github.com/DefectDojo/django-DefectDojo issues

Bump python from 3.11.9-slim-bookworm to 3.12.7-slim-bookworm

dependabot[bot] opened this pull request 4 months ago

Start new engagement and add 'symbolic links' to vulnerabilties from other engagements or tests.

moatn opened this issue 4 months ago

:tada: Add USN notices for vulnids

manuel-sommer opened this pull request 4 months ago

Mend SCA imports contain locations which are similar to filePaths for SAST scans

testaccount90009 opened this pull request 4 months ago

Wrong number of findings in home dashboard (inversion between created and date)

Camille-Arsac opened this issue 4 months ago

Bump datatables.net from 1.13.4 to 2.1.8 in /components

dependabot[bot] opened this pull request 4 months ago

Bump datatables.net-dt from 1.13.4 to 2.1.8 in /components

dependabot[bot] opened this pull request 4 months ago

Bump boto3 from 1.35.32 to 1.35.33

dependabot[bot] opened this pull request 4 months ago

Jira Push All Issues: Improve help text

Maffooch opened this pull request 4 months ago

Fix tag creation bug in FindingTemplateSerializer (letters instead of full tags)

StephanPillhofer opened this pull request 4 months ago

Bump boto3 from 1.35.31 to 1.35.32

dependabot[bot] opened this pull request 4 months ago

Update Helm release postgresql from 15.5.38 to v16 (helm/defectdojo/Chart.yaml)

renovate[bot] opened this pull request 4 months ago

Compare trivy results cluster_name with None

paraddise opened this pull request 4 months ago

Import of Trivy Scan with empty ClusterName fails

paraddise opened this issue 4 months ago

Bump python-gitlab from 4.11.1 to 4.12.2

dependabot[bot] opened this pull request 4 months ago

Bump vobject from 0.9.7 to 0.9.8

dependabot[bot] opened this pull request 4 months ago

Bump json-log-formatter from 1.0 to 1.1

dependabot[bot] opened this pull request 4 months ago

Bump cpe from 1.3.0 to 1.3.1

dependabot[bot] opened this pull request 4 months ago

Bump boto3 from 1.35.30 to 1.35.31

dependabot[bot] opened this pull request 4 months ago

Update busybox Docker tag from 1.36.1 to v1.37.0 (docker-compose.override.unit_tests_cicd.yml)

renovate[bot] opened this pull request 4 months ago

Update AWS SecurityHub ASFF Parser to include Impact

testaccount90009 opened this pull request 4 months ago

Update manusa/actions-setup-minikube action from v2.11.0 to v2.12.0 (.github/workflows/k8s-tests.yml)

renovate[bot] opened this pull request 4 months ago

Error on worker after upgrading to 2.38.4

sebglon opened this issue 4 months ago

Bump python-gitlab from 4.11.1 to 4.12.1

dependabot[bot] opened this pull request 4 months ago

Bump boto3 from 1.35.29 to 1.35.30

dependabot[bot] opened this pull request 4 months ago

:tada: Add vulnerability Id to ssh-audit

manuel-sommer opened this pull request 4 months ago

Defectdojo Uploading a large number of findings causes error (a foreign key constraint fails)

nedakheiri opened this issue 4 months ago

Bump boto3 from 1.35.28 to 1.35.29

dependabot[bot] opened this pull request 4 months ago

Bump asteval from 1.0.4 to 1.0.5

dependabot[bot] opened this pull request 4 months ago

Bump psycopg[c] from 3.2.2 to 3.2.3

dependabot[bot] opened this pull request 4 months ago

Bump redis from 5.0.8 to 5.1.0

dependabot[bot] opened this pull request 4 months ago

Bump python-gitlab from 4.11.1 to 4.12.0

dependabot[bot] opened this pull request 4 months ago

:tada: add Alma Linux link to vulns

manuel-sommer opened this pull request 4 months ago

Update postgres:17.0-alpine Docker digest from 17.0 to 17.0-alpine (docker-compose.yml)

