github.com/DefectDojo/django-DefectDojo commits

Allow to specify the `Environment` when importing data (#3450)

This commit add the ability to specify the `Environment`
(prod, dev, ...) when importing scan d...

d2b123e61dedadde6584d2e81a36730d7ba15251 authored about 4 years ago by Romain Aviolat <[email protected]>

Merge pull request #3515 from DefectDojo/master

Update cancel-outdated-workflow-runs.yml

081946e3def27025da134d4234c65ba9bccaae03 authored about 4 years ago by valentijnscholten <[email protected]>

Update cancel-outdated-workflow-runs.yml

3415fff1801c61f8faa28cdfa7c34b5fcdf831f0 authored about 4 years ago by valentijnscholten <[email protected]>

Merge pull request #3514 from DefectDojo/master

gha: switch to pull_request from pull_request_target (#3512)

b28f8d69015f1c33830a9f752407d849ba3d1e95 authored about 4 years ago by valentijnscholten <[email protected]>

gha: switch to pull_request from pull_request_target (#3512)

* gha: switch to pull_request from pull_request_target

* gha: switch to pull_request from pul...

8ba4e95541c4ec33b44cb4d3cad030291b08206c authored about 4 years ago by valentijnscholten <[email protected]>

Merge remote-tracking branch 'upstream/master' into safer-prs-gha

bea7916c23b4fe37fa9f43c2aad4d105e15ebd92 authored about 4 years ago by Valentijn Scholten <[email protected]>

gha: switch to pull_request from pull_request_target

844dba82f06bb5fca056639af7af07cd1ca6500a authored about 4 years ago by Valentijn Scholten <[email protected]>

Merge pull request #3513 from DefectDojo/master

Update test-valentijn.yml

2d1d6ce9b89250ad39f7df8819c7b23cbc3bb133 authored about 4 years ago by valentijnscholten <[email protected]>

Update test-valentijn.yml

e663deede0c8f7f75987b82b2ca7a752979b30c0 authored about 4 years ago by valentijnscholten <[email protected]>

gha: switch to pull_request from pull_request_target

b1f5716c7b683717ab6bc90a640da5a0723a2cd6 authored about 4 years ago by Valentijn Scholten <[email protected]>

Bump coverage from 5.3 to 5.3.1 (#3509)

Bumps [coverage](https://github.com/nedbat/coveragepy) from 5.3 to 5.3.1.
- [Release notes](htt...

dec389f9d66e64ca1df5240712e877ca6e71e527 authored about 4 years ago by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bump nginx from 1.19.5-alpine to 1.19.6-alpine (#3510)

Bumps nginx from 1.19.5-alpine to 1.19.6-alpine.

Signed-off-by: dependabot[bot] <support@gith...

973a43c3f9264955e3d24a6e8558b3821e9c47b7 authored about 4 years ago by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Merge pull request #3511 from DefectDojo/master

Create test-valentijn.yml

aeaca15545f3d1c5d22397d98defdcbe1b7fbeb7 authored about 4 years ago by valentijnscholten <[email protected]>

Create test-valentijn.yml

176753f323849ff111e1463bdddff94c7af04a6b authored about 4 years ago by valentijnscholten <[email protected]>

Fix unit tests

2407b96a4f24b29e4b90387a735321f945563066 authored about 4 years ago by Damien Carol <[email protected]>

Add check on description in unit test

e38eb26eb1214327fd35839726342808e92cbe7a authored about 4 years ago by Damien Carol <[email protected]>

Add more unit test

05d4af92a3a9dfe8000db9b8f333ffb398792534 authored about 4 years ago by Damien Carol <[email protected]>

Add more unit tests

8b74d135b24c388aa93c6fc8f064037e3fcbe658 authored about 4 years ago by Damien Carol <[email protected]>

Fix unit tests

f173b458456a8afc98b2a878d334a2e7acc2e49a authored about 4 years ago by Damien Carol <[email protected]>

Add CWE management

a076f00d0af668f22f5c26850249d849c38c9ec8 authored about 4 years ago by Damien Carol <[email protected]>

Add better text management

79df0d7d67939aec3b02426b72e8a2898083ebb9 authored about 4 years ago by Damien Carol <[email protected]>

Fix Python formatting

b6a41da7860251b972c0ec1d1cb052acf6acff7f authored about 4 years ago by Damien Carol <[email protected]>

