DefectDojo commits | Ecosyste.ms: OpenCollective

build(deps): bump google-api-python-client from 1.12.5 to 1.12.6

Bumps [google-api-python-client](https://github.com/googleapis/google-api-python-client) from 1....

github.com/DefectDojo/django-DefectDojo - 07045f76ac264a3b89ef12f56faf636c1c7503e2 authored about 4 years ago

Reintroduce HTML report builder (#3250)

* Reintroduce HTML report builder

* Fix AccessLint qualms

* Add report builder unit test
...

github.com/DefectDojo/django-DefectDojo - 68426db5ce27daa81d34480799629df5a36f0162 authored about 4 years ago

Set flag for auto refresh of alert/counts (#3275)

* Set flag for auto refresh of alert/counts

* Appease AccessLine

* Set default to True

...

github.com/DefectDojo/django-DefectDojo - eb70d8726779ec34715456cfaff23d52ac0c3c95 authored about 4 years ago

Merge pull request #3282 from madchap/jira-reporter-fix

Fix JIRA owner instead of reporter

github.com/DefectDojo/django-DefectDojo - ba13c599e260fc0b99e9f382307ada2aa27b73ae authored about 4 years ago

owner instead of reporter

github.com/DefectDojo/django-DefectDojo - 984626900ec0ee6b9398b1672d857d362708ec38 authored about 4 years ago

settings.dist.py: reduce default log level from DEBUG to INFO (#3280)

github.com/DefectDojo/django-DefectDojo - 3a47cfb1f02e833d423aac34c297465d3a723a5c authored about 4 years ago

Commented out print statement 'ready(): initializing watson' as it breaks 'manage.py dumpdata' (#3274)

* Commented out print statement 'ready(): initializing watson' as it breaks 'manage.py dumpdata'...

github.com/DefectDojo/django-DefectDojo - caa67b88e38e4733e0f396671e917e7f91b71902 authored about 4 years ago

jira: use correct url for dojo_alert notification (#3273)

* Update views.py

github.com/DefectDojo/django-DefectDojo - 4bee37af7e550e4b41ee5d38a8bb90494de2aa66 authored about 4 years ago

build(deps): bump asteval from 0.9.20 to 0.9.21 (#3266)

Bumps [asteval](https://github.com/newville/asteval) from 0.9.20 to 0.9.21.
- [Release notes](h...

github.com/DefectDojo/django-DefectDojo - 004d75885d4448e1148ca9e1b885e73e0a93b022 authored about 4 years ago

Update open finding definition on product level (#3267)

Co-authored-by: Maffooch <[email protected]>

github.com/DefectDojo/django-DefectDojo - 8ee3fbf8654a6fdb23fa4367e7a92dcfd638b10b authored about 4 years ago

uwsgi: increase default buffer-size (#3269)

* increase default uwsgi buffer-size from 4k to 8k

* Update entrypoint-uwsgi-dev.sh

* incr...

github.com/DefectDojo/django-DefectDojo - fbe17e5ab19d1ade021899b0d682d40af75cddc7 authored about 4 years ago

JIRA: Allow config per engagement, incl big JIRA refactor (#3200)

To allow users to have some flexibility in their JIRA setup / mapping to Defect Dojo, we'd decid...

github.com/DefectDojo/django-DefectDojo - addeb0b8dfcd0a8aaaa256bda162aaceb33bf02f authored about 4 years ago

Change encoding from utf-8 to utf-8-sig (#2583)

To fix error on unexpected BOM in vulnerabilities json exported from Netsparker 5.8

uwsgi_1 ...

github.com/DefectDojo/django-DefectDojo - 070833fbe7b54642ddecb273836674cb1465a8ba authored about 4 years ago

Celery: only send model ids and not full instances (#3092)

* celery: only send model ids, not full model instances

github.com/DefectDojo/django-DefectDojo - 5b8694a456a97df7f7015329eae162e9a9ca3493 authored about 4 years ago

Merge pull request #4 from DefectDojo/dev

Rev version number for new release

github.com/DefectDojo/godojo - 0f791723233830480a0c3ce938dd21c96c17ba94 authored about 4 years ago

Rev version number for new release

github.com/DefectDojo/godojo - 6160b784f63c6fad89bc429937c707c71aced84d authored about 4 years ago

Merge pull request #3 from DefectDojo/dev

Merge Dev back to master in preparation for minor update

github.com/DefectDojo/godojo - 2b78b2cb302f877153de31aec5643d45a6a9f5a0 authored about 4 years ago

Utilize Install.OS.User and group for chown when embedded

github.com/DefectDojo/godojo - d3c78b1b707aaafd4c5a86f8964690c5905181b7 authored about 4 years ago

