django-DefectDojo

(★ 4,903)

Open-Source Unified Vulnerability Management, DevSecOps & ASPM

File Explorer

Download Latest Version (.zip)

Showing a partial file list — download the zip above to see everything.

- - branch-guard.sh
- settings.json
- - bug_report.md
  - feature_request.md
  - importer_request.md
  - security_issue.md
  - support_request.md
- - build-docker-images-for-testing.yml
  - cancel-outdated-workflow-runs.yml
  - ci-warm-caches.yml
  - close-stale.yml
  - detect-merge-conflicts.yaml
  - fetch-oas.yml
  - gh-pages.yml
  - integration-tests.yml
  - k8s-tests.yml
  - migration-graph.yml
  - performance-tests.yml
  - pr-labeler.yml
  - release-1-create-pr.yml
  - release-2-tag-docker-push.yml
  - release-3-master-into-dev.yml
  - release-drafter.yml
  - release-nightly-dev.yml
  - release-x-manual-docker-containers.yml
  - release-x-manual-helm-chart.yml
  - release-x-manual-merge-container-digests.yml
  - release-x-manual-tag-as-latest.yml
  - release-x-nightly.yml
  - release_drafter_valentijn.yml
  - renovate.yaml
  - rest-framework-tests.yml
  - ruff.yml
  - shellcheck.yml
  - test-helm-chart.yml
  - unit-tests.yml
  - update-sample-data.yml
  - validate_docs_build.yml
- CODEOWNERS
- dependabot.yml
- labeler.yml
- pull_request_template.md
- release-drafter.yml
- renovate.json
- stale.yml
- package.json
- tailwind.css
- yarn.lock
- - readme.txt
- - readme.txt
- - README.md
- - initial_dojo_data.json
- docker-compose-check.sh
- docker-compose.override.performance_tests_cicd.yml
- dojo-data.bash
- entrypoint-celery-beat.sh
- entrypoint-celery-worker-dev.sh
- entrypoint-celery-worker.sh
- entrypoint-first-boot.sh
- entrypoint-initializer.sh
- entrypoint-integration-tests.sh
- entrypoint-nginx.sh
- entrypoint-unit-tests-devDocker.sh
- entrypoint-unit-tests.sh
- entrypoint-uwsgi-dev.sh
- entrypoint-uwsgi.sh
- install_chrome_dependencies.py
- reach_broker.sh
- reach_database.sh
- secret-file-loader.sh
- setEnv.sh
- setup-superuser.expect
- unit-tests.sh
- wait-for-it.sh
- - favicon.png
  - favicon.svg
  - jsconfig.json
- - babel.config.js
  - postcss.config.js
- - _index.de.md
  - _index.es.md
  - _index.fr.md
  - _index.ja.md
  - _index.md
- - de.toml
  - en.toml
  - es.toml
  - fr.toml
  - ja.toml
- - 404.html
  - baseof.html
  - home.html
  - robots.txt
  - single.html
- - .gitkeep
- netlify.toml
- package-lock.json
- package.json
- README.md
- TRANSLATIONS.md
- - __init__.py
  - admin.py
  - models.py
  - os_message.py
  - signals.py
- - __init__.py
  - filters.py
  - serializers.py
- - __init__.py
  - exception_handler.py
  - mixins.py
  - permissions.py
  - serializers.py
  - views.py
- - __init__.py
  - labels.py
  - urls.py
- - __init__.py
  - backfill.py
  - filters.py
  - helpers.py
  - models.py
  - services.py
  - settings.py
- - __init__.py
  - api_permissions.py
  - authorization.py
  - authorization_decorators.py
  - middleware.py
  - MIGRATION_REHEARSAL.md
  - models.py
  - query_filters.py
  - query_registrations.py
  - roles_permissions.py
  - serializer_guards.py
  - template_filters.py
  - url_permissions.py
- - __init__.py
  - admin.py
  - models.py
- - __init__.py
  - base.py
  - validators.py
- - __init__.py
  - admin.py
  - models.py
  - signals.py
- - __init__.py
  - admin.py
  - models.py
- - __init__.py
  - sql_group_concat.py
  - urls.py
  - views.py
- - 0001_initial.py
