Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
10000 commits
Select commit Hold shift + click to select a range
0cb0fb6
Remove entrypoint-first-boot.sh references and implement complete ini…
Maffooch Jan 2, 2026
1b235b5
allow alpine in docker composer dev override (#14001)
valentijnscholten Jan 2, 2026
3627081
dedupe reopen: continue to try all match candidates (#14011)
valentijnscholten Jan 4, 2026
9a3167a
Vulnerability IDs: Do not allow users to import empty strings (#14017)
Jino-T Jan 4, 2026
8242119
chore(deps): bump drf-spectacular-sidecar from 2025.12.1 to 2026.1.1 …
dependabot[bot] Jan 5, 2026
1a0eaa0
chore(deps): bump django-polymorphic from 4.5.1 to 4.5.2 (#14019)
dependabot[bot] Jan 5, 2026
bf304ac
chore(deps): bump pillow from 12.0.0 to 12.1.0 (#14020)
dependabot[bot] Jan 5, 2026
b58a195
Update dependency renovatebot/renovate from 42.66.11 to v42.71.0 (.gi…
renovate[bot] Jan 5, 2026
72f5981
Update dependency vcrpy from 8.1.0 to v8.1.1 (requirements-dev.txt) (…
renovate[bot] Jan 5, 2026
8dee6bf
chore(deps): bump pdfmake from 0.2.21 to 0.3.0 in /components (#14021)
dependabot[bot] Jan 5, 2026
6b8cb76
chore(deps): bump gitpython from 3.1.45 to 3.1.46 (#14022)
dependabot[bot] Jan 5, 2026
b1f9786
Update dependency @tabler/icons from 3.36.0 to v3.36.1 (docs/package.…
renovate[bot] Jan 5, 2026
e8d833b
chore(deps): bump celery from 5.6.0 to 5.6.1 (#14005)
dependabot[bot] Jan 5, 2026
5073344
Update python:3.13.11-slim-trixie Docker digest from 3.13.11 to v (Do…
renovate[bot] Jan 5, 2026
251f159
Merge pull request #14013 from DefectDojo/req-resp-perms
rossops Jan 5, 2026
801ccd4
Merge pull request #13841 from sNiXx/custom-trust-docs
rossops Jan 5, 2026
5c80264
Merge pull request #14007 from paulOsinski/changelog-dec30
rossops Jan 5, 2026
371b624
Merge pull request #14024 from paulOsinski/sitemaps
rossops Jan 5, 2026
6f20129
Merge branch 'dev' into bugfix
Maffooch Jan 5, 2026
94c93fd
fix: remove unnecessary blank line in sanitize_vulnerability_ids func…
Maffooch Jan 5, 2026
b9ac3c5
Merge pull request #14032 from DefectDojo/bugfix
rossops Jan 5, 2026
f1de10e
Update versions in application files
Jan 5, 2026
518a6e1
use celery[sqs] bundle (#14004)
valentijnscholten Jan 5, 2026
16ab93d
Merge pull request #14033 from DefectDojo/release/2.54.0
rossops Jan 5, 2026
454c82d
Update versions in application files
Jan 5, 2026
29bc9a8
Update versions in application files
Jan 5, 2026
69d5379
Merge pull request #14035 from DefectDojo/master-into-bugfix/2.54.0-2…
rossops Jan 5, 2026
86d3e7b
Merge pull request #14034 from DefectDojo/master-into-dev/2.54.0-2.55…
rossops Jan 5, 2026
d9bf1f8
announcements: catch exceptions
valentijnscholten Jan 6, 2026
89877d9
chore(deps): bump django-polymorphic from 4.5.2 to 4.6.0 (#14030)
dependabot[bot] Jan 6, 2026
35c2f63
Update migration notes for django-pghistory (#14043)
valentijnscholten Jan 6, 2026
b7a7d23
fix front matter in PingCastle docs (#14036)
paulOsinski Jan 7, 2026
bc95464
:lipstick: Add output description reference to google cloud artifacto…
manuel-sommer Jan 7, 2026
f11a362
remove dojo_model_to/from_id decorator (#13984)
valentijnscholten Jan 7, 2026
8613a18
ReadMe Updates - New Community Portal (#14042)
devGregA Jan 7, 2026
1c7d743
Update .gitignore
Maffooch Jan 8, 2026
9da4dbf
chore(deps): bump django-dbbackup from 5.1.0 to 5.1.1 (#14062)
dependabot[bot] Jan 8, 2026
dec2977
chore(deps): bump django-polymorphic from 4.6.0 to 4.8.0 (#14060)
dependabot[bot] Jan 8, 2026
ef8af4f
chore(deps): bump urllib3 from 2.6.2 to 2.6.3 (#14059)
dependabot[bot] Jan 8, 2026
df6afbb
chore(deps): update mccutchen/go-httpbin docker tag from 2.19.0 to v2…
renovate[bot] Jan 8, 2026
4933028
chore(deps): bump pdfmake from 0.3.0 to 0.3.1 in /components (#14055)
dependabot[bot] Jan 8, 2026
533f30d
:bug: Fix multiple google cloud artifact scan bugs (#14052)
manuel-sommer Jan 8, 2026
44b6a48
chore(deps): bump celery[sqs] from 5.6.1 to 5.6.2 (#14039)
dependabot[bot] Jan 8, 2026
046211a
:lipstick: Refactor multiple scan results (#14046)
manuel-sommer Jan 8, 2026
fa8d669
reordered-jira-alert-description (#14058)
Jino-T Jan 8, 2026
c90f2ab
[docs] pro release notes 2.54.0 (#14047)
paulOsinski Jan 9, 2026
a83c8a1
chore(deps): update dependency vite from 7.3.0 to v7.3.1 (docs/packag…
renovate[bot] Jan 9, 2026
ab8d3d1
:tada: Advance Google Cloud Artifact Scan to parse vulnid
manuel-sommer Jan 9, 2026
ba6ab38
:tada: Implement Cloudflare insights parser
manuel-sommer Jan 9, 2026
43715ab
.
manuel-sommer Jan 9, 2026
bc3d13b
Update dojo/tools/cloudflare_insights/parser.py
manuel-sommer Jan 11, 2026
53b341e
fix: update redis/valkey comment (#13858)
anthonwellsjo Jan 12, 2026
e1161ed
Merge pull request #14045 from valentijnscholten/announcements-catch-…
rossops Jan 12, 2026
fe90460
Merge pull request #14064 from manuel-sommer/implement_cloudflareInsi…
rossops Jan 12, 2026
bd29cf2
Merge pull request #14063 from manuel-sommer/google_artifactory_vulnid
rossops Jan 12, 2026
1e79866
Product Grade: Configuration Removal (#14075)
Maffooch Jan 12, 2026
f3fc3c5
Update versions in application files
Jan 12, 2026
40b5eee
Merge pull request #14076 from DefectDojo/release/2.54.1
rossops Jan 12, 2026
00735b5
Update versions in application files
Jan 12, 2026
6a0e40d
Update versions in application files
Jan 12, 2026
9bfa3bd
Merge branch 'dev' into master-into-dev/2.54.1-2.55.0-dev
Maffooch Jan 12, 2026
a8a8a1a
Update expected query counts in performance tests for importers
Maffooch Jan 12, 2026
c0444a2
Merge pull request #14078 from DefectDojo/master-into-bugfix/2.54.1-2…
rossops Jan 12, 2026
0fdc9bd
Merge pull request #14077 from DefectDojo/master-into-dev/2.54.1-2.55…
rossops Jan 12, 2026
55361b5
chore(deps): update dependency renovatebot/renovate from 42.71.0 to v…
renovate[bot] Jan 13, 2026
4e9cda1
Remove unused asteval dependency (#14079)
valentijnscholten Jan 14, 2026
09c9821
:bug: fix Nonetype in nuclei #14071 (#14072)
manuel-sommer Jan 14, 2026
751451e
chore(deps): bump pdfmake from 0.3.1 to 0.3.2 in /components (#14074)
dependabot[bot] Jan 14, 2026
b7f0f99
Asset/Organizations Endpoints: Patches, permission checking, and API …
Maffooch Jan 14, 2026
52ba742
Add Report Builder submenu and improve form validation error messages…
valentijnscholten Jan 14, 2026
5057b4b
:arrow_up: Bump ruff from 0.14.10 to 0.14.11 (#14066)
manuel-sommer Jan 14, 2026
bb24f04
Update python:3.13.11-slim-trixie Docker digest from 3.13.11 to v (Do…
renovate[bot] Jan 15, 2026
d176979
Update dependency yamllint from 1.37.1 to v1.38.0 (.github/workflows/…
renovate[bot] Jan 15, 2026
c436024
Update dependency node from 24.12.0 to v24.13.0 (.github/workflows/va…
renovate[bot] Jan 15, 2026
27ceec3
Update valkey Docker tag from 0.13.0 to v0.15.0 (helm/defectdojo/Char…
renovate[bot] Jan 15, 2026
31951c4
Update dependency prettier from 3.7.4 to v3.8.0 (docs/package.json) (…
renovate[bot] Jan 16, 2026
e797c5f
Refactor note fetching logic to improve permission checks and reduce …
Maffooch Jan 16, 2026
f5772ad
Enforce readonly name field for Test_Type instances and add dynamic s…
Maffooch Jan 16, 2026
7efe039
Update actions/setup-node action from v6.1.0 to v6.2.0 (.github/workf…
renovate[bot] Jan 16, 2026
cd98b5e
Import/Reimport: Push to jira when findings is not grouped
Maffooch Jan 16, 2026
045018a
Add unit tests
Maffooch Jan 16, 2026
6c1435d
chore(deps): bump django-dbbackup from 5.1.1 to 5.1.2 (#14094)
dependabot[bot] Jan 16, 2026
061d180
Update styfle/cancel-workflow-action action from 0.12.1 to v0.13.0 (.…
renovate[bot] Jan 16, 2026
8562659
Try more recordings?
Maffooch Jan 16, 2026
2c9955d
Update suzuki-shunsuke/github-action-renovate-config-validator action…
renovate[bot] Jan 17, 2026
a8479e1
💄 ssl labs json files reformat (#14106)
manuel-sommer Jan 17, 2026
75c70c0
chore(deps): update actions/cache action from v5.0.1 to v5.0.2 (.gith…
renovate[bot] Jan 17, 2026
deb198d
:tada: Implement json part for Cloudflare insights parser (#14096)
manuel-sommer Jan 17, 2026
770e990
Consolidation of Template Tags: Make a single use case reusable, and …
Maffooch Jan 17, 2026
c54217c
Merge pull request #14107 from DefectDojo/import-push-to-jira-when-no…
rossops Jan 20, 2026
cc52641
Add additional fields to AssetSerializer (#14109)
Maffooch Jan 20, 2026
9768f1f
Fix Content-Type header bugs in file downloads and MIME type handling…
valentijnscholten Jan 20, 2026
84910a2
fix bleach memory leak & simplify git commit hash checker (#14117)
valentijnscholten Jan 20, 2026
6f48a10
prettify sample scan files (#14113)
valentijnscholten Jan 20, 2026
9c4f51e
tags from parser: fix parsers, add tests and fallback (#14111)
valentijnscholten Jan 20, 2026
311244a
Update versions in application files
Jan 20, 2026
0d89e18
chore(deps): update release-drafter/release-drafter action from v6.1.…
renovate[bot] Jan 20, 2026
824b273
chore(deps): bump pdfmake from 0.3.2 to 0.3.3 in /components (#14122)
dependabot[bot] Jan 20, 2026
7f6a64a
Update openapitools/openapi-generator-cli Docker tag from v7.18.0 to …
renovate[bot] Jan 20, 2026
b9ed553
Update losisin/helm-values-schema-json-action action from v2.3.2 to v…
renovate[bot] Jan 20, 2026
1d8c713
Update losisin/helm-docs-github-action action from v1.6.2 to v1.7.1 (…
renovate[bot] Jan 20, 2026
e0ca514
Update dependency renovatebot/renovate from 42.80.1 to v42.85.8 (.git…
renovate[bot] Jan 20, 2026
7f25ec4
Update python:3.13.11-slim-trixie Docker digest from 3.13.11 to v (Do…
renovate[bot] Jan 20, 2026
24155ef
Merge pull request #14130 from DefectDojo/release/2.54.2
rossops Jan 20, 2026
91dca67
Update versions in application files
Jan 20, 2026
bb3af43
Update versions in application files
Jan 20, 2026
8ba30c5
Merge branch 'dev' into master-into-dev/2.54.2-2.55.0-dev
Maffooch Jan 20, 2026
bc79807
Merge pull request #14133 from DefectDojo/master-into-dev/2.54.2-2.55…
rossops Jan 20, 2026
ec2ef59
Merge pull request #14134 from DefectDojo/master-into-bugfix/2.54.2-2…
rossops Jan 20, 2026
78cfa85
:tada: add Trivy misconfiguration fields #14136
manuel-sommer Jan 21, 2026
80f8110
Fix risk-accepted findings not being closed when vulnerability is fix…
valentijnscholten Jan 21, 2026
336cd7f
feat: Add pghistory tracking for tag fields (#14116)
valentijnscholten Jan 21, 2026
9324c1d
fix(deps): update dependency @docsearch/css from 4.4.0 to v4.5.3 (doc…
renovate[bot] Jan 21, 2026
21d6b73
chore(deps): update dependency django-debug-toolbar from 6.1.0 to v6.…
renovate[bot] Jan 21, 2026
976475c
chore(deps): update valkey docker tag from 0.15.0 to v0.15.1 (helm/de…
renovate[bot] Jan 22, 2026
1a61804
Update python Docker tag from 3.13.11 to v3.14.2 (Dockerfile.nginx-al…
renovate[bot] Jan 22, 2026
b65b41c
update
manuel-sommer Jan 22, 2026
f561a40
pro changelog: jan21 (#14144)
paulOsinski Jan 23, 2026
d4fe8df
Update file upload field to accept dynamic file types and add validat…
Maffooch Jan 23, 2026
d2468ea
chore(deps): update gcr.io/cloudsql-docker/gce-proxy docker tag from …
renovate[bot] Jan 23, 2026
bb587fc
chore(deps): bump setuptools from 80.9.0 to 80.10.1 (#14138)
dependabot[bot] Jan 23, 2026
5d28f13
chore(deps): update dependency prettier from 3.8.0 to v3.8.1 (docs/pa…
renovate[bot] Jan 23, 2026
cdd0447
Update peter-evans/create-pull-request action from v8.0.0 to v8.1.0 (…
renovate[bot] Jan 23, 2026
b73a5c5
Update actions/setup-python action from v6.1.0 to v6.2.0 (.github/wor…
renovate[bot] Jan 23, 2026
9806ee2
chore(deps): bump markdown from 3.10 to 3.10.1 (#14147)
dependabot[bot] Jan 23, 2026
3e0b744
chore(deps): bump sqlalchemy from 2.0.45 to 2.0.46 (#14148)
dependabot[bot] Jan 23, 2026
a82dd49
Update release-drafter/release-drafter action from v6.1.1 to v6.2.0 (…
renovate[bot] Jan 23, 2026
d094ccf
Update actions/checkout action from v6.0.1 to v6.0.2 (.github/workflo…
renovate[bot] Jan 23, 2026
3188b0f
chore(deps): bump ruff from 0.14.11 to 0.14.14 (#14152)
dependabot[bot] Jan 23, 2026
85a4b48
chore(deps): bump vulners from 3.1.3 to 3.1.5 (#14153)
dependabot[bot] Jan 23, 2026
29e4e8f
fix(deps): update dependency thulite from 2.6.3 to v2.6.4 (docs/packa…
renovate[bot] Jan 23, 2026
1359770
fix(deps): update dependency @docsearch/js from 4.4.0 to v4.5.3 (docs…
renovate[bot] Jan 23, 2026
c9f6a63
Merge pull request #14139 from manuel-sommer/issue_14136
rossops Jan 26, 2026
203d7be
Revert "Update python Docker tag from 3.13.11 to v3.14.2 (Dockerfile.…
valentijnscholten Jan 26, 2026
f796d93
Update dependency renovatebot/renovate from 42.85.8 to v42.92.5 (.git…
renovate[bot] Jan 26, 2026
48cc5b8
Add Permissions-Policy header settings and corresponding tests (#14156)
Maffooch Jan 26, 2026
f318690
Update versions in application files
Jan 26, 2026
b101693
Merge pull request #14165 from DefectDojo/release/2.54.3
rossops Jan 26, 2026
d6159ae
Change pghistory backfill log level from ERROR to DEBUG for missing e…
valentijnscholten Jan 26, 2026
c64e595
Add django-linear-migrations for linear migration history (#14145)
valentijnscholten Jan 26, 2026
d03cb32
