Skip to content

Commit fae479f

Browse files
committed
docs(integrations): document forwarded analysis fields for DefectDojo
Signed-off-by: webdevred <148627186+webdevred@users.noreply.github.com>
1 parent 6c56708 commit fae479f

1 file changed

Lines changed: 10 additions & 0 deletions

File tree

docs/_docs/integrations/defectdojo.md

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -14,6 +14,16 @@ Dependency-Track accomplishes this in the following ways:
1414
* Dependency-Track pushes findings to DefectDojo on a periodic basis (configurable)
1515
* DefectDojo parses Dependency-Track findings
1616

17+
### Forwarded analysis data
18+
19+
Each finding pushed to DefectDojo includes the following fields from the audit trail in Dependency-Track:
20+
21+
| Field | Description |
22+
| ---------------------- | ----------- |
23+
| `analysis.state` | The triage state (e.g. `IN_TRIAGE`, `FALSE_POSITIVE`). A state of `FALSE_POSITIVE` marks the finding as a false positive in DefectDojo. |
24+
| `analysis.isSuppressed`| Whether the finding is suppressed in Dependency-Track. |
25+
| `analysis.detail` | Free-text analyst notes entered in Dependency-Track. Requires Dependency-Track v4.14.0 or higher and a compatible version of the DefectDojo Dependency Track parser. |
26+
1727
Requirements:
1828
* Dependency-Track v4.1.0 or higher
1929
* DefectDojo 1.13.1 or higher

0 commit comments

Comments
 (0)