  - 0001_squashed_0090_index_duplicate_finding.py
  - 0002_auto_20190503_1817.py
  - 0003_test_title.py
  - 0004_cve_field.py
  - 0005_repo_field.py
  - 0006_django2_upgrade.py
  - 0007_note_additions.py
  - 0008_finding_mitigation.py
  - 0009_endpoint_remediation.py
  - 0010_jira_conf_configuration_name.py
  - 0011_finding_template_activity.py
  - 0012_jira_finding_age.py
  - 0013_jira_info_level.py
  - 0014_jira_conf_resolution_mappings.py
  - 0015_findingimage_caption.py
  - 0016_increase_filepath_length.py
  - 0017_auto_20190827_1421.py
  - 0018_sonarqube_api_integration.py
  - 0019_notetype_additions.py
  - 0020_system_settings_allow_anonymous_survey_repsonse.py
  - 0021_cve_index.py
  - 0022_google_sheet_sync_additions.py
  - 0023_SAST_track_unique_vulnerabilities.py
  - 0024_cve_fix_1553.py
  - 0025_jira_security_issuetype.py
  - 0026_login_banner.py
  - 0027_jira_issue_type_settings.py
  - 0028_finding_indices.py
  - 0029_cve_regex.py
  - 0030_prod_type_meta.py
  - 0031_finding_component.py
  - 0032_system_settings_enable_auditlog.py
  - 0033_remove_finding_duplicate_list.py
  - 0034_add_github_support.py
  - 0035_push_all_issues_help_text_rename_gh_fields.py
  - 0036_system_settings_email_address.py
  - 0037_email_notification_overhaul.py
  - 0038_timezone_update.py
  - 0039_test_version.py
  - 0040_finding_cwe_index.py
  - 0041_engagement_survey_import.py
  - 0042_risk_acceptance_improvements.py
  - 0043_finding_hash_code_index.py
  - 0044_required_prod_type.py
  - 0045_slack_help_text.py
  - 0046_endpoint_status.py
  - 0047_jira_minimum_severity_default.py
  - 0048_sla_notifications.py
  - 0049_create_endpoint_status.py
  - 0050_deduplication_on_engagement.py
  - 0051_regulation_categories.py
  - 0052_cvssv3_field.py
  - 0053_engagement_notes.py
  - 0054_dojometa_finding.py
  - 0055_notifications_jira_update_verbose_name.py
  - 0056_index_component_name.py
  - 0057_ms_teams.py
  - 0058_document_finding_model.py
  - 0059_product_type_authorized_users.py
  - 0060_false_p_dedupe_indices.py
  - 0061_jira_webhook_secret.py
  - 0062_add_vuln_id_from_tool.py
  - 0063_jira_refactor.py
  - 0064_jira_refactor_populate.py
  - 0065_delete_empty_jira_project_configs.py
  - 0066_django_tagulous.py
  - 0067_max_dupes.py
  - 0068_file_upload.py
  - 0069_risk_acceptance.py
  - 0070_increase_alert_field_size.py
  - 0071_product_type_enhancement.py
  - 0072_composite_index.py
  - 0073_sheets_textfields.py
  - 0074_notifications_close_engagement.py
  - 0075_import_history.py
  - 0076_authorization.py
  - 0077_delete_dupulicates.py
  - 0078_cvssv3_rename_verbose_name.py
  - 0079_system_settings_disclaimer.py
  - 0080_jira_issue_templates.py
  - 0081_last_status_update.py
  - 0082_last_status_update_populate.py
  - 0083_remove_ipscan.py
  - 0084_add_extras_in_tool.py
  - 0085_add_publish_date_cvssv3_score.py
  - 0086_finding_groups.py
  - 0087_protect_jira_issues.py
  - 0088_import_history_cicd.py
  - 0089_unprotect_jira_project.py
  - 0090_index_duplicate_finding.py
  - 0091_npm_audit_path_censoring.py
  - 0092_is_mitigated.py
  - 0093_django_tagging_removal.py
  - 0094_remove_system_settings_s_finding_severity_naming.py
  - 0095_remove_old_product_contact_fields.py
  - 0096_grype_name_change.py
  - 0097_engagement_type.py
  - 0098_anchore_vuln_id.py
  - 0099_delete_report.py
  - 0100_dojo_user_for_authv2.py
  - 0101_enable_features.py