Add more unit tests

4a88b8bb994f35e567411a805177ef416f12ab5d authored about 4 years ago by Damien Carol <[email protected]>

fix severity

68525b403f34a68ce7eef894d268512a3fc2e68a authored about 4 years ago by Damien Carol <[email protected]>

fix rules not in the report

0f3081ab51c63f5392be003231200d6b095f1ee1 authored about 4 years ago by Damien Carol <[email protected]>

add more tests

011d98fd6ec5e790e7bdcdff0a543ec6bc4e404e authored about 4 years ago by Damien Carol <[email protected]>

fix formatting

38a98e0c8a6551dbfb9b8aad384b429e8032c745 authored about 4 years ago by Damien Carol <[email protected]>

Add a title for the test

393649820706b5dc378276b43f3c2dabb30366ee authored about 4 years ago by Damien Carol <[email protected]>

Add more tests

d673d732086ff029a336c93ed458f4282387a650 authored about 4 years ago by Damien Carol <[email protected]>

fix formatting

deb997a8174224274acbd604304a943609b63db0 authored about 4 years ago by Damien Carol <[email protected]>

fix formatting

decf8f52c571cc5a6072455224f7360baa5f537a authored about 4 years ago by Damien Carol <[email protected]>

Add more data

86e55f711261a0c9672a1c191c9a7f73040cd797 authored about 4 years ago by Damien Carol <[email protected]>

Fix formatting

c6ffbf213b52bc062cc8c5b77dc902d099a828c9 authored about 4 years ago by Damien Carol <[email protected]>

Fix formatting

4b1c2da7c524e3274523b205b17ce1c862eeb0bc authored about 4 years ago by Damien Carol <[email protected]>

Fix formatting

b0215425a0697bc0f1e5fa5eb3b7bd5229aa28ae authored about 4 years ago by Damien Carol <[email protected]>

First shot

6eb85fa0fc92adc51237967a996de8f8b22ff31e authored about 4 years ago by Damien Carol <[email protected]>

Allow use of ptvsd debugger when using k8s deployment (#3418)

* ptvsd ftw

* fix typo

* add link

c616ad16fe36284cc3d404acf6258ab55bb3fe33 authored about 4 years ago by Fred Blaise <[email protected]>

Bug fix: Add more unit tests for MobSF import #3479 (#3490)

7a785a204d6a5f50ab7108b8dbeca1275d4c8728 authored about 4 years ago by Damien Carol <[email protected]>

Merge pull request #3507 from DefectDojo/master

Update unit-tests.yml

b1c92b47534dd0d9aa044b6b1246723e15de84f4 authored about 4 years ago by valentijnscholten <[email protected]>

Update unit-tests.yml

f794e37e0d174e7028c6da979d00fab7d9fff49c authored about 4 years ago by valentijnscholten <[email protected]>

Merge pull request #3506 from DefectDojo/master

maintenance: Update unit-tests.yml

221acd973ea55975f20863d867b05396fb7beec1 authored about 4 years ago by valentijnscholten <[email protected]>

Update manusa/actions-setup-minikube action from v2.1.0 to v2.2.0 (.github/workflows/k8s-testing.yml) (#3505)

Co-authored-by: Renovate Bot <[email protected]>

adec5b5671cce357187b0cc957867ad59968abf1 authored about 4 years ago by renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Update unit-tests.yml

99111043c806ab6bd89cf7fc4ca0ac23e228a575 authored about 4 years ago by valentijnscholten <[email protected]>

Merge pull request #3504 from DefectDojo/master

move renovate.json (#3503)

11e575865e7246e4f0e196fadd04116e4d8c82c3 authored about 4 years ago by valentijnscholten <[email protected]>

move renovate.json (#3503)

* Create renovate.json

* Delete renovate.json

fcdd73e13756919cbc2305db3d69b827e4836324 authored about 4 years ago by valentijnscholten <[email protected]>

Add BlackDuck import functionality for License Risks that should be reviewed (#3247)

* Adding license risks for review, enhancing license risk descriptions

* syntax error fix

...

