From 8cefa027dea6d662c8efa54f2f56554bce317dbc Mon Sep 17 00:00:00 2001 From: manuelsommer <47991713+manuel-sommer@users.noreply.github.com> Date: Mon, 6 Nov 2023 00:25:21 +0100 Subject: [PATCH] advance the description of rustyhog (#8897) --- docs/content/en/integrations/parsers/file/rusty_hog.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/docs/content/en/integrations/parsers/file/rusty_hog.md b/docs/content/en/integrations/parsers/file/rusty_hog.md index 428e21fd9f..ee10c565e8 100644 --- a/docs/content/en/integrations/parsers/file/rusty_hog.md +++ b/docs/content/en/integrations/parsers/file/rusty_hog.md @@ -10,3 +10,6 @@ DefectDojo currently supports the parsing of the following Rusty Hog JSON output - Duroc Hog: Scans for secrets in directories, files, and archives. - Gottingen Hog: Scans for secrets in a JIRA issue. - Essex Hog: Scans for secrets in a Confluence page. + +RustyHog scans only one target at a time. This is not efficient if you want to scan all targets (e.g. all JIRA tickets) and upload each single report to DefectDojo. +[Rusty-Hog-Wrapper](https://github.com/manuel-sommer/Rusty-Hog-Wrapper) deals with this and scans a whole JIRA Project or Confluence Space, merges the findings into a valid file which can be uploaded to DefectDojo. (This is no official recommendation from DefectDojo, but rather a pointer in a direction on how to use this vulnerability scanner in a more efficient way.) \ No newline at end of file