  - 0102_dojo_group.py
  - 0103_report_notification.py
  - 0104_endpoint_userinfo_creation.py
  - 0105_endpoint_host_migration.py
  - 0106_role_model.py
  - 0107_global_role.py
  - 0108_blank_fields.py
  - 0109_group_user_role.py
  - 0110_auth_v2_migrate_user_roles.py
  - 0111_group_user_rename.py
  - 0112_group_user_rename_2.py
  - 0113_endpoint_protocol.py
  - 0114_cyclonedx_vuln_uniqu.py
  - 0115_language_types.py
  - 0116_test_type_active.py
  - 0117_usercontactinfo_force_password_reset.py
  - 0118_remove_finding_images.py
  - 0119_default_group_is_staff.py
  - 0120_sonarqube_test_and_clean.py
  - 0121_user_restrict.py
  - 0122_cobaltio_product.py
  - 0123_scan_type.py
  - 0124_sonarqube_api_type_length_change.py
  - 0125_sonarqube_clean.py
  - 0126_finding_publish_date.py
  - 0127_remove_hashes.py
  - 0128_pytz_update.py
  - 0129_finding_deprecated_fields.py
  - 0130_product_api_scan_configuration.py
  - 0131_migrate_sonarcube_cobalt.py
  - 0132_remove_configs_from_test.py
  - 0133_finding_service.py
  - 0134_sonarque_cobaltio_removal.py
  - 0135_email_from.py
  - 0136_default_group_help_text.py
  - 0137_system_settings_enable_endpoint_metadata_import.py
  - 0138_remove_authorized_users.py
  - 0139_google_sheets_rules_framework_enable.py
  - 0140_auth_group.py
  - 0141_enable_user_profile_editable.py
  - 0142_environment_delete.py
  - 0143_objects.py
  - 0144_import_action_untouched.py
  - 0145_system_settings_default_group_email_pattern.py
  - 0146_lead_optional.py
  - 0147_rename_sslyze_parser.py
  - 0148_default_notifications.py
  - 0149_harmonize_user_format.py
  - 0150_dedupe_endpoint_status.py
  - 0151_index_endpoint_status.py
  - 0152_notifications_template.py
  - 0153_migrate_endpoint_mitigated.py
  - 0154_remove_endpoint_mitigated.py
  - 0155_enable_finding_groups.py
  - 0156_migrate_finding_groups_setting.py
  - 0157_vulnerability_reference.py
  - 0158_vulnerability_id.py
  - 0159_remove_broken_endpoint_statuses.py
  - 0160_set_notnull_endpoint_statuses.py
  - 0161_alter_dojo_group_social_provider.py
  - 0162_created_and_updated.py
  - 0163_system_settings_enable_calendar.py
  - 0164_remove_system_settings_staff_user_email_pattern.py
  - 0165_custom_sla.py
  - 0166_copy_sla_from_system_settings.py
  - 0167_system_settings_add_vulnerability_id_to_jira_label.py
  - 0168_alter_system_settings_time_zone.py
  - 0169_planned_remediation_date.py
  - 0170_jira_project_custom_fields.py
  - 0171_jira_labels_per_product_and_engagement.py
  - 0172_optimize_usage_of_endpoint_status.py
  - 0173_alter_risk_acceptance_name.py
  - 0174_jira_project_default_assignee.py
  - 0175_system_settings_enable_notify_sla.py
  - 0176_custom_password_requirements.py
  - 0177_alter_system_settings_time_zone.py
  - 0178_alter_answer_polymorphic_ctype_and_more.py
  - 0179_alter_finding_verified.py
  - 0180_announcement_userannouncement.py
  - 0181_jira_instance_finding_jira_sync.py
  - 0182_alter_jira_instance_default_issue_type.py
  - 0183_system_settings_enable_notify_sla_exponential_backoff_and_more.py
  - 0184_remove_child_rule_parent_rule_delete_fieldrule_and_more.py
  - 0185_product_disable_sla_breach_notifications_and_more.py
  - 0186_system_settings_non_common_password_required.py
  - 0187_nessus_to_tenable.py
  - 0188_product_enable_product_tag_inheritance_and_more.py
  - 0189_finding_effort_and_remediation_for_fixing.py