Update versions in application files
Jan 26, 2026
74c91cf
Update versions in application files
Jan 26, 2026
84bdbb4
Merge branch 'dev' into master-into-dev/2.54.3-2.55.0-dev
rossops Jan 26, 2026
0be95b6
chore(deps): bump setuptools from 80.10.1 to 80.10.2 (#14163)
dependabot[bot] Jan 26, 2026
dcb8c8c
Merge pull request #14169 from DefectDojo/master-into-dev/2.54.3-2.55…
rossops Jan 26, 2026
891cf5d
Merge pull request #14170 from DefectDojo/master-into-bugfix/2.54.3-2…
rossops Jan 26, 2026
2a9a747
Refactor engagement and risk acceptance permissions (#14155)
Maffooch Jan 27, 2026
5f88a5f
:bug: Fix "Test Type" filter dropdown includes inactive test types #1…
manuel-sommer Jan 27, 2026
34e8078
:bug: No filter by "Test name" in the findings list for all products …
manuel-sommer Jan 27, 2026
1bd4d51
authorizations: optimize queries & cache data per request (#13989)
valentijnscholten Jan 27, 2026
848f352
Enhance risk acceptance authorization by checking global permissions …
Maffooch Jan 27, 2026
54b9763
feat(async): Drop args from async_dupe_delete (#14171)
kiblik Jan 28, 2026
5f77f31
Update dependency @thulite/inline-svg from 1.2.1 to v1.2.2 (docs/pack…
renovate[bot] Jan 28, 2026
4c7d116
Update valkey Docker tag from 0.15.1 to v0.15.2 (helm/defectdojo/Char…
renovate[bot] Jan 28, 2026
f844d2c
fix(deps): update dependency @thulite/images from 3.3.3 to v3.3.4 (do…
renovate[bot] Jan 28, 2026
ebc9a44
fix(async): watchmedo was installed incorrectly (#14183)
kiblik Jan 28, 2026
5b37703
feat(async): Show number of tasks waiting in queue (#14180)
kiblik Jan 28, 2026
c7adb0c
feat(async): Set "expires" for regulart tasks (#14172)
kiblik Jan 28, 2026
78edfc0
fix(deps): update dependency @thulite/seo from 2.4.2 to v2.4.3 (docs/…
renovate[bot] Jan 28, 2026
86aa018
Update postgres:18.1-alpine Docker digest from 18.1 to 18.1-alpine (d…
renovate[bot] Jan 28, 2026
5563486
Update python:3.13.11-alpine3.22 Docker digest from 3.13.11 to v (Doc…
renovate[bot] Jan 28, 2026
b885931
chore(deps): bump python-gitlab from 7.1.0 to 8.0.0 (#14189)
dependabot[bot] Jan 28, 2026
12cdf8c
chore(deps): bump cryptography from 46.0.3 to 46.0.4 (#14190)
dependabot[bot] Jan 28, 2026
b336361
Update docker/login-action action from v3.6.0 to v3.7.0 (.github/work…
renovate[bot] Jan 28, 2026
3c8e6db
Update valkey Docker tag from 0.15.2 to v0.15.3 (helm/defectdojo/Char…
renovate[bot] Jan 29, 2026
290228f
chore(deps): bump django-polymorphic from 4.8.0 to 4.10.5 (#14088)
manuel-sommer Jan 30, 2026
d995e76
Fix: Suppress expected JIRA validation alerts when pushing (Fixes #12…
valentijnscholten Jan 30, 2026
f925f2a
Update python:3.13.11-alpine3.22 Docker digest from 3.13.11 to v (Doc…
renovate[bot] Jan 30, 2026
55afac3
Update postgres:18.1-alpine Docker digest from 18.1 to 18.1-alpine (d…
renovate[bot] Jan 30, 2026
f58b0cb
Update dependency @thulite/doks-core from 1.8.3 to v1.8.4 (docs/packa…
renovate[bot] Jan 30, 2026
6b2cc4c
:lipstick: Typo in release 2.52 (#14204)
manuel-sommer Jan 30, 2026
269b5fb
Update actions/cache action from v5.0.2 to v5.0.3 (.github/workflows/…
renovate[bot] Jan 30, 2026
c13a7f8
Update dependency kubernetes/minikube from v1.37.0 to v1.38.0 (.githu…
renovate[bot] Jan 30, 2026
2619b72
remove duplicated openreports parser doc (#14206)
fopina Jan 30, 2026
5b8bfab
Include Trufflehog verified secret info in report (#14192)
jamesgol Jan 30, 2026
ed981c9
chore(deps): bump jquery-ui from 1.14.1 to 1.14.2 in /components (#14…
dependabot[bot] Jan 30, 2026
1363dd3
don't (over)write status on comment event (#14208)
valentijnscholten Jan 30, 2026
fe67b38
Fix email template rendering for product_type_added notification
Jan 31, 2026
3718c7a
fix: fix rendering error in product_type_added email template
Feb 1, 2026
7318ca2
[docs] 2026 overhaul (#14157)
paulOsinski Feb 2, 2026
755ac6d
locations: everything else (#14198)
dogboat Feb 2, 2026
b6cc6ed
Merge branch 'dev' into bugfix
Maffooch Feb 2, 2026
4f782b9
Apply suggestion from @Maffooch
Maffooch Feb 2, 2026
5e1761d
Update fixtures for dev branch to be happy
Maffooch Feb 2, 2026
08e0004
Merge branch 'dev' into bugfix
Maffooch Feb 2, 2026
cfd47b5
docs - quick patch (#14226)
paulOsinski Feb 2, 2026
e0f18dd
Merge pull request #14227 from DefectDojo/bugfix
rossops Feb 2, 2026
2895d41
Update versions in application files
Feb 2, 2026
a8d6ba2
