defectdojo/documentation

DefectDojo Documentation

documentation's Issues

Typo Fix

There is a short typo on the features page for Date created. Word fist is used instead of first

https://github.com/DefectDojo/Documentation/blob/master/docs/features.rst

Missing reports.sh script, referenced to install wkhtmltopdf

In defectdojo/Documentation/docs/features.rst:498, the file reports.sh is referenced for download, but does not exist in this repository (neither in https://github.com/DefectDojo/django-DefectDojo):

.. Warning::
    Version in debian/ubuntu repos have reduced functionality (because it compiled without the wkhtmltopdf QT
    patches), such as adding outlines, headers, footers, TOC etc. To use this options you should install static binary
    from `wkhtmltopdf`_ site or you can use this :download:`script <../reports.sh>`.

It is probably a helper script to install wkhtmltopdf, in a manual DefectDojo deployment context.
Since the deployment is now Docker/Kubernetes based, this script should no longer be needed.

Need to update the "Run in production"

With docker-compose or helm examples

Document for Critical Product Metrics page

Hi there

I am checking the Critical Product Metrics page but I do not understand what the numbers means on these page for types and how exactly the numbers are calculated?

A info in the documentation about this will be helpful.

Broken link

The link to "how to write a parser" is broken

Update features/findings to reflect the API documentation

When the following PR will be merged -> DefectDojo/django-DefectDojo#2961

Azure AD Integration returning "Your credentials aren't allowed" upon successful signin

Hi All,

Currently running 2.3.0 with Docker-Compose.

After following the documentation for AzureAD integration with Social Auth, I'm getting the message "Your credentials aren't allowed"
Tried the following:

• hard coding all AZURE AD values
• adding the Whitelisted parameter used for Google

Debug shows the following:

AuthForbidden at /complete/azuread-tenant-oauth2/
Your credentials aren't allowed

During handling of the above exception (401 Client Error: Unauthorized for url: https://login.microsoftonline.com/{{TENANT ID}}/oauth2/token), another exception occurred:

Any help is appreciated.

Thank you.