Upgrading to DefectDojo Version 3.4.300

The endpoint field of /api/v2/endpoint_status/#

With Locations enabled, the endpoint field of /api/v2/endpoint_status/ now carries the id that /api/v2/endpoints/ lists for the Finding’s Asset, the same ID the ?endpoint= filter takes. It used to carry the Location’s ID, which only matched /api/v2/endpoints/ when the two IDs happened to be equal. The Location’s ID is still in location_id.

?endpoint=<id> now returns only the statuses of Findings on that Endpoint’s Asset. It used to include Findings on other Assets that share the same URL.

What you need to do#

If a script reads endpoint from /api/v2/endpoint_status/ and looks the value up as a Location, read location_id instead. A script that passes it to /api/v2/endpoints/<id>/ now gets the right row.

New setting: DD_GITHUB_STAR_PROMPT_ENABLED#

This release adds a small “Enjoying DefectDojo?” card in the bottom-right corner that asks users to star DefectDojo on GitHub. It only appears for users whose account is at least 7 days old. Clicking Star on GitHub opens the repository in a new tab and hides the prompt for that user for good; Later or the close button hides it for 30 days. The choice is stored per user.

The prompt is on by default. Set DD_GITHUB_STAR_PROMPT_ENABLED=False to turn it off for everyone.

For more information, check the Release Notes.