Automation

What Triage Engine is, how to turn it on, and the concepts it is built from

The graph editor, triggers, scope, conditions and message templates

Deployment level settings for Triage Engine

Move existing Rules Engine rules across to Triage Engine graphs

DefectDojo's API lets you automate tasks, e.g. uploading scan reports in CI/CD pipelines.

A new, parallel API mounted alongside v2 with refs/expand/fields, one list envelope, and a documented filter contract. Alpha — the contract may change.

The ledger of everything rules send outward, and how retries and replay work

Test what you know about Triage Engine with 20 multiple-choice questions

Import language composition data for an Asset using the cloc tool

Every node Triage Engine ships with, and what each one does

Send HTTP webhook notifications to an external server on DefectDojo events

Export one product with its engagements, tests, findings, notes, files and risk acceptances as NDJSON.

Configure rate limiting on the login page to mitigate brute force attacks

Working with Rules Engine Automation

How a rule executes, what a run records, and how cascading is bounded

Automatically run Rules Engine rules on a recurring or one-time schedule

Export rules to a file, import them on another instance, restore an earlier version, and drive rules from the API

Let other tools talk back to DefectDojo: receive webhooks, find the Findings they are about, and act on them