helm/securecodebox/persistence-defectdojo 4.4.0

v4.4.0

on Artifact Hub

Changes

This release contains the following changes 🎉.
Help spread the word or leave a GitHub star if you like it 😉

🚀 Features

• Add nodeSelector Support to Operator, Parsers, and Scanners @kamirendawkins (#2254)
• Added GitHub Actions workflow for releasing Helm charts to GHCR @Ilyesbdlala (#2108)
• Add option to wait between DefectDojo finding upload and redownload for DefectDojo Hook SyncBack mode to ensure findings are properly deduplicated @moxli & @Weltraumschaf (#2057, #2208)
• Replace twitter account with mastadon @Weltraumschaf (#2249, #2250, #2274)

🚓 Security Scanner

• Upgraded gitleaks from v8.18.0 to v8.18.2 @secureCodeBoxBot (#2245, #2103)
• Upgraded kubeaudit from 0.22.0 to 0.22.1 @secureCodeBoxBot (#2111)
• Upgraded nikto to actual 2.5.0 version @J12934 (#2262)
• Upgraded nuclei from v3.0.3 to v3.1.10 @secureCodeBoxBot (#2253, #2240, #2217, #2202, #2173, #2165, #2150, #2129, #2114, #2104)
• Upgraded semgrep from 1.48.0 to 1.61.1 @secureCodeBoxBot (#2294, #2270, #2252, #2241, #2218, #2203, #2174, #2158, #2154, #2132, #2126, #2112, #2101)
• Upgraded trivy from 0.46.1 to 0.49.1 @secureCodeBoxBot (#2267, #2246, #2176, #2156, #2127)
• Upgraded typo3scan from v1.1.3 to v1.1.4 @secureCodeBoxBot (#2269)

🐛 Bug Fixes

• Fix Crash in DefectDojo Hook for Scans without Parameters @Weltraumschaf (#2275)
• Fixed Scans being marked as Failed after the First Jobs has failed @Ilyesbdlala (#2205)
• Added DefectDojo mapping for zap-automation-framework scans @moxli (#2134)

🧪 Test

• Added Unit tests for CI helpers @Ilyesbdlala (#2177)

📚 Documentation

• Add Page with List of Mentions @Weltraumschaf (#2247)
• Minor issues in documentation @BorisShek (#2239)
• Update contributing guidelines to include guideline about ticket numbers in commit messages @Weltraumschaf (#2238)
• Add Page with List of Mentions @Weltraumschaf (#2247)
• Clean Up Docs for Hooks esp. DD Hook @Weltraumschaf (#2206)
• Change relative links to absolute in docs @BorisShek (#2256)
• Clarify which names need to be unique in DefectDojo @J12934 (#2288)

🔧 Maintenance

• Upgraded Docusaurus to v3.1.1 @Ilyesbdlala & @dependabot (#2102, #2131, #2227)
• Minor Java Code Style Cleanups in DefectDojo Hooks Cleaning @Weltraumschaf (#2207)
• Extract side effects introduced by System#getenv() @Weltraumschaf (#2184)
• Add gradle, docker, workflows to dependabot config @Weltraumschaf (#2186)
• Improve Error Logging for File Uploads in DefectDojo Persistence Hook @Weltraumschaf (#2292)
• Fix Admonition in Post-Processing Hooks How-To @Weltraumschaf (#2289)

📌 Dependencies

Distribution

Contributors

Thanks to all our contributors supporting this project 🤗
@BorisShek, @Ilyesbdlala, @kamirendawkins, @moxli, @J12934 and @Weltraumschaf