Merge pull request #14230 from DefectDojo/release/2.55.0
rossops Feb 3, 2026
ac8a270
Update versions in application files
Feb 3, 2026
e13b991
Update versions in application files
Feb 3, 2026
e1f2025
Merge pull request #14231 from DefectDojo/master-into-dev/2.55.0-2.56…
rossops Feb 3, 2026
f12f27e
Merge pull request #14232 from DefectDojo/master-into-bugfix/2.55.0-2…
rossops Feb 3, 2026
ed27004
feat(async): Set priorities to async tasks
kiblik Jan 28, 2026
daefd70
Update dojo/settings/settings.dist.py
kiblik Jan 29, 2026
161b919
View to multiple queues
kiblik Feb 3, 2026
2f5e4a2
chore(deps): bump pyjwt from 2.10.1 to 2.11.0 (#14224)
dependabot[bot] Feb 3, 2026
a83f551
Update postgres:18.1-alpine Docker digest from 18.1 to 18.1-alpine (d…
renovate[bot] Feb 3, 2026
8088268
chore(deps): update dependency renovatebot/renovate from 42.92.5 to v…
renovate[bot] Feb 3, 2026
8dd3cd2
feat(helm): Valkey: use dedicated service account (#14217)
kiblik Feb 4, 2026
d2d0bdc
refactor dojo async task base task
valentijnscholten Feb 4, 2026
d8661ab
Fix AttributeError in celery task dispatch
valentijnscholten Feb 4, 2026
0e781ce
Fix remaining dojo_dispatch_task call sites
valentijnscholten Feb 4, 2026
014d737
[docs] indexing improvements (#14229)
paulOsinski Feb 4, 2026
15b3c4c
chore(deps): bump django from 5.2.9 to 5.2.11 (#14236)
dependabot[bot] Feb 4, 2026
9864582
Update views.py (#14243)
paulOsinski Feb 4, 2026
9e651dc
Set last reviewed date and reviewer when note is added (#14209)
Maffooch Feb 4, 2026
121b789
Fix finding counts showing as 1 due to subquery ordering bug (#14242)
valentijnscholten Feb 4, 2026
9778f34
Update versions in application files
Feb 4, 2026
1c086fb
Merge pull request #14248 from DefectDojo/release/2.55.1
Maffooch Feb 5, 2026
ba141a0
Update versions in application files
Feb 5, 2026
17d71f3
Update versions in application files
Feb 5, 2026
0debd15
Merge branch 'dev' into master-into-dev/2.55.1-2.56.0-dev
Maffooch Feb 5, 2026
1d53c96
chore(deps): bump datatables.net from 2.3.6 to 2.3.7 in /components (…
dependabot[bot] Feb 5, 2026
8b3a5a3
chore(deps): update python:3.13.11-slim-trixie docker digest from 3.1…
renovate[bot] Feb 5, 2026
43b9dac
Merge pull request #14250 from DefectDojo/master-into-dev/2.55.1-2.56…
Maffooch Feb 5, 2026
179abcc
Merge pull request #14249 from DefectDojo/master-into-bugfix/2.55.1-2…
Maffooch Feb 5, 2026
008456a
Fix risk acceptance API to link to engagement and add validations
valentijnscholten Jan 21, 2026
0c5102e
fix permission check
valentijnscholten Jan 21, 2026
e1b4c97
prevent orphaned RAs getting findings but no eng
valentijnscholten Jan 21, 2026
a75d8e5
Merge pull request #14237 from paulOsinski/changelog-feb-3
paulOsinski Feb 5, 2026
83a74d8
chore(deps): update python docker tag from 3.13.11 to v3.13.12 (docke…
renovate[bot] Feb 6, 2026
98005cf
chore(deps): update valkey/valkey:7.2.11-alpine docker digest from 7.…
renovate[bot] Feb 6, 2026
75211c1
Fix engagement retrieval in ImportScanView and ReImportScanView to us…
Maffooch Feb 6, 2026
c832034
Update dockerfiles to ensure underlying OS is always running the late…
mtesauro Feb 6, 2026
6e8a711
Add unit tests
Maffooch Feb 6, 2026
f011308
Add noqa comment to toggle_system_setting_boolean decorator in JIRAIm…
Maffooch Feb 6, 2026
a2b863d
[docs] replace old risk acceptance article and add calendar (#14244)
dangoelz Feb 7, 2026
1fec7ce
Add test to ensure duplicate findings are deleted in the proper order…
Jino-T Feb 7, 2026
cd1edc2
Fix test name filter to use test__title instead of test__name (#14253)
valentijnscholten Feb 7, 2026
9874f5a
Merge pull request #14220 from omartinex/fix/product-type-added-email…
rossops Feb 9, 2026
4ed02f8
Merge pull request #14260 from mtesauro/bugfix-container-changes
rossops Feb 9, 2026
7cbd455
Merge pull request #14240 from valentijnscholten/remove-dojo-async-ta…
rossops Feb 9, 2026
84a6f8f
Merge pull request #14140 from valentijnscholten/fix/risk-acceptance-…
rossops Feb 9, 2026
2ff7ed0
Merge pull request #14259 from DefectDojo/auto-create-context-patch
rossops Feb 9, 2026
64cddc5
Expose `has_any_jira_issue` filter for findings (#12670) (#14266)
valentijnscholten Feb 9, 2026
25f78de
Add finding group support to jira_status_reconciliation command (#14267)
valentijnscholten Feb 9, 2026
bf03cde
Jira keep findings in sync: Expand to import/reimport and API (#14262)
