Merge branch 'correct_globbing' into 'main' (304eab14) · Commits · to be continuous... / DefectDojo

README.md

+9 −9

Original line number	Diff line number	Diff line
		@@ -65,16 +65,16 @@ Depending on the security tools you launch, and their configuration, you may hav

		\| Name \| description \| default value \|
		\|------------------------------------------\|----------------------------------------------------------------------------------------------------------------------------------------\| ----------------------------------------- \|
		\| `DEFECTDOJO_BANDIT_REPORTS` \| path to Bandit JSON reports \| `*/bandit.json reports/py-bandit.bandit.json` \|
		\| `DEFECTDOJO_DC_GRADLE_REPORTS` \| path to Dependency Check XML reports (Gradle template) \| `*/dependency-check.xml` \|
		\| `DEFECTDOJO_DC_REPORTS` \| path to Dependency Check XML reports (Maven template) \| `*/dependency-check.xml` \|
		\| `DEFECTDOJO_GITLEAKS_REPORTS` \| path to Gitleaks JSON reports \| `**/gitleaks-report.json` \|
		\| `DEFECTDOJO_HADOLINT_REPORTS` \| path to Hadolint JSON reports \| `*/hadolint-json-.json reports/docker-hadolint-*.native.json` \|
		\| `DEFECTDOJO_MOBSF_REPORTS` \| path to MobSF JSON reports \| `*/mobsf.json` \|
		\| `DEFECTDOJO_NODEJSSCAN_REPORTS` \| path to NodeJSScan SARIF reports \| `**/nodejsscan-report-sarif.json` \|
		\| `DEFECTDOJO_NPMAUDIT_REPORTS` \| path to NPM Audit JSON reports \| `*/npm-audit.json` \|
		\| `DEFECTDOJO_BANDIT_REPORTS` \| path to Bandit JSON reports \| `bandit*.json reports/py-bandit.bandit.json` \|
		\| `DEFECTDOJO_DC_GRADLE_REPORTS` \| path to Dependency Check XML reports (Gradle template) \| `dependency-check*.xml` \|
		\| `DEFECTDOJO_DC_REPORTS` \| path to Dependency Check XML reports (Maven template) \| `dependency-check*.xml` \|
		\| `DEFECTDOJO_GITLEAKS_REPORTS` \| path to Gitleaks JSON reports \| `gitleaks-report.json` \|
		\| `DEFECTDOJO_HADOLINT_REPORTS` \| path to Hadolint JSON reports \| `hadolint-json-.json reports/docker-hadolint-.native.json` \|
		\| `DEFECTDOJO_MOBSF_REPORTS` \| path to MobSF JSON reports \| `mobsf*.json` \|
		\| `DEFECTDOJO_NODEJSSCAN_REPORTS` \| path to NodeJSScan SARIF reports \| `nodejsscan-report-sarif.json` \|
		\| `DEFECTDOJO_NPMAUDIT_REPORTS` \| path to NPM Audit JSON reports \| `npm-audit*.json` \|
		\| `DEFECTDOJO_TESTSSL_REPORTS` \| path to TestSSL CSV reports \| `reports/testssl.native.csv` \|
		\| `DEFECTDOJO_TRIVY_REPORTS` \| path to Trivy JSON reports \| `trivy/.json /trivy-.json reports/docker-trivy-*.native.json reports/py-trivy.trivy.json` \|
		\| `DEFECTDOJO_TRIVY_REPORTS` \| path to Trivy JSON reports \| `trivy/.json trivy-.json reports/docker-trivy-*.native.json reports/py-trivy.trivy.json` \|
		\| `DEFECTDOJO_SONARQUBE_APPLICATION` \| your application name in Sonar \| ex: project-name \|
		\| `DEFECTDOJO_SONARQUBE_PROJECT_KEY` \| your project key in Sonar (be careful, the project key might be distinct from project-dir-project-name, sometimes Sonar adds a suffix) \| ex: project-dir-project-name or project-dir-project-name__AXjLJ76cpGZrj3BUYg10 \|
		\| `DEFECTDOJO_SONARQUBE_SINCELEAKPERIOD` \| determines if delta analysis is activated \| false \|

