Rajat R.

Valentijn S. https://github.com/DefectDojo/django-DefectDojo/issues/15033#issuecomment-4832427269

Valentijn S. https://github.com/DefectDojo/django-DefectDojo/issues/15033#issuecomment-4797465840

Valentijn S. https://github.com/DefectDojo/django-DefectDojo/issues/15033

Here is the example difference between govulncheck JSON parser and SARIF parser scans

Valentijn S.

Govulncheck json parser does not show the severity for some reason but the sarif has severity so defect dojo categorises based on the severity. But using govulncheck Json parser all the vulnerabilities will be set to info severity.

we have to go personally into each link and update the severity. Rather than this it can take the severity from the file itself.

Hello Valentijn S. , Thank you for the fix, I have a question regarding the fix. Currently when we upload all the vulnerabilities are set to info rather than picking the severity from the each vulnerability itself.