You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/content/en/connecting_your_tools/import_intro.md
+5-7Lines changed: 5 additions & 7 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -4,18 +4,16 @@ description: "Learn how to import data manually, through the API, or via a conne
4
4
weight: 1
5
5
---
6
6
7
-
One of the things we understand at DefectDojo is that every company’s security needs are completely different. There is no ‘one\-size\-fits\-all’ approach. As your organization changes, having a flexible approach is key.
8
-
9
-
DefectDojo allows you to connect your security tools in a flexible way to match those changes.
7
+
One of the things we understand at DefectDojo is that every company’s security needs are completely different. There is no one-size-fits-all approach. As your organization changes, having a flexible approach is key, and DefectDojo allows you to connect your security tools in a flexible way to match those changes.
10
8
11
9
## Scan Upload Methods
12
10
13
-
When DefectDojo receives a vulnerability report from a security tool, it will create Findings based on the vulnerabilities contained within that report. DefectDojo acts as the central repository for these Findings where they can be triaged, remediated or otherwise addressed by you and your team.
11
+
When DefectDojo receives a vulnerability report from a security tool, it will create Findings based on the vulnerabilities contained within that report. DefectDojo acts as the central repository for these Findings where they can be triaged, remediated, or otherwise addressed by you and your team.
14
12
15
13
There are two main ways that DefectDojo can upload Finding reports.
16
14
17
15
* Via direct **import** through the UI: [Import Scan Form](../import_scan_files/import_scan_ui)
18
-
* Via **API** endpoint (allowing for automated data ingest): See [API Docs](https://docs.defectdojo.com/en/api/api-v2-docs/)
16
+
* Via **API** endpoint (allowing for automated data ingestion): See [API Docs](https://docs.defectdojo.com/en/api/api-v2-docs/)
19
17
20
18
#### DefectDojo Pro Methods
21
19
@@ -29,8 +27,8 @@ There are two main ways that DefectDojo can upload Finding reports.
|**Automation?**| Available via API: `/reimport``/import` endpoints | Triggered from [CLI Importer](../external_tools) or external code | Connectors is inherently automated | Available via API: `/smart_upload_import` endpoint |
|**Automation?**| Available via API: `/reimport``/import` endpoints | Triggered from [CLI Importer](../external_tools) or external code | Connectors is an inherently automated feature| Available via API: `/smart_upload_import` endpoint |
Copy file name to clipboardExpand all lines: docs/content/en/working_with_findings/organizing_engagements_tests/product_hierarchy.md
+4-3Lines changed: 4 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -116,16 +116,17 @@ Tests always have:
116
116
* an associated test **Environment**
117
117
* an associated **Engagement**
118
118
119
-
Tests can be created in different ways. Tests can be automatically created when scan data is imported directly into to an Engagement, resulting in a new Test containing the scan data. Tests can also be created in anticipation of planning future engagements, or for manually entered security findings requiring tracking and remediation.
119
+
Tests can be created in different ways. Tests can be automatically created when scan data is imported directly into an Engagement, resulting in a new Test containing the scan data. Tests can also be created in anticipation of planning future engagements, or for manually entered security findings requiring tracking and remediation.
120
120
121
121
### **Test Types**
122
122
123
123
DefectDojo supports two categories of Test Types:
124
124
125
125
1.**Parser-based Test Types**: These correspond to specific security scanners that produce output in formats like XML, JSON, or CSV. When importing scan results, DefectDojo uses specialized parsers to convert the scanner output into Findings.
126
126
127
-
2.**Non-parser Test Types**: These are used for manually created findings not imported from a scan files.
128
-
The following Test Types appear in the "Scan Type" dropdown when creating a new test, but will not appear when selecting "Import Scan":
127
+
2.**Non-parser Test Types**: These are used for manually created Findings not imported from scan files. These Test Types use the [Generic Findings Import](/supported_tools/parsers/generic_findings_import/) method to render Findings and metadata.
128
+
129
+
The following Test Types appear in the "Scan Type" dropdown when creating a new test.
Copy file name to clipboardExpand all lines: docs/content/supported_tools/parsers/generic_findings_import.md
+3-1Lines changed: 3 additions & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -8,11 +8,13 @@ Open-source and Pro users can use Generic Findings Import as a method to ingest
8
8
9
9
Using Generic Findings Import will create a new Test Type in your DefectDojo instance called "`{The Name Of Your Test}` (Generic Findings Import)". For example, this JSON content will result in a Test Type called "Example Report (Generic Findings Import)":
10
10
11
+
```
11
12
{
12
13
"name": "Example Report",
13
14
"findings": []
14
15
}
16
+
```
15
17
16
18
DefectDojo Pro users can also consider using the [Universal Parser](../universal_parser), a tool which allows for highly customizable JSON, XML and CSV imports.
17
19
18
-
For more information on supported parameters for Generic Findings Import, see the [Parser Guide](../file/generic)
20
+
For more information on supported parameters for Generic Findings Import, see the related [Parser Guide](../file/generic).
0 commit comments