defectdojo

🚀 DevSecOps intro elective — 10 hands-on labs + 2 bonus hardening OWASP Juice Shop: threat modeling (STRIDE/Threagile), signed commits & secret scanning, SBOM/SCA, SAST + DAST, IaC security (Checkov/KICS), container & supply-chain hardening (Trivy, Cosign), runtime detection with Falco, and DefectDojo vuln management.

♾️ Collection of DevSecOps Notes + Resources + Courses + Tools

Deprecated; please use fcli instead

An experimental ModelContextProtocol server connecting LLMs to DefectDojo for AI-powered security workflows. Enables natural language interaction with vulnerability data, simplifies security analysis, and automates reporting through a lightweight middleware integration.

La intención de la workshop es mostrar y orientar a los equipos de desarrollo, seguridad y devops (entre otros) que quieran comenzar en DevSecOps, a segurar sus aplicaciones o bien a conocer un poco más acerca del desarrollo seguro, para esto, estaremos otorgando algunos tips e información que fuimos aprendiendo para armar un Pipeline DevSecOps …

This repo contains a OWASP DefectDojo API Client based on Java.

Agentic AI-powered security finding triage for DefectDojo

DefectDojo API Terraform Provider

Export the security debt of an application from DefectDojo

Go client library for accessing the DefectDojo API

Docker Compose files with best practices for bind mounts, env...

🚀 Production-ready GitOps template for AWS with built-in security scanning, policy enforcement, and multi-region deployment automation. Deploy secure infrastructure across 3 AWS regions with zero-touch GitOps workflow.

🛡️ A Python script that exports vulnerabilities from Wazuh (Elasticsearch) and imports them into DefectDojo via the Generic Findings Import API. Supports automated rescanning and can be run as a cron job.

MCP server for DefectDojo OSS with capability parity to DefectDojo Pro's built-in MCP, plus a deterministic analytics superset. Uses the caller's own API token, so DefectDojo's permissions decide what the model sees.

A collection of custom parsers for DefectDojo, the leading open-source vulnerability management platform. These parsers extend DefectDojo's scanning capabilities with enhanced support for popular security tools.

OSS Security Toolchain Orchestrator

DefectDojo API client in Go

Uploads reports to OWASP DefectDojo

This Action is majorly created for Pushing Multiple report file to defectdojo.

CLI wrapper for DefectDojo APIv2 (beta)