Skip to content

Megalinter and Defect Dojo #3283

Discussion options

You must be logged in to vote

I overengineered put together a shell script tool to upload SARIF-formatted results to DefectDojo based on the SARIF output produced by Megalinter. I was unable to use existing tools (example) because my DefectDojo instance wasn't accessible over the Internet.

https://github.com/wesley-dean-flexion/upload-sarif-to-defectdojo

export DD_TOKEN="${DEFECT_DOJO_AUTH_TOKEN}"
curl -s \
  -o './upload_sarif_to_defectdojo.bash' \
  -L 'https://raw.githubusercontent.com/wesley-dean-flexion/upload-sarif-to-defectdojo/main/upload_sarif_to_defectdojo.bash'
./upload_sarif_to_defectdojo.bash \
  -p "${PRODUCT}" \
  -e "${ENGAGEMENT}" \
  -s "${DEFECT_DOJO_SERVER}" \
 megalinter-reports/sarif/*.sarif

The …

Replies: 4 comments 8 replies

Comment options

You must be logged in to vote
4 replies
@wesley-dean-flexion
Comment options

@echoix
Comment options

@wesley-dean-flexion
Comment options

@nvuillam
Comment options

Comment options

You must be logged in to vote
1 reply
@nvuillam
Comment options

Comment options

You must be logged in to vote
1 reply
@nvuillam
Comment options

Answer selected by nvuillam
Comment options

You must be logged in to vote
2 replies
@nvuillam
Comment options

@wesley-dean-flexion
Comment options

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Category
Q&A
Labels
None yet
3 participants