Upgrading to DefectDojo Version 2.55.2

JIRA Reconciliation#

The jira_status_reconciliation management command now also processes JIRA issues for Finding Groups.

New command line options:

• --include-findings / --no-include-findings — Process individual findings with direct JIRA issues (default: True)
• --include-finding-groups / --no-include-finding-groups — Process finding groups with JIRA issues (default: True)

Full list of options:

docker compose exec uwsgi bash -c "python manage.py jira_status_reconciliation --help"

usage: manage.py jira_status_reconciliation [-h] [--mode MODE] [--product PRODUCT]
           [--engagement ENGAGEMENT] [--daysback DAYSBACK] [--dryrun]
           [--include-findings | --no-include-findings]
           [--include-finding-groups | --no-include-finding-groups]
           [--version] [-v {0,1,2,3}] [--settings SETTINGS]
           [--pythonpath PYTHONPATH] [--traceback] [--no-color]
           [--force-color] [--skip-checks]

Reconcile finding/finding group status with JIRA issue status, stdout will
contain semicolon separated CSV results. Risk Accepted findings are skipped.
Findings created before 1.14.0 are skipped.

options:
  -h, --help            show this help message and exit
  --mode MODE           reconcile: (default) reconcile any differences in
                        status between Defect Dojo and JIRA.
                        push_status_to_jira: update JIRA status for all JIRA
                        issues connected to a finding or finding group.
                        import_status_from_jira: update finding/finding group
                        status from JIRA.
  --product PRODUCT     Only process findings in this product (name)
  --engagement ENGAGEMENT
                        Only process findings in this engagement (name)
  --daysback DAYSBACK   Only process findings created in the last
                        'daysback' days
  --dryrun              Only print actions to be performed, but make no
                        modifications.
  --include-findings, --no-include-findings
                        Process individual findings with direct JIRA issues
                        (default: True)
  --include-finding-groups, --no-include-finding-groups
                        Process finding groups with JIRA issues
                        (default: True)

Check the Release Notes for the contents of the release.