django-DefectDojo icon indicating copy to clipboard operation
django-DefectDojo copied to clipboard

Tenable deduplication setting and advance unittests for issue 9612

Open manuel-sommer opened this issue 1 year ago • 1 comments

see issue #9612

I observed with this retest that the deuplication setting is not good enough for Tenable. Thus, I fixed this as well.

manuel-sommer avatar Feb 23 '24 09:02 manuel-sommer

Contextual Security Analysis

As DryRun Security performs checks, we’ll summarize them here. You can always dive into the detailed results in the section below for checks.

Status DryRun Security Check
Sensitive Functions Analyzer
Configured Sensitive Files Analyzer
Sensitive Files Analyzer

Chat with your AI-powered Security Buddy by typing @dryrunsecurity followed by your question into a comment. Example: @dryrunsecurity What are common security issues with web application cookies?

Install and configure more repositories at DryRun Security

dryrunsecurity[bot] avatar Feb 23 '24 09:02 dryrunsecurity[bot]

Someone asked about using description in the dedup algorithm for Tenable, here's why:

Tenable parser aggregates finding by endpoint, and appends the description of the new finding to the original: CSV: https://github.com/DefectDojo/django-DefectDojo/blob/2181c61ef50f7b11d63f4612c1064fec89770760/dojo/tools/tenable/csv_format.py#L157C2-L161C59 XML: https://github.com/DefectDojo/django-DefectDojo/blob/2181c61ef50f7b11d63f4612c1064fec89770760/dojo/tools/tenable/xml_format.py#L226C1-L228C71

mtesauro avatar Mar 06 '24 03:03 mtesauro