DefectDojo commits | Ecosyste.ms: OpenCollective

Update rabbitmq Docker tag from 3.8.11 to v3.8.12 (docker-compose.yml) (#3874)

Co-authored-by: Renovate Bot <[email protected]>

github.com/DefectDojo/django-DefectDojo - 45f64b9300a03fe81172540255fe2bbe4096f19a authored almost 4 years ago

Bump cryptography from 3.4.5 to 3.4.6 (#3875)

Bumps [cryptography](https://github.com/pyca/cryptography) from 3.4.5 to 3.4.6.
- [Release note...

github.com/DefectDojo/django-DefectDojo - 866ea3aefdeb7cdb824070f3ba1b47882a9e87f2 authored almost 4 years ago

node/yarn: update to v14 and 1.22.10 (#3804)

github.com/DefectDojo/django-DefectDojo - f0ebc5c6b2c4a6e7c541d1da842f146044b97184 authored almost 4 years ago

Reimport: keep false positive, out of scope and risk_accepted history #3848 (#3858)

* [Issue 3848] Fix reimport of findings to keep false positive, out of scope, risk_accepted history

github.com/DefectDojo/django-DefectDojo - 3aea2c8501deedf85c42dd6c243dacfb1f9918b0 authored almost 4 years ago

Bump justgage from 1.4.1 to 1.4.2 in /components (#3871)

Bumps [justgage](https://github.com/toorshia/justgage) from 1.4.1 to 1.4.2.
- [Release notes](h...

github.com/DefectDojo/django-DefectDojo - 1a36dcf3078f9657bc9a3f21d239973758d14910 authored almost 4 years ago

Bump cryptography from 3.4.4 to 3.4.5 (#3863)

Bumps [cryptography](https://github.com/pyca/cryptography) from 3.4.4 to 3.4.5.
- [Release note...

github.com/DefectDojo/django-DefectDojo - 02f4869dc6ca93361b2988eabf12d1ad8b6f06aa authored almost 4 years ago

Bump easymde from 2.13.0 to 2.14.0 in /components (#3864)

Bumps [easymde](https://github.com/Ionaru/easy-markdown-editor) from 2.13.0 to 2.14.0.
- [Relea...

github.com/DefectDojo/django-DefectDojo - 4c06ebd88988a25b566c9c5ff2b1e492ea0d05cc authored almost 4 years ago

Dynamic parser infrastructure part 2 (#3827)

* Second part of dynamic infrastructure

github.com/DefectDojo/django-DefectDojo - 6278a725bb5cfcac727fb318483bd178df3bec65 authored almost 4 years ago

feat(doc): integrate documentation in main dojo repo (#3809)

github.com/DefectDojo/django-DefectDojo - 0b3ac112917be7f68eb3729f009ae3aac43889e4 authored almost 4 years ago

Merge branch 'dev' into move-cvss3

github.com/DefectDojo/django-DefectDojo - 692237d46670920fdb31a1e43f9253873680ce0d authored almost 4 years ago

Make mitigated date editable (#3813)

github.com/DefectDojo/django-DefectDojo - 9f55651437f1abfceb8045eba2690b7c403a9b2c authored almost 4 years ago

fix other tests..

github.com/DefectDojo/django-DefectDojo - 7a6ec7b5e949f508aa9376944420ef66495815c6 authored almost 4 years ago

popover

github.com/DefectDojo/django-DefectDojo - 57c8ee0708507356c7efdf4362b0c6e0e3a37870 authored almost 4 years ago

remove cvss panel

github.com/DefectDojo/django-DefectDojo - ca7b2b6bdc881131db76acc425c13754b1a9d7ff authored almost 4 years ago

Adjusting integration test

github.com/DefectDojo/django-DefectDojo - 80334315e449d24fa05229d121360997d9ea8bed authored almost 4 years ago

quote missing..

