DefectDojo Integration Reimport Dependency Track Finding into Existing Test

[yangsec888]

The enhancement may already be reported! Please search for the enhancement before creating one.

Current Behavior:

Dependency Track (DT) has a background task for DefectDojo (DD) integration. The task will publish the DT finding into DD via its 'import-scan' API endpoint at a predefine frequency. Upon each push, a new test will be generated in DD.

Proposed Behavior:

Add additional logic inside the same task, where the DT will try to determine if there is an existing test created from previous publishing. If no previous publishing found, then DT will create a new test via 'import-scan' endpoint. Otherwise, DT will rewrite the existing test via 'reimport-scan' endpoint instead. The new behavior will remove the burden of de-duplicating the numerous tests in the DD side, for the DD analyst.

[yangsec888]

PR is now submitted at #1631

[nscuro]

Implemented in #1631.

[github-actions]

This thread has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.