Add ability to set a specific temporary directory

github.com/DefectDojo/godojo - 0077d2897e806548e9c524a5f89676b61f9eaae8 authored about 4 years ago

Add ability to run godojo as non-root for some corner cases

github.com/DefectDojo/godojo - 29e91bd9ad733f1042c502ae4fbc1f283e63888a authored about 4 years ago

Merge pull request #2 from DefectDojo/dev

Merge code cleanup to master

github.com/DefectDojo/godojo - 0a1c1aae0fcfb0f694178e1d4d8255587cfcb5ea authored about 4 years ago

Cleaning up errors in goreportcard.com

github.com/DefectDojo/godojo - cf4fd49b15c31d5d23f8fee73d95a3840d7ac145 authored about 4 years ago

Update integrations.rst

github.com/DefectDojo/Documentation - 50fdae0f07ca3d9fa1c9b9cc5fe623fb9d9ab29a authored about 4 years ago

github doc updated (#110)

* github doc updated

* Update integrations.rst

* Update integ...

github.com/DefectDojo/Documentation - 229b56430df1bc9f33feeac06b49c6b4a4fd6f45 authored about 4 years ago

Update integrations.rst

github.com/DefectDojo/Documentation - 5b601d337cae50aba185cdf54d47cec7a5efdfd7 authored about 4 years ago

Update sphinx-validate.yml

github.com/DefectDojo/Documentation - 23a0d281b9a412dce44cb8364168ab76b7339cc8 authored about 4 years ago

Update sphinx-validate.yml

github.com/DefectDojo/Documentation - 90600225bb395423bc5e73d40523d3be45326774 authored about 4 years ago

Update conf.py

github.com/DefectDojo/Documentation - 2c98b78c6b51be82c620f764f2e24415c615b039 authored about 4 years ago

Create requirements.txt

github.com/DefectDojo/Documentation - 82f861fa29c33266348a84180f80cdc2140a87d4 authored about 4 years ago

Update conf.py

github.com/DefectDojo/Documentation - e224d8217c194fd13a69b4fb17c21e7aeb8fcda1 authored about 4 years ago

Update sphinx-validate.yml

github.com/DefectDojo/Documentation - e7dc552d6dd4db3d3affd5d9a7d4886faa03d4b8 authored about 4 years ago

Update sphinx-validate.yml

github.com/DefectDojo/Documentation - 1fe7a98f3372496532f03b6d268b55706ce4ed18 authored about 4 years ago

Create sphinx-validate.yml

github.com/DefectDojo/Documentation - ee7fb7489e7a588b0c69476b2971aa66c611b937 authored about 4 years ago

Merge pull request #3265 from DefectDojo/master-into-dev/1.10.0-dev

Release: Merge back master into dev from: master-into-dev/1.10.0-dev

github.com/DefectDojo/django-DefectDojo - 215d3c938cb6f13e7f0170fb6bb5e9a32343c29d authored about 4 years ago

Update versions in application files

github.com/DefectDojo/django-DefectDojo - 2f9982f22ba7b465a387d4566cd4b8052998f30b authored about 4 years ago

release 1.9.3 (#154)

github.com/DefectDojo/Documentation - b46cac28e846537ad874a1374c0f9ff3a14e6452 authored about 4 years ago

combine 1.9.x (#153)

* combine 1.9.x

* Update upgrading.rst

github.com/DefectDojo/Documentation - 3d24c97ea5080774fa5168b6d22a51da12c5e84c authored about 4 years ago

Merge pull request #3264 from DefectDojo/release/1.9.3

Release: Merge release into master from: release/1.9.3

github.com/DefectDojo/django-DefectDojo - a35603ca84030998e99512286e51ccab257b997b authored about 4 years ago

Update versions in application files

github.com/DefectDojo/django-DefectDojo - a1d489069aa0347d1a05bce0fe24a92226d70a96 authored about 4 years ago

Merge pull request from GHSA-8q8j-7wc4-vjg5

jira: hide passwords in API response and admin portal

github.com/DefectDojo/django-DefectDojo - d1f3cdfdd82e8bb1359e52fa3dfa463fcc187f16 authored about 4 years ago

Merge pull request #3231 from DefectDojo/renovate/mysql-1.x

Update helm chart mysql from 1.6.7 to v1.6.9 (helm/defectdojo/requirements.yaml)

github.com/DefectDojo/django-DefectDojo - c36ddef1ebf12afca0cfdb28111274af71ce174d authored about 4 years ago

