github DefectDojo/django-DefectDojo 2.23.0
2.23.0 🌈
on GitHub

latest releases: 2.40.0, 2.39.4, 2.39.3...
17 months ago

Please consult the Upgrade notes in the documentation for specific instructions for this release, and general upgrade instructions. Below is an automatically generated list of all PRs merged since the previous release.

Changes since 2.22.0

  • Fix AWS Security Hub parser to process AWS Inspector findings @manuel-sommer (#8135)
  • Fix Detect Secrets parser when .baseline is not audited @adrianasantex (#8181)
  • Use sets for required & allowed fields @p-l- (#8184)
  • fix Sonarqube importer @quirinziessler (#8163)
  • Update views.py to fix #7015 @devsecopsale (#8149)
  • Add Permissions.Engagement_Add to API_Importer @kiblik (#8084)
  • API parsers: Make errors in importers more verbose (add product name and id) @kiblik (#8166)
  • Fix container name in DOCKER.md @andremralves (#8157)
  • Fix/technical debt dojo finding @renejal (#8043)
  • Update files with PEP8 standars in folder dojo/tools @ajtortolero (#8073)
  • 🐛 fix untriaged severity in wazuh, #8124 @manuel-sommer (#8143)
  • Release: Merge back 2.22.3 into dev from: master-into-dev/2.22.3-2.23.0-dev @github-actions (#8142)
  • Release: Merge back 2.22.3 into dev from: master-into-bugfix/2.22.3-2.23.0-dev @github-actions (#8141)
  • Release: Merge release into master from: release/2.22.3 @github-actions (#8140)
  • Typo fix for running-in-production.md @ola-Dell (#8131)
  • Add TAGS from SARIF rules and results to findings @rzandonai (#8108)
  • Make PostgreSQL database the default for containerized deploys @Maffooch (#8119)
  • Update upgrading.md to add steps to docker-compose to first pull the … @testaccount90009 (#8118)
  • chore: allow specifying revision history limit for deployments @celonis-eg (#8094)
  • Release: Merge back 2.22.2 into dev from: master-into-bugfix/2.22.2-2.23.0-dev @github-actions (#8110)
  • Update All GitLab parsers to accomodate v15 Schema @Maffooch (#8097)
  • Only alert on a JIRA error where the JIRA is active @coheigea (#8083)
  • Fix bug with mitigated findings @coheigea (#8091)
  • Remove MySQL incompatibility from benchmarks @Maffooch (#8080)
  • Release: Merge back 2.22.1 into dev from: master-into-bugfix/2.22.1-2.23.0-dev @github-actions (#8071)
  • [Github parser] Parse dependabot alert number and add link in description @Gby56 (#8050)
  • SLA computation throws exception when a FindingGroup doesn't have a JIRA @coheigea (#8047)
  • Release: Merge back 2.22.0 into dev from: master-into-dev/2.22.0-2.23.0-dev @github-actions (#8039)

💣 Breaking changes

  • Merge Nessus and Nessus WAS into single Tenable parser @Maffooch (#8072)

🚩 Changes to settings.dist.py / local_settings.py

  • Release: Merge release into master from: release/2.23.0 @github-actions (#8203)
  • Add support to AWS Prowler V3 json format @anderson-slompo (#8028)
  • nuclei parser and unittests improvements @kir-b (#8057)
  • Fix password validators @kiblik (#8081)
  • Add govulncheck parser and unittests @ECOMMPAY (#7237)
  • Release: Merge back 2.22.0 into dev from: master-into-bugfix/2.22.0-2.23.0-dev @github-actions (#8040)

🚩 Database migration

  • Release: Merge release into master from: release/2.23.0 @github-actions (#8203)
  • Add planned_remediation_version and effort_for_fixing fields @ptrovatelli (#7850)
  • Implement Tag Inheritance @Maffooch (#8089)
  • Merge Nessus and Nessus WAS into single Tenable parser @Maffooch (#8072)
  • Fix password validators @kiblik (#8081)
  • Release: Merge back 2.22.0 into dev from: master-into-bugfix/2.22.0-2.23.0-dev @github-actions (#8040)

🚀 General features and enhancements

🚀 API features and enhancements

  • Release: Merge release into master from: release/2.23.0 @github-actions (#8203)
  • Implement Tag Inheritance @Maffooch (#8089)

🐛 Bug Fixes

  • Unify push to jira logic for finding/groups review/open/close @Maffooch (#8162)
  • Make requests of a peer review available to those with read access @Maffooch (#8158)
  • Update rate limiting on the login page to only block on unsafe requests @Maffooch (#8156)
  • Add support for Jira auto sync when opening and closing findings @Maffooch (#8153)
  • Add the "api-token-auth" endpoint back into the swagger spec @Maffooch (#8126)
  • Fix helm certificate mounts @dsever (#8085)

🖌 Updates in UI

  • Release: Merge release into master from: release/2.23.0 @github-actions (#8203)
  • Release: Merge back 2.22.4 into dev from: master-into-dev/2.22.4-2.23.0-dev @github-actions (#8176)
  • Release: Merge release into master from: release/2.22.4 @github-actions (#8175)
  • Add planned_remediation_version and effort_for_fixing fields @ptrovatelli (#7850)
  • Make requests of a peer review available to those with read access @Maffooch (#8158)
  • Release: Merge back 2.22.2 into dev from: master-into-dev/2.22.2-2.23.0-dev @github-actions (#8109)
  • Release: Merge release into master from: release/2.22.2 @github-actions (#8107)
  • Replace incorrect link in slack alert for product deletion + add product to SLA breach alert @coheigea (#8042)
  • Release: Merge back 2.22.1 into dev from: master-into-dev/2.22.1-2.23.0-dev @github-actions (#8070)
  • Release: Merge release into master from: release/2.22.1 @github-actions (#8069)
  • Optimized calling popover plugin @shipko (#8025)

🗣 Updates in localization

  • Release: Merge release into master from: release/2.23.0 @github-actions (#8203)
  • Add planned_remediation_version and effort_for_fixing fields @ptrovatelli (#7850)

🧰 Maintenance

Check out latest releases or
releases around DefectDojo/django-DefectDojo 2.23.0

Don't miss a new django-DefectDojo release

NewReleases is sending notifications on new releases.

Get notifications