Skip to content

Commit 8fbff52

Browse files
committed
docs(integrations): clarify how analysis.state is handled by DefectDojo
Signed-off-by: webdevred <148627186+webdevred@users.noreply.github.com>
1 parent fae479f commit 8fbff52

1 file changed

Lines changed: 3 additions & 3 deletions

File tree

docs/_docs/integrations/defectdojo.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -16,13 +16,13 @@ Dependency-Track accomplishes this in the following ways:
1616

1717
### Forwarded analysis data
1818

19-
Each finding pushed to DefectDojo includes the following fields from the audit trail in Dependency-Track:
19+
Each finding pushed to DefectDojo includes audit data from Dependency-Track. The following fields influence how DefectDojo represents the finding:
2020

2121
| Field | Description |
2222
| ---------------------- | ----------- |
23-
| `analysis.state` | The triage state (e.g. `IN_TRIAGE`, `FALSE_POSITIVE`). A state of `FALSE_POSITIVE` marks the finding as a false positive in DefectDojo. |
23+
| `analysis.state` | A state of `FALSE_POSITIVE` marks the finding as a false positive in DefectDojo. Other states are included in the payload but are not acted on by the DefectDojo parser. |
2424
| `analysis.isSuppressed`| Whether the finding is suppressed in Dependency-Track. |
25-
| `analysis.detail` | Free-text analyst notes entered in Dependency-Track. Requires Dependency-Track v4.14.0 or higher and a compatible version of the DefectDojo Dependency Track parser. |
25+
| `analysis.detail` | Free-text analyst notes entered in Dependency-Track. Appended to the finding description in DefectDojo. Requires Dependency-Track v4.14.0 or higher and a compatible version of the DefectDojo Dependency Track parser. |
2626

2727
Requirements:
2828
* Dependency-Track v4.1.0 or higher

0 commit comments

Comments
 (0)