Skip to content

Conversation

@valentijnscholten
Copy link
Member

@valentijnscholten valentijnscholten commented Mar 7, 2025

Small docs update responding to #11945

@github-actions github-actions bot added the docs label Mar 7, 2025
@dryrunsecurity
Copy link

dryrunsecurity bot commented Mar 7, 2025

DryRun Security Summary

A pull request enhances SCM documentation by clarifying URL pattern recognition and type configuration, while also addressing a potential security finding related to information disclosure through custom field configuration.

Expand for full summary

The PR updates documentation for Source Code Management (SCM) type detection, clarifying URL pattern recognition and SCM type configuration. Security findings include: 1) Potential information disclosure through revealing the "scm-type" custom field configuration mechanism, which could provide insights into application configuration details.

View PR in the DryRun Dashboard.

@valentijnscholten valentijnscholten changed the base branch from master to bugfix March 7, 2025 08:14
@valentijnscholten valentijnscholten changed the title source-code-repositories: clarify default scm type Mar 7, 2025
Copy link
Contributor

@mtesauro mtesauro left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved

@mtesauro mtesauro merged commit e9a9ae0 into bugfix Mar 11, 2025
145 of 146 checks passed
valentijnscholten added a commit to valentijnscholten/django-DefectDojo that referenced this pull request Mar 15, 2025
iago-r pushed a commit to iago-r/django-DefectDojo that referenced this pull request Mar 27, 2025
@valentijnscholten valentijnscholten deleted the valentijnscholten-patch-4 branch October 7, 2025 07:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

6 participants