Aqua Security (Pro)
The Aqua Security connector imports container image and workload vulnerability findings across your whole Aqua tenant. DefectDojo creates a Record for each scanned registry/repository.
Prerequisites
An admin-generated Aqua API key and secret, created under Account Management > API Keys. The secret is shown only once when the key is generated, so capture it at that point. Neither value is ever logged.
Connector Mappings
- Enter your Aqua tenant URL in the Location field —
https://<your-tenant>.cloud.aquasec.com. DefectDojo appends the API path itself. - Enter the API key in the API Key field.
- Enter the API secret in the API Secret field.
- Optionally, set a Minimum Severity to limit which findings are imported.
Each scanned registry/repository becomes a Record, and its image and workload vulnerabilities are imported as findings.