Maffooch Feb 9, 2026
30286f4
Update versions in application files
Feb 9, 2026
9df71ad
Merge pull request #14274 from DefectDojo/release/2.55.2
rossops Feb 9, 2026
dd4ed82
Update versions in application files
Feb 9, 2026
b89f558
Merge branch 'dev' into master-into-dev/2.55.2-2.56.0-dev
rossops Feb 9, 2026
ffc36a2
Merge pull request #14279 from DefectDojo/master-into-dev/2.55.2-2.56…
rossops Feb 9, 2026
986a26a
chore(deps): bump ruff from 0.14.14 to 0.15.0 (#14238)
dependabot[bot] Feb 10, 2026
d1af6ca
chore(deps): update python:3.13.12-alpine3.22 docker digest from 3.13…
renovate[bot] Feb 10, 2026
dbd36a6
chore(deps): update python:3.13.12-slim-trixie docker digest from 3.1…
renovate[bot] Feb 10, 2026
72eba1f
chore(deps): bump setuptools from 80.10.2 to 82.0.0 (#14272)
dependabot[bot] Feb 10, 2026
de0b39c
Update dependency renovatebot/renovate from 43.2.4 to v43.5.6 (.githu…
renovate[bot] Feb 10, 2026
70b93d0
Merge upstream/dev into celery_set_prio
valentijnscholten Feb 11, 2026
6a501ed
Set explicit Celery priorities on post-processing, grading, and JIRA …
valentijnscholten Feb 13, 2026
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
The table of contents is too big for display.
Diff view
Diff view
  •  
  •  
  •  
The diff you're trying to view is too large. We only load the first 3000 changed files.
3 changes: 3 additions & 0 deletions .dockerignore
Original file line number Diff line number Diff line change
@@ -0,0 +1,3 @@
.git
.gitignore
*.md
71 changes: 71 additions & 0 deletions .dryrunsecurity.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,71 @@
---
sensitiveCodepaths:
- 'dojo/object/urls.py'
- 'dojo/object/views.py'
- 'dojo/announcement/*.py'
- 'dojo/api_v2/*.py'
- 'dojo/api_v2/**/*.py'
- 'dojo/authorization/*.py'
- 'dojo/db_migrations/*.py'
- 'dojo/endpoint/*.py'
- 'dojo/engagement/*.py'
- 'dojo/finding/*.py'
- 'dojo/finding_group/*.py'
- 'dojo/group/*.py'
- 'dojo/importers/*.py'
- 'dojo/importers/**/*.py'
- 'dojo/jira_link/*.py'
- 'dojo/metrics/*.py'
- 'dojo/note_type/*.py'
- 'dojo/notes/*.py'
- 'dojo/product/*.py'
- 'dojo/product_type/*.py'
- 'dojo/reports/*.py'
- 'dojo/risk_acceptance/*.py'
- 'dojo/search/*.py'
- 'dojo/templates/*.html'
- 'dojo/templates/**/*.html'
- 'dojo/templatetags/*.py'
- 'dojo/test/*.py'
- 'dojo/tool_config/*.py'
- 'dojo/tool_product/*.py'
- 'dojo/tool_type/*.py'
- 'dojo/user/*.py'
- 'dojo/apps.py'
- 'dojo/celery.py'
- 'dojo/context_processors.py'
- 'dojo/decorators.py'
- 'dojo/filters.py'
- 'dojo/forms.py'
- 'dojo/middleware.py'
- 'dojo/models.py'
- 'dojo/okta.py'
- 'dojo/pipeline.py'
- 'dojo/remote_user.py'
- 'dojo/tasks.py'
- 'dojo/urls.py'
- 'dojo/utils.py'
- 'dojo/views.py'
- 'dojo/wsgi.py'
- 'docker/environments/*.env'
- 'docker/extra_settings'
- 'docker/entrypoint-celery-beat.sh'
- 'docker/entrypoint-celery-worker.sh'
- 'docker/entrypoint-initializer.sh'
- 'docker/entrypoint-nginx.sh'
- 'docker/entrypoint-uwsgi.sh'
- 'docker/wait-for-it.sh'
allowedAuthors:
usernames:
- mtesauro
- devGregA
- cneill
- Maffooch
- blakeaowens
- kiblik
- dsever
- dogboat
- hblankenship
- valentijnscholten
notificationList:
- '@mtesauro'
19 changes: 19 additions & 0 deletions .github/CODEOWNERS
Original file line number Diff line number Diff line change
@@ -0,0 +1,19 @@
# Any kind of package updates only need 2 approvals,
# So let's add three folks here
requirements.txt @cneill @mtesauro @Maffooch
# Any dockerfile or compose changes will need to be viewed by
# these people
Dockerfile.* @mtesauro @Maffooch
docker-compose.* @mtesauro @Maffooch
/docker/ @mtesauro @Maffooch
# Documentation changes
/docs/content/ @paulOsinski @valentijnscholten @Maffooch
# Kubernetes should be reviewed by reviewed first by those that know it
/helm/ @cneill @kiblik @Maffooch
# Anything UI related needs to be checked out by those with the eye for it
/dojo/static/ @blakeaowens @Maffooch
/dojo/templates/ @blakeaowens @Maffooch
# Any model changes should be closely looked at
/dojo/models.py @Maffooch
# All other code changes should be reviewed by someone
* @Maffooch @mtesauro
49 changes: 49 additions & 0 deletions .github/ISSUE_TEMPLATE/bug_report.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,49 @@
---
name: Bug report
about: Create a report to help us improve
title: ''
labels: bug
assignees: ''

