You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Overview
The default api_blackduck scanner of DefectDojo seems to have not been adapted to the latest API fetching mechanism of Blackduck SCA. Assuming BlackDuck SCA has updated the API, data fetched using the old API mechanism doesn't give the expected output anymore (this is what's used by DefectDojo right now). Certain keys are missing & the some of the keys 'name' have been changed in the returned JSON response.
Steps to reproduce
Go to Settings -> Tool Configuration.
Set up BlackDuck tool configuration with the required URL & api key.
Spin up a new project & create a new engagement in it.
Go to the settings of the new project created & click Add API Scan configuration.
Set up the Tool configuration as Blackduck and set the Service1 & Service2 Fields respectively (Ref ofiicial Docs if needed).
Add a new BlackDuck API test inside of the newly created engagement.
If we try to import the test, defectdojo throws out an error 'An exception error occurred during the report import : 'VulnerabilityWithRedemption''.
Expected behavior
It should have imported the scans results without any problem.
Additional context
The error arises as a result of DefectDojo trying to extract the key 'VulnerabilityWithRedemption' using the BlackDuck Api. The key is not returned in the response given out by BlackDuck through API call.
The text was updated successfully, but these errors were encountered:
Overview
The default api_blackduck scanner of DefectDojo seems to have not been adapted to the latest API fetching mechanism of Blackduck SCA. Assuming BlackDuck SCA has updated the API, data fetched using the old API mechanism doesn't give the expected output anymore (this is what's used by DefectDojo right now). Certain keys are missing & the some of the keys 'name' have been changed in the returned JSON response.
Steps to reproduce
Expected behavior
It should have imported the scans results without any problem.
Additional context
The error arises as a result of DefectDojo trying to extract the key 'VulnerabilityWithRedemption' using the BlackDuck Api. The key is not returned in the response given out by BlackDuck through API call.
The text was updated successfully, but these errors were encountered: