Blackduck Hub

2 options:

• Import the zip file as can be created by Blackduck export. The zip file must contain the security.csv and files.csv in order to produce findings that bear file locations information.
• Import a single security.csv file. Findings will not have any file location information.

Sample Scan Data

Sample Blackduck Hub scans can be found here.

Default Deduplication Hashcode Fields

By default, DefectDojo identifies duplicate Findings using these hashcode fields:

• title
• vulnerability ids
• component name
• component version