Skip to content

Commit 695de95

Browse files
committed
add PagerDuty to Downstream Connections reference and vendor lists
1 parent a5e2488 commit 695de95

4 files changed

Lines changed: 45 additions & 2 deletions

File tree

docs/content/connections/downstream/about.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -17,6 +17,7 @@ Supported Downstream Connections:
1717
- GitHub
1818
- GitLab Boards
1919
- Jira
20+
- PagerDuty
2021
- ServiceDesk Plus
2122
- ServiceNow
2223
- Shortcut
@@ -81,6 +82,7 @@ For the complete list of requirements, please open the vendor specific pages bel
8182
- [GitHub](/connections/downstream/downstream_toolreference/#github)
8283
- [GitLab Boards](/connections/downstream/downstream_toolreference/#gitlab)
8384
- [Jira](/connections/downstream/downstream_toolreference/#jira)
85+
- [PagerDuty](/connections/downstream/downstream_toolreference/#pagerduty)
8486
- [ServiceDesk Plus](/connections/downstream/downstream_toolreference/#servicedesk-plus)
8587
- [ServiceNow](/connections/downstream/downstream_toolreference/#servicenow)
8688
- [Shortcut](/connections/downstream/downstream_toolreference/#shortcut)

docs/content/connections/downstream/downstream_toolreference.md

Lines changed: 41 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -539,3 +539,44 @@ A few Zendesk-specific behaviors to be aware of:
539539
- The ticket description is the first comment in Zendesk and cannot be edited after creation, so pushing an updated Finding will sync the ticket's subject, priority, and status, but not description changes.
540540
- Tickets are marked `solved` rather than deleted when a Finding is removed; Zendesk closes solved tickets automatically after a period of time.
541541
- `closed` is a final status - closed tickets cannot be updated at all, and pushing a Finding whose ticket has closed will report an error.
542+
543+
## PagerDuty
544+
545+
The PagerDuty Integration allows you to push DefectDojo Findings and Finding Groups as PagerDuty Incidents on a Service of your choice.
546+
547+
### Instance Setup
548+
549+
- **Label** should be the label that you want to use to identify this integration.
550+
- **Location** should be set to your regional PagerDuty REST API base URL: `https://api.pagerduty.com` for US accounts, or `https://api.eu.pagerduty.com` for EU accounts.
551+
- **API Token** should be set to a PagerDuty REST API key. An administrator can create one in PagerDuty under **Integrations > API Access Keys**.
552+
- **From Email** should be the email address of a valid PagerDuty user on the account. PagerDuty requires it when creating or updating incidents.
553+
554+
### Issue Tracker Mapping
555+
556+
- **Service ID** should be the ID of the PagerDuty Service that Incidents will be created on (e.g. `PXXXXXX`). You can find it in the URL while viewing the Service.
557+
558+
### Severity Mapping Details
559+
560+
By default this maps to the Incident **Urgency** field, which accepts `high` and `low`:
561+
562+
- **Severity Field Name**: `Urgency`
563+
- **Info Mapping**: `low`
564+
- **Low Mapping**: `low`
565+
- **Medium Mapping**: `low`
566+
- **High Mapping**: `high`
567+
- **Critical Mapping**: `high`
568+
569+
Alternatively, set **Severity Field Name** to `Priority` and use your account's Incident Priority names (e.g. `P1` - `P5`) as the mapping values. Priority names are resolved against the priorities configured on your PagerDuty account; an unknown name will report an error on push.
570+
571+
### Status Mapping Details
572+
573+
- **Status Field Name**: `Status`
574+
- **Active Mapping**: `triggered`
575+
- **Closed Mapping**: `resolved`
576+
- **False Positive Mapping**: `resolved`
577+
- **Risk Accepted Mapping**: `acknowledged`
578+
579+
A few PagerDuty-specific behaviors to be aware of:
580+
581+
- PagerDuty has no incident deletion - removing a Finding resolves its Incident instead.
582+
- Incident links open the Incident's web URL as returned by PagerDuty, so they work regardless of region.