  - 0190_system_settings_experimental_fp_history.py
  - 0191_alter_notifications_risk_acceptance_expiration.py
  - 0192_notifications_scan_added_empty.py
  - 0193_remove_system_settings_enable_auditlog.py
  - 0194_alter_finding_component_name.py
  - 0195_alter_announcement_dismissable.py
  - 0196_notifications_sla_breach_combined.py
  - 0197_parser_merge.py
  - 0198_alter_system_settings_enable_deduplication.py
  - 0199_whitesource_to_mend.py
  - 0200_finding_sla_expiration_date_product_async_updating_and_more.py
  - 0201_populate_finding_sla_expiration_date.py
  - 0202_alter_dojo_group_social_provider.py
  - 0203_alter_finding_options_finding_epss_percentile_and_more.py
  - 0204_alter_finding_cvssv3_score.py
  - 0205_jira_project_epic_issue_type_name.py
  - 0206_system_settings_api_expose_error_details.py
  - 0207_alter_sonarqube_issue_key.py
  - 0208_merge_acunetix.py
  - 0209_alter_finding_severity.py
  - 0210_system_settings_filter_string_matching.py
  - 0211_system_settings_enable_similar_findings.py
  - 0212_sla_configuration_enforce_critical_and_more.py
  - 0213_system_settings_enable_ui_table_based_searching.py
  - 0214_test_type_dynamically_generated.py
  - 0215_webhooks_notifications.py
  - 0216_alter_jira_project_push_all_issues.py
  - 0217_jira_project_enabled.py
  - 0218_system_settings_enforce_verified_status_and_more.py
  - 0219_system_settings_enforce_verified_status_jira_and_more.py
  - 0220_system_settings_disclaimer_notif.py
  - 0221_system_settings_disclaimer_notif.py
  - 0222_clean_old_sessions.py
  - 0223_aws_sechub_update_endpoints.py
  - 0224_alter_regulation_category.py
  - 0225_alter_product_revenue.py
  - 0226_import_history_left_untouched_rename.py
  - 0227_migrate_tags.py
  - 0228_alter_jira_username_password.py
  - 0229_alter_finding_unique_id_from_tool.py
  - 0230_add_finding_kev_fields.py
  - 0231_alter_finding_cvssv3_alter_finding_template_cvssv3.py
  - 0232_alter_jira_instance_accepted_mapping_resolution_and_more.py
  - 0233_remove_test_actual_time_remove_test_estimated_time.py
  - 0234_alter_system_settings_maximum_password_length_and_more.py
  - 0235_clean_tags.py
  - 0236_alter_system_settings_time_zone_zoneinfo.py
  - 0237_finding_cvssv4_finding_cvssv4_score.py
  - 0238_finding_fix_available.py
  - 0239_sla_configuration_restart_sla_on_reactivation.py
  - 0240_jira_instance_password_help_text_fix.py
  - 0241_remove_system_settings_time_zone.py
  - 0242_file_upload_cleanup.py
  - 0243_pghistory_models.py
  - 0244_pghistory_indices.py
  - 0245_alter_jira_instance_accepted_mapping_resolution.py
  - 0246_endpoint_idx_ep_product_lower_host_and_more.py
  - 0247_remove_finding_insert_insert_and_more.py
  - 0248_alter_general_survey_expiration.py
  - 0249_findingreviewers_findingreviewersevent_and_more.py
  - 0250_pghistory_backfill.py
  - 0251_usercontactinfo_reset_timestamps.py
  - 0252_finding_template_changes.py
  - 0253_migrate_vulnerability_ids_to_textfield.py
  - 0254_remove_vulnerability_id_template_model.py
  - 0255_remove_system_settings_product_grade.py
  - 0256_pghistory_for_tags_models.py
  - 0257_pghistory_tags_backfill.py
  - 0258_alter_answer_options_alter_choiceanswer_options_and_more.py
  - 0259_locations.py
  - 0260_alter_engagement_status_alter_engagementevent_status.py
  - 0261_remove_url_insert_insert_remove_url_update_update_and_more.py
  - 0262_remove_system_settings_credentials.py
