Skip to content

Commit 8e64002

Browse files
Automatic Engagement Numbering
0 parents  commit 8e64002

3,956 files changed

Lines changed: 3603959 additions & 0 deletions

File tree

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

.dockerignore

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,3 @@
1+
.git
2+
.gitignore
3+
*.md

.dryrunsecurity.yaml

Lines changed: 72 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,72 @@
1+
---
2+
sensitiveCodepaths:
3+
- 'dojo/object/urls.py'
4+
- 'dojo/object/views.py'
5+
- 'dojo/announcement/*.py'
6+
- 'dojo/api_v2/*.py'
7+
- 'dojo/api_v2/**/*.py'
8+
- 'dojo/authorization/*.py'
9+
- 'dojo/db_migrations/*.py'
10+
- 'dojo/endpoint/*.py'
11+
- 'dojo/engagement/*.py'
12+
- 'dojo/finding/*.py'
13+
- 'dojo/finding_group/*.py'
14+
- 'dojo/group/*.py'
15+
- 'dojo/importers/*.py'
16+
- 'dojo/importers/**/*.py'
17+
- 'dojo/jira_link/*.py'
18+
- 'dojo/metrics/*.py'
19+
- 'dojo/note_type/*.py'
20+
- 'dojo/notes/*.py'
21+
- 'dojo/product/*.py'
22+
- 'dojo/product_type/*.py'
23+
- 'dojo/reports/*.py'
24+
- 'dojo/risk_acceptance/*.py'
25+
- 'dojo/search/*.py'
26+
- 'dojo/templates/*.html'
27+
- 'dojo/templates/**/*.html'
28+
- 'dojo/templatetags/*.py'
29+
- 'dojo/test/*.py'
30+
- 'dojo/tool_config/*.py'
31+
- 'dojo/tool_product/*.py'
32+
- 'dojo/tool_type/*.py'
33+
- 'dojo/user/*.py'
34+
- 'dojo/apps.py'
35+
- 'dojo/celery.py'
36+
- 'dojo/context_processors.py'
37+
- 'dojo/decorators.py'
38+
- 'dojo/filters.py'
39+
- 'dojo/forms.py'
40+
- 'dojo/middleware.py'
41+
- 'dojo/models.py'
42+
- 'dojo/okta.py'
43+
- 'dojo/pipeline.py'
44+
- 'dojo/remote_user.py'
45+
- 'dojo/tasks.py'
46+
- 'dojo/urls.py'
47+
- 'dojo/utils.py'
48+
- 'dojo/views.py'
49+
- 'dojo/wsgi.py'
50+
- 'docker/environments/*.env'
51+
- 'docker/extra_settings'
52+
- 'docker/entrypoint-celery-beat.sh'
53+
- 'docker/entrypoint-celery-worker.sh'
54+
- 'docker/entrypoint-initializer.sh'
55+
- 'docker/entrypoint-first-boot.sh'
56+
- 'docker/entrypoint-nginx.sh'
57+
- 'docker/entrypoint-uwsgi.sh'
58+
- 'docker/wait-for-it.sh'
59+
allowedAuthors:
60+
usernames:
61+
- mtesauro
62+
- devGregA
63+
- cneill
64+
- Maffooch
65+
- blakeaowens
66+
- kiblik
67+
- dsever
68+
- dogboat
69+
- hblankenship
70+
- valentijnscholten
71+
notificationList:
72+
- '@mtesauro'

