Skip to content
Draft
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
10000 commits
Select commit Hold shift + click to select a range
36e059e
Bump pillow from 11.3.0 to 12.0.0 (#13434)
dependabot[bot] Oct 17, 2025
6661035
tag based filtering: avoid duplicate rows in results (#13442)
valentijnscholten Oct 17, 2025
13dd919
feat(session): Single user session (#13416)
kiblik Oct 17, 2025
86a8744
report builder: ensure at least one section is present (#13443)
valentijnscholten Oct 17, 2025
479ce38
fix(helm): Fix renovate/dependabot helper (#13438)
kiblik Oct 17, 2025
4e1b4c6
Ruff: Fix PLC2701 + merge PLC (#13436)
kiblik Oct 17, 2025
e27d99d
ruff: Merge B01 rules (#13430)
kiblik Oct 17, 2025
dec5a63
Added the definition of the SOCIAL_AUTH_LOGIN_REDIRECT_URL variable (…
rseleven Oct 17, 2025
9c35b78
Fix DojoGroupSerializer to handle empty permissions list (#13447)
Maffooch Oct 17, 2025
4f634c4
findings-report-api: fix 404 errors (#13446)
valentijnscholten Oct 17, 2025
e31214a
fix-loop-duplicates: optimize query (#13445)
valentijnscholten Oct 17, 2025
489936f
auto_create_context: make engagement creation atomic (#13444)
valentijnscholten Oct 17, 2025
685ce4a
Bump ruff from 0.14.0 to 0.14.1 (#13452)
dependabot[bot] Oct 17, 2025
922757b
Bump boto3 from 1.40.53 to 1.40.54 (#13450)
dependabot[bot] Oct 17, 2025
8278a52
top 10 metrics fix
valentijnscholten Oct 17, 2025
fd45a50
fix all top_ten queries
valentijnscholten Oct 17, 2025
1c36918
update tests
valentijnscholten Oct 17, 2025
7eb1168
Replace webhook state transition diagram with PNG instead of renderin…
Maffooch Oct 17, 2025
47ac933
feat(helm): Add descriptions (#13407)
kiblik Oct 17, 2025
126a43d
Pro changelog: 2.51.0/1 and minor docs maintenance (#13454)
paulOsinski Oct 18, 2025
80236f6
Add Anchore Connector documentation (#13455)
paulOsinski Oct 18, 2025
9975ac5
Merge pull request #13453 from valentijnscholten/top-10-metrics
rossops Oct 20, 2025
1fa9c7c
deduplication: log hash_code_fields_always (#13462)
valentijnscholten Oct 20, 2025
032d779
Add more deduplication unit tests for importers (#13463)
valentijnscholten Oct 20, 2025
e172143
Show unique id from tool together with hash_code in title elements (#…
valentijnscholten Oct 20, 2025
8a9a3da
Add tests and documentation for deduplication algorithms (#13464)
valentijnscholten Oct 20, 2025
ffe5167
github action: allow detect merge conflicts to fail (#13465)
valentijnscholten Oct 20, 2025
969cb64
Update versions in application files
Oct 20, 2025
dbe8da0
Bump python-gitlab from 6.4.0 to 6.5.0 (#13470)
dependabot[bot] Oct 20, 2025
0b7e96d
Bump boto3 from 1.40.54 to 1.40.55 (#13472)
dependabot[bot] Oct 20, 2025
7c0d92a
Merge pull request #13474 from DefectDojo/release/2.51.2
rossops Oct 20, 2025
b2eda48
Ruff: Fix N805 (#13437)
kiblik Oct 20, 2025
d5964fb
Update versions in application files
Oct 20, 2025
0dda8ab
ruff: PT - simplify rules (#13435)
kiblik Oct 20, 2025
70bba0c
Update versions in application files
Oct 20, 2025
a1aa663
Merge branch 'dev' into master-into-dev/2.51.2-2.52.0-dev
Maffooch Oct 20, 2025
a008a00
Merge pull request #13476 from DefectDojo/master-into-bugfix/2.51.2-2…
rossops Oct 20, 2025
c7a3600
Merge pull request #13477 from DefectDojo/master-into-dev/2.51.2-2.52…
rossops Oct 20, 2025
0d7f0e0
feat(helm): Improve description about images/tags (#13473)
kiblik Oct 21, 2025
2591fd3
Split Github Vulnerability Scan into separate SCA & SAST parsers (#12…
Logicmn Oct 22, 2025
a3e6779
fix(deps): update dependency @docsearch/css from 4.1.0 to v4.2.0 (doc…
renovate[bot] Oct 23, 2025
6fd39a3
Bump psycopg[c] from 3.2.10 to 3.2.11 (#13471)
dependabot[bot] Oct 23, 2025
70145d6
chore(deps): update dependency renovatebot/renovate from 41.146.0 to …
renovate[bot] Oct 23, 2025
fd5b2fb
jira_integration: changes risk acceptance expiration date to a better…
maxi-bee Oct 23, 2025
c6c69a8
chore: Add note about postgresql18 path change to v2.51 upgrade notes…
pageinsec Oct 23, 2025
94a85da
fix: implement authorization for class Risk_Acceptance (#13469)
pablosnt Oct 24, 2025
262d3f7
:tada: Implement msrc vulnid (#13487)
manuel-sommer Oct 24, 2025
60e33e4
deduplication logic: add cross scanner unique_id tests and fix bug (#…
valentijnscholten Oct 24, 2025
9e42abc
docs: fix unique_id_or_hash_code docs (#13501)