renovate[bot] opened this pull request 4 months ago

Benchmark Enhancements

jpbowie opened this issue 4 months ago

Branding Update: Replace old logos with new logos

blakeaowens opened this pull request 4 months ago

Bump boto3 from 1.35.26 to 1.35.28

dependabot[bot] opened this pull request 4 months ago

Bump ruff from 0.6.7 to 0.6.8

dependabot[bot] opened this pull request 4 months ago

Update postgres Docker tag from 16.4 to v17 (docker-compose.yml)

renovate[bot] opened this pull request 4 months ago

Release: Merge back 2.38.4 into dev from: master-into-dev/2.38.4-2.39.0-dev

github-actions[bot] opened this pull request 4 months ago

Release: Merge back 2.38.4 into bugfix from: master-into-bugfix/2.38.4-2.39.0-dev

github-actions[bot] opened this pull request 4 months ago

Release: Merge release into master from: release/2.38.4

github-actions[bot] opened this pull request 4 months ago

User Password: Add toggle to require on creation

Maffooch opened this pull request 4 months ago

Prefetch: Disable on some viewsets due to payload size

Maffooch opened this pull request 4 months ago

Bump boto3 from 1.35.26 to 1.35.27

dependabot[bot] opened this pull request 4 months ago

:bug: fix AWSSecurityHub EPSS Score #10956

manuel-sommer opened this pull request 4 months ago

Bump boto3 from 1.35.24 to 1.35.26

dependabot[bot] opened this pull request 4 months ago

Needed Support for CWE info in AWS Inspector findings (wrapped in scantype as AWS Security Hub) and Aquasec findings

mahesh-ppro opened this issue 4 months ago

Needed Support for EPSS Score in AWS Inspector findings (wrapped in scantype as AWS Security Hub)

mahesh-ppro opened this issue 4 months ago

Bump boto3 from 1.35.24 to 1.35.25

dependabot[bot] opened this pull request 4 months ago

Bump uwsgi from 2.0.26 to 2.0.27

dependabot[bot] opened this pull request 4 months ago

Release: Merge back 2.38.3 into bugfix from: master-into-bugfix/2.38.3-2.39.0-dev

github-actions[bot] opened this pull request 4 months ago

Release: Merge back 2.38.3 into dev from: master-into-dev/2.38.3-2.39.0-dev

github-actions[bot] opened this pull request 4 months ago

Release: Merge release into master from: release/2.38.3

github-actions[bot] opened this pull request 4 months ago

Bump pdfmake from 0.2.12 to 0.2.13 in /components

dependabot[bot] opened this pull request 4 months ago

Bump datatables.net-dt from 1.13.4 to 2.1.7 in /components

dependabot[bot] opened this pull request 4 months ago

Bump datatables.net from 1.13.4 to 2.1.7 in /components

dependabot[bot] opened this pull request 4 months ago

Bump ruff from 0.6.6 to 0.6.7

dependabot[bot] opened this pull request 4 months ago

Bump boto3 from 1.35.23 to 1.35.24

dependabot[bot] opened this pull request 4 months ago

Parsers: Specify lists rather than `dict.values()`

Maffooch opened this pull request 5 months ago

Parsers: Specify lists rather than `dict.values()`

Maffooch opened this pull request 5 months ago

Parsers: Specify lists rather than `dict.values()`

Maffooch opened this pull request 5 months ago

Bump ruff from 0.6.5 to 0.6.6

dependabot[bot] opened this pull request 5 months ago

Bump boto3 from 1.35.22 to 1.35.23

dependabot[bot] opened this pull request 5 months ago

Unable to execute the ./dc-build.sh script

nelatuv opened this issue 5 months ago

Hacker One Parser: Add support for Bug Bounty Program reports

Maffooch opened this pull request 5 months ago

User: Make email required at all times, password required for new users

Maffooch opened this pull request 5 months ago

New Parser: Qualys Hacker Guardian

Maffooch opened this pull request 5 months ago

Semgrep Parser: Add new severities

Maffooch opened this pull request 5 months ago

Bump boto3 from 1.35.21 to 1.35.22

dependabot[bot] opened this pull request 5 months ago

Risk Exceptions: Add/Remove notes when finding is added/removed from risk exception

