Gixy

Import Gixy reports in JSON format. Gixy analyses nginx configuration for security misconfiguration — HTTP splitting, host header issues, referrer and origin validation, version disclosure.

Generate a report with:

gixy -f json nginx.conf > gixy.json

Severity Mapping#

Gixy assigns its own severity per finding, which DefectDojo maps directly:

Each finding names the plugin that raised it and includes the offending configuration snippet.

Sample Scan Data#

Sample Gixy scans can be found here.

Default Deduplication Hashcode Fields#

By default, DefectDojo identifies duplicate Findings using these hashcode fields:

• vuln_id_from_tool
• file_path
• line