Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Help me how to push report from blackduck to DefectDojo #11614

Open
aquangvm opened this issue Jan 22, 2025 · 3 comments
Open

Help me how to push report from blackduck to DefectDojo #11614

aquangvm opened this issue Jan 22, 2025 · 3 comments

Comments

@aquangvm
Copy link

when i integrate using BlackDuck API i followed defectdojo documentation. i get error message
An exception error occurred during the report import: ('Unhandled HTTP response', <Response [403]>)
even though my api is correct and provides enough read and write permissions on blackduck
and for Scan type is
Blackduck Component Risk - Upload the zip file containing the security.csv and files.csv.
Blackduck Hub Scan - Upload the zip file containing the security.csv and components.csv for Security and License risks.

I don't know how to gene report from blackduck to have the correct format of 2 files to upload to defectdojo
please help me!!

@valentijnscholten
Copy link
Member

I don't have access to a Blackduck API. But it sounds like Black Duck refuses access for your user/token. Can you verify that the credentials are correct using something like curl: https://documentation.blackduck.com/bundle/bd-hub/page/SDK/Using_the_Hub_SDK.html

@aquangvm
Copy link
Author

aquangvm commented Jan 22, 2025

I don't have access to a Blackduck API. But it sounds like Black Duck refuses access for your user/token. Can you verify that the credentials are correct using something like curl: https://documentation.blackduck.com/bundle/bd-hub/page/SDK/Using_the_Hub_SDK.html

@valentijnscholten
i did as in the link you sent. to get the result. and moreover my token is created from admin account.
but the result is still the same. still getting 403 from defectdojo

@aquangvm
Copy link
Author

aquangvm commented Jan 22, 2025

if i want to push scan by scan type is
Blackduck Component Risk - Upload the zip file containing the security.csv and files.csv.
Blackduck Hub Scan - Upload the zip file containing the security.csv and components.csv for Security and License risks.

then how i have to generate report from blackduck.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants