🎉 Add DSA vulnid

[manuel-sommer]

No description provided.

[dryrunsecurity]

DryRun Security Summary

The pull request primarily focuses on updating the settings and configuration for the DefectDojo application, including adding a new URL mapping for the "DSA" vulnerability type and updating the list of acceptable file types, which are relatively minor changes that do not introduce obvious security concerns.

Expand for full summary

Summary:

The code changes in this pull request primarily focus on updating the settings and configuration for the DefectDojo application, which is an open-source vulnerability management tool. The key changes include adding a new URL mapping for the "DSA" vulnerability type and updating the list of acceptable file types that can be uploaded to the application.

From an application security perspective, these changes are relatively minor and do not introduce any obvious security concerns. The addition of the new URL mapping for the "DSA" vulnerability type is a reasonable update to provide more context and information about the vulnerability. The update to the list of acceptable file types is also a common configuration change to control the types of files that can be uploaded to the application, which helps mitigate the risk of arbitrary file uploads.

Additionally, the code change includes an update to the SHA-256 checksum file for the settings.dist.py configuration file. While the use of checksums alone does not provide comprehensive security for configuration files, it is a common practice to ensure the integrity of the configuration file. However, it is important to review the actual changes to the settings.dist.py file to ensure that they do not introduce any security vulnerabilities or expose sensitive information.

Files Changed:

1. dojo/settings/settings.dist.py: This file has been updated to include a new URL mapping for the "DSA" vulnerability type and to update the list of acceptable file types that can be uploaded to the application.
2. dojo/settings/.settings.dist.py.sha256sum: This file has been updated to include a new SHA-256 checksum value for the settings.dist.py configuration file.

Code Analysis

We ran 9 analyzers against 2 files and 0 analyzers had findings. 9 analyzers had no findings.

Riskiness

🟢 Risk threshold not exceeded.

View PR in the DryRun Dashboard.

[mtesauro]

Approved

[github-actions]

This pull request has conflicts, please resolve those before we can evaluate the pull request.

[github-actions]

Conflicts have been resolved. A maintainer will review the pull request shortly.