portswigger-cloud/defectdojo active findings
A GitHub Action that checks if there are active findings for a product in DefectDojo
View on GitHubTrust Signals
- Scorecard Score
- Scorecard 2–4scored Jul 6, 2026
- Maintenance Recency
- Activelast commit Feb 27, 2026
- License
- MIT
Pinned Snippet
uses: portswigger-cloud/defectdojo-active-findings@4c99a43fd3db519354071bfeeb4bff610455aa79 # v1.0.4tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| defectdojo-url | the url of your defectdojo instance | yes | — |
| defectdojo-username | the username to login into your defectdojo instance | yes | — |
| defectdojo-password | the password to login into your defectdojo instance | yes | — |
| defectdojo-product | the defectdojo product that the scan result relates to | yes | — |
| client-certificate-file-path | the file path for a client side certificate if required | no | — |
| client-key-file-path | the file path for a client side private key if required | no | — |
Outputs
| name | description |
|---|---|
| total | the total number of active findings registered against this product in DefectDojo |
| critical | the number of active critical severity findings registered against this product in DefectDojo |
| high | the number of active high severity findings registered against this product in DefectDojo |
| medium | the number of active medium severity findings registered against this product in DefectDojo |
| low | the number of active low severity findings registered against this product in DefectDojo |
| info | the number of active info severity findings registered against this product in DefectDojo |