Original line number	Diff line number	Diff line
		@@ -65,16 +65,16 @@ Depending on the security tools you launch, and their configuration, you may hav

		\| Name \| description \| default value \|
		\|------------------------------------------\|----------------------------------------------------------------------------------------------------------------------------------------\| ----------------------------------------- \|
		\| `DEFECTDOJO_BANDIT_REPORTS` \| path to Bandit JSON reports \| `*/bandit.json reports/py-bandit.bandit.json` \|
		\| `DEFECTDOJO_DC_GRADLE_REPORTS` \| path to Dependency Check XML reports (Gradle template) \| `*/dependency-check.xml` \|
		\| `DEFECTDOJO_DC_REPORTS` \| path to Dependency Check XML reports (Maven template) \| `*/dependency-check.xml` \|
		\| `DEFECTDOJO_GITLEAKS_REPORTS` \| path to Gitleaks JSON reports \| `**/gitleaks-report.json` \|
		\| `DEFECTDOJO_HADOLINT_REPORTS` \| path to Hadolint JSON reports \| `*/hadolint-json-.json reports/docker-hadolint-*.native.json` \|
		\| `DEFECTDOJO_MOBSF_REPORTS` \| path to MobSF JSON reports \| `*/mobsf.json` \|
		\| `DEFECTDOJO_NODEJSSCAN_REPORTS` \| path to NodeJSScan SARIF reports \| `**/nodejsscan-report-sarif.json` \|
		\| `DEFECTDOJO_NPMAUDIT_REPORTS` \| path to NPM Audit JSON reports \| `*/npm-audit.json` \|
		\| `DEFECTDOJO_BANDIT_REPORTS` \| path to Bandit JSON reports \| `bandit*.json reports/py-bandit.bandit.json` \|
		\| `DEFECTDOJO_DC_GRADLE_REPORTS` \| path to Dependency Check XML reports (Gradle template) \| `dependency-check*.xml` \|
		\| `DEFECTDOJO_DC_REPORTS` \| path to Dependency Check XML reports (Maven template) \| `dependency-check*.xml` \|
		\| `DEFECTDOJO_GITLEAKS_REPORTS` \| path to Gitleaks JSON reports \| `gitleaks-report.json` \|
		\| `DEFECTDOJO_HADOLINT_REPORTS` \| path to Hadolint JSON reports \| `hadolint-json-.json reports/docker-hadolint-.native.json` \|
		\| `DEFECTDOJO_MOBSF_REPORTS` \| path to MobSF JSON reports \| `mobsf*.json` \|
		\| `DEFECTDOJO_NODEJSSCAN_REPORTS` \| path to NodeJSScan SARIF reports \| `nodejsscan-report-sarif.json` \|
		\| `DEFECTDOJO_NPMAUDIT_REPORTS` \| path to NPM Audit JSON reports \| `npm-audit*.json` \|
		\| `DEFECTDOJO_TESTSSL_REPORTS` \| path to TestSSL CSV reports \| `reports/testssl.native.csv` \|
		\| `DEFECTDOJO_TRIVY_REPORTS` \| path to Trivy JSON reports \| `trivy/.json /trivy-.json reports/docker-trivy-*.native.json reports/py-trivy.trivy.json` \|
		\| `DEFECTDOJO_TRIVY_REPORTS` \| path to Trivy JSON reports \| `trivy/.json trivy-.json reports/docker-trivy-*.native.json reports/py-trivy.trivy.json` \|
		\| `DEFECTDOJO_SONARQUBE_APPLICATION` \| your application name in Sonar \| ex: project-name \|
		\| `DEFECTDOJO_SONARQUBE_PROJECT_KEY` \| your project key in Sonar (be careful, the project key might be distinct from project-dir-project-name, sometimes Sonar adds a suffix) \| ex: project-dir-project-name or project-dir-project-name__AXjLJ76cpGZrj3BUYg10 \|
		\| `DEFECTDOJO_SONARQUBE_SINCELEAKPERIOD` \| determines if delta analysis is activated \| false \|