---
**Slack us first!**
The easiest and fastest way to help you is via Slack. There's a free and easy signup to join our #defectdojo channel in the OWASP Slack workspace: [Get Access.](https://owasp.org/slack/invite)
If you're confident you've found a bug, or are allergic to Slack, you can submit an issue anyway.

**Be informative**
Please enter as much information as possible, otherwise we can't provide support. If possible upgrade to the latest release or dev version and try again.

**Bug description**
A clear and concise description of what the bug is. For errors include at least the exact error message you are seeing (including traceback).

**Steps to reproduce**
Steps to reproduce the behavior:
1. Go to '...'
2. Click on '....'
3. Scroll down to '....'
4. See error

**Expected behavior**
A clear and concise description of what you expected to happen.

**Deployment method** *(select with an `X`)*
- [ ] Docker Compose
- [ ] Kubernetes
- [ ] GoDojo

**Environment information**
- Operating System: [e.g. Ubuntu 18.04]
- Docker Compose or Helm version (Output of `docker compose version` or `helm version`)
- DefectDojo version (see footer) or commit message: [use `git show -s --format="[%ci] %h: %s [%d]"`]

**Logs**
Use `docker compose logs` (or similar, depending on your deployment method) to get the logs and add the relevant sections here showing the error occurring (if applicable).

**Sample scan files**
If applicable, add sample scan files to help reproduce your problem.

**Screenshots**
If applicable, add screenshots to help explain your problem.

**Additional context** (optional)
Add any other context about the problem here.
26 changes: 26 additions & 0 deletions .github/ISSUE_TEMPLATE/feature_request.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,26 @@
---
name: Feature request
about: Suggest an idea for DefectDojo
title: ''
labels: enhancement
assignees: ''

---
## :warning: Note on feature completeness :warning:

We are narrowing the scope of acceptable enhancements to DefectDojo. Learn more here:
https://github.com/DefectDojo/django-DefectDojo/blob/master/readme-docs/CONTRIBUTING.md

**Is your feature request related to a problem? Please describe**
A clear and concise description of what the problem is.
Ex: I'm always frustrated when [...]

**Describe the solution you'd like**
A clear and concise description of what you want to happen.
Ex: As a < role >, I want < some goal > so that < some reason >.

**Describe alternatives you've considered**
A clear and concise description of any alternative solutions or features you have considered.

