Add Docker Scout connector to the Pro connectors reference (#15203)

Document the Docker Scout findings connector: needs a Docker PAT created by an
owner of a Docker organization enrolled in Docker Scout. Covers the Location
(https://api.scout.docker.com), Secret (PAT), and Organization mappings, and
that DefectDojo creates a Record per Docker Scout stream with summary findings
(the metrics exporter reports aggregate counts, not per-CVE).

Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: Cody Maffucci <46459665+Maffooch@users.noreply.github.com>

Author: 3 people

docs/content/import_data/pro/connectors/connectors_tool_reference.md

@@ -250,6 +250,27 @@ To generate a Dependency\-Track API key:
 
 For more information, see **[Dependency\-Track Documentation](https://docs.dependencytrack.org/integrations/rest-api/)**.
 
+## **Docker Scout**
+
+The Docker Scout connector uses the Docker Scout metrics exporter API to report the vulnerability posture of your organization's images. DefectDojo discovers each Docker Scout stream (your runtime environments) and imports a summary of the vulnerabilities and policy compliance for each.
+
+#### Prerequisites
+
+You will need a Docker personal access token created by an **owner** of a Docker organization that is **enrolled in Docker Scout**. The metrics exporter is an organization-level feature, so a personal account, or an organization that is not enrolled in Docker Scout, will not return data.
+
+Create the token from your Docker account settings under **Personal access tokens**, and note your Docker **organization namespace**, which you will also need.
+
+#### Connector Mappings
+
+1. Enter `https://api.scout.docker.com` in the **Location** field.
+2. Enter your Docker personal access token in the **Secret** field.
+3. Enter your Docker **Organization** namespace.
+4. Optionally, set a **Minimum Severity** to limit which findings are imported. Findings below the selected severity will not be imported.
+
+DefectDojo creates a separate Record for each Docker Scout stream, and imports one finding per severity for the vulnerabilities Docker Scout counts in that stream, plus a finding for each image that fails your Docker Scout policy. Docker Scout's metrics API reports aggregate counts rather than individual CVEs, so these findings summarize the posture of a stream. Open the stream in Docker Scout for per-image and per-CVE detail.
+
+See the [Docker Scout documentation](https://docs.docker.com/scout/) for more information.
+
 ## **Group-IB ASM**
 
 The Group-IB ASM (Attack Surface Management) connector uses the Group-IB ASM REST API to pull external attack-surface **issues** (findings) into DefectDojo. DefectDojo discovers each Group-IB **company/tenant** as a separate Record and imports that company's issues on a scheduled, incremental basis. The asset each issue relates to (a domain, IP, or URL) is attached to the resulting finding as an **Endpoint**.