Repository navigation
docs: hand-entered POA&M items take a scheduled completion date - #16389
Merged
Maffooch merged 3 commits intoOct 19, 2026
Merged
Conversation
Documents that a hand-entered POA&M item takes a Scheduled Completion Date set in the item form or through /api/v2/poam_items/, while a synced item keeps the date frozen from the finding's SLA and refuses a change. Authored by T. Walker - DefectDojo
Since dojo-pro#4630 the sync skips items with no aggregation key, so the scheduled date is not the only difference: a hand-entered item has to be closed through the API. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
blakeaowens
approved these changes
Oct 19, 2026
Maffooch
approved these changes
Oct 19, 2026
devGregA
approved these changes
Oct 19, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
4 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Description
Updates the "Adding an item by hand" section of the POA&M Ledger page (
docs/content/federal_compliance/poam_ledger.md, English only).A hand-entered POA&M item has no finding to take a Scheduled Completion Date from, so it now takes one the user sets, either in the item form or as
scheduled_completion_dateon/api/v2/poam_items/. The page now says so, notes that the FedRAMP template marks the column as mandatory, and states that the date fills the workbook column and the OSCAL riskdeadlineand is recorded in the item's audit history. It also explains that a synced item keeps the date frozen from the finding's remediation deadline (linking the existing "Rate before the first POA&M sync" section), and that the API answers a change to a synced item's date with a validation error.This documents a DefectDojo Pro change that ships in the same release; please merge the two together. Translated pages are left for the translation pass.
Generated with Claude Code under the direction of T. Walker (skywalke34) - DefectDojo