You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/content/connections/downstream/downstream_toolreference.md
+41Lines changed: 41 additions & 0 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -539,3 +539,44 @@ A few Zendesk-specific behaviors to be aware of:
539
539
- The ticket description is the first comment in Zendesk and cannot be edited after creation, so pushing an updated Finding will sync the ticket's subject, priority, and status, but not description changes.
540
540
- Tickets are marked `solved` rather than deleted when a Finding is removed; Zendesk closes solved tickets automatically after a period of time.
541
541
-`closed` is a final status - closed tickets cannot be updated at all, and pushing a Finding whose ticket has closed will report an error.
542
+
543
+
## PagerDuty
544
+
545
+
The PagerDuty Integration allows you to push DefectDojo Findings and Finding Groups as PagerDuty Incidents on a Service of your choice.
546
+
547
+
### Instance Setup
548
+
549
+
-**Label** should be the label that you want to use to identify this integration.
550
+
-**Location** should be set to your regional PagerDuty REST API base URL: `https://api.pagerduty.com` for US accounts, or `https://api.eu.pagerduty.com` for EU accounts.
551
+
-**API Token** should be set to a PagerDuty REST API key. An administrator can create one in PagerDuty under **Integrations > API Access Keys**.
552
+
-**From Email** should be the email address of a valid PagerDuty user on the account. PagerDuty requires it when creating or updating incidents.
553
+
554
+
### Issue Tracker Mapping
555
+
556
+
-**Service ID** should be the ID of the PagerDuty Service that Incidents will be created on (e.g. `PXXXXXX`). You can find it in the URL while viewing the Service.
557
+
558
+
### Severity Mapping Details
559
+
560
+
By default this maps to the Incident **Urgency** field, which accepts `high` and `low`:
561
+
562
+
-**Severity Field Name**: `Urgency`
563
+
-**Info Mapping**: `low`
564
+
-**Low Mapping**: `low`
565
+
-**Medium Mapping**: `low`
566
+
-**High Mapping**: `high`
567
+
-**Critical Mapping**: `high`
568
+
569
+
Alternatively, set **Severity Field Name** to `Priority` and use your account's Incident Priority names (e.g. `P1` - `P5`) as the mapping values. Priority names are resolved against the priorities configured on your PagerDuty account; an unknown name will report an error on push.
570
+
571
+
### Status Mapping Details
572
+
573
+
-**Status Field Name**: `Status`
574
+
-**Active Mapping**: `triggered`
575
+
-**Closed Mapping**: `resolved`
576
+
-**False Positive Mapping**: `resolved`
577
+
-**Risk Accepted Mapping**: `acknowledged`
578
+
579
+
A few PagerDuty-specific behaviors to be aware of:
580
+
581
+
- PagerDuty has no incident deletion - removing a Finding resolves its Incident instead.
582
+
- Incident links open the Incident's web URL as returned by PagerDuty, so they work regardless of region.
| Community Edition | * [Jira](/connections/os_jira/os__jira_guide/)|
18
-
| Pro | * [Jira](/connections/downstream/downstream_toolreference/#jira) ([legacy guide](/connections/downstream/pro__jira_guide/))<br>*[Azure DevOps](/connections/downstream/downstream_toolreference/#azure-devops-boards)<br>*[Bitbucket](/connections/downstream/downstream_toolreference/#bitbucket)<br>*[Freshservice](/connections/downstream/downstream_toolreference/#freshservice)<br>*[GitHub](/connections/downstream/downstream_toolreference/#github)<br>*[GitLab Boards](/connections/downstream/downstream_toolreference/#gitlab)<br>*[ServiceDesk Plus](/connections/downstream/downstream_toolreference/#servicedesk-plus)<br>*[ServiceNow](/connections/downstream/downstream_toolreference/#servicenow)<br>*[Shortcut](/connections/downstream/downstream_toolreference/#shortcut)<br>*[Zendesk](/connections/downstream/downstream_toolreference/#zendesk)|
18
+
| Pro | * [Jira](/connections/downstream/downstream_toolreference/#jira) ([legacy guide](/connections/downstream/pro__jira_guide/))<br>*[Azure DevOps](/connections/downstream/downstream_toolreference/#azure-devops-boards)<br>*[Bitbucket](/connections/downstream/downstream_toolreference/#bitbucket)<br>*[Freshservice](/connections/downstream/downstream_toolreference/#freshservice)<br>*[GitHub](/connections/downstream/downstream_toolreference/#github)<br>*[GitLab Boards](/connections/downstream/downstream_toolreference/#gitlab)<br>*[PagerDuty](/connections/downstream/downstream_toolreference/#pagerduty)<br>*[ServiceDesk Plus](/connections/downstream/downstream_toolreference/#servicedesk-plus)<br>*[ServiceNow](/connections/downstream/downstream_toolreference/#servicenow)<br>*[Shortcut](/connections/downstream/downstream_toolreference/#shortcut)<br>*[Zendesk](/connections/downstream/downstream_toolreference/#zendesk)|
19
19
20
20
21
21
When enabled, DefectDojo can create issues automatically, or selectively from Products or Engagement. As Findings are updated in DefectDojo—resolved, mitigated, or reactivated—the corresponding issues can be kept in sync, ensuring both systems reflect the current state of risk.
0 commit comments