Skip to content

建议:增加DefectDojo/GitLab Security Dashboard导出 #214

Description

@hmkklol

你好 @zan8in

为了便于企业集成,建议增加一键导出到主流漏洞管理平台的功能。

建议:

afrog -t targets.txt --export defectdojo --url https://defectdojo.example.com --api-key $DD_API_KEY
afrog -t targets.txt --export gitlab --project-id 123 --token $GITLAB_TOKEN

DefectDojo集成:

  • 自动创建Engagement
  • 创建Test
  • 导入扫描结果
  • 映射severity到DefectDojo等级
  • 去重(利用DefectDojo的deduplication)

GitLab集成:

  • 使用Security Reports API
  • 在MR/ Pipeline中显示漏洞
  • 与代码审查流程结合

这会极大降低企业采用afrog的门槛。

[English Translation / 英文摘要]

Hi maintainers, this issue is a feature / architecture / security suggestion for 14_afrog.
The Chinese text above contains the detailed proposal with technical context and implementation ideas.
In summary: we are requesting the enhancement described above and would be happy to provide PRs or further discussion in either Chinese or English.
Thank you for the excellent work on this project!

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions