René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"DefectDojo persistence provider unable to use new SecureCodeBox Findings Importer","articleBody":"## 🐞 Bug report\r\n### Describe the bug\r\nThe DefectDojo persistence provider is unable to import scan results using the new (unreleased) secureCodeBox parser. This is because the code expects a corresponding test type (i.e. \"SecureCodeBox Findings Importer\". As (briefly) explained in [#4431](https://github.com/DefectDojo/django-DefectDojo/pull/4431), the test types are no longer updated for new importers.\r\n\r\nThis can be seen when manually importing scan results with the DefectDojo UI. Only a Scan Type has to be provided, which is derived from the available importers (see [here](https://github.com/secureCodeBox/django-DefectDojo/blob/8d030f03860ff5deea464590dfeaf727b484a49c/dojo/api_v2/serializers.py#L1102-L1103)). The same details have to be provided to the ImportScanSerializer in DefectDojo (API).\r\n\r\nDue to the fact that SecureCodeBox's java wrapper/client is not up to date ([#6](https://github.com/secureCodeBox/defectdojo-client-java/issues/6)), we can't currently fix this issue in this project. However, when the wrapper is updated, we will have to update the persistence-provider. This needs to be updated in order for the new parser to function.\r\n\r\nIf you need any more info, send me a msg on slack!\r\n\r\n### Steps To Reproduce\r\n1. Enable generic parser:\r\n\r\nhttps://github.com/secureCodeBox/secureCodeBox/blob/7367c124ffb165140f38d36e70a941070d354408/hooks/persistence-defectdojo/src/main/java/io/securecodebox/persistence/util/ScanNameMapping.java#L46-L48\r\n\r\n2. Setup SecureCodeBox + locally built persistence provider ^^.\r\n3. Run an instance of [parser-SCB](https://github.com/secureCodeBox/django-DefectDojo/tree/parser-SCB)\r\n4. Start a random scan.\r\n\r\n```\r\nException in thread \"main\" io.securecodebox.persistence.exceptions.DefectDojoPersistenceException: Could not find test type 'SecureCodeBox Findings Import' in DefectDojo API. DefectDojo might be running in an unsupported version.\r\n\tat io.securecodebox.persistence.strategies.VersionedEngagementsStrategy.lambda$createTest$7(VersionedEngagementsStrategy.java:242)\r\n\tat java.base/java.util.Optional.orElseThrow(Optional.java:408)\r\n\tat io.securecodebox.persistence.strategies.VersionedEngagementsStrategy.createTest(VersionedEngagementsStrategy.java:242)\r\n\tat io.securecodebox.persistence.strategies.VersionedEngagementsStrategy.run(VersionedEngagementsStrategy.java:83)\r\n\tat io.securecodebox.persistence.DefectDojoPersistenceProvider.main(DefectDojoPersistenceProvider.java:58)\r\n```\r\n\r\n\r\n### System (please complete the following information):\r\n\u003c!--\r\n - https://github.com/secureCodeBox/secureCodeBox 7367c124ffb165140f38d36e70a941070d354408 (with generic parser enabled)\r\n - https://github.com/secureCodeBox/django-DefectDojo/tree/parser-SCB 8d030f03860ff5deea464590dfeaf727b484a49c  \r\n--\u003e\r\n\r\n### Additional context\r\nCheck out [#6](https://github.com/secureCodeBox/defectdojo-client-java/issues/6) in the defectdojo wrapper.","author":{"url":"https://github.com/EndPositive","@type":"Person","name":"EndPositive"},"datePublished":"2021-06-10T14:03:15.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":2},"url":"https://github.com/490/secureCodeBox/issues/490"}