docs/content/connections/issue_tracking.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ The DefectDojo issue tracking integrations connect your vulnerability management
1515
| Edition | Supported Issue Tracking Integrations |
1616
|--------------|---------------------------------------|
1717
| Community Edition | * [Jira](/connections/os_jira/os__jira_guide/) |
18-
| Pro | * [Jira](/connections/downstream/downstream_toolreference/#jira) ([legacy guide](/connections/downstream/pro__jira_guide/))<br>* [Azure DevOps](/connections/downstream/downstream_toolreference/#azure-devops-boards)<br>* [Bitbucket](/connections/downstream/downstream_toolreference/#bitbucket)<br>* [Freshservice](/connections/downstream/downstream_toolreference/#freshservice)<br>* [GitHub](/connections/downstream/downstream_toolreference/#github)<br>* [GitLab Boards](/connections/downstream/downstream_toolreference/#gitlab)<br>* [ServiceDesk Plus](/connections/downstream/downstream_toolreference/#servicedesk-plus)<br>* [ServiceNow](/connections/downstream/downstream_toolreference/#servicenow)<br>* [Shortcut](/connections/downstream/downstream_toolreference/#shortcut)<br>* [Zendesk](/connections/downstream/downstream_toolreference/#zendesk) |
18+
| Pro | * [Jira](/connections/downstream/downstream_toolreference/#jira) ([legacy guide](/connections/downstream/pro__jira_guide/))<br>* [Azure DevOps](/connections/downstream/downstream_toolreference/#azure-devops-boards)<br>* [Bitbucket](/connections/downstream/downstream_toolreference/#bitbucket)<br>* [Freshservice](/connections/downstream/downstream_toolreference/#freshservice)<br>* [GitHub](/connections/downstream/downstream_toolreference/#github)<br>* [GitLab Boards](/connections/downstream/downstream_toolreference/#gitlab)<br>* [PagerDuty](/connections/downstream/downstream_toolreference/#pagerduty)<br>* [ServiceDesk Plus](/connections/downstream/downstream_toolreference/#servicedesk-plus)<br>* [ServiceNow](/connections/downstream/downstream_toolreference/#servicenow)<br>* [Shortcut](/connections/downstream/downstream_toolreference/#shortcut)<br>* [Zendesk](/connections/downstream/downstream_toolreference/#zendesk) |
1919

2020

2121
When enabled, DefectDojo can create issues automatically, or selectively from Products or Engagement. As Findings are updated in DefectDojo—resolved, mitigated, or reactivated—the corresponding issues can be kept in sync, ensuring both systems reflect the current state of risk.

docs/content/get_started/about/defectdojo_versions.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@ weight: 1
2222
| Import enhancements | ❌ Standard imports only | ✔️ Background imports, Smart Upload, Universal Parser, CLI uploads |
2323
| Tool integrations | ❌ Manual/API-driven | ✔️ Built-in **Upstream Connections** (API Connectors) for popular AppSec and cloud tools |
2424
| Jira integration | ✔️ Included | ✔️ Included |
25-
| Project management integrations | ❌ Not included | ✔️ **Downstream Connections** to **Jira**, **Azure DevOps**, **GitHub**, **GitLab**, **ServiceNow**, **Bitbucket**, **Shortcut**, **Zendesk**, **ServiceDesk Plus** and **Freshservice** |
25+
| Project management integrations | ❌ Not included | ✔️ **Downstream Connections** to **Jira**, **Azure DevOps**, **GitHub**, **GitLab**, **ServiceNow**, **Bitbucket**, **Shortcut**, **PagerDuty**, **Zendesk**, **ServiceDesk Plus** and **Freshservice** |
2626
| Finding enhancements | ❌ Not included | ✔️ Automatic KEV, EPSS scoring and Ransomware tracking |
2727
| SOC & AppSec unification | ❌ AppSec-focused only | ✔️ Unified AppSec and SOC findings |
2828
| AI & next-generation features | ❌ Not included | ✔️ AI-assisted workflows, reporting and MCP support |

0 commit comments

Comments
 (0)