Skip to content

AWS Inspector 2 Line number bug + other changes#14616

Merged
Maffooch merged 6 commits intoDefectDojo:bugfixfrom
Jino-T:aws-inspector-fix
Apr 6, 2026
Merged

AWS Inspector 2 Line number bug + other changes#14616
Maffooch merged 6 commits intoDefectDojo:bugfixfrom
Jino-T:aws-inspector-fix

Conversation

@Jino-T
Copy link
Copy Markdown
Contributor

@Jino-T Jino-T commented Mar 31, 2026

[sc-12948]

  • There was a bug with line number where if the scan didn't have the relevant value the import would crash because the default value was the string "N/A" instead of none.
  • Additionally the following fields were added for Package Vulnerability type findings:
    1. component_name
    2. component_version
    3. file_path
    4. references
    5. publish_date
    6. cvssv3_score

@Jino-T Jino-T requested a review from Maffooch April 1, 2026 20:59
@Jino-T Jino-T marked this pull request as ready for review April 3, 2026 15:32
@Jino-T Jino-T requested a review from mtesauro as a code owner April 3, 2026 15:32
@Jino-T Jino-T dismissed Maffooch’s stale review April 3, 2026 15:33

The requested changes were made

Populate unsaved_locations with dependency location data from
vulnerablePackages, gated behind V3_FEATURE_LOCATIONS. Also fix
process_endpoints to extend rather than overwrite unsaved_locations
so dependency locations are preserved.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Maffooch and others added 3 commits April 6, 2026 09:18
The test fixture contains Lambda ARNs with "$LATEST" which produces
invalid hostnames for endpoint validation. Endpoint validation is
already covered by the other parser tests.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Finding.unsaved_locations only exists when V3_FEATURE_LOCATIONS is
enabled, so the dependency location assertions must be conditional.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@Maffooch Maffooch merged commit 7a7a402 into DefectDojo:bugfix Apr 6, 2026
157 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants