Docs: add supported report types index / maintenance

[paulOsinski]

• Adds 'Supported Tools' to the header along with an index page listing each supported report type. Also includes a minor Hugo template change to allow this page to render nicely.
• Adds additional content to SSO configuration to account for Docker environment variables
• Fixes broken 'Supported Tools' link
• Clarifies external tools usecase
• fix every remaining broken path (!) [thank you to https://github.com/filiph/linkcheck, I don't know why I didn't use this sooner]

[sc-10088]
[sc-10089]
[sc-10156]
[sc-10438]

[dryrunsecurity]

DryRun Security Summary

DefectDojo documentation repository updates revealed multiple security observations, including URL exposures, potential information disclosure, and configuration details that could aid security assessments.

Expand for full summary

DefectDojo documentation repository received multiple updates across various files, primarily focusing on documentation link corrections, formatting improvements, and content clarifications. Multiple security observations were identified across the patches.

Security Findings:

1. URL Exposure: Several patches revealed internal URLs and development endpoints, including localhost configurations and API routes (e.g., https://cloud.defectdojo.com/accounts/, http://localhost:8080)
2. Potential Information Disclosure: Documentation patches exposed details about authentication methods, cloud management interfaces, and system configuration mechanics
3. Webhook Security Considerations: Experimental webhook features were noted with potential unvetted security implementations
4. Local Development URL Risks: Some examples used unencrypted http:// URLs, indicating potential insecure communication protocols
5. Sensitive Configuration Details: Some patches revealed system configuration variables and performance tuning parameters

While no direct code-level vulnerabilities were introduced, the documentation updates provide insights into DefectDojo's internal structures and configuration methods that could be valuable for potential security assessments.

View PR in the DryRun Dashboard.

[mtesauro]

Approved

[dogboat]

"map" replaced with "set" elsewhere below -- does this one need to change as well?

[paulOsinski]

I am not actually sure what word is most accurate, map or set?

[github-actions]

This pull request has conflicts, please resolve those before we can evaluate the pull request.

[github-actions]

Conflicts have been resolved. A maintainer will review the pull request shortly.