valentijnscholten Oct 24, 2025
84e2f6f
UNIQUE_ID_OR_HASH_CODE: dont stop after one candidate (#13513)
valentijnscholten Oct 24, 2025
b6f22d0
chore(deps): update node.js from v22.20.0 to v22.21.0 (docs/package.j…
renovate[bot] Oct 24, 2025
10d0848
add MCP server documentation
Oct 24, 2025
d690be9
chore(deps): update dependency renovatebot/renovate from 41.146.8 to …
renovate[bot] Oct 25, 2025
9fc2204
Bump ruff from 0.14.1 to 0.14.2 (#13525)
dependabot[bot] Oct 26, 2025
b770c15
Bump boto3 from 1.40.55 to 1.40.58 (#13524)
dependabot[bot] Oct 26, 2025
ab8982a
chore(deps): update postgres:18.0-alpine docker digest from 18.0 to 1…
renovate[bot] Oct 26, 2025
9b4e4df
reimplement favicons, update theme (#13502)
paulOsinski Oct 26, 2025
7dd285c
chore(deps): update dependency vite from 7.1.9 to v7.1.11 [security] …
renovate[bot] Oct 26, 2025
ff49260
Bump redis from 6.4.0 to 7.0.0 (#13510)
dependabot[bot] Oct 26, 2025
6864672
chore(deps): update github artifact actions (.github/workflows/rest-f…
renovate[bot] Oct 27, 2025
0fd62d6
chore(deps): update dependency vite from 7.1.11 to v7.1.12 (docs/pack…
renovate[bot] Oct 27, 2025
a36aeb2
Merge branch 'bugfix' into aidocs
rossops Oct 27, 2025
8e022bc
fix(renovate): Clean records
kiblik Oct 23, 2025
0525b9c
Merge pull request #13529 from paulOsinski/aidocs
rossops Oct 27, 2025
222c494
Merge branch 'bugfix' into renovate_help
rossops Oct 27, 2025
2c830ad
unittests: disable webhook notifications in unrelated tests (#13515)
valentijnscholten Oct 27, 2025
9cf6ff2
Merge branch 'bugfix' into renovate_help
rossops Oct 27, 2025
7f11d0d
Merge pull request #13509 from kiblik/renovate_help
rossops Oct 27, 2025
b444ba5
Update versions in application files
Oct 27, 2025
5379541
Merge pull request #13536 from DefectDojo/release/2.51.3
rossops Oct 27, 2025
d8675fe
fix: ui must not overwrite service field from parser (#13517)
valentijnscholten Oct 27, 2025
e55c8b6
Update versions in application files
Oct 27, 2025
ccd45f7
Update versions in application files
Oct 27, 2025
b5a46f4
watson: lower async threshold from 100 to 10 (#13518)
valentijnscholten Oct 27, 2025
ea09b35
feat(helm): Do not allow multiple celery beats (#13527)
kiblik Oct 27, 2025
ffe7435
feat(GHA): Replace ShellCheck (#13519)
kiblik Oct 27, 2025
9c5bd56
scan_added_empty.tpl: fix symlink problem (#13514)
valentijnscholten Oct 27, 2025
3881936
fix(HELM): Add "artifacthub.io/changes" for renovate & dependabot (#1…
kiblik Oct 27, 2025
12e1eb3
Merge branch 'dev' into master-into-dev/2.51.3-2.52.0-dev
Maffooch Oct 27, 2025
236d8b1
endpoint import optimize (#13521)
valentijnscholten Oct 27, 2025
1edaa95
Merge pull request #13540 from DefectDojo/master-into-bugfix/2.51.3-2…
rossops Oct 27, 2025
35934f7
Merge pull request #13539 from DefectDojo/master-into-dev/2.51.3-2.52…
rossops Oct 27, 2025
04a28aa
chore(deps): update dependency renovatebot/renovate from 41.159.4 to …
renovate[bot] Oct 28, 2025
1676517
Bump psycopg[c] from 3.2.11 to 3.2.12 (#13535)
dependabot[bot] Oct 28, 2025
5164ce9
chore(deps): update dependency node from 22.21.0 to v24 (.github/work…
renovate[bot] Oct 28, 2025
d588609
chore(deps): bump redis from 7.0.0 to 7.0.1 (#13552)
dependabot[bot] Oct 28, 2025
bd84361
chore(deps): bump bleach from 6.2.0 to 6.3.0 (#13553)
dependabot[bot] Oct 28, 2025
6afbcbf
chore(deps): bump boto3 from 1.40.58 to 1.40.60 (#13554)
dependabot[bot] Oct 28, 2025
98e7e1e
chore(deps): update dependency renovatebot/renovate from 41.163.1 to …
renovate[bot] Oct 28, 2025
62ba5e5
Added Ability to Edit found_by value in API (#13542)
Jino-T Oct 29, 2025
059e304
chore: update notify-pr-reviewers-action to always use the latest ver…
Maffooch Oct 30, 2025
34a937b
chore(deps): update dependency renovatebot/renovate from 41.163.6 to …
renovate[bot] Oct 30, 2025
788572f
chore(deps): update dependency node from 24.10.0 to v24.11.0 (.github…
renovate[bot] Oct 30, 2025
16c749c
:bug: add middleware to handle social auth provider unavailability gr…
manuel-sommer Oct 30, 2025
810854b
chore: update notify-pr-reviewers-action to use the latest version fr…
Maffooch Oct 30, 2025
e15bddd
chore(deps): update dependency renovatebot/renovate from 41.163.7 to …
renovate[bot] Oct 30, 2025
1bac207
docs: correct LDAP authentication instructions for Alpine-based Docke…