190424e353ac45c99a6a15c46f35fde59d5e46af authored about 4 years ago by WheelsVT <[email protected]>

Merge pull request #3502 from DefectDojo/master

maintenance: Update cancel-outdated-workflow-runs.yml

85bcfa7b2b843d82ea894df74914e6e382b1a583 authored about 4 years ago by valentijnscholten <[email protected]>

Update cancel-outdated-workflow-runs.yml

47256e090c189f78112043fb191eb5de4467b0f7 authored about 4 years ago by valentijnscholten <[email protected]>

Merge pull request #3501 from DefectDojo/master

maintenance: master into dev

4e4b65b9f1559dd985ba9f75795c42d0b66e7bdf authored about 4 years ago by valentijnscholten <[email protected]>

Update cancel-outdated-workflow-runs.yml

98f2dfa0f29d2234e334191b2d4ba21176712a6c authored about 4 years ago by valentijnscholten <[email protected]>

Update cancel-outdated-workflow-runs.yml

15e637c1fca64e89880a9eee5be3420cfee072a4 authored about 4 years ago by valentijnscholten <[email protected]>

Update cancel-outdated-workflow-runs.yml

6001b556370d6252c31336ac1ecc6d37cba1bac4 authored about 4 years ago by valentijnscholten <[email protected]>

Update cancel-outdated-workflow-runs.yml

691058e59b8d9ae32aa30189100037fd64f77c6e authored about 4 years ago by valentijnscholten <[email protected]>

Update cancel-outdated-workflow-runs.yml

074170db368f06a48f5bb3a2b8b7d955244a8f5d authored about 4 years ago by valentijnscholten <[email protected]>

Update cancel-outdated-workflow-runs.yml

5b6b8b026f558785e6d8b88f359115eb680b35c9 authored about 4 years ago by valentijnscholten <[email protected]>

Create cancel-outdated-workflow-runs.yml

3d0833ba22a5b3da51e5a8f0ab645ecebd0d0ab1 authored about 4 years ago by valentijnscholten <[email protected]>

enable search tests (#3495)

* enable search tests

06e5eaf9c95f025b59a01d98ed870d2b00944392 authored about 4 years ago by valentijnscholten <[email protected]>

Bump datatables.net-dt from 1.10.22 to 1.10.23 in /components (#3496)

Bumps [datatables.net-dt](https://github.com/DataTables/Dist-DataTables-DataTables) from 1.10.22...

58ad5aaf92343292e990976d7665a6d2ff6cee32 authored about 4 years ago by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bump datatables.net-bs from 1.10.22 to 1.10.23 in /components (#3498)

Bumps [datatables.net-bs](https://github.com/DataTables/Dist-DataTables-Bootstrap) from 1.10.22 ...

066df423dd4c669b6fe0c4e976f3678c7b6b4cc2 authored about 4 years ago by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Tag filtering + general search improvements (#3449)

* tags: add testcases

* tags: add testcases...

bdefba301fa1dff5220c13c7b6bfe3c15f9bdbc9 authored about 4 years ago by valentijnscholten <[email protected]>

Jira: Allow status changes from dojo to jira (#3483)

* Jira: Allow status changes from dojo to jira

* Broken linter

* Add Unit Tests

* Add d...

18df1a7d66478e33c5abe94d0f4a56134655ab04 authored about 4 years ago by Cody Maffucci <[email protected]>

securityContext related updates to Helm chart (#3343)

Also added in ability to generate an OpenShift SCC for nonroot if required.

OpenShift.enabled...

e3c5d65ef9444395bb2512e3f29e4aca9ed44942 authored about 4 years ago by Matt <[email protected]>

WebInspect Parser fails to process Issues without CWE and ReportSection with an empty SectionText (#3492)

* Fixing WebInspect parser mentioned in issue 3470
* Adding test cases to verify the fix for 3470

a28461e06fd2554956a716612adfadae35e670c5 authored about 4 years ago by Yassine Ilmi <[email protected]>

Update pull_request_template.md

Add check to rebase

71192f295d83cb976170a6089e2021033ae83e95 authored about 4 years ago by Fred Blaise <[email protected]>

Fix reports: print test names instead of test types - #3252 (#3402)

* Attempt to fix Issue #3252

* Better fix for issue #3252 + fixed product_type_pdf_report tem...

0d6c24d8450a64906acf814a5843d54bf9748b7a authored about 4 years ago by Yassine Ilmi <[email protected]>

tagulous/reports: fix old prefetch fields - take 2 (#3491)

* reports: remove old tagged_items prefetch

* ...

8b613b8cb323d28ff1f3dd58fd3e2cc67cc483f1 authored about 4 years ago by valentijnscholten <[email protected]>

Bump requests from 2.25.0 to 2.25.1 (#3484)

Bumps [requests](https://github.com/psf/requests) from 2.25.0 to 2.25.1.
- [Release notes](http...

