Connector aka puller for 3rd party security services

[mykhailo-sindieiev]

Hello colleagues,

What do you think about the service that is deployed close to DefectDojo that actually pulls the data from different data sources and puts it to the corresponding DefectDojo's engagement. For example, the service that downloads the scan result from snyk API and uploads it to DefectDojo's engagement related to the project. I think other ASPM solutions support this kind of integrations and they acts in the similar way

[valentijnscholten]

Defect Dojo Pro has Connectors that does something like that: https://defectdojo.com/blog/introducing-defectdojo-connectors

[valentijnscholten]

There's also https://www.securecodebox.io/ an OWASP project that performs scans and integrates with Defect Dojo OS.

[mykhailo-sindieiev]

@valentijnscholten Thank you for the answer. Do you have such feature in DefectDojo's OS roadmap?