Skip to content

Commit da491fb

Browse files
authored
Added Cyberwatch Parser (#7)
Cyberwatch parser : Fixed CVEs and Security issues handling, added components and mitigated findings Changed Setting for Dedup algorithm removed shashum Fixed parser bug with filters Added Epss score as %, added CAPEC and ATTACKS Fix linter and code format Co-authored-by: Amine <amine@galeax.com>
1 parent c2ae172 commit da491fb

9 files changed

Lines changed: 810 additions & 0 deletions

File tree

Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,14 @@
1+
---
2+
title: "Cyberwatch"
3+
toc_hide: true
4+
---
5+
The Cyberwatch Parser is used to import Cyberwatch scan results into DefectDojo. It accepts a JSON input that can be generated by the [Cyberwatch-API-DefectDojo](https://github.com/Galeax/Cyberwatch-API-DefectDojo) tool.
6+
7+
The JSON file should include the following keys:
8+
- **cves**: A list of CVE entries.
9+
- **security_issues**: A list of security issue entries.
10+
11+
For each CVE and security issue found in the JSON input, the parser creates a corresponding finding in DefectDojo.
12+
13+
### Sample Scan Data
14+
Sample Cybwerwatch Scan scans can be found [here](https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/cyberwatch).

dojo/settings/settings.dist.py

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1346,6 +1346,7 @@ def saml2_attrib_map_format(din):
13461346
"KrakenD Audit Scan": ["description", "mitigation", "severity"],
13471347
"Red Hat Satellite": ["description", "severity"],
13481348
"Qualys Hacker Guardian Scan": ["title", "severity", "description"],
1349+
"Cyberwatch scan": ["title", "description", "severity"],
13491350
}
13501351

13511352
# Override the hardcoded settings here via the env var
@@ -1416,6 +1417,7 @@ def saml2_attrib_map_format(din):
14161417
"Threagile risks report": True,
14171418
"HCL AppScan on Cloud SAST XML": True,
14181419
"AWS Inspector2 Scan": True,
1420+
"Cyberwatch scan": True,
14191421
}
14201422

14211423
# List of fields that are known to be usable in hash_code computation)
@@ -1597,6 +1599,7 @@ def saml2_attrib_map_format(din):
15971599
"PTART Report": DEDUPE_ALGO_UNIQUE_ID_FROM_TOOL,
15981600
"Red Hat Satellite": DEDUPE_ALGO_HASH_CODE,
15991601
"Qualys Hacker Guardian Scan": DEDUPE_ALGO_HASH_CODE,
1602+
"Cyberwatch scan": DEDUPE_ALGO_HASH_CODE,
16001603
}
16011604

16021605
# Override the hardcoded settings here via the env var

dojo/tools/cyberwatch/__init__.py

Whitespace-only changes.

0 commit comments

Comments
 (0)