Skip to content

Commit 5f7a7f1

Browse files
committed
Add docs and dedupe algo
1 parent 549c09f commit 5f7a7f1

2 files changed

Lines changed: 11 additions & 0 deletions

File tree

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,9 @@
1+
---
2+
title: "Github Secrets Detection Report"
3+
toc_hide: true
4+
---
5+
Import findings in JSON format from Github Secret Scanning REST API:
6+
<https://docs.github.com/en/rest/secret-scanning/secret-scanning>
7+
8+
### Sample Scan Data
9+
Sample Github SAST scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/github_secrets_detection_report_many_vul.json).

dojo/settings/settings.dist.py

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1303,6 +1303,7 @@ def saml2_attrib_map_format(din):
13031303
"Scout Suite Scan": ["file_path", "vuln_id_from_tool"], # for now we use file_path as there is no attribute for "service"
13041304
"Meterian Scan": ["cwe", "component_name", "component_version", "description", "severity"],
13051305
"Github Vulnerability Scan": ["title", "severity", "component_name", "vulnerability_ids", "file_path"],
1306+
"Github Secrets Detection Report": ["title", "severity", "file_path", "line"],
13061307
"Solar Appscreener Scan": ["title", "file_path", "line", "severity"],
13071308
"pip-audit Scan": ["vuln_id_from_tool", "component_name", "component_version"],
13081309
"Rubocop Scan": ["vuln_id_from_tool", "file_path", "line"],
@@ -1545,6 +1546,7 @@ def saml2_attrib_map_format(din):
15451546
"AWS Security Hub Scan": DEDUPE_ALGO_UNIQUE_ID_FROM_TOOL,
15461547
"Meterian Scan": DEDUPE_ALGO_HASH_CODE,
15471548
"Github Vulnerability Scan": DEDUPE_ALGO_HASH_CODE,
1549+
"Github Secrets Detection Report": DEDUPE_ALGO_HASH_CODE,
15481550
"Cloudsploit Scan": DEDUPE_ALGO_HASH_CODE,
15491551
"SARIF": DEDUPE_ALGO_UNIQUE_ID_FROM_TOOL_OR_HASH_CODE,
15501552
"Azure Security Center Recommendations Scan": DEDUPE_ALGO_UNIQUE_ID_FROM_TOOL,

0 commit comments

Comments
 (0)