cloud-gov / product

Program-level artifacts, workflow and issues for cloud.gov
Creative Commons Zero v1.0 Universal
29 stars 15 forks source link

Import grype scans into Defect Dojo (50% Complete) #2892

Closed dandersonsw closed 4 months ago

dandersonsw commented 5 months ago

We want to use the Defect Dojo API to import our container grype scan results into Defect Dojo

Acceptance Criteria


Security considerations

[note any potential changes to security boundaries, practices, documentation, risk that arise directly from this story]

dandersonsw commented 4 months ago

Created a PR to add importing the grype scans to defect dojo here: https://github.com/cloud-gov/common-pipelines/pull/61