feat(lab10): defectdojo governance report + capstone walkthrough

[semyonnadutkin]

Goal

Complete the Lab 10 capstone by deploying DefectDojo locally, importing and deduplicating security findings from previous labs, producing a governance report with vulnerability management metrics, and preparing a 5-minute DevSecOps interview walkthrough.

Changes

• Added DefectDojo deployment and configured a Product and Engagement for OWASP Juice Shop
• Imported scan results from Labs 4–7 into DefectDojo
• Verified cross-tool finding deduplication
• Applied the SLA configuration for vulnerability management
• Generated the governance report in submissions/lab10.md
• Added the interview walkthrough script in submissions/lab10-walkthrough.md

Testing

Artifacts & Screenshots

Artifacts

• submissions/lab10.md
• submissions/lab10-walkthrough.md

Screenshots

• DefectDojo dashboard
• Product and Engagement overview
• Imported findings list
• Deduplicated finding example
• Governance metrics dashboard
• SLA configuration

Checklist

• Title is clear (feat(lab10): defectdojo governance report + capstone walkthrough)
• No secrets/large temp files committed
• Submission file at submissions/lab10.md exists

• Task 1 — DefectDojo setup + imports + dedup proof
• Task 2 — Governance report with MTTD/MTTR/SLA/backlog
• Bonus — 5-minute walkthrough script with timed practice