Popeye - Severity 3 (Errors) Popeye findings will be created as Severity "High" findingsi in DefectDojo. ### Sample Scan Data -Sample Popeye scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/popeye). \ No newline at end of file +Sample Popeye scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/popeye). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/progpilot.md b/docs/content/en/connecting_your_tools/parsers/file/progpilot.md index 2fa297117f0..9dfcad061e6 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/progpilot.md +++ b/docs/content/en/connecting_your_tools/parsers/file/progpilot.md @@ -5,4 +5,13 @@ toc_hide: true This parser imports the Progpilot SAST JSON output. The scanner can be found [here](https://github.com/designsecurity/progpilot). ### Sample Scan Data -Sample Progpilot Parser scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/progpilot). \ No newline at end of file +Sample Progpilot Parser scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/progpilot). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/ptart.md b/docs/content/en/connecting_your_tools/parsers/file/ptart.md index 5ce56967493..b765562d9ab 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/ptart.md +++ b/docs/content/en/connecting_your_tools/parsers/file/ptart.md @@ -12,3 +12,11 @@ Reports can be exported to JSON format from the PTART web UI, and imported into ### Sample Scan Data Sample scan data for testing purposes can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/ptart). +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/pwn_sast.md b/docs/content/en/connecting_your_tools/parsers/file/pwn_sast.md index 241f2c0ca6d..b770c5eebb0 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/pwn_sast.md +++ b/docs/content/en/connecting_your_tools/parsers/file/pwn_sast.md @@ -7,4 +7,13 @@ toc_hide: true - More driver results coming soon... ### Sample Scan Data -Sample PWN Security Automation Framework scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/pwn_sast). \ No newline at end of file +Sample PWN Security Automation Framework scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/pwn_sast). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/qualys.md b/docs/content/en/connecting_your_tools/parsers/file/qualys.md index 7fd532c79a8..1a688a61c62 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/qualys.md +++ b/docs/content/en/connecting_your_tools/parsers/file/qualys.md @@ -18,4 +18,11 @@ A CSV formatted Qualys Scan Report can also be used. Ensure the following values * Results ### Sample Scan Data -Sample Qualys Scan scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/qualys). \ No newline at end of file +Sample Qualys Scan scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/qualys). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- severity +- endpoints diff --git a/docs/content/en/connecting_your_tools/parsers/file/qualys_hacker_guardian.md b/docs/content/en/connecting_your_tools/parsers/file/qualys_hacker_guardian.md index e938970a385..cba55097d3b 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/qualys_hacker_guardian.md +++ b/docs/content/en/connecting_your_tools/parsers/file/qualys_hacker_guardian.md @@ -6,4 +6,11 @@ Qualys Hacker Guardian CSV export ### Sample Scan Data -Sample Qualys Scan scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/qualys_hacker_guardian). \ No newline at end of file +Sample Qualys Scan scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/qualys_hacker_guardian). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- severity +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/qualys_infrascan_webgui.md b/docs/content/en/connecting_your_tools/parsers/file/qualys_infrascan_webgui.md index bba44904df1..fa3d09343b0 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/qualys_infrascan_webgui.md +++ b/docs/content/en/connecting_your_tools/parsers/file/qualys_infrascan_webgui.md @@ -5,4 +5,13 @@ toc_hide: true Qualys WebGUI output files can be imported in XML format. ### Sample Scan Data -Sample Qualys Infrastructure Scan (WebGUI XML) scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/qualys_infrascan_webgui). \ No newline at end of file +Sample Qualys Infrastructure Scan (WebGUI XML) scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/qualys_infrascan_webgui). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/qualys_webapp.md b/docs/content/en/connecting_your_tools/parsers/file/qualys_webapp.md index b8a4017b113..21ca3eca657 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/qualys_webapp.md +++ b/docs/content/en/connecting_your_tools/parsers/file/qualys_webapp.md @@ -5,4 +5,13 @@ toc_hide: true Qualys WebScan output files can be imported in XML format. ### Sample Scan Data -Sample Qualys Webapp Scan scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/qualys_webapp). \ No newline at end of file +Sample Qualys Webapp Scan scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/qualys_webapp). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/rapplex.md b/docs/content/en/connecting_your_tools/parsers/file/rapplex.md index b72add501ab..36e74c449e6 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/rapplex.md +++ b/docs/content/en/connecting_your_tools/parsers/file/rapplex.md @@ -6,4 +6,11 @@ Import JSON report of [Rapplex - Web Application Security Scanner](https://rappl ### Sample Scan Data -Sample Rapplex scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/rapplex). \ No newline at end of file +Sample Rapplex scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/rapplex). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- endpoints +- severity diff --git a/docs/content/en/connecting_your_tools/parsers/file/redhatsatellite.md b/docs/content/en/connecting_your_tools/parsers/file/redhatsatellite.md index af047ef6c67..005d1c33c16 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/redhatsatellite.md +++ b/docs/content/en/connecting_your_tools/parsers/file/redhatsatellite.md @@ -5,4 +5,10 @@ toc_hide: true You can import a JSON report which was retrieved through the REST API of Red Hat Satellite. The scanner can be found [here](https://www.redhat.com/en/technologies/management/satellite). ### Sample Scan Data -Sample Red Hat Satellite scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/redhatsatellite). \ No newline at end of file +Sample Red Hat Satellite scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/redhatsatellite). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- description +- severity diff --git a/docs/content/en/connecting_your_tools/parsers/file/retirejs.md b/docs/content/en/connecting_your_tools/parsers/file/retirejs.md index b975aa7b603..0d925b0226b 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/retirejs.md +++ b/docs/content/en/connecting_your_tools/parsers/file/retirejs.md @@ -5,4 +5,13 @@ toc_hide: true Retire.js JavaScript scan (\--js) output file can be imported in JSON format. ### Sample Scan Data -Sample Retire.js scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/retirejs). \ No newline at end of file +Sample Retire.js scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/retirejs). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/risk_recon.md b/docs/content/en/connecting_your_tools/parsers/file/risk_recon.md index 917b7ed3bc5..c35ceac2792 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/risk_recon.md +++ b/docs/content/en/connecting_your_tools/parsers/file/risk_recon.md @@ -57,4 +57,13 @@ Import findings from Risk Recon via the API. Configure your own JSON report as f Risk Recon instance. ### Sample Scan Data -Sample Risk Recon API Importer scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/risk_recon). \ No newline at end of file +Sample Risk Recon API Importer scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/risk_recon). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/rubocop.md b/docs/content/en/connecting_your_tools/parsers/file/rubocop.md index 8a90bd8eda4..2a188c3b1ee 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/rubocop.md +++ b/docs/content/en/connecting_your_tools/parsers/file/rubocop.md @@ -5,4 +5,11 @@ toc_hide: true Import Rubocop JSON scan report (with option -f json). ### Sample Scan Data -Sample Rubocop Scan scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/rubocop). \ No newline at end of file +Sample Rubocop Scan scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/rubocop). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- vuln id from tool +- file path +- line diff --git a/docs/content/en/connecting_your_tools/parsers/file/rusty_hog.md b/docs/content/en/connecting_your_tools/parsers/file/rusty_hog.md index 77f44ae9e26..7b170ffc325 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/rusty_hog.md +++ b/docs/content/en/connecting_your_tools/parsers/file/rusty_hog.md @@ -17,4 +17,10 @@ RustyHog scans only one target at a time. This is not efficient if you want to s You can either select "Rusty Hog Scan" directly, or specify the sub scanner (e.g. "Duroc Hog Scan"). If you choose "Rusty Hog Scan", we recommend to re-import scans into the same test. For more information look at [this issue](https://github.com/DefectDojo/django-DefectDojo/issues/10584). ### Sample Scan Data -Sample Rusty Hog parser scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/rusty_hog). \ No newline at end of file +Sample Rusty Hog parser scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/rusty_hog). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- file path +- payload diff --git a/docs/content/en/connecting_your_tools/parsers/file/sarif.md b/docs/content/en/connecting_your_tools/parsers/file/sarif.md index a6ed9e679ce..b6c1ee62eab 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/sarif.md +++ b/docs/content/en/connecting_your_tools/parsers/file/sarif.md @@ -22,4 +22,13 @@ DEDUPLICATION_ALGORITHM_PER_PARSER["SARIF"] = DEDUPE_ALGO_UNIQUE_ID_FROM_TOOL_OR ``` ### Sample Scan Data -Sample SARIF scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/sarif). \ No newline at end of file +Sample SARIF scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/sarif). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/scantist.md b/docs/content/en/connecting_your_tools/parsers/file/scantist.md index a29f1392d58..b8b359671d1 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/scantist.md +++ b/docs/content/en/connecting_your_tools/parsers/file/scantist.md @@ -6,4 +6,13 @@ Scantist is an open source management platform. Scan and remediate open source s Here you can find more information: ### Sample Scan Data -Sample Scantist Scan scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/scantist). \ No newline at end of file +Sample Scantist Scan scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/scantist). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/scout_suite.md b/docs/content/en/connecting_your_tools/parsers/file/scout_suite.md index 7e97dbfd309..7a565b2dd17 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/scout_suite.md +++ b/docs/content/en/connecting_your_tools/parsers/file/scout_suite.md @@ -9,4 +9,10 @@ Multiple scans will create multiple files if they are runing agains different Cloud projects. See ### Sample Scan Data -Sample ScoutSuite scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/scout_suite). \ No newline at end of file +Sample ScoutSuite scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/scout_suite). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- file path +- vuln id from tool diff --git a/docs/content/en/connecting_your_tools/parsers/file/semgrep.md b/docs/content/en/connecting_your_tools/parsers/file/semgrep.md index b88c8ed9d66..9e039fd246e 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/semgrep.md +++ b/docs/content/en/connecting_your_tools/parsers/file/semgrep.md @@ -5,4 +5,13 @@ toc_hide: true Import Semgrep output (--json) ### Sample Scan Data -Sample Semgrep JSON Report scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/semgrep). \ No newline at end of file +Sample Semgrep JSON Report scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/semgrep). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/skf.md b/docs/content/en/connecting_your_tools/parsers/file/skf.md index c2fcfa27411..2ab3ade041e 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/skf.md +++ b/docs/content/en/connecting_your_tools/parsers/file/skf.md @@ -5,4 +5,13 @@ toc_hide: true Output of SKF Sprint summary export. ### Sample Scan Data -Sample SKF Scan scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/skf). \ No newline at end of file +Sample SKF Scan scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/skf). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/snyk.md b/docs/content/en/connecting_your_tools/parsers/file/snyk.md index f8cc7463789..717cf64323b 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/snyk.md +++ b/docs/content/en/connecting_your_tools/parsers/file/snyk.md @@ -6,4 +6,12 @@ Snyk output file (snyk test \--json \> snyk.json) can be imported in JSON format. Only SCA (Software Composition Analysis) report is supported (SAST report not supported yet). ### Sample Scan Data -Sample Snyk scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/snyk). \ No newline at end of file +Sample Snyk scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/snyk). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- vuln id from tool +- file path +- component name +- component version diff --git a/docs/content/en/connecting_your_tools/parsers/file/snyk_code.md b/docs/content/en/connecting_your_tools/parsers/file/snyk_code.md index b7a1b194737..3d43b81ac08 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/snyk_code.md +++ b/docs/content/en/connecting_your_tools/parsers/file/snyk_code.md @@ -6,4 +6,10 @@ Snyk output file (snyk test \--json \> snyk.json) can be imported in JSON format. Only SCA (Software Composition Analysis) report is supported (SAST report not supported yet). ### Sample Scan Data -Sample Snyk Code scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/snyk_code). \ No newline at end of file +Sample Snyk Code scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/snyk_code). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- vuln id from tool +- file path diff --git a/docs/content/en/connecting_your_tools/parsers/file/solar_appscreener.md b/docs/content/en/connecting_your_tools/parsers/file/solar_appscreener.md index 80ab6a894d1..98334b25a9b 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/solar_appscreener.md +++ b/docs/content/en/connecting_your_tools/parsers/file/solar_appscreener.md @@ -5,4 +5,12 @@ toc_hide: true Solar Appscreener report file can be imported in CSV format from Detailed_Results.csv ### Sample Scan Data -Sample Solar Appscreener Scan scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/solar_appscreener). \ No newline at end of file +Sample Solar Appscreener Scan scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/solar_appscreener). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- file path +- line +- severity diff --git a/docs/content/en/connecting_your_tools/parsers/file/sonarqube.md b/docs/content/en/connecting_your_tools/parsers/file/sonarqube.md index 4734796dd7d..8ee44e03460 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/sonarqube.md +++ b/docs/content/en/connecting_your_tools/parsers/file/sonarqube.md @@ -41,5 +41,9 @@ To generate the report, see Version: \>= 1.1.0. Recommend version for both format \>= 3.1.2 +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): - +- cwe +- severity +- file path diff --git a/docs/content/en/connecting_your_tools/parsers/file/sonatype.md b/docs/content/en/connecting_your_tools/parsers/file/sonatype.md index c993fdd3f15..29f06047948 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/sonatype.md +++ b/docs/content/en/connecting_your_tools/parsers/file/sonatype.md @@ -5,4 +5,14 @@ toc_hide: true JSON output. ### Sample Scan Data -Sample Sonatype scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/sonatype). \ No newline at end of file +Sample Sonatype scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/sonatype). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- file path +- component name +- component version +- vulnerability ids diff --git a/docs/content/en/connecting_your_tools/parsers/file/spotbugs.md b/docs/content/en/connecting_your_tools/parsers/file/spotbugs.md index 69a288e5b5b..b22e6f8f00f 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/spotbugs.md +++ b/docs/content/en/connecting_your_tools/parsers/file/spotbugs.md @@ -5,4 +5,12 @@ toc_hide: true XML report of textui cli. ### Sample Scan Data -Sample SpotBugs scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/spotbugs). \ No newline at end of file +Sample SpotBugs scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/spotbugs). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- cwe +- severity +- file path +- line diff --git a/docs/content/en/connecting_your_tools/parsers/file/ssh_audit.md b/docs/content/en/connecting_your_tools/parsers/file/ssh_audit.md index 29f95a82260..185232d0daa 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/ssh_audit.md +++ b/docs/content/en/connecting_your_tools/parsers/file/ssh_audit.md @@ -5,4 +5,13 @@ toc_hide: true Import JSON output of ssh_audit report. See ### Sample Scan Data -Sample SSH Audit scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/ssh_audit). \ No newline at end of file +Sample SSH Audit scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/ssh_audit). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/ssl_labs.md b/docs/content/en/connecting_your_tools/parsers/file/ssl_labs.md index cd5972e126b..cd36e01686b 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/ssl_labs.md +++ b/docs/content/en/connecting_your_tools/parsers/file/ssl_labs.md @@ -5,4 +5,13 @@ toc_hide: true JSON Output of ssllabs-scan cli. ### Sample Scan Data -Sample SSL Labs scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/ssl_labs). \ No newline at end of file +Sample SSL Labs scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/ssl_labs). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/sslscan.md b/docs/content/en/connecting_your_tools/parsers/file/sslscan.md index 0255e5858ab..aa0cf1d0670 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/sslscan.md +++ b/docs/content/en/connecting_your_tools/parsers/file/sslscan.md @@ -5,4 +5,13 @@ toc_hide: true Import XML output of sslscan report. ### Sample Scan Data -Sample Sslscan scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/sslscan). \ No newline at end of file +Sample Sslscan scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/sslscan). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/sslyze.md b/docs/content/en/connecting_your_tools/parsers/file/sslyze.md index 8abfd44b8fa..c48189b9ea7 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/sslyze.md +++ b/docs/content/en/connecting_your_tools/parsers/file/sslyze.md @@ -9,4 +9,10 @@ XML report of SSLyze version 2 scan JSON report of SSLyze version 3 scan ### Sample Scan Data -Sample Sslyze Scan scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/sslyze). \ No newline at end of file +Sample Sslyze Scan scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/sslyze). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/stackhawk.md b/docs/content/en/connecting_your_tools/parsers/file/stackhawk.md index 4f66fb5a82c..ab8ac205839 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/stackhawk.md +++ b/docs/content/en/connecting_your_tools/parsers/file/stackhawk.md @@ -6,4 +6,11 @@ Import the JSON webhook event from StackHawk. For more information, check out our [docs on hooking up StackHawk to Defect Dojo](https://docs.stackhawk.com/workflow-integrations/defect-dojo.html) ### Sample Scan Data -Sample StackHawk HawkScan scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/stackhawk). \ No newline at end of file +Sample StackHawk HawkScan scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/stackhawk). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- vuln id from tool +- component name +- component version diff --git a/docs/content/en/connecting_your_tools/parsers/file/sysdig_cli.md b/docs/content/en/connecting_your_tools/parsers/file/sysdig_cli.md index f20a568d5a1..edd1e5b87ae 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/sysdig_cli.md +++ b/docs/content/en/connecting_your_tools/parsers/file/sysdig_cli.md @@ -5,4 +5,13 @@ toc_hide: true Import CSV report files generated by the [Sysdig CLI Scanner](https://docs.sysdig.com/en/sysdig-secure/install-agent-components/install-vulnerability-cli-scanner/) ### Sample Scan Data -Sample Sysdig Vulnerability Reports scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/sysdig_cli). \ No newline at end of file +Sample Sysdig Vulnerability Reports scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/sysdig_cli). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/sysdig_reports.md b/docs/content/en/connecting_your_tools/parsers/file/sysdig_reports.md index 398cd87f9d0..293bad589d7 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/sysdig_reports.md +++ b/docs/content/en/connecting_your_tools/parsers/file/sysdig_reports.md @@ -7,4 +7,13 @@ Parser will accept Pipeline, Registry and Runtime reports created from the UI More information available at [sysdig reporting docs page](https://docs.sysdig.com/en/docs/sysdig-secure/vulnerabilities/reporting) ### Sample Scan Data -Sample Sysdig Vulnerability Reports scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/sysdig_reports). \ No newline at end of file +Sample Sysdig Vulnerability Reports scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/sysdig_reports). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/talisman.md b/docs/content/en/connecting_your_tools/parsers/file/talisman.md index c542a1f0f2d..787df03b812 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/talisman.md +++ b/docs/content/en/connecting_your_tools/parsers/file/talisman.md @@ -41,4 +41,13 @@ fi ``` ### Sample Scan Data -Sample Talisman scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/talisman). \ No newline at end of file +Sample Talisman scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/talisman). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/tenable.md b/docs/content/en/connecting_your_tools/parsers/file/tenable.md index a4f0ad59030..1f7c6c751f2 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/tenable.md +++ b/docs/content/en/connecting_your_tools/parsers/file/tenable.md @@ -6,4 +6,13 @@ Reports can be imported in the CSV, and .nessus (XML) report formats. Legacy Nessus and Nessus WAS reports are supported ### Sample Scan Data -Sample Tenable scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/tenable). \ No newline at end of file +Sample Tenable scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/tenable). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- severity +- vulnerability ids +- cwe +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/terrascan.md b/docs/content/en/connecting_your_tools/parsers/file/terrascan.md index c5d6016c5a0..6cf2bc81ac8 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/terrascan.md +++ b/docs/content/en/connecting_your_tools/parsers/file/terrascan.md @@ -5,4 +5,14 @@ toc_hide: true Import JSON output of terrascan scan report ### Sample Scan Data -Sample Terrascan scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/terrascan). \ No newline at end of file +Sample Terrascan scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/terrascan). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- vuln id from tool +- title +- severity +- file path +- line +- component name diff --git a/docs/content/en/connecting_your_tools/parsers/file/testssl.md b/docs/content/en/connecting_your_tools/parsers/file/testssl.md index 501cb8b8a7a..ae8f6b706d4 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/testssl.md +++ b/docs/content/en/connecting_your_tools/parsers/file/testssl.md @@ -5,4 +5,13 @@ toc_hide: true Import CSV output of testssl scan report. ### Sample Scan Data -Sample Testssl Scan scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/testssl). \ No newline at end of file +Sample Testssl Scan scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/testssl). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/tfsec.md b/docs/content/en/connecting_your_tools/parsers/file/tfsec.md index 7a0aca9d57a..4ab35797483 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/tfsec.md +++ b/docs/content/en/connecting_your_tools/parsers/file/tfsec.md @@ -5,4 +5,12 @@ toc_hide: true Import of JSON report from ### Sample Scan Data -Sample TFSec scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/tfsec). \ No newline at end of file +Sample TFSec scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/tfsec). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- severity +- vuln id from tool +- file path +- line diff --git a/docs/content/en/connecting_your_tools/parsers/file/threagile.md b/docs/content/en/connecting_your_tools/parsers/file/threagile.md index 6469fb54752..c4870a5d225 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/threagile.md +++ b/docs/content/en/connecting_your_tools/parsers/file/threagile.md @@ -85,4 +85,11 @@ Parser expects an array of finding. All properties are strings. Required fields ~~~ ### Sample Scan Data -Sample Threagile scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/threagile). \ No newline at end of file +Sample Threagile scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/threagile). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- severity diff --git a/docs/content/en/connecting_your_tools/parsers/file/threat_composer.md b/docs/content/en/connecting_your_tools/parsers/file/threat_composer.md index a5097f90066..433d532034b 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/threat_composer.md +++ b/docs/content/en/connecting_your_tools/parsers/file/threat_composer.md @@ -6,4 +6,10 @@ toc_hide: true This DefectDojo parser accepts JSON files from Threat Composer. The tool supports the [export](https://github.com/awslabs/threat-composer/tree/main?#features) of JSON report out of the browser local storage to a local file. ### Sample Scan Data -Sample scan data for testing purposes can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/threat_composer). \ No newline at end of file +Sample scan data for testing purposes can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/threat_composer). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/trivy.md b/docs/content/en/connecting_your_tools/parsers/file/trivy.md index 99ad24e4477..b8add19d8e8 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/trivy.md +++ b/docs/content/en/connecting_your_tools/parsers/file/trivy.md @@ -22,4 +22,13 @@ It is recommended to assess the appropriate action in your Product's context. If you want to exclude certain status from being imported into Defect Dojo, please [filter them in the export from Trivy](https://trivy.dev/latest/docs/configuration/filtering/) ### Sample Scan Data -Sample Trivy scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/trivy) \ No newline at end of file +Sample Trivy scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/trivy). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- severity +- vulnerability ids +- cwe +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/trivy_operator.md b/docs/content/en/connecting_your_tools/parsers/file/trivy_operator.md index 1433b8231fe..c305d9010c8 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/trivy_operator.md +++ b/docs/content/en/connecting_your_tools/parsers/file/trivy_operator.md @@ -7,4 +7,12 @@ JSON report of [trivy operator scanner](https://github.com/aquasecurity/trivy-op To import the generated Vulnerability Reports, you can also use the [trivy-dojo-report-operator](https://github.com/telekom-mms/trivy-dojo-report-operator). ### Sample Scan Data -Sample Trivy Operator scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/trivy_operator). \ No newline at end of file +Sample Trivy Operator scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/trivy_operator). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- severity +- vulnerability ids +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/trufflehog.md b/docs/content/en/connecting_your_tools/parsers/file/trufflehog.md index c787e8e8105..6ebc86ca0d7 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/trufflehog.md +++ b/docs/content/en/connecting_your_tools/parsers/file/trufflehog.md @@ -5,4 +5,11 @@ toc_hide: true JSON Output of Trufflehog. Supports version 2 and 3 of https://github.com/trufflesecurity/trufflehog ### Sample Scan Data -Sample Trufflehog scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/trufflehog). \ No newline at end of file +Sample Trufflehog scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/trufflehog). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- description +- line diff --git a/docs/content/en/connecting_your_tools/parsers/file/trufflehog3.md b/docs/content/en/connecting_your_tools/parsers/file/trufflehog3.md index 44fd436d541..6c75cbd6a5d 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/trufflehog3.md +++ b/docs/content/en/connecting_your_tools/parsers/file/trufflehog3.md @@ -5,4 +5,13 @@ toc_hide: true JSON Output of Trufflehog3, a fork of TruffleHog located at https://github.com/feeltheajf/truffleHog3 ### Sample Scan Data -Sample Trufflehog3 scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/trufflehog3). \ No newline at end of file +Sample Trufflehog3 scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/trufflehog3). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/trustwave.md b/docs/content/en/connecting_your_tools/parsers/file/trustwave.md index 4e4cbb14c5a..afb7aa60705 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/trustwave.md +++ b/docs/content/en/connecting_your_tools/parsers/file/trustwave.md @@ -39,3 +39,12 @@ Sample Trustwave scans can be found in the [unit tests folder](https://github.co ### Link To Tool [Trustwave](https://www.trustwave.com/en-us/) provides vulnerability scanning services through their SecureConnect platform. + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/trustwave_fusion_api.md b/docs/content/en/connecting_your_tools/parsers/file/trustwave_fusion_api.md index d4f61fd0570..a9a7602f87b 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/trustwave_fusion_api.md +++ b/docs/content/en/connecting_your_tools/parsers/file/trustwave_fusion_api.md @@ -5,4 +5,13 @@ toc_hide: true Trustwave Fusion API report file can be imported in JSON format ### Sample Scan Data -Sample Trustwave Fusion API Scan scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/trustwave_fusion_api). \ No newline at end of file +Sample Trustwave Fusion API Scan scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/trustwave_fusion_api). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/twistlock.md b/docs/content/en/connecting_your_tools/parsers/file/twistlock.md index e682da7402b..6dfab0faa4c 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/twistlock.md +++ b/docs/content/en/connecting_your_tools/parsers/file/twistlock.md @@ -11,4 +11,12 @@ JSON output of the `twistcli` tool. Example: The CSV output from the UI is now also accepted. ### Sample Scan Data -Sample Twistlock scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/twistlock). \ No newline at end of file +Sample Twistlock scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/twistlock). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- severity +- component name +- component version diff --git a/docs/content/en/connecting_your_tools/parsers/file/vcg.md b/docs/content/en/connecting_your_tools/parsers/file/vcg.md index f2bdb310057..902730def33 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/vcg.md +++ b/docs/content/en/connecting_your_tools/parsers/file/vcg.md @@ -5,4 +5,13 @@ toc_hide: true VCG output can be imported in CSV or Xml formats. ### Sample Scan Data -Sample Visual Code Grepper (VCG) scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/vcg). \ No newline at end of file +Sample Visual Code Grepper (VCG) scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/vcg). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/veracode.md b/docs/content/en/connecting_your_tools/parsers/file/veracode.md index 431a7f54cad..caba004968f 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/veracode.md +++ b/docs/content/en/connecting_your_tools/parsers/file/veracode.md @@ -48,4 +48,13 @@ Veracode reports can be ingested in either XML or JSON Format ``` ### Sample Scan Data -Sample Veracode scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/veracode). \ No newline at end of file +Sample Veracode scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/veracode). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/veracode_sca.md b/docs/content/en/connecting_your_tools/parsers/file/veracode_sca.md index 59db59d2a31..784c243e7f1 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/veracode_sca.md +++ b/docs/content/en/connecting_your_tools/parsers/file/veracode_sca.md @@ -5,4 +5,13 @@ toc_hide: true Import Project CSV or JSON report ### Sample Scan Data -Sample Veracode SourceClear scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/veracode_sca). \ No newline at end of file +Sample Veracode SourceClear scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/veracode_sca). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- vulnerability ids +- component name +- component version +- severity diff --git a/docs/content/en/connecting_your_tools/parsers/file/wapiti.md b/docs/content/en/connecting_your_tools/parsers/file/wapiti.md index 53a4cd619b0..1ae58ad5f17 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/wapiti.md +++ b/docs/content/en/connecting_your_tools/parsers/file/wapiti.md @@ -5,4 +5,13 @@ toc_hide: true Import XML report. ### Sample Scan Data -Sample Wapiti Scan scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/wapiti). \ No newline at end of file +Sample Wapiti Scan scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/wapiti). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/wazuh.md b/docs/content/en/connecting_your_tools/parsers/file/wazuh.md index 329372ff84d..5bb4ae2e39c 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/wazuh.md +++ b/docs/content/en/connecting_your_tools/parsers/file/wazuh.md @@ -49,4 +49,13 @@ Parser expects a .json file structured as below. ~~~ ### Sample Scan Data -Sample Wazuh Scanner scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/wazuh). \ No newline at end of file +Sample Wazuh Scanner scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/wazuh). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/wfuzz.md b/docs/content/en/connecting_your_tools/parsers/file/wfuzz.md index b76c7b186eb..bb6ed046cd3 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/wfuzz.md +++ b/docs/content/en/connecting_your_tools/parsers/file/wfuzz.md @@ -15,4 +15,13 @@ missing | Low >= 500 | Low ### Sample Scan Data -Sample Wfuzz JSON importer scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/wfuzz). \ No newline at end of file +Sample Wfuzz JSON importer scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/wfuzz). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/whispers.md b/docs/content/en/connecting_your_tools/parsers/file/whispers.md index dfa5b104ef7..bedc2037f4f 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/whispers.md +++ b/docs/content/en/connecting_your_tools/parsers/file/whispers.md @@ -6,4 +6,11 @@ Import Whispers JSON results. https://github.com/adeptex/whispers ### Sample Scan Data -Sample Whispers scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/whispers). \ No newline at end of file +Sample Whispers scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/whispers). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- vuln id from tool +- file path +- line diff --git a/docs/content/en/connecting_your_tools/parsers/file/whitehat_sentinel.md b/docs/content/en/connecting_your_tools/parsers/file/whitehat_sentinel.md index 756fac5069a..d267ef493b5 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/whitehat_sentinel.md +++ b/docs/content/en/connecting_your_tools/parsers/file/whitehat_sentinel.md @@ -5,4 +5,13 @@ toc_hide: true WhiteHat Sentinel output from api/vuln/query_site can be imported in JSON format. ### Sample Scan Data -Sample WhiteHat Sentinel scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/whitehat_sentinel). \ No newline at end of file +Sample WhiteHat Sentinel scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/whitehat_sentinel). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/wiz.md b/docs/content/en/connecting_your_tools/parsers/file/wiz.md index 23b8025c4d5..64f589a54a2 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/wiz.md +++ b/docs/content/en/connecting_your_tools/parsers/file/wiz.md @@ -179,3 +179,9 @@ Sample Wiz Scanner scans can be found in the [sample scan data folder](https://g - [Wiz.io](https://www.wiz.io/) - [Wiz Documentation](https://docs.wiz.io/) +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- description +- severity diff --git a/docs/content/en/connecting_your_tools/parsers/file/wizcli_dir.md b/docs/content/en/connecting_your_tools/parsers/file/wizcli_dir.md index 6caebaecf0c..8aaaefd1383 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/wizcli_dir.md +++ b/docs/content/en/connecting_your_tools/parsers/file/wizcli_dir.md @@ -6,4 +6,13 @@ This parser imports scan results from [wizcli](https://www.wiz.io/) IaC scan. Yo `wizcli dir scan --path ./ -o scan_dir.json,json` ### Sample Scan Data -Sample Wizcli Scanner scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/wizcli_dir). \ No newline at end of file +Sample Wizcli Scanner scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/wizcli_dir). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/wizcli_iac.md b/docs/content/en/connecting_your_tools/parsers/file/wizcli_iac.md index 5a655666251..01393f820bd 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/wizcli_iac.md +++ b/docs/content/en/connecting_your_tools/parsers/file/wizcli_iac.md @@ -6,4 +6,13 @@ This parser imports scan results from [wizcli](https://www.wiz.io/) IaC scan. Yo `wizcli iac scan --path ./ -o scan_iac.json,json` ### Sample Scan Data -Sample Wizcli Scanner scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/wizcli_iac). \ No newline at end of file +Sample Wizcli Scanner scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/wizcli_iac). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/wizcli_img.md b/docs/content/en/connecting_your_tools/parsers/file/wizcli_img.md index c372e23e8ef..5b97d7934ce 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/wizcli_img.md +++ b/docs/content/en/connecting_your_tools/parsers/file/wizcli_img.md @@ -6,4 +6,13 @@ This parser imports scan results from [wizcli](https://www.wiz.io/) IaC scan. Yo `wizcli docker scan --image wizcli-imagescan -o scan_img.json,json` ### Sample Scan Data -Sample Wizcli Scanner scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/wizcli_img). \ No newline at end of file +Sample Wizcli Scanner scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/wizcli_img). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/wpscan.md b/docs/content/en/connecting_your_tools/parsers/file/wpscan.md index 3e47e2bc6f8..64f7538731c 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/wpscan.md +++ b/docs/content/en/connecting_your_tools/parsers/file/wpscan.md @@ -5,4 +5,11 @@ toc_hide: true Import JSON report. ### Sample Scan Data -Sample Wpscan Scanner scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/wpscan). \ No newline at end of file +Sample Wpscan Scanner scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/wpscan). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- description +- severity diff --git a/docs/content/en/connecting_your_tools/parsers/file/xanitizer.md b/docs/content/en/connecting_your_tools/parsers/file/xanitizer.md index 553292b5928..494ffe69ad4 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/xanitizer.md +++ b/docs/content/en/connecting_your_tools/parsers/file/xanitizer.md @@ -6,4 +6,13 @@ Import XML findings list report, preferably with parameter \'generateDetailsInFindingsListReport=true\'. ### Sample Scan Data -Sample Xanitizer scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/xanitizer). \ No newline at end of file +Sample Xanitizer scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/xanitizer). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- line +- file path +- description diff --git a/docs/content/en/connecting_your_tools/parsers/file/yarn_audit.md b/docs/content/en/connecting_your_tools/parsers/file/yarn_audit.md index e7de450a756..3778cb91fe2 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/yarn_audit.md +++ b/docs/content/en/connecting_your_tools/parsers/file/yarn_audit.md @@ -5,4 +5,13 @@ toc_hide: true Import Yarn Audit scan report in JSON format. Use something like `yarn audit --json > yarn_report.json`. ### Sample Scan Data -Sample Yarn Audit scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/yarn_audit). \ No newline at end of file +Sample Yarn Audit scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/yarn_audit). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- severity +- file path +- vulnerability ids +- cwe diff --git a/docs/content/en/connecting_your_tools/parsers/file/zap.md b/docs/content/en/connecting_your_tools/parsers/file/zap.md index 43fd58e05c7..05ee41a846f 100644 --- a/docs/content/en/connecting_your_tools/parsers/file/zap.md +++ b/docs/content/en/connecting_your_tools/parsers/file/zap.md @@ -5,4 +5,11 @@ toc_hide: true ZAP XML report format (with or without requests and responses). ### Sample Scan Data -Sample Zed Attack Proxy scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/zap). \ No newline at end of file +Sample Zed Attack Proxy scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/zap). + +### Default Deduplication Hashcode Fields +By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/): + +- title +- cwe +- severity