github.com/DefectDojo/django-DefectDojo - 6410cbefce0741b1c6d58cb9a5966f47610e14a4 authored almost 4 years ago

adding spaces to cvss v3 all around

github.com/DefectDojo/django-DefectDojo - 2235e65693e5460317fc3a38482a17d9f68a4bab authored almost 4 years ago

revert unwanted change

github.com/DefectDojo/django-DefectDojo - c91203a796e1e9542b36030f3e2368bef316eaab authored almost 4 years ago

rename cvssv3 + pop-over

github.com/DefectDojo/django-DefectDojo - 567f248f4eaa1e9abc4b87976a6305de001a16d0 authored almost 4 years ago

missing comma

github.com/DefectDojo/django-DefectDojo - adddce29f1abd3180dad58916370a0d14b170e86 authored almost 4 years ago

rearrange for cvssv3

github.com/DefectDojo/django-DefectDojo - f81cbe5a37a390b0c6c0ed881ec2626974a72a24 authored almost 4 years ago

import_scan: add official test response field (#3855)

github.com/DefectDojo/django-DefectDojo - 12188fd0c98df2b1899feab10955fe9dc22caf20 authored almost 4 years ago

Make the engagement view more consistent (#3856)

github.com/DefectDojo/django-DefectDojo - cf6ae61df7ac950667700e1f79da1b8cc487a9f8 authored almost 4 years ago

Update styfle/cancel-workflow-action action from 0.7.0 to v0.8.0 (.github/workflows/cancel-outdated-workflow-runs.yml) (#3857)

Co-authored-by: Renovate Bot <[email protected]>

github.com/DefectDojo/django-DefectDojo - f927955c56cd41dfa63baa09d0b75ccd98c1d36e authored almost 4 years ago

Update release-drafter/release-drafter action from v5.13.0 to v5.14.0 (.github/workflows/release-drafter.yml) (#3859)

Co-authored-by: Renovate Bot <[email protected]>

github.com/DefectDojo/django-DefectDojo - 8e4b7c2126ecf4f8904cc60f238a1808b2a4c621 authored almost 4 years ago

Bump asteval from 0.9.21 to 0.9.22 (#3845)

Bumps [asteval](https://github.com/newville/asteval) from 0.9.21 to 0.9.22.
- [Release notes](h...

github.com/DefectDojo/django-DefectDojo - bded1e3c28c6209203171b49641897cf396d6ae9 authored almost 4 years ago

Bump google-auth from 1.26.0 to 1.26.1 (#3846)

Bumps [google-auth](https://github.com/googleapis/google-auth-library-python) from 1.26.0 to 1.2...

github.com/DefectDojo/django-DefectDojo - 693a397f4cb7786bc1946e75660eaa51e388b28f authored almost 4 years ago

Bump django-jsonfield-backport from 1.0.2 to 1.0.3 (#3847)

Bumps [django-jsonfield-backport](https://github.com/laymonage/django-jsonfield-backport) from 1...

github.com/DefectDojo/django-DefectDojo - a1661d530b1d88f87fd28b47bbac049b281588b2 authored almost 4 years ago

feature flag: Track Import history per Test (#3748)

* reimport history: track changes made by reimports

github.com/DefectDojo/django-DefectDojo - cd26a90399a476610289881a400c59c65ad69d10 authored almost 4 years ago

Remove pyc files (#46)

github.com/DefectDojo/defectdojo_api - 350c31368bf95052c3269b74b023579db36cacc6 authored almost 4 years ago

Bump google-auth from 1.25.0 to 1.26.0 (#3842)

Bumps [google-auth](https://github.com/googleapis/google-auth-library-python) from 1.25.0 to 1.2...

github.com/DefectDojo/django-DefectDojo - d4443642751a31af92e216ccd650f40b13d1176f authored almost 4 years ago

Update views.py (#3844)

github.com/DefectDojo/django-DefectDojo - deb240baf15e893c253ee2c11f6fa3a776e303f8 authored almost 4 years ago

finding.save() + add logging of the JIRA issue key to jira webhook (#3839)

github.com/DefectDojo/django-DefectDojo - 38f06a56a525dd9c8d519d4b4370433d95b09955 authored almost 4 years ago

tests: fix add finding javascript error (#3834)

github.com/DefectDojo/django-DefectDojo - 4506dc571249ee9ff8e9d9f8a5325c154a417a2d authored about 4 years ago