5dec199b630dec5e31af6d6d2d121214739a7315 authored about 4 years ago by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

tagulous/reports: fix old prefetch fields (#3486)

* reports: remove old tagged_items prefetch

febd68a37ced681d58b811fe358f8b343ec24f78 authored about 4 years ago by valentijnscholten <[email protected]>

chore(deps): update rabbitmq:3.8.9 docker digest from 3.8.9 to 3.8.9 (docker-compose.yml) (#3487)

Co-authored-by: Renovate Bot <[email protected]>

eb69b2e7638369fa75533587ea57b8d9fb04890c authored about 4 years ago by renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

jira: add api test for adding note/comment (#3482)

ff8b33e8d3aec9969c22d4c52f10eb94e715e2a7 authored about 4 years ago by valentijnscholten <[email protected]>

Fix exception during excess duplicate deletion tasks (#3480)

* delete duplicates: use default for max dupes value

* delete duplicates: check max dupes val...

fa5366e66eae77d77f06d0d50802451a6317d803 authored about 4 years ago by valentijnscholten <[email protected]>

jira: don't add notes when creating/linking findings (#3481)

91d87c3a120ae77e4f49375bc101a5e1f259e658 authored about 4 years ago by valentijnscholten <[email protected]>

logging: add DD_LOG_LEVEL setting (#3439)

a263200bac8bbf2fb78c1c68a3f0ce91dc4a1e9d authored about 4 years ago by valentijnscholten <[email protected]>

chore(deps): update stefanzweifel/git-auto-commit-action action from v4.7.2 to v4.8.0 (.github/workflows/plantuml.yml) (#3476)

Co-authored-by: Renovate Bot <[email protected]>

8f1689cd47cee795ad9e22702c4095a73e84a84b authored about 4 years ago by renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Fix popup message on SLA displays (#3477)

* Fix popup message on SLA displays

* Fix typo

Co-authored-by: Maffooch <codymaffucci@Cody...

0263543abc887cabf069ac8b708c9e074bb45b2c authored about 4 years ago by Cody Maffucci <[email protected]>

fix more reports stuff (#3448)

dee0f4b3bf2bc4d3fe1cdcc111695fc1c31d2fcb authored about 4 years ago by valentijnscholten <[email protected]>

replace django-tagging by django-tagulous (#3333)

f8e7cd26abd5ada9aec70cf63db8cf3fcf360d40 authored about 4 years ago by valentijnscholten <[email protected]>

Merge pull request #3468 from alles-klar/fix-import-scans

apiv2: fix endpoint status creation during scan import

ba29ff0017089db5d1109ac51774c7061d0fe442 authored about 4 years ago by Fred Blaise <[email protected]>

fix(apiv2): scan import

https://github.com/DefectDojo/django-DefectDojo/pull/2983 introduced bug (maby a typo?) which ca...

3e8284f7e36da7d4fa8516c625509b83b02dd622 authored about 4 years ago by Jannik Jürgens <[email protected]>

Tweaked Fortify Parser To Handle Missing Code Snippet For Finding (#3461)

* Fixed issue with Fortify parser where the import will fail if there is no Primary.Snippet valu...

8b9a6b6ef336ddff65ac7ae1d597bb0ca9ee22ab authored about 4 years ago by Ian Coleman <[email protected]>

Bump google-auth from 1.23.0 to 1.24.0 (#3465)

Bumps [google-auth](https://github.com/googleapis/google-auth-library-python) from 1.23.0 to 1.2...

927be9dbdb0c15dc3901042b3c88ea0be204e738 authored about 4 years ago by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bump humanize from 3.1.0 to 3.2.0 (#3466)

Bumps [humanize](https://github.com/jmoiron/humanize) from 3.1.0 to 3.2.0.
- [Release notes](ht...

b6886cf1d0accbe3f36a878ef6dfa970ba1155eb authored about 4 years ago by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bump nginx from `210a2dd` to `6ceeeab` (#3467)

Bumps nginx from `210a2dd` to `6ceeeab`.

Signed-off-by: dependabot[bot] <[email protected]>
...

e09436e7532c91a4d826c9a7c5cfb0acde543a79 authored about 4 years ago by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Expose nginx status to prometheus in Kubernetes (helm) (#3260)

This PR add the possibility to expose nginx status to prometheus using the nginx prometheus expo...

