DefectDojo / django-DefectDojo

38 Pull requests merged by 9 people

• release drafter and doc updates

  #3691 merged Jan 23, 2021

• files upload: remove from filters

  #3690 merged Jan 23, 2021

• Fix tag migration for legacy products

  #3684 merged Jan 23, 2021

• Update rabbitmq Docker tag from 3.8.10 to v3.8.11 (docker-compose.yml)

  #3688 merged Jan 23, 2021

• Fix bug in redirect function call

  #3673 merged Jan 22, 2021

• master-into-dev: docs + release drafter

  #3685 merged Jan 22, 2021

• notifications: make them synchronous

  #3678 merged Jan 22, 2021

• Update rabbitmq:3.8.10 Docker digest from 3.8.10 to 3.8.10 (docker-compose.yml)

  #3670 merged Jan 21, 2021

• risk acceptance: enhance!

  #3529 merged Jan 21, 2021

• Bump bleach from 3.2.1 to 3.2.2

  #3672 merged Jan 21, 2021

• fix engagement styling bug

  #3669 merged Jan 21, 2021

• jira: fix broken author check for cloud

  #3668 merged Jan 20, 2021

• Jira: fix support for epic as default issuetype + error handling

  #3609 merged Jan 20, 2021

• Snyk findings: deduplication enhancements

  #3662 merged Jan 20, 2021

• Bump django-celery-results from 2.0.0 to 2.0.1

  #3661 merged Jan 20, 2021

• Update busybox Docker tag from 1.32.0-musl to v1.33.0 (docker-compose.override.unit_tests_cicd.yml)

  #3665 merged Jan 20, 2021

• master-to-dev: GHA: Docker build caching and other speed improvements (#3659)

  #3664 merged Jan 20, 2021

• GHA: Docker build caching and other speed improvements

  #3659 merged Jan 20, 2021

• Update rabbitmq Docker tag from 3.8.9 to v3.8.10 (docker-compose.yml)

  #3660 merged Jan 20, 2021

• Findings list: Display jira key instead of jira bug icon

  #3605 merged Jan 20, 2021

• add product: fix missing error messages

  #3658 merged Jan 20, 2021

• Add Arbitrary File Uploads

  #3566 merged Jan 20, 2021

• Fix impact bug on Burp REST API parser and add more unit tests

  #3657 merged Jan 19, 2021

• [APIv2] Prefetch Mixins + Composable Swagger Schema

  #3516 merged Jan 19, 2021

• Fix sonarqube 3-hourly sync job

  #3619 merged Jan 19, 2021

• Bump cvss from 2.1 to 2.2

  #3645 merged Jan 19, 2021

• Bump mysql-connector-python from 8.0.22 to 8.0.23

  #3652 merged Jan 19, 2021

• Update mysql Docker tag from 5.7.32 to v5.7.33 (docker-compose.yml)

  #3651 merged Jan 19, 2021

• Bump pdfmake from 0.1.69 to 0.1.70 in /components

  #3646 merged Jan 18, 2021

• Remove usage of django.utils.six vendored library version of six

  #3649 merged Jan 18, 2021

• Exposing additional securityContext settings in parent values.yaml

  #3582 merged Jan 18, 2021

• remove old/dead/left-behind code

  #3635 merged Jan 17, 2021

• Add swagger schema test with tagged test cases

  #3528 merged Jan 17, 2021

• Importer: Burp REST API (Fix #3447)

  #3542 merged Jan 17, 2021

• Add more unit tests for AppSpider report parser

  #3634 merged Jan 17, 2021

• Fix #3638 Django static import deprecated

  #3637 merged Jan 17, 2021

• Fix JFrog Xray JSON parser for CWE and CVSS v3 (#3597 fix)

