Google Cloud Artifact Vulnerability Scan

Google Cloud has an Artifact Registry that you can enable security scans here. Once a scan is completed, results can be pulled via API/gcloud here and exported to JSON.

File Types

DefectDojo parser accepts Google Cloud Artifact Vulnerability Scan data as a .json file.

This issue describes the way to retrieve the JSON output.

Sample Scan Data

Sample reports can be found at this GitHub repository.

Default Deduplication Hashcode Fields

By default, DefectDojo identifies duplicate Findings using these hashcode fields:

• title
• cwe
• line
• file path
• description