Commit b93da821 authored by Cédric OLIVIER's avatar Cédric OLIVIER
Browse files

docs: fix defectdojo links

parent 794ab76b
Loading
Loading
Loading
Loading
+4 −4
Original line number Diff line number Diff line
@@ -245,7 +245,7 @@ By default, this template enables [GitLab managed Terraform State](https://docs.

[As mentionned in GitLab's documentation](https://docs.gitlab.com/user/infrastructure/iac/terraform_state/#initialize-a-terraform-state-as-a-backend-by-using-gitlab-cicd),
that requires that your Terraform scripts declare the (unconfigured)
Terraform [HTTP backend](https://developer.hashicorp.com/terraform/language/settings/backends/http),
Terraform [HTTP backend](https://opentofu.org/docs/language/settings/backends/http/),
and the template will do the necessary to configure it automatically.

All you have to do if you want it is to add the following in one of your `.tf` files:
@@ -582,7 +582,7 @@ In addition to a textual report in the console, this job produces the following
| Report         | Format                                                                       | Usage             |
| -------------- | ---------------------------------------------------------------------------- | ----------------- |
| `$TF_PROJECT_DIR/reports/tfsec.xunit.xml` | [xUnit](https://en.wikipedia.org/wiki/XUnit) test report(s) | [GitLab integration](https://docs.gitlab.com/ci/yaml/artifacts_reports/#artifactsreportsjunit) |
| `$TF_PROJECT_DIR/reports/tfsec.native.json` | tfsec JSON | [DefectDojo integration](https://docs.defectdojo.com/en/connecting_your_tools/parsers/file/tfsec/)<br/>_This report is generated only if DefectDojo template is detected_ |
| `$TF_PROJECT_DIR/reports/tfsec.native.json` | tfsec JSON | [DefectDojo integration](https://docs.defectdojo.com/supported_tools/parsers/file/tfsec/)<br/>_This report is generated only if DefectDojo template is detected_ |

### `tf-trivy` job

@@ -599,7 +599,7 @@ In addition to a textual report in the console, this job produces the following
| Report         | Format                                                                       | Usage             |
| -------------- | ---------------------------------------------------------------------------- | ----------------- |
| `$TF_PROJECT_DIR/reports/tf-trivy.codeclimate.json` | [Code Climate](https://github.com/aquasecurity/trivy/blob/main/contrib/gitlab-codequality.tpl) | [GitLab integration](https://docs.gitlab.com/ci/yaml/artifacts_reports/#artifactsreportscodequality) |
| `$TF_PROJECT_DIR/reports/tf-trivy.trivy.json` | Trivy [JSON](https://trivy.dev/docs/latest/configuration/reporting/#json) report | [DefectDojo integration](https://docs.defectdojo.com/en/connecting_your_tools/parsers/file/trivy//)<br/>_This report is generated only if DefectDojo template is detected_ |
| `$TF_PROJECT_DIR/reports/tf-trivy.trivy.json` | Trivy [JSON](https://trivy.dev/docs/latest/configuration/reporting/#json) report | [DefectDojo integration](https://docs.defectdojo.com/supported_tools/parsers/file/trivy/)<br/>_This report is generated only if DefectDojo template is detected_ |

### `tf-checkov` job

@@ -621,7 +621,7 @@ In addition to a textual report in the console, this job produces the following
| Report         | Format                                                                       | Usage             |
| -------------- | ---------------------------------------------------------------------------- | ----------------- |
| `$TF_PROJECT_DIR/reports/checkov.xunit.xml` | [JUnit XML](https://www.checkov.io/8.Outputs/JUnit%20XML.html) | [GitLab integration](https://docs.gitlab.com/ci/yaml/artifacts_reports/#artifactsreportsjunit) |
| `$TF_PROJECT_DIR/reports/checkov.native.json` | checkov JSON | [DefectDojo integration](https://docs.defectdojo.com/en/connecting_your_tools/parsers/file/checkov/)<br/>_This report is generated only if DefectDojo template is detected_ |
| `$TF_PROJECT_DIR/reports/checkov.native.json` | checkov JSON | [DefectDojo integration](https://docs.defectdojo.com/supported_tools/parsers/file/checkov/)<br/>_This report is generated only if DefectDojo template is detected_ |

You can skip checkov specific check adding following comment in code :