actions-marketplace-validations/defectdojo import report

a github action that sends scan reports to a DefectDojo instance

View on GitHub

Trust Signals

Scorecard Score
not yet scored
Maintenance Recency
Activelast commit Feb 27, 2026
License
MIT

Pinned Snippet

workflow.ymlSHA-pinned
uses: actions-marketplace-validations/portswigger-cloud_defectdojo-import-scan@669d22c05e3e7891b591a4bcdd81ddf2e9848a70 # no releases — HEAD as of 2026-07-10

tags can be moved; commit SHAs can't. why a SHA?

namedescriptionrequireddefault
defectdojo-urlthe url of your defectdojo instanceyes
defectdojo-usernamethe username to login into your defectdojo instanceyes
defectdojo-passwordthe password to login into your defectdojo instanceyes
defectdojo-product-typethe defectdojo product type that the scan result relates toyes
defectdojo-productthe defectdojo product that the scan result relates toyes
defectdojo-environment-typethe defectdojo environment type that the scan result relates toyes
defectdojo-scan-typethe defectdojo scan type that the scan result relates toyes
defectdojo-engagement-namethe defectdojo engagement name that the scan result relates toyes
scan-results-file-namethe file name of the scan result to be uploaded are storedyes
client-certificate-file-paththe file path for a client side certificate if requiredno
client-key-file-paththe file path for a client side private key if requiredno

no outputs