.github/CODEOWNERS

Lines changed: 19 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,19 @@
1+
# Any kind of package updates only need 2 approvals,
2+
# So let's add three folks here
3+
requirements.txt @cneill @mtesauro @Maffooch
4+
# Any dockerfile or compose changes will need to be viewed by
5+
# these people
6+
Dockerfile.* @mtesauro @Maffooch
7+
docker-compose.* @mtesauro @Maffooch
8+
/docker/ @mtesauro @Maffooch
9+
# Documentation changes
10+
/docs/content/ @paulOsinski @valentijnscholten @Maffooch
11+
# Kubernetes should be reviewed by reviewed first by those that know it
12+
/helm/ @cneill @kiblik @Maffooch
13+
# Anything UI related needs to be checked out by those with the eye for it
14+
/dojo/static/ @blakeaowens @Maffooch
15+
/dojo/templates/ @blakeaowens @Maffooch
16+
# Any model changes should be closely looked at
17+
/dojo/models.py @Maffooch
18+
# All other code changes should be reviewed by someone
19+
* @Maffooch @mtesauro
Lines changed: 49 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,49 @@
1+
---
2+
name: Bug report
3+
about: Create a report to help us improve
4+
title: ''
5+
labels: bug
6+
assignees: ''
7+
8+
---
9+
**Slack us first!**
10+
The easiest and fastest way to help you is via Slack. There's a free and easy signup to join our #defectdojo channel in the OWASP Slack workspace: [Get Access.](https://owasp.org/slack/invite)
11+
If you're confident you've found a bug, or are allergic to Slack, you can submit an issue anyway.
12+
13+
**Be informative**
14+
Please enter as much information as possible, otherwise we can't provide support. If possible upgrade to the latest release or dev version and try again.
15+
16+
**Bug description**
17+
A clear and concise description of what the bug is. For errors include at least the exact error message you are seeing (including traceback).
18+
19+
**Steps to reproduce**
20+
Steps to reproduce the behavior:
21+
1. Go to '...'
22+
2. Click on '....'
23+
3. Scroll down to '....'
24+
4. See error
25+
26+
**Expected behavior**
27+
A clear and concise description of what you expected to happen.
28+
29+
**Deployment method** *(select with an `X`)*
30+
- [ ] Docker Compose
31+
- [ ] Kubernetes
32+
- [ ] GoDojo
33+
34+
**Environment information**
35+
- Operating System: [e.g. Ubuntu 18.04]
36+
- Docker Compose or Helm version (Output of `docker compose version` or `helm version`)
37+
- DefectDojo version (see footer) or commit message: [use `git show -s --format="[%ci] %h: %s [%d]"`]
38+
39+
**Logs**
40+
Use `docker compose logs` (or similar, depending on your deployment method) to get the logs and add the relevant sections here showing the error occurring (if applicable).
41+
42+
**Sample scan files**
43+
If applicable, add sample scan files to help reproduce your problem.
44+
45+
**Screenshots**
46+
If applicable, add screenshots to help explain your problem.
47+
48+
**Additional context** (optional)
49+
Add any other context about the problem here.
Lines changed: 26 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,26 @@
1+
---
2+
name: Feature request
3+
about: Suggest an idea for DefectDojo
4+
title: ''
5+
labels: enhancement
6+
assignees: ''
7+
8+
---
9+
## :warning: Note on feature completeness :warning:
10+
11+
We are narrowing the scope of acceptable enhancements to DefectDojo. Learn more here:
12+
https://github.com/DefectDojo/django-DefectDojo/blob/master/readme-docs/CONTRIBUTING.md
13+
14+
**Is your feature request related to a problem? Please describe**
15+
A clear and concise description of what the problem is.
16+
Ex: I'm always frustrated when [...]
17+
18+
**Describe the solution you'd like**
19+
A clear and concise description of what you want to happen.
20+
Ex: As a < role >, I want < some goal > so that < some reason >.
21+
22+
**Describe alternatives you've considered**
23+
A clear and concise description of any alternative solutions or features you have considered.
24+
25+
**Additional context**
26+
Add any other context, screenshots, sketch, code snippet, etc. about the feature request here.
Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,14 @@
1+
---
2+
name: New importer request
3+
about: Request a new importer (scanner) for DefectDojo
4+
title: ''
5+
labels: Import Scans
6+
assignees: ''
7+
8+
---
9+
10+
**Scanner Name**
11+
Name of the scanner, brief description of the scanner and link.
12+
13+
**Sample File**
14+
Please attach a sample file and the format of the file (xml, json, csv).
Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,16 @@
1+
---
2+
name: Security issue
3+
about: Report a security issue
4+
title: Please submit via our security reporting program, not GitHub
5+
labels: security
6+
assignees: ''
7+
8+
---
9+
10+
**DefectDojo security reporting program**
11+
12+
If you believe you have found a **security issue** in DefectDojo, please review the [disclosure policy](../../readme-docs/SECURITY.md) and submit your finding via our security reporting program.
13+
14+
Please, do not submit **security issues** via GitHub directly.
15+
16+
Thank you for helping keep DefectDojo and our users safe!
Lines changed: 49 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,49 @@
1+
---
2+
name: Support Request
3+
about: If you need support or are running into some trouble
4+
title: ''
5+
labels: support
6+
assignees: ''
7+
8+
---
9+
**Slack us first!**
10+
The easiest and fastest way to help you is via Slack. There's a free and easy signup to join our #defectdojo channel in the OWASP Slack workspace: [Get Access.](https://owasp.org/slack/invite)
11+
If you're confident you've found a bug, or are allergic to Slack, you can submit an issue anyway.
12+
13+
**Be informative**
14+
Please enter as much information as possible, otherwise we can't provide support. If possible upgrade to the latest release or dev branch and try again.
15+
16+
**Problem description**
17+
A clear and concise description of what the problem is. For errors include at least the exact error message you are seeing (including traceback).
18+
19+
**Steps to reproduce**
20+
Steps to reproduce the behavior:
21+
1. Go to '...'
22+
2. Click on '....'
23+
3. Scroll down to '....'
24+
4. See error
25+
26+
**Expected behavior**
27+
A clear and concise description of what you expected to happen.
28+
29+
**Deployment method** *(select with an `X`)*
30+
- [ ] Docker Compose
31+
- [ ] Kubernetes
32+
- [ ] GoDojo
33+
34+
**Environment information**
35+
- Operating System: [e.g. Ubuntu 18.04]
36+
- Docker Compose or Helm version (Output of `docker compose version` or `helm version`)
37+
- DefectDojo version (see footer) or commit message: [use `git show -s --format="[%ci] %h: %s [%d]"`]
38+
39+
**Logs**
40+
Use `docker compose logs` (or similar, depending on your deployment method) to get the logs and add the relevant sections here showing the error occurring (if applicable).
41+
42+
**Sample scan files**
43+
If applicable, add sample scan files to help reproduce your problem.
44+
45+
**Screenshots**
46+
If applicable, add screenshots to help explain your problem.
47+
48+
**Additional context** (optional)
49+
Add any other context about the problem here.

