Upgrading to DefectDojo Version 3.5.100

The nginx image no longer includes curl#

The defectdojo-nginx image is now built on nginx 1.31.8 (Alpine 3.24), and curl and its libraries are removed from it. Nothing that ships with DefectDojo runs curl inside the nginx container: the Docker Compose file has no nginx healthcheck, and the Helm chart probes nginx with httpGet.

What you need to do#

If you added your own healthcheck or exec probe that runs curl inside the nginx container, switch it to busybox wget, which is still in the image, for example:

wget -q -O /dev/null http://127.0.0.1:8080/nginx_health

With TLS enabled (USE_TLS=true), port 8080 only redirects to HTTPS, so check port 8443. The certificate is not issued for 127.0.0.1, so skip its verification:

wget -q -O /dev/null --no-check-certificate https://127.0.0.1:8443/nginx_health

For more information, check the Release Notes.