Becoming A Master In The Dojang With DefectDojo
summary
DefectDojo consolidates vulnerability results from about 150 scan types into a single vulnerability management platform with monthly releases. It offers import and a smarter re-import auto-closes findings and reopens regressions, four deployment options with Docker Compose easiest deployment plus AMI, go-dojo and community Kubernetes. The demo pipeline spins up DefectDojo and Juice Shop, uploads scanner reports, runs deduplication by configurable hash/tool IDs, and produces import metrics; the demo works but isn’t production-ready.
AI-written summary · about
chapters (4)
related talks
27mOWASP DefectDojo
31mDefectDojo
29mFlagship Projects: DefectDojo
40mMaking Vulnerability Management Less Painful with OWASP DefectDojo
47mSecurity Gate: Building a Homegrown SAST Orchestration Platform
30mSecuring DevOps using OWASP DevSecOps Tools
43mBuilding a Secure DevOps Pipeline
28mDevSecOps - Security from Scratch