Bump justgage from 1.4.0 to 1.4.1 in /components (#3838)

Bumps [justgage](https://github.com/toorshia/justgage) from 1.4.0 to 1.4.1.
- [Release notes](h...

github.com/DefectDojo/django-DefectDojo - badefb4943979d3404a680770b4683e0d713ceb6 authored about 4 years ago

Bump cryptography from 3.4.3 to 3.4.4 (#3836)

Bumps [cryptography](https://github.com/pyca/cryptography) from 3.4.3 to 3.4.4.
- [Release note...

github.com/DefectDojo/django-DefectDojo - 6788e07a3beb015814f25f769dc9d94afb4b078b authored about 4 years ago

Bump jszip from 3.5.0 to 3.6.0 in /components (#3837)

Bumps [jszip](https://github.com/Stuk/jszip) from 3.5.0 to 3.6.0.
- [Release notes](https://git...

github.com/DefectDojo/django-DefectDojo - 881df7c7852eab71316eb85da0c22dc9cd7f0c8b authored about 4 years ago

Small typo correction (#3833)

* update diagram

* Small typo correction

Co-authored-by: Fred B...

github.com/DefectDojo/django-DefectDojo - 4a374738a263a2fe05bb98f119e7a00270e0fb3d authored about 4 years ago

Create Anchore Grype samples (#71)

* Create grype_busybox.json

* Add more files for Anchore grype

github.com/DefectDojo/sample-scan-files - 5abf9275754f341367f15608d188437a1b9b2abe authored about 4 years ago

Update GitLab Dependency Scanning files (#70)

* Delete gl-dependency-scanning-report-1-vuln-missing-component.json

Superseded by gl-depende...

github.com/DefectDojo/sample-scan-files - 6acd6fc15a6f0c0565a7e4cb397af1684ed11698 authored about 4 years ago

Add Contract report (#68)

github.com/DefectDojo/sample-scan-files - 7f5abcc851ffb57ef3207e47c42dad444a70da33 authored about 4 years ago

Bump cryptography from 3.4.1 to 3.4.3 (#3831)

Bumps [cryptography](https://github.com/pyca/cryptography) from 3.4.1 to 3.4.3.
- [Release note...

github.com/DefectDojo/django-DefectDojo - e10f2582af908c7974b78560c6ee12a9776838f1 authored about 4 years ago

Add Close Engagement Notification (#3803)

* Add Close Engagement Notification

* Fix migration

* Add product level notification

* ...

github.com/DefectDojo/django-DefectDojo - bf1cfec63acdba375f1f560557415f6ee11c255c authored about 4 years ago

Add parser for Anchore Grype scan (#3814)

github.com/DefectDojo/django-DefectDojo - 360368b8471498e37f8e8261d1a289b6dc19c9af authored about 4 years ago

fixing 3824 (#3826)

github.com/DefectDojo/django-DefectDojo - 5d0f246f98e8ace40a33c4030f7b54065619ff4f authored about 4 years ago

Fix image_digest/imageDigest error (#3802)

github.com/DefectDojo/django-DefectDojo - 75dc4970f17c6dd7387fd53533adda18cacad15f authored about 4 years ago

store tags for new (ad hoc) findings (#3825)

github.com/DefectDojo/django-DefectDojo - 8ef381bbc726b32fa127a4996e18ba34f0879004 authored about 4 years ago

risk acceptance rename left over reporter to owner (#3828)

github.com/DefectDojo/django-DefectDojo - 126152ed734fefab362bfffa321984cf8789fdc8 authored about 4 years ago

Re-enable Jira Epic Mapping (#3782)

* Re-enable Jira Epic Mapping

* Forgot new cassette

* add more unit tests

* Fix flake8
...