0d7c38be02bd0131e7599fb8f8e1c03df7278421 authored about 4 years ago by Frédéric Marchand <[email protected]>

make build image for nginx the same as django (#3415)

* make build image for nginx the same as django

* Update Dockerfile.nginx

abf6daf830dfa4e485921f56e5ba9f6a605cbdfe authored about 4 years ago by valentijnscholten <[email protected]>

chore(deps): update mysql:5.7.32 docker digest to b3b2703 (docker-compose.yml) (#3462)

Co-authored-by: Renovate Bot <[email protected]>

c9ff786d1535caab762458df4dd8026434ae27c3 authored about 4 years ago by renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update rabbitmq:3.8.9 docker digest to 70dcefa (docker-compose.yml) (#3463)

Co-authored-by: Renovate Bot <[email protected]>

16448ea721fefeda5cb36bd853319c7a31f5dc53 authored about 4 years ago by renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Remove call to old method and use new method (#3453)

Co-authored-by: Romain Jufer <[email protected]>

fffa77f153361985760052c821537c52980d5911 authored about 4 years ago by Romain <[email protected]>

Bump bleach from 3.1.0 to 3.2.1 (#3458)

Bumps [bleach](https://github.com/mozilla/bleach) from 3.1.0 to 3.2.1.
- [Release notes](https:...

35a708e3a5567b274f01fa5dbb27e85bea7cfb96 authored about 4 years ago by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bump pandas from 1.1.2 to 1.1.5 (#3459)

Bumps [pandas](https://github.com/pandas-dev/pandas) from 1.1.2 to 1.1.5.
- [Release notes](htt...

667ea32838477a2e370d2db999e41aa9a45f2931 authored about 4 years ago by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

pin all python / pip dependencies (#3457)

* pin all python / pip dependencies

* Update requirements.txt

f4519c2e7560eeb3efb992b9a7b7ffd077685b71 authored about 4 years ago by valentijnscholten <[email protected]>

Revert "Revert "release workflow: simplify matrix (#3416)" (#3454)" (#3456)

This reverts commit 21dd36e0abcab7c8503d7de5cc2a0c7cc6af2757.

e274d0bbc2a79fd5550038060378df952ee34770 authored about 4 years ago by valentijnscholten <[email protected]>

Revert "release workflow: simplify matrix (#3416)" (#3454)

This reverts commit e6430921486a0af316d75db676f2b479b60ddb10.

21dd36e0abcab7c8503d7de5cc2a0c7cc6af2757 authored about 4 years ago by valentijnscholten <[email protected]>

release workflow: simplify matrix (#3416)

e6430921486a0af316d75db676f2b479b60ddb10 authored about 4 years ago by valentijnscholten <[email protected]>

Allow Info findings to be pushed to JIRA without SLA (#3435)

* Allow Info findings to be pushed to JIRA without SLA

Co-authored-by: Maffooch <codymaffucci...

5f62be4879ef160c487475b26e34e7b45f9abfac authored about 4 years ago by Cody Maffucci <[email protected]>

Bump mysqlclient from 2.0.1 to 2.0.2 (#3443)

Bumps [mysqlclient](https://github.com/PyMySQL/mysqlclient) from 2.0.1 to 2.0.2.
- [Release not...

d4d50a90e94bd72d903e4e72b6a1721e13470e22 authored about 4 years ago by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bump cryptography from 3.3 to 3.3.1 (#3444)

Bumps [cryptography](https://github.com/pyca/cryptography) from 3.3 to 3.3.1.
- [Release notes]...

795a77bf5267d99c3e53dd600e9fcb369544f50b authored about 4 years ago by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Update README Valentijn (#3440)

765779b7d9caeea7509ef7f4c62627a18ef2a246 authored about 4 years ago by valentijnscholten <[email protected]>

Bump cryptography from 3.2.1 to 3.3 (#3434)

Bumps [cryptography](https://github.com/pyca/cryptography) from 3.2.1 to 3.3.
- [Release notes]...

013a7e9109abdaf74c360f2aa962206193041e67 authored about 4 years ago by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Nikto parser for scan of multiple hosts (#3428)

0762a1ba28c476b402136fa1adbadbf012e9e387 authored about 4 years ago by Stefan Fleckenstein <[email protected]>

Ecosyste.ms: OpenCollective

github.com/DefectDojo/django-DefectDojo