AnchoreCTL Policies Report Parser error

[Sopuru]

AnchoreCTL Policies Report Parser
I downloaded policy report via anchorectl using the recommended -o json flag, tried importing that into DefectDojo but it came back with an error. Can this parser be updated to accepted policy generate via anchorectl?

See attached example of the data used and error message i got:

Sample File
Sample Policy report attached

[valentijnscholten]

That attached report format doesn't match the format expected by the parser: https://docs.defectdojo.com/en/connecting_your_tools/parsers/file/anchorectl_policies/

Has the format changed, or is the attached report from another anchor tool maybe? cc @fhoeborn

There are other Anchore formats, but none of them look like the attached report:

• https://docs.defectdojo.com/en/connecting_your_tools/parsers/file/anchore_enterprise/
• https://docs.defectdojo.com/en/connecting_your_tools/parsers/file/anchore_engine/
• https://docs.defectdojo.com/en/connecting_your_tools/parsers/file/anchore_grype/
• https://docs.defectdojo.com/en/connecting_your_tools/parsers/file/anchorectl_vulns/

I raised #12375 to improve the error handling/feedback to the user.

[fhoeborn]

I haven't been in touch with Anchore / AnchoreCTL since a while - looking at the release notes of anchoreCTL there have been some releases in between (with major jumps) - so I guess the format changed