.github/dependabot.yml

Lines changed: 73 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,73 @@
1+
version: 2
2+
updates:
3+
- package-ecosystem: pip
4+
directory: "/"
5+
schedule:
6+
interval: daily
7+
open-pull-requests-limit: 10
8+
target-branch: dev
9+
ignore:
10+
- dependency-name: whitenoise
11+
versions:
12+
- ">= 5.a"
13+
- "< 6"
14+
- dependency-name: boto3
15+
update-types: ["version-update:semver-minor"]
16+
- package-ecosystem: npm
17+
directory: "/components"
18+
schedule:
19+
interval: daily
20+
open-pull-requests-limit: 10
21+
target-branch: dev
22+
ignore:
23+
- dependency-name: bootstrap
24+
versions:
25+
- ">= 4.a"
26+
- "< 5"
27+
- dependency-name: bootstrap-social
28+
versions:
29+
- ">= 5.a"
30+
- "< 6"
31+
- dependency-name: bootswatch
32+
versions:
33+
- ">= 4.a"
34+
- "< 5"
35+
- dependency-name: chosen
36+
versions:
37+
- ">= 1.a"
38+
- "< 2"
39+
- dependency-name: drmonty-datatables-responsive
40+
versions:
41+
- ">= 2.a"
42+
- "< 3"
43+
- dependency-name: flot
44+
versions:
45+
- ">= 2.a"
46+
- "< 3"
47+
- dependency-name: flot
48+
versions:
49+
- ">= 3.a"
50+
- "< 4"
51+
- dependency-name: flot
52+
versions:
53+
- ">= 4.a"
54+
- "< 5"
55+
- dependency-name: fullcalendar
56+
versions:
57+
- ">= 5.a"
58+
- "< 6"
59+
- dependency-name: startbootstrap-sb-admin-2
60+
versions:
61+
- ">= 3.a"
62+
- "< 4"
63+
- dependency-name: startbootstrap-sb-admin-2
64+
versions:
65+
- ">= 4.a"
66+
- "< 5"
67+
- package-ecosystem: docker
68+
directory: "/"
69+
schedule:
70+
interval: weekly
71+
open-pull-requests-limit: 10
72+
target-branch: dev
73+

.github/labeler.yml

Lines changed: 67 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,67 @@
1+
---
2+
docs:
3+
- changed-files:
4+
- any-glob-to-any-file:
5+
- docs/**/*
6+
- readme-docs/**/*
7+
8+
docker:
9+
- changed-files:
10+
- any-glob-to-any-file:
11+
- docker/**/*
12+
- docker**
13+
- Docker*
14+
15+
helm:
16+
- changed-files:
17+
- any-glob-to-any-file:
18+
- helm/defectdojo/*
19+
- helm/defectdojo/**/*
20+
21+
"New Migration":
22+
- changed-files:
23+
- any-glob-to-any-file:
24+
- dojo/db_migrations/*
25+
26+
unittests:
27+
- changed-files:
28+
- any-glob-to-any-file:
29+
- unittests/**/*
30+
31+
integration_tests:
32+
- changed-files:
33+
- any-glob-to-any-file:
34+
- tests/**/*
35+
36+
settings_changes:
37+
- changed-files:
38+
- any-glob-to-any-file:
39+
- dojo/settings/settings.dist.py
40+
41+
apiv2:
42+
- changed-files:
43+
- any-glob-to-any-file:
44+
- dojo/api_v2/**/*
45+
46+
ui:
47+
- changed-files:
48+
- any-glob-to-any-file:
49+
- dojo/static/**/*
50+
- dojo/templates/**/*
51+
- dojo/templatetags/**/*
52+
53+
parser:
54+
- changed-files:
55+
- any-glob-to-any-file:
56+
- dojo/tools/**/*
57+
58+
localization:
59+
- changed-files:
60+
- any-glob-to-any-file:
61+
- dojo/locale/*
62+
- dojo/locale/**/*
63+
64+
lint:
65+
- changed-files:
66+
- any-glob-to-any-file:
67+
- ruff.toml

0 commit comments

Comments
 (0)