github.com/DefectDojo/django-DefectDojo - 3b4d990a2166545458101e05c678959931a99c78 authored about 4 years ago

show boolean fields as icons (#3819)

github.com/DefectDojo/django-DefectDojo - bdc818e02f5df1e68fa4047b51167656fb997f9e authored about 4 years ago

Fix deduplication hashcode fields for Dependency Track scanner (#3822)

The Dependency Track scanner was configured to use `'component'` in its dedupe hashcode, but tha...

github.com/DefectDojo/django-DefectDojo - e66994a72deb701ff2a63ae3b9f5092a1eef54ba authored about 4 years ago

Fix google sheets + tests (#3747)

github.com/DefectDojo/django-DefectDojo - 1d870c7025b3d8a6815841fd0bac74bb2b24caa4 authored about 4 years ago

Bump django-extensions from 3.1.0 to 3.1.1 (#3816)

Bumps [django-extensions](https://github.com/django-extensions/django-extensions) from 3.1.0 to ...

github.com/DefectDojo/django-DefectDojo - 58bc6df97cbdd1c9a9263112262b70d9b7997d14 authored about 4 years ago

Bump cryptography from 3.3.1 to 3.4.1 (#3817)

Bumps [cryptography](https://github.com/pyca/cryptography) from 3.3.1 to 3.4.1.
- [Release note...

github.com/DefectDojo/django-DefectDojo - cd9cf952e0bd40e8267117e868aea037169c3559 authored about 4 years ago

Bump nginx from `0174730` to `c2ce58e` (#3818)

Bumps nginx from `0174730` to `c2ce58e`.

Signed-off-by: dependabot[bot] <[email protected]>
...

github.com/DefectDojo/django-DefectDojo - 291dac9a7ad4d9825c53fd639e7274a33041bd49 authored about 4 years ago

jira webhook: fix risk acceptance handling (#3769)

github.com/DefectDojo/django-DefectDojo - 6b2b8c8cc12ce0a821cf78a72d8911675688cebd authored about 4 years ago

product types: remove unused count prefetch (#3810)

github.com/DefectDojo/django-DefectDojo - ab889733aa022e7648f7f9d796b7a1fbbfa1de6f authored about 4 years ago

products: only prefetch github data if enabled (#3811)

* products: only prefetch github data if enabled

* linting

github.com/DefectDojo/django-DefectDojo - ff5c4bdfd87563976fd1a008f0b7a9592533b64c authored about 4 years ago

cleanup: remove __unicode__ everywhere (#3770)

Co-authored-by: Damien Carol <[email protected]>

github.com/DefectDojo/django-DefectDojo - f4b4730dfb85c477d7237714bff03acbfa4c2c1f authored about 4 years ago

fix(api): linting that lead to a bugfix in product type report via api (#3751)

vscode now has a new language server based on pylance, which is based on pyright, a type checker...

github.com/DefectDojo/django-DefectDojo - 8961f608102ff1b18d14fbfac4374680cee5e4ac authored about 4 years ago

Metrics query optimizations (#3730)

* Metrics: fix bug, undefined object "finding"

* Remove unused variables in Metrics views

...

github.com/DefectDojo/django-DefectDojo - 9e75930a92522231c1089776e20fadb539e0b6d0 authored about 4 years ago

Allow marking Qualys WAS security weaknesses as findings. (#3427)

* Allow marking Qualys WAS security weaknesses as findings.

* Appease the linter.

* Rename...

github.com/DefectDojo/django-DefectDojo - b983cfc0c6798b34f98f3ecf3d6cfa2930883888 authored about 4 years ago

DSOP parser: remove pandas and fix twistlock CVE (#3784)

github.com/DefectDojo/django-DefectDojo - 9457aaa8a5a6eb4d244b8c77f460a1a5955ca2ab authored about 4 years ago

Merge pull request #3806 from madchap/fix-diagram-master

update release diagram

github.com/DefectDojo/django-DefectDojo - f567f53aeeb33404762fd44a28a7d18362cb9d68 authored about 4 years ago

update diagram

github.com/DefectDojo/django-DefectDojo - 0baa90acf4a259b13367dd5889c544f6e24192ef authored about 4 years ago

Merge pull request #3805 from madchap/fix-diagram

updating release diagram

github.com/DefectDojo/django-DefectDojo - 0644e3c79338ec58030bdab69560f7d509f6793b authored about 4 years ago

updating diagram

github.com/DefectDojo/django-DefectDojo - f9f399d355d891ef7f43cdc183b95acb09ebf94a authored about 4 years ago

Merge pull request #3796 from damiencarol/fix_burp_xml

Fix Burp blank response bug #3795

github.com/DefectDojo/django-DefectDojo - fde67213f09fd32addffb8ce45f33bd0ad9b58c1 authored about 4 years ago

risk acceptance: fix notes bugs (#3768)

github.com/DefectDojo/django-DefectDojo - 6641af809b4741920c58f10e6adec3fd2570e632 authored about 4 years ago

Merge pull request #3801 from mtesauro/dev

Updated UI product name max chars to match model and API

github.com/DefectDojo/django-DefectDojo - ce1e5643183172c29b8beecc5b8b7228ecbd94d9 authored about 4 years ago

Updated UI product name max chars to match model and API

github.com/DefectDojo/django-DefectDojo - a9d94f02a8cb6e401f47d4f939a31356d5c2aceb authored about 4 years ago

product: prefetch verified count, add missing indexes 🏎️ (#3780)

* product: prefetch verified count

* prod type list: format active/verified count

* findin...

github.com/DefectDojo/django-DefectDojo - ed1960f97f3071096ba1c0ac359112ae1dcb2878 authored about 4 years ago

Fix Burp blank response bug #3795

github.com/DefectDojo/django-DefectDojo - f9f65e5bf4afa92c116c258c49bba96e2df4d28e authored about 4 years ago

Multiple Endpoint object query fix (#3700)

* Multiple Endpoint object query fix

* Pass on violations like the previous PR

* Change In...

github.com/DefectDojo/django-DefectDojo - 1238d9b9ea20d17d8dedc482dbeb7a6572abb11d authored about 4 years ago

AWS Prowler parser maintenance (#3763)

* AWS Prowler parser maintenance

* Improve severity management

github.com/DefectDojo/django-DefectDojo - 5c9bf309f7970026951fd17179ab77d6b6dba99b authored about 4 years ago

Bump google-auth from 1.24.0 to 1.25.0 (#3793)

Bumps [google-auth](https://github.com/googleapis/google-auth-library-python) from 1.24.0 to 1.2...

github.com/DefectDojo/django-DefectDojo - 7b4aa9732e40bc95ae830c994550a143d2dc33c4 authored about 4 years ago

Improve GitLab dependency scanning parser (#3786)

* Improve GitLab dependency scanning parser, adding component name and version for the findings....

github.com/DefectDojo/django-DefectDojo - 6cb5f44e893a109c5fdedcf2406d1d3aff74d201 authored about 4 years ago

Sonarqube HTML reports fix #3725 (#3734)

* Add more unit tests

* Fix #3725

* Update test_sonarqube_parser.py

* Fix teardown error

github.com/DefectDojo/django-DefectDojo - d7b5f72dc9ca9abcfe3570c5ab2dea66bfc26631 authored about 4 years ago

Merge pull request #3792 from DefectDojo/master-into-dev/1.12.1-1.13.0-dev

Release: Merge back 1.12.1 into dev from: master-into-dev/1.12.1-1.13.0-dev

github.com/DefectDojo/django-DefectDojo - f93c74fac252e7878e1e67513bd7a3416fe6eb8f authored about 4 years ago

Merge remote-tracking branch 'upstream/dev' into master-into-dev/1.12.1-1.13.0-dev

github.com/DefectDojo/django-DefectDojo - cf55716b7d13db8a55c2f52da298a1f1666f3568 authored about 4 years ago

Update versions in application files

github.com/DefectDojo/django-DefectDojo - b943c4a62d5083d045bb412dd37586dee47ec622 authored about 4 years ago