  #3585 merged Jan 17, 2021

• jira webhook: fix incoming author name check

  #3606 merged Jan 17, 2021

16 Pull requests opened by 8 people

• Fix version of auditlog

  #3639 opened Jan 17, 2021

• Update PyYAML to 5.3.1

  #3642 opened Jan 17, 2021

• Bump pyjwt from 1.7.1 to 2.0.1

  #3644 opened Jan 18, 2021

• User interface for Product Types shall behave like for other objects

  #3656 opened Jan 19, 2021

• dependency track parser: fix dedupe, set hash code fields

  #3667 opened Jan 20, 2021

• Bump pandas from 1.1.5 to 1.2.1

  #3671 opened Jan 21, 2021

• Update Qualys_Infrascan_Webgui parser.py

  #3676 opened Jan 21, 2021

• Increase alert field size to 250

  #3682 opened Jan 22, 2021

• test valentijn for release drafter

  #3686 opened Jan 22, 2021

• Helm: Chart improvements for running on GKE

  #3687 opened Jan 22, 2021

• Dynamic parser infrastructure

  #3689 opened Jan 23, 2021

• add product via prod_type: use normal add product logic

  #3692 opened Jan 23, 2021

• Fix date format on Fortify parser

  #3696 opened Jan 23, 2021

• cleanup old comments / commented out code

  #3697 opened Jan 23, 2021

• Remove unused setup.py

  #3698 opened Jan 23, 2021

• Multiple Endpoint object query fix

  #3700 opened Jan 23, 2021

6 Issues closed by 4 people

• Allow to filter / search by tags

  #2569 closed Jan 23, 2021

• Search product by tags

  #2993 closed Jan 23, 2021

• upgrade failing to 1.11.0 or higher when prod_type=0

  #3683 closed Jan 23, 2021

• Action Required: Fix Renovate Configuration

  #2943 closed Jan 21, 2021

• Django 2.x deprecation

  #3638 closed Jan 17, 2021

• Burp suite json format

  #3447 closed Jan 17, 2021

16 Issues opened by 8 people

• Login page announcement panel

  #3699 opened Jan 23, 2021

• cleanup 2.0: remove left over code from tagulous migration

  #3694 opened Jan 23, 2021

• cleanup 2.0: remove old contact fields in Product model

  #3693 opened Jan 23, 2021

• full risk acceptance via API

  #3681 opened Jan 22, 2021

• search product by tag

  #3680 opened Jan 22, 2021

• errors in APIv2 are swallowed and turned into 400 errors

  #3679 opened Jan 21, 2021

• PicklingError: Can't pickle <class 'tagulous.models.descriptors.TagRelatedManager'>

  #3677 opened Jan 21, 2021

• Sonarqube Tests finding mitigations after running Reimport-scan

  #3675 opened Jan 21, 2021

• deduplication config not checked at startup

  #3666 opened Jan 20, 2021

• Nessus CSV parser 500 error - , line 84 endpoint.Host += ":" + var

  #3655 opened Jan 19, 2021

• Creating a project without jira info show warning

  #3653 opened Jan 19, 2021

• GitLab SAST Report: ERROR [dojo:599] Error in parser: 'confidence'

  #3650 opened Jan 18, 2021

• Deleting engagement causes 500 error on endpoint_status

  #3648 opened Jan 18, 2021

• Dependency Track deduplication not working

  #3647 opened Jan 18, 2021

• Use seperate requirements file for unit/integration tests (non-prod)

  #3641 opened Jan 17, 2021

• User interface for Product Types is very different from other objects like Products

  #3640 opened Jan 17, 2021

20 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• Make Endpoint status reflect Finding status after close/reopen

  #3593 commented on Jan 23, 2021 • 3 new comments

• encrypt connection to external/on premise MySQL

  #3472 commented on Jan 20, 2021 • 2 new comments

• mitigated and accepted findings: strikethrough text decoration

  #2212 commented on Jan 17, 2021 • 2 new comments

• jira: improve comments / webhook robustness

  #2815 commented on Jan 18, 2021 • 2 new comments

• iOS MobSF report import to DefectDojo doesn't work

  #3479 commented on Jan 20, 2021 • 1 new comment

• Uploading images should enter the 21st century

  #3080 commented on Jan 23, 2021 • 1 new comment

• Add ceiling limit at which to automatically delete CI/CD engagements

  #3033 commented on Jan 23, 2021 • 1 new comment

• Abnormal Date Sorting in Metrics Dashboard for Individual Products

  #2692 commented on Jan 23, 2021 • 1 new comment

• Ability to push notes from finding itself

  #3009 commented on Jan 23, 2021 • 1 new comment

• Don't delete duplicates when deleting an original

  #3057 commented on Jan 23, 2021 • 1 new comment

• 1.12.0: add prs between 1.11.0 and 1.11.1 to release notes

  #3628 commented on Jan 23, 2021 • 1 new comment

• Parsers: Always set component_name and component_version (if possible)

  #3003 commented on Jan 23, 2021 • 1 new comment

• DefectDojo cannot parse imported MobSF Scan

  #3134 commented on Jan 19, 2021 • 0 new comments

• Dependency Dashboard

  #2937 commented on Jan 23, 2021 • 0 new comments

• Add "Recently visited" menu

  #2716 commented on Jan 23, 2021 • 0 new comments

• update Benchmark OWASP ASVS 4.0.1

  #2722 commented on Jan 23, 2021 • 0 new comments

• Uploading threat model file produces a 500

  #2835 commented on Jan 23, 2021 • 0 new comments

• PySa from Facebook open-source

  #2788 commented on Jan 23, 2021 • 0 new comments

• Reopen or mitigate existing finding in case of duplicate import with …

  #3594 commented on Jan 20, 2021 • 0 new comments

• experiment: upgrade django 2.2 -> 3.1

  #3632 commented on Jan 20, 2021 • 0 new comments