Merge pull request #3262 from DefectDojo/dependabot/pip/dev/asteval-0.9.20

build(deps): bump asteval from 0.9.19 to 0.9.20

github.com/DefectDojo/django-DefectDojo - 2ec3e87b4197d90afb97c0582ef133a3e40f20f8 authored about 4 years ago

Merge pull request #3259 from DefectDojo/dependabot/pip/dev/urllib3-1.26.2

build(deps): bump urllib3 from 1.26.1 to 1.26.2

github.com/DefectDojo/django-DefectDojo - b91a218d33bffcfbea8a45edbe745d54958569f9 authored about 4 years ago

Merge pull request #3263 from DefectDojo/valentijnscholten-patch-2

fix reports: add missing Q import

github.com/DefectDojo/django-DefectDojo - d9c095fa23bb45c1d79af35d9f12a559f5bc5580 authored about 4 years ago

fix reports: add missing Q import

github.com/DefectDojo/django-DefectDojo - 636ef08ffa855fe0bb2f5dc83a99a9bac2fc32f3 authored about 4 years ago

build(deps): bump asteval from 0.9.19 to 0.9.20

Bumps [asteval](https://github.com/newville/asteval) from 0.9.19 to 0.9.20.
- [Release notes](ht...

github.com/DefectDojo/django-DefectDojo - 8391ea2ae04a9a889d56119572239918d483d455 authored about 4 years ago

Update helm chart mysql from 1.6.7 to v1.6.9 (helm/defectdojo/requirements.yaml)

github.com/DefectDojo/django-DefectDojo - 0dfc0d5df4d1777ceea89baed2c5999cc3bf2c1d authored about 4 years ago

advisory: unittests

github.com/DefectDojo/django-DefectDojo - 6a844a299b2c6fc4f80f6df698bf5af0b53aaf47 authored about 4 years ago

advisory: do not return jira password in API v1 response

github.com/DefectDojo/django-DefectDojo - 8901b607e7ea3eaa627187830a13aab5905161e2 authored about 4 years ago

advisory: use password field widget for jira and tool password

github.com/DefectDojo/django-DefectDojo - 5fbf6ce5379c5ad36c65f405d57e67310aa68d42 authored about 4 years ago

advisory: do not return jira password in API v1 response

github.com/DefectDojo/django-DefectDojo - 64c800407906a2ad39469cc83b45a33438c655c3 authored about 4 years ago

advisory: use password field widget for jira and tool password

github.com/DefectDojo/django-DefectDojo - 0f71ebd01e837b36faaf48329d736c3977c3b07a authored about 4 years ago

advisory: do not return jira password in API response

github.com/DefectDojo/django-DefectDojo - 66375b152048dfab75955970cfde8b3cff7c694e authored about 4 years ago

build(deps): bump urllib3 from 1.26.1 to 1.26.2

Bumps [urllib3](https://github.com/urllib3/urllib3) from 1.26.1 to 1.26.2.
- [Release notes](htt...

github.com/DefectDojo/django-DefectDojo - 887f81c438065f3a40d9edee70dabd5e4b99c501 authored about 4 years ago

Remove excessive qs in report generator (#3233)

Fixes #3221

github.com/DefectDojo/django-DefectDojo - c15f65d37979888d7ac14a1a3a8614acf0e8950e authored about 4 years ago

Update defect_dojo_sample_file.json to work with recent versions (#3239)

* Update demo data file

Co-authored-by: Maffooch <[email protected]>

github.com/DefectDojo/django-DefectDojo - 47b80ec6f65df375f519b8a8206954bb0a8bc054 authored about 4 years ago

allow bulk delete in view_test (#3227)

* allow bulk delete in view_test

Co-authored-by: Cody Maffucci <[email protected]...

github.com/DefectDojo/django-DefectDojo - 8634dd71ea9acb1fde12aeac582cc450c1cb1d9f authored about 4 years ago

Merge pull request #3255 from DefectDojo/master

GHA-k8s: merge master into dev

github.com/DefectDojo/django-DefectDojo - bcb31c292f1cfb7e912e03f4ea1c42d7b920249f authored about 4 years ago

minikube/k8s action improvement (#3251)

* Refactoring gitlab k8s action

* Uncommenting branches

Co-authored-by: Dubravko Sever <du...

github.com/DefectDojo/django-DefectDojo - d7523e1dc34af47185830c13bfa7aedfc667dd60 authored about 4 years ago

Render URL's as HTML links in findings (#3054)

* Add HTML links to file_path and description

github.com/DefectDojo/django-DefectDojo - 4b680019536f5e3d5505413d20e7fb20802a0eae authored about 4 years ago

