manuelsommer

Bump jsonschema to the latest version and make it compatible with versions 4.X

2

**Describe the issue** Right now jsonschema is set to version 3.0.2. Upgrade it to the latest version and enable compatibility with newer versions. **Version (please complete the following information):** Checkov...

This PR is to improve the stability of checkov.

Upload / Reimport of reports should consider severity

1

**Is your feature request related to a problem? Please describe** Some tools update the severity of findings. Here some examples: - DependencyTrack tracks CVEs. Due to false positive reportings, CVEs...

### Current Behavior: Findings are synced from DependencyTrack to DefectDojo. Then, findings can be rejected. DependencyTrack does not update or close rejected findings in DefectDojo. (e.g. CVE-2021-20095 or CVE-2018-1000643) To...

DefectDojo risk acceptance sync to DependencyTrack

5

### Current Behavior: DependencyTrack syncs the findings to DefectDojo. In DefectDojo there is the possibility to accept a risk for a finding, e.g. if a finding does not apply. These...

:sparkles: fpr format for fortify

1

see issue #9584

Fix anchore grype issue 9618

1

see #9618

Tenable deduplication setting and advance unittests for issue 9612

1

see issue #9612 I observed with this retest that the deuplication setting is not good enough for Tenable. Thus, I fixed this as well.

:sparkles: merge veracode

6

merge veracode source clear with veracode