Skip to content

v0.0.3

Choose a tag to compare

View all tags
@Nitr4x Nitr4x released this 17 Apr 15:39
Immutable release. Only release title and notes can be modified.
v0.0.3
9e115e4
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Changelog: v0.0.2 → v0.0.3

🚀 New Features

Finding Status Tracking (closes #38)

  • Duplicate finding detection: Findings are now tracked with a status of ACTIVE, INACTIVE, or DUPLICATE via the DefectDojo API.
  • New Finding domain model (domains/models/finding.go) with deduplication logic and status fields.
  • All scanners (Grype, KICS, OpenGrep) now produce findings with deduplication keys.
  • The sync feature now compares findings with DefectDojo and correctly marks duplicates instead of re-creating them.
  • Updated DefectDojo connector: new DTO fields, API methods for fetching active/duplicate findings, and full test coverage.
  • Security gate now evaluates finding counts per status (active, duplicate, inactive).

🔧 Improvements & Fixes

CI/Release Pipeline

  • secrets: inherit added to both ci.yml and release.yml workflow calls so DefectDojo credentials (DD_URL, DD_ACCESS_TOKEN) are properly passed to the security job.
  • Security workflow now passes DD_URL, DD_ACCESS_TOKEN, SG_VERSION, and BRANCH as environment variables (fixing potential secret interpolation in shell commands).
  • ScopeGuardian now runs with --sync and --threshold "critical=1,high=1,medium=1,low=1" flags in CI.
  • BRANCH now correctly uses github.head_ref || github.ref_name to support both PRs and push events.

Security Config

  • Removed exclude_queries for KICS (fd54f200 query no longer suppressed).
  • Removed exclude_rule for OpenGrep (go.lang.security.audit.dangerous-exec-command).

📦 Files Changed

36 files changed, +1,851 / −191 lines

Area Files
Domain model domains/models/finding.go, finding_test.go
Scanners grype, kics, opengrep services & tests
DefectDojo connector const.go, dto.go, service.go, service_mock.go, tests
Sync feature sync.go, sync_test.go, const.go
Security gate security_gate.go, security_gate_test.go
Parser parser.go, dto.go, const.go, parser_test.go
Engine / Main engine.go, main.go
Display display.go, display_test.go
CI/Config .github/workflows/ci.yml, release.yml, security.yml, security-config.toml
Documentation README.md
Assets 3
Loading