{"action":"opened","issue":{"url":"https://api.github.com/repos/DefectDojo/django-DefectDojo/issues/638","repository_url":"https://api.github.com/repos/DefectDojo/django-DefectDojo","labels_url":"https://api.github.com/repos/DefectDojo/django-DefectDojo/issues/638/labels{/name}","comments_url":"https://api.github.com/repos/DefectDojo/django-DefectDojo/issues/638/comments","events_url":"https://api.github.com/repos/DefectDojo/django-DefectDojo/issues/638/events","html_url":"https://github.com/DefectDojo/django-DefectDojo/issues/638","id":336351939,"node_id":"MDU6SXNzdWUzMzYzNTE5Mzk=","number":638,"title":"Veracode Scan results do not include line, function, and sourcefile","user":{"login":"jimminycrickett","id":6036513,"node_id":"MDQ6VXNlcjYwMzY1MTM=","avatar_url":"https://avatars0.githubusercontent.com/u/6036513?v=4","gravatar_id":"","url":"https://api.github.com/users/jimminycrickett","html_url":"https://github.com/jimminycrickett","followers_url":"https://api.github.com/users/jimminycrickett/followers","following_url":"https://api.github.com/users/jimminycrickett/following{/other_user}","gists_url":"https://api.github.com/users/jimminycrickett/gists{/gist_id}","starred_url":"https://api.github.com/users/jimminycrickett/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jimminycrickett/subscriptions","organizations_url":"https://api.github.com/users/jimminycrickett/orgs","repos_url":"https://api.github.com/users/jimminycrickett/repos","events_url":"https://api.github.com/users/jimminycrickett/events{/privacy}","received_events_url":"https://api.github.com/users/jimminycrickett/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-06-27T19:08:21Z","updated_at":"2018-06-27T19:08:21Z","closed_at":null,"author_association":"NONE","body":"Please use the following template when submitting issues:\r\n\r\n## Issue Template\r\n\r\n### Issue Type \r\n- [X] Bug\r\n- [ ] Enhancement\r\n\r\n### Description\r\nWhile the Veracode scan parser.py _does_ call out the sourcefile, function, and line number values, these aren't requested in  'django-DefectDojo/dojo/test/views.py' on lines 490-502 and are not associated with the completed finding. Loosing this information hampers the developers ability to identify where the vulnerability is. The information brought out of a veracode scan is essentially \"there's an XSS bug in your code...somewhere...good luck\". \r\n## If the issue is a bug, please also include the following:\r\n\r\n### Operating System \r\nPlease include the version number (ex: Ubuntu 16.04)\r\nN/A\r\n### Install\r\n\r\n- [ ] setup.bash\r\n- [X] docker\r\n\r\n### DefectDojo Version\r\n1.3.0\r\n\r\n### Steps to Reproduce\r\nImport a Veracode \"detailedreport.do\" xml scan. Look at resultant finding for line number, source file, and vulnerable function name\r\n### Sample Scan File (if applicable)\r\n\r\n### Screenshots (optional)\r\n\r\n### Console Logs (optional)\r\n\r\n"}}
{"actor":{"display_login":"jimminycrickett"}}