**Additional context**
Add any other context, screenshots, sketch, code snippet, etc. about the feature request here.
14 changes: 14 additions & 0 deletions .github/ISSUE_TEMPLATE/importer_request.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,14 @@
---
name: New importer request
about: Request a new importer (scanner) for DefectDojo
title: ''
labels: Import Scans
assignees: ''

---

**Scanner Name**
Name of the scanner, brief description of the scanner and link.

**Sample File**
Please attach a sample file and the format of the file (xml, json, csv).
16 changes: 16 additions & 0 deletions .github/ISSUE_TEMPLATE/security_issue.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,16 @@
---
name: Security issue
about: Report a security issue
title: Please submit via our security reporting program, not GitHub
labels: security
assignees: ''

---

**DefectDojo security reporting program**

If you believe you have found a **security issue** in DefectDojo, please review the [disclosure policy](../../readme-docs/SECURITY.md) and submit your finding via our security reporting program.

Please, do not submit **security issues** via GitHub directly.

Thank you for helping keep DefectDojo and our users safe!
49 changes: 49 additions & 0 deletions .github/ISSUE_TEMPLATE/support_request.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,49 @@
---
name: Support Request
about: If you need support or are running into some trouble
title: ''
labels: support
assignees: ''

---
**Slack us first!**
The easiest and fastest way to help you is via Slack. There's a free and easy signup to join our #defectdojo channel in the OWASP Slack workspace: [Get Access.](https://owasp.org/slack/invite)
If you're confident you've found a bug, or are allergic to Slack, you can submit an issue anyway.

**Be informative**
Please enter as much information as possible, otherwise we can't provide support. If possible upgrade to the latest release or dev branch and try again.

**Problem description**
A clear and concise description of what the problem is. For errors include at least the exact error message you are seeing (including traceback).

**Steps to reproduce**
Steps to reproduce the behavior:
1. Go to '...'
2. Click on '....'
3. Scroll down to '....'
4. See error

**Expected behavior**
A clear and concise description of what you expected to happen.

**Deployment method** *(select with an `X`)*
- [ ] Docker Compose
- [ ] Kubernetes
- [ ] GoDojo

**Environment information**
- Operating System: [e.g. Ubuntu 18.04]
- Docker Compose or Helm version (Output of `docker compose version` or `helm version`)
- DefectDojo version (see footer) or commit message: [use `git show -s --format="[%ci] %h: %s [%d]"`]

**Logs**
Use `docker compose logs` (or similar, depending on your deployment method) to get the logs and add the relevant sections here showing the error occurring (if applicable).

**Sample scan files**
If applicable, add sample scan files to help reproduce your problem.

**Screenshots**
If applicable, add screenshots to help explain your problem.

**Additional context** (optional)
Add any other context about the problem here.
66 changes: 66 additions & 0 deletions .github/dependabot.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,66 @@
version: 2
updates:
- package-ecosystem: pip
directory: "/"
schedule:
interval: daily
open-pull-requests-limit: 10
target-branch: dev
ignore:
- dependency-name: whitenoise
versions:
- ">= 5.a"
- "< 6"
- dependency-name: boto3
update-types: ["version-update:semver-minor"]
- package-ecosystem: npm
directory: "/components"
schedule:
interval: daily
open-pull-requests-limit: 10
target-branch: dev
ignore:
- dependency-name: bootstrap
versions:
- ">= 4.a"
- "< 5"
- dependency-name: bootstrap-social
versions:
- ">= 5.a"
- "< 6"
- dependency-name: bootswatch
versions:
- ">= 4.a"
- "< 5"
- dependency-name: chosen
versions:
- ">= 1.a"
- "< 2"
- dependency-name: drmonty-datatables-responsive
versions:
- ">= 2.a"
- "< 3"
- dependency-name: flot
versions:
- ">= 2.a"
- "< 3"
- dependency-name: flot
versions:
- ">= 3.a"
- "< 4"
- dependency-name: flot
versions:
- ">= 4.a"
- "< 5"
- dependency-name: fullcalendar
versions:
- ">= 5.a"
- "< 6"
- dependency-name: startbootstrap-sb-admin-2
versions:
- ">= 3.a"
- "< 4"
- dependency-name: startbootstrap-sb-admin-2
versions:
- ">= 4.a"
- "< 5"
72 changes: 72 additions & 0 deletions .github/labeler.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,72 @@
---
docs:
- changed-files:
- any-glob-to-any-file:
- docs/**/*
- readme-docs/**/*

docker:
- changed-files:
- any-glob-to-any-file:
- docker/**/*
- docker**
- Docker*

helm:
- changed-files:
- any-glob-to-any-file:
- helm/defectdojo/*
- helm/defectdojo/**/*

"New Migration":
- changed-files:
- any-glob-to-any-file:
- dojo/db_migrations/*

unittests:
- changed-files:
- any-glob-to-any-file:
- unittests/**/*

integration_tests:
- changed-files:
- any-glob-to-any-file:
- tests/**/*

settings_changes:
- changed-files:
- any-glob-to-any-file:
- dojo/settings/settings.dist.py

apiv2:
- changed-files:
- any-glob-to-any-file:
- dojo/api_v2/**/*

ui:
- changed-files:
- any-glob-to-any-file:
- dojo/static/**/*
- dojo/templates/**/*
- dojo/templatetags/**/*

parser:
- changed-files:
- any-glob-to-any-file:
- dojo/tools/**/*

localization:
- changed-files:
- any-glob-to-any-file:
- dojo/locale/*
- dojo/locale/**/*

lint:
- changed-files:
- any-glob-to-any-file:
- ruff.toml

gha:
- changed-files:
- any-glob-to-any-file:
- .github/workflows
Loading