Sensei on DefectDojo Documentation

About Sensei

Mon, 01 Jan 0001 00:00:00 +0000

Note: Sensei is a DefectDojo Pro-only feature and is currently in BETA.

Sensei is DefectDojo’s AI-powered scan-and-fix capability for source code repositories. Connect a repository (through a GitHub App or a GitLab access token) and Sensei scans it, imports the results as DefectDojo findings, and then uses a large language model to remediate those findings by opening pull/merge requests, all without leaving DefectDojo.

Sensei

Mon, 01 Jan 0001 00:00:00 +0000

Note: Sensei is a DefectDojo Pro-only feature.

Sensei, DefectDojo’s AI-powered scan-and-fix for source code repositories, is available only in DefectDojo Pro. It is not part of the open-source edition.

Set Up Sensei

Mon, 01 Jan 0001 00:00:00 +0000

Note: Sensei is a DefectDojo Pro-only feature and is currently in BETA.

Setting up Sensei has two parts: connect a source-control provider (a GitHub App, or GitLab with an access token), then onboard the repositories you want to scan. You need a global Maintainer or Owner role to do this.

Fixing Findings with Sensei

Mon, 01 Jan 0001 00:00:00 +0000

Note: Sensei is a DefectDojo Pro-only feature and is currently in BETA.

Once a repository is onboarded, Sensei surfaces directly on your findings and on the Sensei hub. This page covers scanning a repository, triaging auto-fix candidates, and remediating individual findings. You need at least Writer access to a finding’s product to trigger a fix.

Sensei Reference

Mon, 01 Jan 0001 00:00:00 +0000

Note: Sensei is a DefectDojo Pro-only feature and is currently in BETA.

A quick reference for the statuses, actions, and limits you’ll encounter while using Sensei.