Skip to content

Commit d694f35

Browse files
committed
feat: add hashcode deduplication config for IriusRisk parser
Register IriusRisk Threats Scan in HASHCODE_FIELDS_PER_SCANNER and DEDUPLICATION_ALGORITHM_PER_PARSER so deduplication uses title and component_name rather than the legacy algorithm. These stable fields ensure reimports match existing findings even when risk levels or countermeasure progress change between scans. Update docs to match. Authored by T. Walker - DefectDojo
1 parent c5e158a commit d694f35

2 files changed

Lines changed: 5 additions & 6 deletions

File tree

docs/content/supported_tools/parsers/file/iriusrisk.md

Lines changed: 3 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -17,13 +17,10 @@ The IriusRisk parser accepts CSV file format. To generate this file from IriusRi
1717

1818
## Default Deduplication Hashcode Fields
1919

20-
By default, DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/):
20+
DefectDojo identifies duplicate Findings using these [hashcode fields](https://docs.defectdojo.com/en/working_with_findings/finding_deduplication/about_deduplication/):
2121

2222
- title
23-
- cwe
24-
- line
25-
- file_path
26-
- description
23+
- component_name
2724

2825
### Sample Scan Data
2926

@@ -138,7 +135,7 @@ Findings are set to active by default. When the "Current Risk" value is "Very lo
138135

139136
### Deduplication
140137

141-
Deduplication relies on DefectDojo's default hashcode algorithm, which uses the title, cwe, line, file_path, and description fields to identify duplicate findings.
138+
Deduplication uses DefectDojo's hashcode algorithm with the title and component_name fields to identify duplicate findings. These stable fields ensure that reimports correctly match existing findings even when risk levels or countermeasure progress change between scans.
142139

143140
### Duplicate Rows in Source Data
144141

dojo/settings/settings.dist.py

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1488,6 +1488,7 @@ def saml2_attrib_map_format(din):
14881488
"Snyk Issue API Scan": ["vuln_id_from_tool", "file_path"],
14891489
"OpenReports": ["vulnerability_ids", "component_name", "component_version", "severity"],
14901490
"n0s1 Scanner": ["description"],
1491+
"IriusRisk Threats Scan": ["title", "component_name"],
14911492
}
14921493

14931494
# Override the hardcoded settings here via the env var
@@ -1752,6 +1753,7 @@ def saml2_attrib_map_format(din):
17521753
"OpenVAS Parser v2": DEDUPE_ALGO_HASH_CODE,
17531754
"Snyk Issue API Scan": DEDUPE_ALGO_HASH_CODE,
17541755
"OpenReports": DEDUPE_ALGO_HASH_CODE,
1756+
"IriusRisk Threats Scan": DEDUPE_ALGO_HASH_CODE,
17551757
}
17561758

17571759
# Override the hardcoded settings here via the env var

0 commit comments

Comments
 (0)