You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/_docs/integrations/defectdojo.md
+10Lines changed: 10 additions & 0 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -14,6 +14,16 @@ Dependency-Track accomplishes this in the following ways:
14
14
* Dependency-Track pushes findings to DefectDojo on a periodic basis (configurable)
15
15
* DefectDojo parses Dependency-Track findings
16
16
17
+
### Forwarded analysis data
18
+
19
+
Each finding pushed to DefectDojo includes the following fields from the audit trail in Dependency-Track:
20
+
21
+
| Field | Description |
22
+
| ---------------------- | ----------- |
23
+
|`analysis.state`| The triage state (e.g. `IN_TRIAGE`, `FALSE_POSITIVE`). A state of `FALSE_POSITIVE` marks the finding as a false positive in DefectDojo. |
24
+
|`analysis.isSuppressed`| Whether the finding is suppressed in Dependency-Track. |
25
+
|`analysis.detail`| Free-text analyst notes entered in Dependency-Track. Requires Dependency-Track v4.14.0 or higher and a compatible version of the DefectDojo Dependency Track parser. |
0 commit comments