Update new-release-master-into-dev.yml

github.com/DefectDojo/django-DefectDojo - e90562e75d334d8c5fddb23bce15398e51c34615 authored about 4 years ago

Update new-release-master-into-dev.yml

github.com/DefectDojo/django-DefectDojo - 404fc4a241cc4f983a2ec9e238ae64b59b7dd33d authored about 4 years ago

Update new-release-master-into-dev.yml

github.com/DefectDojo/django-DefectDojo - 0ea5ac4a2020cadd88017b46651d30791d592e09 authored about 4 years ago

Update new-release-tag-docker.yml

github.com/DefectDojo/django-DefectDojo - 6a946dccdeecf0b5922665fa3fd53210d7531bb7 authored about 4 years ago

Update new-release-tag-docker.yml

github.com/DefectDojo/django-DefectDojo - e381c985b1cec1cad1c8de6a90e759d2c28fe1fa authored about 4 years ago

Update new-release-tag-docker.yml

github.com/DefectDojo/django-DefectDojo - 6d70b914a83df1363d55baa094567b04e3b7ecbc authored about 4 years ago

Update new-release-tag-docker.yml

github.com/DefectDojo/django-DefectDojo - 163a918eed70b00ff7773bc4273e9a0d4e9ce793 authored about 4 years ago

Merge pull request #3791 from DefectDojo/release/1.12.1

Release: Merge release into master from: release/1.12.1

github.com/DefectDojo/django-DefectDojo - 6bc794ecc375da8cb995cec01418a20ead31ed47 authored about 4 years ago

Merge branch 'master' into release/1.12.1

github.com/DefectDojo/django-DefectDojo - c1e067410a59cff92ec226149b8c5909a3b3744b authored about 4 years ago

Update versions in application files

github.com/DefectDojo/django-DefectDojo - f8c3a6af85780757c68a325b3ef07600f3b04624 authored about 4 years ago

Update new-release-pr.yml

github.com/DefectDojo/django-DefectDojo - eb151cce2387ddbb05f6f25bc2f9c5ce8a7b1a59 authored about 4 years ago

Security fixes for reports/notes/enpoints via APIv2 (#3790)

* api fixes

* fix for notes

* documentation fix

* reversed changes for import and notes

github.com/DefectDojo/django-DefectDojo - 1709a583e8ffe8bc6ee4e2c8c4b8af376b530c7c authored about 4 years ago

Add sample scan files for GitLab Dependency Scanning (#69)

github.com/DefectDojo/sample-scan-files - fbfd9ef8c9db5556e424f70b833e638d86526096 authored about 4 years ago

Update integrations.rst to add GitLab Dependency Scanning (#173)

Add new integration for GitLab Dependency Scanning.

github.com/DefectDojo/Documentation - 975761565a538128e74b1191e80f2d1033399dc0 authored about 4 years ago

add Detect Merge Conflicts workflow (#3789)

github.com/DefectDojo/django-DefectDojo - 566ae459594f3de1de877361b8b68fa37cf25db0 authored about 4 years ago

add Detect Merge Conflicts workflow

github.com/DefectDojo/django-DefectDojo - d7cc23e589fe9fc827ddb0fe73f43bf6787568d8 authored about 4 years ago

Bump bleach from 3.2.2 to 3.3.0 (#3783)

Bumps [bleach](https://github.com/mozilla/bleach) from 3.2.2 to 3.3.0.
- [Release notes](https:...

github.com/DefectDojo/django-DefectDojo - 010f5cfae377d8d3994836d329ba2164c77d4458 authored about 4 years ago

Safety parser: fix error in unit tests (#3788)

github.com/DefectDojo/django-DefectDojo - af065a3f5f60162c2a21b9dc7bd5bcd42bd702a8 authored about 4 years ago

Bump packageurl-python from 0.9.3 to 0.9.4 (#3785)

Bumps [packageurl-python](https://github.com/package-url/packageurl-python) from 0.9.3 to 0.9.4....

github.com/DefectDojo/django-DefectDojo - 0a13bf8d7a72d7d12246e20b8c6e889fc3753f31 authored about 4 years ago