yuwwx Oct 30, 2025
155a404
chore(deps): bump boto3 from 1.40.60 to 1.40.62 (#13569)
dependabot[bot] Oct 30, 2025
bda17de
chore(deps): bump python-gitlab from 6.5.0 to 7.0.0 (#13570)
dependabot[bot] Oct 30, 2025
8e2e6cd
[docs] Integrators/Connectors updates (#13549)
paulOsinski Oct 30, 2025
09f7ffb
fix(FindingViewSet): remove prefetched tags to prevent issues with ce…
Maffooch Oct 30, 2025
26fe7a9
Added handling for abnormal wazuh severity values (#13522)
Jino-T Oct 30, 2025
1df2832
Added more details to the run-unittest.sh help text (#13557)
Jino-T Oct 30, 2025
00d3fae
fix(dependencies): update package versions to remove caret (^) for co…
Maffooch Oct 30, 2025
7436cf7
chore(deps): update dependency renovatebot/renovate from 41.165.5 to …
renovate[bot] Oct 31, 2025
39e3b9c
chore(deps): update dependency django-debug-toolbar from 6.0.0 to v6.…
renovate[bot] Oct 31, 2025
554b531
chore(deps): update dependency renovatebot/renovate from 41.165.7 to …
renovate[bot] Oct 31, 2025
4fda41e
docker compose: switch to Valkey as message broker (#13331)
valentijnscholten Oct 31, 2025
1ba1122
Fix recipient handling in create_notification method (#13548)
dorkdiaries9 Oct 31, 2025
a8869de
chore(deps): bump ruff from 0.14.2 to 0.14.3 (#13577)
dependabot[bot] Oct 31, 2025
e1eef7c
chore(deps): bump boto3 from 1.40.62 to 1.40.63 (#13579)
dependabot[bot] Oct 31, 2025
a260967
:tada: Add mal vulnid (#13588)
manuel-sommer Nov 3, 2025
ca0fc56
:bug: fix similiar findings severity color (#13586)
manuel-sommer Nov 3, 2025
1f90ab7
fix(CycloneDXJSONParser): handle missing severity field by defaulting…
Maffooch Nov 3, 2025
d1e0dca
[docs] Prioritization Engine adjustments (#13581)
paulOsinski Nov 3, 2025
9fb0dae
:bug: Robustify create_user to handle None value (#13572)
manuel-sommer Nov 3, 2025
1271649
Merge branch 'dev' into bugfix
Maffooch Nov 3, 2025
88361c9
Changing to supported k8s version for minikube
rossops Nov 3, 2025
40dca35
Merge pull request #13601 from DefectDojo/bugfix
rossops Nov 3, 2025
4b6ddca
Update versions in application files
Nov 3, 2025
8f98d4e
Merge branch 'master' into release/2.52.0
rossops Nov 3, 2025
8bc3738
Merge pull request #13602 from DefectDojo/release/2.52.0
rossops Nov 3, 2025
ec606a3
Update versions in application files
Nov 3, 2025
10dd753
Update versions in application files
Nov 3, 2025
fb49ecd
Merge pull request #13606 from DefectDojo/master-into-bugfix/2.52.0-2…
rossops Nov 3, 2025
bd689fe
Merge pull request #13605 from DefectDojo/master-into-dev/2.52.0-2.53…
rossops Nov 3, 2025
0dc5a5b
chore(deps): update dependency renovatebot/renovate from 41.168.0 to …
renovate[bot] Nov 3, 2025
22afcfc
chore(deps): update mccutchen/go-httpbin docker tag from 2.18.3 to v2…
renovate[bot] Nov 3, 2025
99b9567
chore(deps): update dependency renovatebot/renovate from 41.168.6 to …
renovate[bot] Nov 3, 2025
9007e4d
chore(deps): bump drf-spectacular from 0.28.0 to 0.29.0 (#13600)
dependabot[bot] Nov 4, 2025
87a46ae
chore(deps): bump openapitools/openapi-generator-cli (#13599)
dependabot[bot] Nov 4, 2025
503399f
chore(deps): bump nginx from 1.29.2-alpine3.22 to 1.29.3-alpine3.22 (…
dependabot[bot] Nov 4, 2025
d049730
chore(deps): bump markdown from 3.9 to 3.10 (#13609)
dependabot[bot] Nov 4, 2025
0b705d6
chore(deps): bump boto3 from 1.40.63 to 1.40.65 (#13610)
dependabot[bot] Nov 4, 2025
71ae67d
chore(deps): update dependency renovatebot/renovate from 41.169.2 to …
renovate[bot] Nov 4, 2025
b2036f0
chore(deps): update dependency kubernetes/kubernetes from v1.34.0 to …
renovate[bot] Nov 4, 2025
3c28fb5
chore(deps): update dependency vite from 7.1.11 to v7.1.12 (docs/pack…
renovate[bot] Nov 4, 2025
723d6ee
:tada: implement n0s1 scanner #13564 (#13580)
manuel-sommer Nov 4, 2025
d303fea
chore(deps): update dependency renovatebot/renovate from 41.169.4 to …
renovate[bot] Nov 4, 2025
1d68128
:bug: Catch AuthTokenError in middleware (#13608)
manuel-sommer Nov 5, 2025
817a31f
feat(renovate): Update renovate only weekly (#13611)
kiblik Nov 5, 2025
00f0993
:bug: calender: Fix incorrect end dates for engagements and tests (#1…
manuel-sommer Nov 5, 2025
3052ac3
:tada: Advance reimport to update fix_available field #12633 (#12922)
manuel-sommer Nov 5, 2025
f689f84
Make Finding Group Push to Jira Push Push to Duplicate Issues (#13573)
Jino-T Nov 5, 2025
b99e169
[docs] moving Parser Docs to new index (#13528)
paulOsinski Nov 5, 2025
4d869b4
chore(deps): bump django from 5.1.13 to 5.1.14 (#13631)
dependabot[bot] Nov 5, 2025
789cf11
chore(deps): update helm/chart-testing-action action from v2.7.0 to v…
renovate[bot] Nov 6, 2025
10ccf52
chore(deps): bump boto3 from 1.40.65 to 1.40.66 (#13626)
dependabot[bot] Nov 6, 2025
0354619
chore(deps): update dependency vite from 7.1.12 to v7.2.1 (docs/packa…
renovate[bot] Nov 6, 2025
bc493c4
chore(deps): update dependency renovatebot/renovate from 41.170.0 to …
renovate[bot] Nov 6, 2025
0024aa2
fix(deps): update dependency @docsearch/js from 4.2.0 to v4.3.1 (docs…
renovate[bot] Nov 6, 2025
e7fed9b
fix(deps): update dependency @docsearch/css from 4.2.0 to v4.3.1 (doc…
renovate[bot] Nov 6, 2025
253772b
:bug: fix TestForms date validation (#13624)
manuel-sommer Nov 6, 2025
d1d9676
feat(renovate): track oldest maintained k8s (#13545)
kiblik Nov 6, 2025
66b7334
fix(helm/dependabot/renovate): Fix broken automatic update (#13520, #…
kiblik Nov 6, 2025
2f9a5aa
Adding SOCIAL_AUTH_REDIRECT_IS_HTTPS, to enable use of HTTPS protocol…
marcelhorner Nov 6, 2025
83834f0
SLA Calculations: Remove product grade calculation and consolidate ta…
Maffooch Nov 7, 2025
d4e7513
:bug: fix nancy file format update #12860 (#13634)
manuel-sommer Nov 7, 2025
60e2cb3
chore(deps): update dependency renovatebot/renovate from 41.173.0 to …
renovate[bot] Nov 7, 2025
24eb308
fix(tags): improve tag handling in DefaultImporter and add tests for …
Maffooch Nov 7, 2025
d34047e
fix(tags): enhance tag handling in DefaultReImporter and add tests fo…
Maffooch Nov 7, 2025
e2dbca5
fix(helm): Fix PVC templating after #13210 (#13619)
kiblik Nov 7, 2025
213d1e7
add SLA pro documentation
Nov 7, 2025
005104c
reweight in menu
Nov 7, 2025
336946e
fix screenshot
Nov 7, 2025
b388a01
chore(deps): bump ruff from 0.14.3 to 0.14.4 (#13645)
dependabot[bot] Nov 9, 2025
9137d79
chore(deps): bump boto3 from 1.40.66 to 1.40.68 (#13644)
dependabot[bot] Nov 9, 2025
4104958
chore(deps): update dependency vite from 7.2.1 to v7.2.2 (docs/packag…
renovate[bot] Nov 9, 2025
37069a5
chore(deps): bump asteval from 1.0.6 to 1.0.7 (#13646)
dependabot[bot] Nov 9, 2025
717b846
chore(deps): bump django-dbbackup from 5.0.0 to 5.0.1 (#13643)
dependabot[bot] Nov 9, 2025
b1ff550
chore(deps): bump django-crispy-forms from 2.4 to 2.5 (#13642)
dependabot[bot] Nov 9, 2025
071f098
:lipstick: Nancy parser: generate tool link (#13633)
manuel-sommer Nov 9, 2025
2b54bbb
:tada: Make social auth exceptions configurable (#13596)
manuel-sommer Nov 10, 2025
0bc088c
Merge pull request #13652 from paulOsinski/sla-docs
rossops Nov 10, 2025
0523665
Merge branch 'bugfix' into importing-tags
rossops Nov 10, 2025
d519cf7
Merge pull request #13650 from DefectDojo/importing-tags
rossops Nov 10, 2025
f4d4c41
Update versions in application files
Nov 10, 2025
b9836f2
Merge pull request #13664 from DefectDojo/release/2.52.1
rossops Nov 10, 2025
8daba95
Update versions in application files
Nov 10, 2025
c58f90e
Update versions in application files
Nov 10, 2025
1622df3
Merge pull request #13669 from DefectDojo/master-into-bugfix/2.52.1-2…
rossops Nov 10, 2025
5bf54c2
Merge branch 'dev' into master-into-dev/2.52.1-2.53.0-dev
Maffooch Nov 10, 2025
cf2a8b1
:bug: harden jfrog xray unified file parsing #13628 (#13632)
manuel-sommer Nov 10, 2025
f6cac49
Restore n0s1 Scanner documentation in supported tools
Maffooch Nov 10, 2025
ac9c159
Merge pull request #13667 from DefectDojo/master-into-dev/2.52.1-2.53…
rossops Nov 10, 2025
bcb9488
chore(deps): bump boto3 from 1.40.68 to 1.40.69 (#13661)
dependabot[bot] Nov 10, 2025
a78cbeb
chore(deps): update softprops/action-gh-release action from v2.4.1 to…
renovate[bot] Nov 10, 2025
0f3040d
Update dependency renovatebot/renovate from 42.0.3 to v42.5.0 (.githu…
renovate[bot] Nov 10, 2025
d56960d
fix(deps): update dependency @docsearch/css from 4.3.1 to v4.3.2 (doc…
renovate[bot] Nov 10, 2025
c484229
feat(renovate): track oldest maintained k8s (#13670)
kiblik Nov 12, 2025
f44d5a4
Update dependency node from 24.11.0 to v24.11.1 (.github/workflows/va…
renovate[bot] Nov 12, 2025
517c14c
:lipstick: beautify drheader jsonfiles (#13672)
manuel-sommer Nov 12, 2025
c7432c1
:tada: Advance ibm app parser with fix_available (#13663)
manuel-sommer Nov 12, 2025
3396e7b
:tada: add Dawnscanner fix_available field. (#13660)
manuel-sommer Nov 12, 2025
186befb
:bug: fix nancy severity calculation #13656 (#13657)
manuel-sommer Nov 12, 2025
99a1d7e
:bug: fix debug mode in logging #13659 (#13662)
manuel-sommer Nov 12, 2025
fc6aba9
Update dependency kubernetes/kubernetes from v1.34.1 to v1.34.2 (.git…
renovate[bot] Nov 13, 2025
0e46041
chore(deps): bump boto3 from 1.40.69 to 1.40.71 (#13692)
dependabot[bot] Nov 13, 2025
b345e64
chore(deps): bump vulners from 3.1.1 to 3.1.2 (#13691)
dependabot[bot] Nov 13, 2025
2a8eaed
fix(deps): update dependency @docsearch/js from 4.3.1 to v4.3.2 (docs…
renovate[bot] Nov 13, 2025
139741d
Update dependency gohugoio/hugo from v0.152.1 to v0.152.2 (.github/wo…
renovate[bot] Nov 13, 2025
0ff017f
:tada: implement new threatmapper file format #13639 (#13655)
manuel-sommer Nov 13, 2025
573e263
:tada: Add VA vulnid (#13675)
manuel-sommer Nov 13, 2025
038cf16
:tada: Add Kubeaudit fix_available field (#13684)
manuel-sommer Nov 13, 2025
b097ced
feat(helm): Relocate docs/schema hints
kiblik Nov 13, 2025
856aa7a
feat(renovate): Wait 2 days to use latest k8s (#13694)
kiblik Nov 13, 2025
2171863
fix(helm/renovate/dependabot): Commit changes & fix condition format …
kiblik Nov 13, 2025
bea1002
chore(deps): bump boto3 from 1.40.71 to 1.40.72 (#13697)
dependabot[bot] Nov 13, 2025
ed83097
reimport: support pro hash method (#13680)
valentijnscholten Nov 13, 2025
3ce29cb
:bug: fix DD_EDITABLE_MITIGATED_DATA close finding internal server er…
manuel-sommer Nov 14, 2025
769231d
:bug: add user mention notifications in note creation for Engagement,…
Maffooch Nov 14, 2025
19dc283
log a line when custom hash method is used (#13679)
valentijnscholten Nov 14, 2025
44ebefb
:tada: Add pwn sast fix_available field (#13702)
manuel-sommer Nov 14, 2025
68f6639
Deduplicate findings in batches (#13491)
valentijnscholten Nov 14, 2025
6e55879
docs: update SonarQube API pull details (#13689)
sNiXx Nov 14, 2025
3fb802b
Qualys parser add CVEs to vulnerability ids for xml files
Jino-T Nov 14, 2025
c8b521a
Add CVE assertions to Qualys parser tests for vulnerability IDs
Maffooch Nov 14, 2025
348a345
chore(deps): bump boto3 from 1.40.72 to 1.40.73 (#13706)
dependabot[bot] Nov 15, 2025
5e9f1ae
fix(helm): merge extraAnnotations with init job annotations (#13677)
qlimenoque Nov 15, 2025
67801cf
chore(deps): update postgres docker tag from 18.0 to v18.1 (docker-co…
renovate[bot] Nov 15, 2025
2593926
:bug: fix finding closed with a provided mitigated date #13699 (#13700)
manuel-sommer Nov 17, 2025
9a319ce
:arrow_up: Bump ruff from 0.14.4 to 0.14.5 (#13708)
manuel-sommer Nov 17, 2025
3d3427b
[docs] typo fixes (#13709)
paulOsinski Nov 17, 2025
b5a7f9e
Refactor CVE extraction in parse_finding to use list comprehensions f…
Maffooch Nov 17, 2025
82cbdb7
Update postgres:18.1-alpine Docker digest from 18.1 to 18.1-alpine (d…
renovate[bot] Nov 17, 2025
461a885
Update dependency renovatebot/renovate from 42.5.0 to v42.5.4 (.githu…
renovate[bot] Nov 17, 2025
9d83ea6
Merge pull request #13698 from kiblik/helm_hit_help
rossops Nov 17, 2025
3096b0a
Merge pull request #13710 from Jino-T/qualys-fix
rossops Nov 17, 2025
c1387b7
Update versions in application files
Nov 17, 2025
69536d9
Merge pull request #13718 from DefectDojo/release/2.52.2
rossops Nov 17, 2025
ed37199
Update versions in application files
Nov 17, 2025
6f0897a
Merge branch 'dev' into master-into-dev/2.52.2-2.53.0-dev
Maffooch Nov 17, 2025
8a7ff18
Merge pull request #13721 from DefectDojo/master-into-dev/2.52.2-2.53…
rossops Nov 17, 2025
f6e2657
Update dependency kubernetes from v1.31.13 to v1.32.10 (.github/workf…
renovate[bot] Nov 17, 2025
1d7dcb8
chore(deps): update dependency renovatebot/renovate from 42.5.4 to v4…
renovate[bot] Nov 18, 2025
36af07a
chore(deps): bump boto3 from 1.40.73 to 1.40.74 (#13715)
dependabot[bot] Nov 18, 2025
e931c60
chore(deps): bump datatables.net from 2.3.4 to 2.3.5 in /components (…
dependabot[bot] Nov 18, 2025
374553e
chore(deps): update actions/checkout action from v5.0.0 to v5.0.1 (.g…
renovate[bot] Nov 18, 2025
b6a87cc
chore(deps): bump boto3 from 1.40.74 to 1.40.75 (#13731)
