portswigger-cloud/defectdojo import report
a github action that sends scan reports to a DefectDojo instance
View on GitHubTrust Signals
- Scorecard Score
- Scorecard 2–4scored Jul 6, 2026
- Maintenance Recency
- Activelast commit Feb 27, 2026
- License
- MIT
Pinned Snippet
uses: portswigger-cloud/defectdojo-import-scan@669d22c05e3e7891b591a4bcdd81ddf2e9848a70 # v1.0.2tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| defectdojo-url | the url of your defectdojo instance | yes | — |
| defectdojo-username | the username to login into your defectdojo instance | yes | — |
| defectdojo-password | the password to login into your defectdojo instance | yes | — |
| defectdojo-product-type | the defectdojo product type that the scan result relates to | yes | — |
| defectdojo-product | the defectdojo product that the scan result relates to | yes | — |
| defectdojo-environment-type | the defectdojo environment type that the scan result relates to | yes | — |
| defectdojo-scan-type | the defectdojo scan type that the scan result relates to | yes | — |
| defectdojo-engagement-name | the defectdojo engagement name that the scan result relates to | yes | — |
| scan-results-file-name | the file name of the scan result to be uploaded are stored | yes | — |
| client-certificate-file-path | the file path for a client side certificate if required | no | — |
| client-key-file-path | the file path for a client side private key if required | no | — |
Outputs
no outputs