Fix flake8 format

github.com/DefectDojo/django-DefectDojo - 65f702f07a8c29b0f0aea44e6e73863ba7b63b3d authored about 4 years ago

Remove useless patch method

github.com/DefectDojo/django-DefectDojo - 92cf050310fe12adabbf8c40099766cf624b0534 authored about 4 years ago

Fix flake8 format

github.com/DefectDojo/django-DefectDojo - 638cafff9012f1c17f9fa0822d6abe664e72e95a authored about 4 years ago

Add test for metadata operation on findings endpoints

github.com/DefectDojo/django-DefectDojo - d70ef9232056d137ffdd31b52d08ba9bb3ceafa3 authored about 4 years ago

Add metadata query on findings endpoints

github.com/DefectDojo/django-DefectDojo - c6c1b521ab4c66a10a10c846814b9c63948dc4c7 authored about 4 years ago

Fixes mouse-over help for product notifications #2905 (#3128)

Co-authored-by: Marcos Valle <[email protected]>

github.com/DefectDojo/django-DefectDojo - b37c3f3936493fb4a24f744b79ecd622812b3591 authored about 4 years ago

build(deps): bump django-crum from 0.7.8 to 0.7.9 (#3232)

Bumps [django-crum](https://github.com/ninemoreminutes/django-crum) from 0.7.8 to 0.7.9.
- [Rel...

github.com/DefectDojo/django-DefectDojo - 8ecde16590585989cca99f6cd1526799e1db0dc0 authored about 4 years ago

build(deps): bump urllib3 from 1.26.0 to 1.26.1 (#3248)

Bumps [urllib3](https://github.com/urllib3/urllib3) from 1.26.0 to 1.26.1.
- [Release notes](ht...

github.com/DefectDojo/django-DefectDojo - a40a11bcd612f642a5167474213994896bec877b authored about 4 years ago

build(deps): bump easymde from 2.12.1 to 2.13.0 in /components (#3249)

Bumps [easymde](https://github.com/Ionaru/easy-markdown-editor) from 2.12.1 to 2.13.0.
- [Relea...

github.com/DefectDojo/django-DefectDojo - 2313f88e4678504255b2d39a9a7773dfe15debf4 authored about 4 years ago

Merge pull request #3235 from valentijnscholten/eps-prefetch1

endpoint_status: prefetch part1

github.com/DefectDojo/django-DefectDojo - db6f588a9ab3c4cb40b81077f4601d1b77402de8 authored about 4 years ago

Merge pull request #3242 from DefectDojo/master

Merge master to dev for bitnami helm repo

github.com/DefectDojo/django-DefectDojo - a92b350c3d00e2d94ca7300a4471d30cd21a9532 authored about 4 years ago

npm audit: refuse npm7 or high as it misses most imporant fields (#3145)

github.com/DefectDojo/django-DefectDojo - 67dac07268614f02fd7fb31ccd63c850ab471e38 authored about 4 years ago

build(deps): bump urllib3 from 1.25.11 to 1.26.0 (#3237)

Bumps [urllib3](https://github.com/urllib3/urllib3) from 1.25.11 to 1.26.0.
- [Release notes](h...

github.com/DefectDojo/django-DefectDojo - bd7b58183fd3d2c73358731dc8807406778110ba authored about 4 years ago

Merge pull request #3131 from mgm-sp/key-improperly-configured

Raise ImproperlyConfigured exception if no DD_SECRET_KEY is set

github.com/DefectDojo/django-DefectDojo - b45719b395551f65d2f6332cc33bf9d084bf7a0c authored about 4 years ago

add datetime to logformat (use verbose) (#3133)

github.com/DefectDojo/django-DefectDojo - 4a0f05e37a70fb97444bd1853ec14075ea457744 authored about 4 years ago

Improve Qualys WAS parser. (#3150)

* Improve Qualys WAS parser.

* Handle timezones in parser.

* Add vuln_id_from_tool for Qua...

github.com/DefectDojo/django-DefectDojo - d4e9ab4613ed0d4efb23362b08bbe01ad6da55e5 authored about 4 years ago

build(deps): bump nginx from 1.19.3-alpine to 1.19.4-alpine (#3214)

Bumps nginx from 1.19.3-alpine to 1.19.4-alpine.

Signed-off-by: dependabot-preview[bot] <supp...

github.com/DefectDojo/django-DefectDojo - 1954f5330306681fc5a6450b11099bc5c78e7300 authored about 4 years ago

Improve default date handling. (#3156)

* Improve default date handling.

* Always use date from finding, even if default.

Co-autho...

github.com/DefectDojo/django-DefectDojo - 00b15fa6b167efcf4c507fa0698b52647928eba0 authored about 4 years ago

Add finding > engagement and engagement > status filters. (#3228)

* Add finding > engagement and engagement > status filters.