  - 0263_language_type_unique_language.py
  - 0264_alter_url_identity_hash_alter_urlevent_identity_hash.py
  - 0265_remove_stub_finding.py
  - 0266_remove_credential_manager.py
  - 0267_usercontactinfo_ui_use_tailwind.py
  - 0268_release_authorization_to_pro.py
  - 0269_normalize_blank_finding_components.py
  - 0270_finding_visibility_perf_indexes.py
  - 0271_finding_perf_indexes.py
  - 0272_reencrypt_tool_config_credentials_aes_gcm.py
  - 0273_product_upper_name_index.py
  - 0274_finding_sla_expiration_index.py
  - 0275_usercontactinfo_user_state_details.py
  - 0276_usercontactinfo_deduplication_execution_mode.py
  - 0277_seed_deduplication_execution_mode.py
  - 0278_global_search_fts_trigram_indexes.py
  - 0279_jira_project_transition_fields.py
  - 0280_vulnerability_id_upper_index.py
  - 0281_vulnerability_id_type.py
  - 0282_backfill_vulnerability_id_type.py
  - 0283_unique_finding_vulnerability_id.py
  - 0284_finding_cwe.py
  - 0285_backfill_finding_cwe.py
  - 0286_cicd_infrastructure.py
  - 0287_vulnerability_id_entity_tables.py
  - 0288_backfill_vulnerability_id_entities.py
  - 0289_fileupload_title_not_unique.py
  - 0290_notes_private_help_text.py
  - 0291_dojometa_location_product.py
  - __init__.py
- - __init__.py
  - admin.py
  - models.py
- - __init__.py
  - admin.py
  - models.py
  - queries.py
  - signals.py
  - utils.py
  - views.py
- - __init__.py
  - admin.py
  - models.py
  - queries.py
  - services.py
  - signals.py
  - views.py
- - __init__.py
  - admin.py
- __init__.py
- admin.py
- apps.py
- caching.py
- celery.py
- celery_dispatch.py
- checks.py
- context_processors.py
- db_utils.py
- decorators.py
.dockerignore
.dryrunsecurity.yaml
.gitattributes
.gitignore
AGENTS.md
app.json
ct.yaml
docker-compose.override.dev.yml
docker-compose.override.https.yml
docker-compose.override.integration_tests.yml
docker-compose.override.unit_tests.yml
docker-compose.override.unit_tests_cicd.yml
docker-compose.yml
Dockerfile.django-alpine
Dockerfile.django-debian
Dockerfile.integration-tests-debian
Dockerfile.nginx-alpine
LICENSE.md
NOTICE
README.md
SECURITY.md

# Installation Guide

1. Get the code

git clone https://github.com/DefectDojo/django-DefectDojo

Downloads the entire project code from GitHub to your computer.

cd django-DefectDojo

Moves into the project folder you just downloaded.

2. Docker

Easy Recommended

Prerequisites

Git Needed to download the project code from GitHub.
Docker Desktop Needed to build and run containers. Install it and keep it running in the background.

git clone https://github.com/DefectDojo/django-DefectDojo && cd django-DefectDojo && docker compose up

Downloads the entire project code from GitHub to your computer.

✅ Run docker compose ps to check the containers are Up. If the README mentions a port, open http://localhost:PORT in your browser.

Pulled directly from this repo's README.

3. Node.js

Easy

Prerequisites

Git Needed to download the project code from GitHub.
Node.js Node.js must be installed to use npm. The LTS version is recommended.

cd components

This project's files live in a subfolder, so move into it first.

npm install

Downloads and installs the libraries listed in package.json.

npm start

Starts the development/run server.

✅ After running the command, open the address shown in the terminal (usually something like http://localhost:3000) in your browser.