Repository navigation
docs(connectors): document FOSSA scoping filters and Qualys tag grouping - #16383
Open
skywalke34 wants to merge 4 commits into
Open
skywalke34 wants to merge 4 commits into
skywalke34 wants to merge 4 commits into
Conversation
FOSSA: document the Issue Categories, Project Labels and Project Title Filter options (glob syntax, case-insensitivity, AND between the two project filters), the Tags filter, and what happens to Records and findings when the scope is narrowed later. Qualys: document the TAGS record attribute, the Asset Grouping option (Host or Tag), how tag Records are named and auto-mapped, the always-on host endpoints in tag mode, and that grouping is fixed at creation. Expand the prerequisites with the Qualys user scope and the read-only APIs the connector calls. English pages only; translations are refreshed on their own schedule (docs/TRANSLATIONS.md). Authored by T. Walker - DefectDojo
…lti-tag counting Turning off a FOSSA issue category closes that category's findings in projects that still have findings in the other category, since both share one test and the reimport closes what it no longer sees; a project left with no findings syncs empty and keeps them open. The project-filter case is unchanged (skipped Records, nothing closed). Qualys tag grouping: a host carrying several listed tags has its findings imported into each tag asset, so they count once per asset. Authored by T. Walker - DefectDojo
…c is on An empty reimport closes findings on the default (non-chunked) sync path; only chunked sync skips the close step. Name the setting so users and support can tell which behavior applies. Authored by T. Walker - DefectDojo
…pty sync Pro's compose files and Helm chart run the connectors service with chunked sync on, so an empty sync skips the close step there. Only a service run with DD_CONNECTORS_CHUNKED_SYNC unset or false closes those findings. Authored by T. Walker - DefectDojo
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Documents upcoming Pro connector options for FOSSA and Qualys. English pages only; translations follow the quarterly refresh described in docs/TRANSLATIONS.md.
FOSSA (
connectors/toolreference/fossa.md)*and?match/;[...]classes; no commas inside a pattern, use?), and the Tags finding filter (for examplecategory:vulnerability).MISSING, and their findings are not closed automatically.Qualys (
connectors/toolreference/qualys.md)Verification
hugo --minify --gc --config config/production/hugo.toml(Hugo 0.153.5 extended, as in the docs CI workflow) builds cleanly, and both pages render the new sections.Generated with Claude Code under the direction of T. Walker (skywalke34) - DefectDojo