dependabot[bot] Nov 18, 2025
820f74c
:bug: fix create questionnaire with empty survey (#13728)
manuel-sommer Nov 19, 2025
50450e1
Add notification when finding is created via the API (#13732)
Juu Nov 19, 2025
21bf1a7
Feat: Add HPA & PDB Helm Chart Support #13391 (#13512)
carlosmt86 Nov 20, 2025
e7f9026
chore(deps): bump redis from 7.0.1 to 7.1.0 (#13742)
dependabot[bot] Nov 20, 2025
cb57c63
chore(deps): bump boto3 from 1.40.75 to 1.41.0 (#13743)
dependabot[bot] Nov 20, 2025
56acdae
Update dependency vite from 7.2.2 to v7.2.4 (docs/package.json) (#13741)
renovate[bot] Nov 20, 2025
bd0fa81
Update dependency yamale from 6.0.0 to v6.1.0 (.github/workflows/test…
renovate[bot] Nov 20, 2025
5a97ed6
Update actions/checkout action from v5.0.1 to v6 (.github/workflows/v…
renovate[bot] Nov 20, 2025
7e7ecd3
:tada: implement zora vulnerabilty parser (#13744)
manuel-sommer Nov 21, 2025
ffc03a9
Add OpenReports import support (#13562)
mfyll Nov 21, 2025
defd3d4
fix(init): Initialzer has to fail if migration is not done
kiblik Nov 21, 2025
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
The table of contents is too big for display.
Diff view
Diff view
  •  
  •  
  •  
The diff you're trying to view is too large. We only load the first 3000 changed files.
3 changes: 3 additions & 0 deletions .dockerignore
Original file line number Diff line number Diff line change
@@ -0,0 +1,3 @@
.git
.gitignore
*.md
72 changes: 72 additions & 0 deletions .dryrunsecurity.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,72 @@
---
sensitiveCodepaths:
- 'dojo/object/urls.py'
- 'dojo/object/views.py'
- 'dojo/announcement/*.py'
- 'dojo/api_v2/*.py'
- 'dojo/api_v2/**/*.py'
- 'dojo/authorization/*.py'
- 'dojo/db_migrations/*.py'
- 'dojo/endpoint/*.py'
- 'dojo/engagement/*.py'
- 'dojo/finding/*.py'
- 'dojo/finding_group/*.py'
- 'dojo/group/*.py'
- 'dojo/importers/*.py'
- 'dojo/importers/**/*.py'
- 'dojo/jira_link/*.py'
- 'dojo/metrics/*.py'
- 'dojo/note_type/*.py'
- 'dojo/notes/*.py'
- 'dojo/product/*.py'
- 'dojo/product_type/*.py'
- 'dojo/reports/*.py'
- 'dojo/risk_acceptance/*.py'
- 'dojo/search/*.py'
- 'dojo/templates/*.html'
- 'dojo/templates/**/*.html'
- 'dojo/templatetags/*.py'
- 'dojo/test/*.py'
- 'dojo/tool_config/*.py'
- 'dojo/tool_product/*.py'
- 'dojo/tool_type/*.py'
- 'dojo/user/*.py'
- 'dojo/apps.py'
- 'dojo/celery.py'
- 'dojo/context_processors.py'
- 'dojo/decorators.py'
- 'dojo/filters.py'
- 'dojo/forms.py'
- 'dojo/middleware.py'
- 'dojo/models.py'
- 'dojo/okta.py'
- 'dojo/pipeline.py'
- 'dojo/remote_user.py'
- 'dojo/tasks.py'
- 'dojo/urls.py'
- 'dojo/utils.py'
- 'dojo/views.py'
- 'dojo/wsgi.py'
- 'docker/environments/*.env'
- 'docker/extra_settings'
- 'docker/entrypoint-celery-beat.sh'
- 'docker/entrypoint-celery-worker.sh'
- 'docker/entrypoint-initializer.sh'
- 'docker/entrypoint-first-boot.sh'
- 'docker/entrypoint-nginx.sh'
- 'docker/entrypoint-uwsgi.sh'
- 'docker/wait-for-it.sh'
allowedAuthors:
usernames:
- mtesauro
- devGregA
- cneill
- Maffooch
- blakeaowens
- kiblik
- dsever
- dogboat
- hblankenship
- valentijnscholten
notificationList:
- '@mtesauro'
19 changes: 19 additions & 0 deletions .github/CODEOWNERS
Original file line number Diff line number Diff line change
@@ -0,0 +1,19 @@
# Any kind of package updates only need 2 approvals,
# So let's add three folks here
requirements.txt @cneill @mtesauro @Maffooch
# Any dockerfile or compose changes will need to be viewed by
# these people
Dockerfile.* @mtesauro @Maffooch
docker-compose.* @mtesauro @Maffooch
/docker/ @mtesauro @Maffooch
# Documentation changes
/docs/content/ @paulOsinski @valentijnscholten @Maffooch
# Kubernetes should be reviewed by reviewed first by those that know it
/helm/ @cneill @kiblik @Maffooch
# Anything UI related needs to be checked out by those with the eye for it
/dojo/static/ @blakeaowens @Maffooch
/dojo/templates/ @blakeaowens @Maffooch
# Any model changes should be closely looked at
/dojo/models.py @Maffooch
# All other code changes should be reviewed by someone
* @Maffooch @mtesauro
49 changes: 49 additions & 0 deletions .github/ISSUE_TEMPLATE/bug_report.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,49 @@
---
name: Bug report
about: Create a report to help us improve
title: ''
labels: bug
assignees: ''

---
**Slack us first!**
The easiest and fastest way to help you is via Slack. There's a free and easy signup to join our #defectdojo channel in the OWASP Slack workspace: [Get Access.](https://owasp.org/slack/invite)
If you're confident you've found a bug, or are allergic to Slack, you can submit an issue anyway.

**Be informative**
Please enter as much information as possible, otherwise we can't provide support. If possible upgrade to the latest release or dev version and try again.

**Bug description**
A clear and concise description of what the bug is. For errors include at least the exact error message you are seeing (including traceback).

**Steps to reproduce**
Steps to reproduce the behavior:
1. Go to '...'
2. Click on '....'
3. Scroll down to '....'
4. See error

**Expected behavior**
A clear and concise description of what you expected to happen.

**Deployment method** *(select with an `X`)*
- [ ] Docker Compose
- [ ] Kubernetes
- [ ] GoDojo

**Environment information**
- Operating System: [e.g. Ubuntu 18.04]
- Docker Compose or Helm version (Output of `docker compose version` or `helm version`)
- DefectDojo version (see footer) or commit message: [use `git show -s --format="[%ci] %h: %s [%d]"`]

**Logs**
Use `docker compose logs` (or similar, depending on your deployment method) to get the logs and add the relevant sections here showing the error occurring (if applicable).

**Sample scan files**
If applicable, add sample scan files to help reproduce your problem.

**Screenshots**
If applicable, add screenshots to help explain your problem.

**Additional context** (optional)
Add any other context about the problem here.
26 changes: 26 additions & 0 deletions .github/ISSUE_TEMPLATE/feature_request.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,26 @@
---
name: Feature request
about: Suggest an idea for DefectDojo
title: ''
labels: enhancement
assignees: ''

---
## :warning: Note on feature completeness :warning:

We are narrowing the scope of acceptable enhancements to DefectDojo. Learn more here:
https://github.com/DefectDojo/django-DefectDojo/blob/master/readme-docs/CONTRIBUTING.md

**Is your feature request related to a problem? Please describe**
A clear and concise description of what the problem is.
Ex: I'm always frustrated when [...]

**Describe the solution you'd like**
A clear and concise description of what you want to happen.
Ex: As a < role >, I want < some goal > so that < some reason >.

**Describe alternatives you've considered**
A clear and concise description of any alternative solutions or features you have considered.

**Additional context**
Add any other context, screenshots, sketch, code snippet, etc. about the feature request here.
14 changes: 14 additions & 0 deletions .github/ISSUE_TEMPLATE/importer_request.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,14 @@
---
name: New importer request
about: Request a new importer (scanner) for DefectDojo
title: ''
labels: Import Scans
assignees: ''

---

**Scanner Name**
Name of the scanner, brief description of the scanner and link.

**Sample File**
Please attach a sample file and the format of the file (xml, json, csv).
16 changes: 16 additions & 0 deletions .github/ISSUE_TEMPLATE/security_issue.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,16 @@
---
name: Security issue
about: Report a security issue
title: Please submit via our security reporting program, not GitHub
labels: security
assignees: ''

---

**DefectDojo security reporting program**

If you believe you have found a **security issue** in DefectDojo, please review the [disclosure policy](../../readme-docs/SECURITY.md) and submit your finding via our security reporting program.

Please, do not submit **security issues** via GitHub directly.

Thank you for helping keep DefectDojo and our users safe!
49 changes: 49 additions & 0 deletions .github/ISSUE_TEMPLATE/support_request.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,49 @@
---
name: Support Request
about: If you need support or are running into some trouble
title: ''
labels: support
assignees: ''

---
**Slack us first!**
The easiest and fastest way to help you is via Slack. There's a free and easy signup to join our #defectdojo channel in the OWASP Slack workspace: [Get Access.](https://owasp.org/slack/invite)
If you're confident you've found a bug, or are allergic to Slack, you can submit an issue anyway.

**Be informative**
Please enter as much information as possible, otherwise we can't provide support. If possible upgrade to the latest release or dev branch and try again.

**Problem description**
A clear and concise description of what the problem is. For errors include at least the exact error message you are seeing (including traceback).

**Steps to reproduce**
Steps to reproduce the behavior:
1. Go to '...'
2. Click on '....'
3. Scroll down to '....'
4. See error

**Expected behavior**
A clear and concise description of what you expected to happen.

**Deployment method** *(select with an `X`)*
- [ ] Docker Compose
- [ ] Kubernetes
- [ ] GoDojo

**Environment information**
- Operating System: [e.g. Ubuntu 18.04]
- Docker Compose or Helm version (Output of `docker compose version` or `helm version`)
- DefectDojo version (see footer) or commit message: [use `git show -s --format="[%ci] %h: %s [%d]"`]

**Logs**
Use `docker compose logs` (or similar, depending on your deployment method) to get the logs and add the relevant sections here showing the error occurring (if applicable).

**Sample scan files**
If applicable, add sample scan files to help reproduce your problem.

**Screenshots**
If applicable, add screenshots to help explain your problem.

**Additional context** (optional)
Add any other context about the problem here.
71 changes: 71 additions & 0 deletions .github/dependabot.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,71 @@
version: 2
updates:
- package-ecosystem: pip
directory: "/"
schedule:
interval: daily
open-pull-requests-limit: 10
target-branch: dev
ignore:
- dependency-name: whitenoise
versions:
- ">= 5.a"
- "< 6"
- package-ecosystem: npm
directory: "/components"
schedule:
interval: daily
open-pull-requests-limit: 10
target-branch: dev
ignore:
- dependency-name: bootstrap
versions:
- ">= 4.a"
- "< 5"
- dependency-name: bootstrap-social
versions:
- ">= 5.a"
- "< 6"
- dependency-name: bootswatch
versions:
- ">= 4.a"
- "< 5"
- dependency-name: chosen
versions:
- ">= 1.a"
- "< 2"
- dependency-name: drmonty-datatables-responsive
versions:
- ">= 2.a"
- "< 3"
- dependency-name: flot
versions:
- ">= 2.a"
- "< 3"
- dependency-name: flot
versions:
- ">= 3.a"
- "< 4"
- dependency-name: flot
versions:
- ">= 4.a"
- "< 5"
- dependency-name: fullcalendar
versions:
- ">= 5.a"
- "< 6"
- dependency-name: startbootstrap-sb-admin-2
versions:
- ">= 3.a"
- "< 4"
- dependency-name: startbootstrap-sb-admin-2
versions:
- ">= 4.a"
- "< 5"
- package-ecosystem: docker
directory: "/"
schedule:
interval: weekly
open-pull-requests-limit: 10
target-branch: dev

67 changes: 67 additions & 0 deletions .github/labeler.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,67 @@
---
docs:
- changed-files:
- any-glob-to-any-file:
- docs/**/*
- readme-docs/**/*

docker:
- changed-files:
- any-glob-to-any-file:
- docker/**/*
- docker**
- Docker*

helm:
- changed-files:
- any-glob-to-any-file:
- helm/defectdojo/*
- helm/defectdojo/**/*

"New Migration":
- changed-files:
- any-glob-to-any-file:
- dojo/db_migrations/*

unittests:
- changed-files:
- any-glob-to-any-file:
- unittests/**/*

integration_tests:
- changed-files:
- any-glob-to-any-file:
- tests/**/*

settings_changes:
- changed-files:
- any-glob-to-any-file:
- dojo/settings/settings.dist.py

apiv2:
- changed-files:
- any-glob-to-any-file:
- dojo/api_v2/**/*

ui:
- changed-files:
- any-glob-to-any-file:
- dojo/static/**/*
- dojo/templates/**/*
- dojo/templatetags/**/*

parser:
- changed-files:
- any-glob-to-any-file:
- dojo/tools/**/*

localization:
- changed-files:
- any-glob-to-any-file:
- dojo/locale/*
- dojo/locale/**/*

lint:
- changed-files:
- any-glob-to-any-file:
- ruff.toml
Loading