Hi DefectDojo team, We identified a issue in the Checkmarx One parser when and then .get("technology") fails.We identified a issue in the Checkmarx One parser when importing a SAST-only JSON report. Expected: The parser should ignore null optional sections and continue parsing the available SAST results. In our sample SAST-only report: - scanResults.totalResults = 37 - Expected parsed findings = 37 Local fix tested successfully: Changed optional section access from: data.get("iacScanResults", {}).get("technology") to: (data.get("iacScanResults") or {}).get("technology") Applied the same pattern to scanResults, iacScanResults, and scaScanResults. After the change, the same SAST-only report imports successfully and parses 37 findings. Suggested patch: - data.get("scanResults", {}).get("resultsList") + (data.get("scanResults") or {}).get("resultsList") - data.get("iacScanResults", {}).get("technology") + (data.get("iacScanResults") or {}).get("technology") - data.get("scaScanResults", {}).get("packages") + (data.get("scaScanResults") or {}).get("packages") Could you please confirm if this fix can be considered for upstream? Environment: - DefectDojo version: 3.0.1 - Parser: Checkmarx One Scan - Import method: UI import scan results - Report type: Checkmarx One JSON report filtered to SAST only Issue: The SAST-only Checkmarx One JSON report contains some optional scanner sections as null, for example: "iacScanResults": null "scaScanResults": null "containerScanResults": null During import, the parser fails with: AttributeError: 'NoneType' object has no attribute 'get' Trace points to: dojo/tools/checkmarx_one/parser.py Specifically this pattern: data.get("iacScanResults", {}).get("technology")
