Integration of ScannerVS and DefectDojo: parsing HTML reports and automating import

▤ Summary

This article explains how to integrate ScannerVS with DefectDojo by parsing HTML vulnerability reports and converting them into JSON for automated import. It walks through the report structure, the parsing logic, and the mapping of vulnerabilities into DefectDojo findings. It also shows how to extend DefectDojo with a custom parser, package it in Docker or Kubernetes, and test the import workflow. The result is a more automated DevSecOps pipeline for vulnerability management and reporting.

▦ Linked Companies