你好 @zan8in,
为了便于企业集成,建议增加一键导出到主流漏洞管理平台的功能。
建议:
afrog -t targets.txt --export defectdojo --url https://defectdojo.example.com --api-key $DD_API_KEY
afrog -t targets.txt --export gitlab --project-id 123 --token $GITLAB_TOKEN
DefectDojo集成:
- 自动创建Engagement
- 创建Test
- 导入扫描结果
- 映射severity到DefectDojo等级
- 去重(利用DefectDojo的deduplication)
GitLab集成:
- 使用Security Reports API
- 在MR/ Pipeline中显示漏洞
- 与代码审查流程结合
这会极大降低企业采用afrog的门槛。
[English Translation / 英文摘要]
Hi maintainers, this issue is a feature / architecture / security suggestion for 14_afrog.
The Chinese text above contains the detailed proposal with technical context and implementation ideas.
In summary: we are requesting the enhancement described above and would be happy to provide PRs or further discussion in either Chinese or English.
Thank you for the excellent work on this project!
你好 @zan8in,
为了便于企业集成,建议增加一键导出到主流漏洞管理平台的功能。
建议:
DefectDojo集成:
GitLab集成:
这会极大降低企业采用afrog的门槛。
[English Translation / 英文摘要]
Hi maintainers, this issue is a feature / architecture / security suggestion for 14_afrog.
The Chinese text above contains the detailed proposal with technical context and implementation ideas.
In summary: we are requesting the enhancement described above and would be happy to provide PRs or further discussion in either Chinese or English.
Thank you for the excellent work on this project!