Maffooch opened this pull request 5 months ago

Prefetch Serialization: Add a preference during mapping

Maffooch opened this pull request 5 months ago

Manage Images: Do not display thumbnail for PDF

Maffooch opened this pull request 5 months ago

Prefetching: Add swagger docs for models already supporting prefetching

Maffooch opened this pull request 5 months ago

Metrics findings tests

dogboat opened this pull request 5 months ago

Bump boto3 from 1.35.20 to 1.35.21

dependabot[bot] opened this pull request 5 months ago

GHA: Remove Docker Caches

Maffooch opened this pull request 5 months ago

GHA Release: Update settings SHA when creating PR from master

Maffooch opened this pull request 5 months ago

Ruff: add and fix some SIM rules

kiblik opened this pull request 5 months ago

Bump sqlalchemy from 2.0.34 to 2.0.35

dependabot[bot] opened this pull request 5 months ago

:sparkles: implement krakend audit parser

manuel-sommer opened this pull request 5 months ago

Update mccutchen/go-httpbin Docker tag from v2.14.1 to v2.15.0 (docker-compose.override.unit_tests_cicd.yml)

renovate[bot] opened this pull request 5 months ago

Bump boto3 from 1.35.19 to 1.35.20

dependabot[bot] opened this pull request 5 months ago

Release: Merge back 2.38.2 into dev from: master-into-dev/2.38.2-2.39.0-dev

github-actions[bot] opened this pull request 5 months ago

Release: Merge back 2.38.2 into bugfix from: master-into-bugfix/2.38.2-2.39.0-dev

github-actions[bot] opened this pull request 5 months ago

Release: Merge release into master from: release/2.38.2

github-actions[bot] opened this pull request 5 months ago

appcheck-severity-determination-fix Use v4, v3, v2 cvss vectors for severity

dogboat opened this pull request 5 months ago

Fix metrics aggregation

dogboat opened this pull request 5 months ago

fix(docker compose): Use 'docker compose' everywhere

kiblik opened this pull request 5 months ago

Bump python from 3.11.9-slim-bookworm to 3.12.6-slim-bookworm

dependabot[bot] opened this pull request 5 months ago

Bump boto3 from 1.35.18 to 1.35.19

dependabot[bot] opened this pull request 5 months ago

Bump pyyaml from 6.0.1 to 6.0.2

dependabot[bot] opened this pull request 5 months ago

Bump python-gitlab from 4.10.0 to 4.11.1

dependabot[bot] opened this pull request 5 months ago

Bump asteval from 1.0.3 to 1.0.4

dependabot[bot] opened this pull request 5 months ago

Bump psycopg[c] from 3.2.1 to 3.2.2

dependabot[bot] opened this pull request 5 months ago

Bump ruff from 0.6.4 to 0.6.5

dependabot[bot] opened this pull request 5 months ago

Update dependency postcss from 8.4.45 to v8.4.47 (docs/package.json)

renovate[bot] opened this pull request 5 months ago

chore(deps): update mccutchen/go-httpbin docker tag from v2.14.0 to v2.14.1 (docker-compose.override.unit_tests_cicd.yml)

renovate[bot] opened this pull request 5 months ago

chore(deps): update mccutchen/go-httpbin:v2.14.0 docker digest from v2.14.0 to v (docker-compose.override.unit_tests_cicd.yml) - abandoned

renovate[bot] opened this pull request 5 months ago

Wiz Parser: Add SCA parser and fortify old format

Maffooch opened this pull request 5 months ago

Ecosyste.ms: OpenCollective

github.com/DefectDojo/django-DefectDojo