defectdojo/sample-scan-files

Sample scan files for testing DefectDojo imports

sample-scan-files's Issues

Veracode Static Dynamic upload fail

File to import: veracode/veracode.Sample_Static_and_Dynamic.xml
Issue: DD reports Server Error (500)
Logs:

Internal Server Error: /product/2/import_scan_results
Traceback (most recent call last):
  File "/usr/local/lib/python2.7/site-packages/django/core/handlers/exception.py", line 41, in inner
    response = get_response(request)
  File "/usr/local/lib/python2.7/site-packages/django/core/handlers/base.py", line 249, in _legacy_get_response
    response = self._get_response(request)
  File "/usr/local/lib/python2.7/site-packages/django/core/handlers/base.py", line 187, in _get_response
    response = self.process_exception_by_middleware(e, request)
  File "/usr/local/lib/python2.7/site-packages/django/core/handlers/base.py", line 185, in _get_response
    response = wrapped_callback(request, *callback_args, **callback_kwargs)
  File "/usr/local/lib/python2.7/site-packages/django/contrib/auth/decorators.py", line 23, in _wrapped_view
    return view_func(request, *args, **kwargs)
  File "./dojo/product/views.py", line 382, in import_scan_results_prod
    return import_scan_results(request, pid=pid)
  File "/usr/local/lib/python2.7/site-packages/django/contrib/auth/decorators.py", line 23, in _wrapped_view
    return view_func(request, *args, **kwargs)
  File "./dojo/engagement/views.py", line 519, in import_scan_results
    parser = import_parser_factory(file, t)
  File "./dojo/tools/factory.py", line 69, in import_parser_factory
    parser = VeracodeXMLParser(file, test)
  File "./dojo/tools/veracode/parser.py", line 59, in __init__
    dupe_key = sev + flaw.attrib['cweid'] + flaw.attrib['module'] + flaw.attrib['type'] + flaw.attrib['line'] + flaw.attrib['issueid']
KeyError: 'line'

Sample Scan Template Files Need For Unit Test

Hello @aaronweaver @mtesauro

I and @Maffooch are working on implementing Unit Test for Import Scanners on the DefectDojo Project.

In order to complete this task, we need to store on this repo all sample scan files of all scanners in https://github.com/DefectDojo/django-DefectDojo/tree/master/dojo/tools

we have been able to get some of the missing sample scan files but the following underlisted are no where to be found.

[ ] appspider
[ ] aws_prowler
[ ] aws_scout2
[ ] fortify
[ ] mobsf
[ ] openvas_csv
[ ] qualys (In repo already : https://github.com/DefectDojo/sample-scan-files/tree/master/qualys)
[x] retirejs (In repo now : Maffooch)
[ ] skf
[ ] spotbugs
[ ] trustwave
[ ] vcg

Is there any way their sample scan files can be fetched and uploaded here so they can be added to the repo.

Veracode static and dynamic sample scan is out of date.

Trying to import the sample Veracode static and dynamic scan fails with an import error. "An error has occurred in the parser, please see error log for details." I believe this sample may be out of date as existing Veracode scans that I get directly from Veracode parse without problem.

This is also true for sample Veracode scan

I am running DefectDojo-Django in Docker.
v. 1.12.0 ( release mode )

Veracode ssllabs import fail

DD fails when ssllabs report file doesn't contain suites for any of the scanned hosts.

Error:

Internal Server Error: /engagement/38/import_scan_results
Traceback (most recent call last):
  File "/usr/local/lib/python2.7/site-packages/django/core/handlers/exception.py", line 41, in inner
    response = get_response(request)
  File "/usr/local/lib/python2.7/site-packages/django/core/handlers/base.py", line 249, in _legacy_get_response
    response = self._get_response(request)
  File "/usr/local/lib/python2.7/site-packages/django/core/handlers/base.py", line 187, in _get_response
    response = self.process_exception_by_middleware(e, request)
  File "/usr/local/lib/python2.7/site-packages/django/core/handlers/base.py", line 185, in _get_response
    response = wrapped_callback(request, *callback_args, **callback_kwargs)
  File "/usr/local/lib/python2.7/site-packages/django/contrib/auth/decorators.py", line 23, in _wrapped_view
    return view_func(request, *args, **kwargs)
  File "./dojo/engagement/views.py", line 519, in import_scan_results
    parser = import_parser_factory(file, t)
  File "./dojo/tools/factory.py", line 107, in import_parser_factory
    parser = SSLlabsParser(file, test)
  File "./dojo/tools/ssllabs/parser.py", line 76, in __init__
    if "list" in endpoints["details"]["suites"]:
KeyError: 'suites'