Integration with another tools #6940
mSALDANHAf
started this conversation in
General
Replies: 1 comment 1 reply
-
Two question in one ticket :) |
Beta Was this translation helpful? Give feedback.
1 reply
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
Good Afternoon.
We, at the Telecommunications company that I belong, are introducing DefectDojo as a tool for vulnerability analysts.
We are facing 2 issues.
The first is the need to introduce pre-processed findings via API, that we are doing that via API and using the Generics Findings Import.
The problem is that we lost the information about the vulnerability scanners that found that particular finding, that can be multiple after the vulnerability finding being correlated and normalized. So, the analysts asked us to add a column that presents the vulnerability scanners where that particular finding was found and to show if it's a internal finding or exposed to Internet Finding. We solved that by changing the model of the finding and the HTML. Was this the proper way? How can we add custom fields? How can we not mess up with future conflicting updates? We are thinking using rebase or if possible merging with the official repository.
The second problem is the need to introduce different trouble ticketing platforms. We see that the integration with Jira is a little coupled and is not being generalized. What should be the best way to abstract the integration with troubleticketing platforms? How would DefectDojo evolve with integrations?
Thanks in advance.
Beta Was this translation helpful? Give feedback.
All reactions