Qualys Hacker Guardian: Set Dedupe Config

[Maffooch]

[sc-9498]

[dryrunsecurity]

DryRun Security Summary

The pull request adds support for the Qualys Hacker Guardian security scanning tool to DefectDojo by updating the saml2_attrib_map_format function and DEDUPLICATION_ALGORITHM_PER_PARSER dictionary to properly process and deduplicate findings from this new scanner.

Expand for full summary

Summary:

The code change in this pull request is adding support for a new security scanning tool, Qualys Hacker Guardian, to the DefectDojo application. The key changes include updating the saml2_attrib_map_format function to include the necessary attributes for the "Qualys Hacker Guardian Scan" parser, and updating the DEDUPLICATION_ALGORITHM_PER_PARSER dictionary to set the deduplication algorithm for this parser to DEDUPE_ALGO_HASH_CODE. This ensures that findings from the Qualys Hacker Guardian scanner are properly processed and deduplicated within the DefectDojo application.

From an application security perspective, this change is a positive addition, as it allows the DefectDojo application to ingest and manage findings from a new security scanning tool, which can provide valuable information about security vulnerabilities in the application. The deduplication settings are also important, as they help maintain the integrity of the vulnerability data within the DefectDojo application.

Files Changed:

• dojo/settings/settings.dist.py: This file has been updated to add support for the "Qualys Hacker Guardian Scan" parser. Specifically, the saml2_attrib_map_format function has been updated to include the necessary attributes for this parser, and the DEDUPLICATION_ALGORITHM_PER_PARSER dictionary has been updated to set the deduplication algorithm for this parser to DEDUPE_ALGO_HASH_CODE.

Code Analysis

We ran 9 analyzers against 1 file and 0 analyzers had findings. 9 analyzers had no findings.

View PR in the DryRun Dashboard.

[mtesauro]

Approved