* whitespace

* Remove duplicat...

github.com/DefectDojo/django-DefectDojo - 8f4e37320ab1d8f4f78775aeb1f0a40a8e2b4098 authored about 4 years ago

Fix CWE URL on the finding page. (#3229)

Co-authored-by: Ian Walton <[email protected]>

github.com/DefectDojo/django-DefectDojo - e987f59a51273e5b0efa690fc0a0949c7bbb48ff authored about 4 years ago

remove unused new_eng view (#3215)

github.com/DefectDojo/django-DefectDojo - 58c3c9ecb1de0c414e64ef5728230e759c15bffd authored about 4 years ago

Merge pull request #3213 from valentijnscholten/fix-sys-settings-secret

system setting: set random secret when jira secret is disabled and empty

github.com/DefectDojo/django-DefectDojo - 0e7ec18850abc8b30f11a8a04a6e41d6e8ba478a authored about 4 years ago

Update k8s-testing.yml

add bitnami helm repo

github.com/DefectDojo/django-DefectDojo - 7a88a306ef098c90aa5893c8e81cfbff6577a7c2 authored about 4 years ago

Merge pull request #3238 from madchap/add-bitnami-gha

Add bitnami to helm repo list

github.com/DefectDojo/django-DefectDojo - 82ffa84de752502fe53d3835e7530881066c8678 authored about 4 years ago

add bitnami to helm repo list

github.com/DefectDojo/django-DefectDojo - 8de391429cb41f21e30fc9eec95d61fe21321545 authored about 4 years ago

endpoint_status: prefetch part1

github.com/DefectDojo/django-DefectDojo - 9635d18c5e4c154733f1839f3b585c61585a15e1 authored about 4 years ago

endpoint_status: prefetch part1

github.com/DefectDojo/django-DefectDojo - 76d19447205483a3f7dcf96d4c11f4b9c53d7b46 authored about 4 years ago

Merge pull request #3230 from DefectDojo/master

GHA workflow sync master->dev

github.com/DefectDojo/django-DefectDojo - 53963df27e1b6952ba6502f0860c24c21e196355 authored about 4 years ago

GHA: Improve status check after helm deployment (#3219)

github.com/DefectDojo/django-DefectDojo - 835fd697514047699d76e2668f862b303a239e6b authored about 4 years ago

Remove old logging causing issues with celery logging (#3202)

* clean up old code and adjust celery option

* remove old basic logging config

github.com/DefectDojo/django-DefectDojo - 4b934222ad55fd2d259da247e15d73b862d9ff39 authored about 4 years ago

add ORT integration (#151)

* add ORT integration

* Add link url to sample

github.com/DefectDojo/Documentation - 7087563213826cd671b4515e5c1379b10b1dd44a authored about 4 years ago

add OSS Review Toolkit parser (ORT) (#3177)

* add ORT importer

github.com/DefectDojo/django-DefectDojo - 7f5746b7389d64b9876d4a4f190be2ebe68b3db0 authored about 4 years ago

Merge pull request #62 from fb33/master

add ORT sample

github.com/DefectDojo/sample-scan-files - c4e7ccce067e8cb90225b802ade642fbd430251d authored about 4 years ago

add ORT sample

github.com/DefectDojo/sample-scan-files - 121533ab3adb926c3728a3ce4584acdc74c704ac authored about 4 years ago

check if finding sla is enabled before running notify task (#3212)

github.com/DefectDojo/django-DefectDojo - 8cfe7420febaf65fadf3df77093aed4b3db1512e authored about 4 years ago

system setting: set random secret when jira secret is disabled and empty

github.com/DefectDojo/django-DefectDojo - 79c654655c8b1aa35a59f302614b13d2e154116b authored about 4 years ago

Fix missing base64 import (#3203)

The Burp plugin seems to be breaking because of the missing import.

github.com/DefectDojo/django-DefectDojo - 320b13cf568b668f34529899fdf36552a0dd4f75 authored about 4 years ago

APIv2: Allow updating users and set is_superuser (#3160)

github.com/DefectDojo/django-DefectDojo - 921722c20963865a711713d4d44dbbd0ffb11aab authored about 4 years ago

use own org (#3199)

github.com/DefectDojo/django-DefectDojo - 7a81ff2b80bc50f4cf5adbd01d6f622c068ccd36 authored about 4 years ago

k8s stable repo doc change (#3194)

github.com/DefectDojo/django-DefectDojo - 68fd26adfc9aa7cc4aee11c84d5470a8069b1a93 authored about 4 years ago