Bulk Edit: Add note when pushing finding to jira

[Maffooch]

When attempting to use bulk edit to add notes while also pushing changes to jira, the notes are not pushed as well. This PR will add an additional step to the push_to_jira logic to also consider the new note added by bulk editt

[sc-6732]

[dryrunsecurity]

DryRun Security Summary

The pull request changes the finding module of the DefectDojo application, providing a wide range of functionality for managing findings, including listing, viewing, editing, deleting, handling duplicates, integrating with external tools, managing notes, and enforcing permissions and authorization, with a focus on providing a secure and comprehensive platform for managing application vulnerabilities.

Expand for full summary

Summary:

The code changes in this pull request are related to the finding module of the DefectDojo application, which is an open-source application vulnerability management and security orchestration platform. The changes provide a wide range of functionality for managing findings, including listing, viewing, editing, and deleting findings, as well as performing bulk operations on findings. The code also includes features for handling duplicate findings, integrating with JIRA and GitHub, managing notes, and enforcing permissions and authorization.

From a security perspective, the code appears to be well-designed and implemented, with a focus on providing a secure and comprehensive platform for managing application vulnerabilities. The use of a custom authorization system to control user access to functionality is a particularly important security feature, as it helps to ensure that users can only perform actions they are authorized to perform. Additionally, the integration with external tools like JIRA and GitHub can help to streamline the vulnerability management process and improve overall security posture.

Files Changed:

• dojo/finding/views.py: This file contains the code responsible for handling the functionality related to findings, including listing, viewing, editing, and deleting findings, as well as performing bulk operations on findings. The code also includes functionality for handling duplicate findings, integrating with JIRA and GitHub, managing notes, and enforcing permissions and authorization.

Code Analysis

We ran 7 analyzers against 1 file and 0 analyzers had findings. 7 analyzers had no findings.

Riskiness

🟢 Risk threshold not exceeded.

View PR in the DryRun Dashboard.

[mtesauro]

Approved