Importing Data on DefectDojo Documentation

Add Findings form

Mon, 01 Jan 0001 00:00:00 +0000

If you have a brand new DefectDojo instance, the Import Scan Form is a logical first step to learn the software and set up your environment. From this form, you upload a scan file from a supported tool, which will create Findings to represent those vulnerabilities. While filling out the form, you can decide whether to:

Import Scan form

Mon, 01 Jan 0001 00:00:00 +0000

Once you have your Asset Hierarchy set up with at least one Organization, Asset, Test and Engagement, you can import a scan file to DefectDojo and create Findings.

Import from GitHub Actions

Mon, 01 Jan 0001 00:00:00 +0000

The official DefectDojo action imports a scan report into DefectDojo from a GitHub Actions workflow. It works with DefectDojo Pro and the Open Source edition, and reads every report format DefectDojo supports, including SARIF.

Endpoint Meta Importer

Mon, 01 Jan 0001 00:00:00 +0000

The Endpoint Meta Importer lets you apply tags and custom fields to large numbers of endpoints at once using a CSV file. This is particularly useful for organizations running heavy infrastructure scanning, where endpoints need flexible metadata for filtering, sorting, and reporting.

Import from API

Mon, 01 Jan 0001 00:00:00 +0000

DefectDojo’s API allows for robust pipeline solutions, which automatically ingest new scans to your instance. Automation like this can take a few different forms: