Automate vulnerability management tasks in DefectDojo via MCP tools.
npx skills add https://github.com/julianobarbosa/claude-code-skills --skill defectdojo
Please help me install this Agent Skill. Skill: defectdojo Source: https://github.com/julianobarbosa/claude-code-skills/tree/main/skills/defectdojo-skill Command: npx skills add https://github.com/julianobarbosa/claude-code-skills --skill defectdojo
This Skill provides MCP tools for DefectDojo API operations, enabling automated vulnerability management workflows and integration with CI/CD pipelines.
Use the MCP tool defectdojo_list_findings to search for critical findings in a product.
High-intent search queries and answers about installing and using this skill.
Vulnerability management in DefectDojo is automated using MCP tools that read and write findings, engagements, and tests directly via API. The defectdojo_list_findings tool searches for critical vulnerabilities, while import tools ingest CI/CD scan data and link results to engagements for centralized tracking.
Yes. DefectDojo MCP tools support bidirectional CI/CD integration to import scans and configure automated imports, plus JIRA workflows for syncing findings. The Skill provides 12 tools covering read/write operations across products, engagements, tests, and findings.
DefectDojo enforces product, engagement, test, and finding data models with markdown and JSON response formats. Environment variables and deployment configurations manage API authentication and endpoint setup for API interactions.
Use MCP tools to query findings by product and engagement, manage test results, and process scan data. The tool suite supports filtering, searching critical findings, and updating finding statuses across your product portfolio.
Manual uploads require direct submission, while CI/CD imports automate scan ingestion from pipelines and link findings to CI events. Automated imports reduce latency, enforce consistency, and integrate vulnerability data with deployment workflows.
Yes. Environment variables configure API endpoint URLs, authentication credentials, and deployment settings. The Skill enforces these configurations alongside product and engagement data models for secure, validated API access.
DCx7C5Automate DefectDojo vulnerability dashboard provisioning via the REST API.
webrix-aiCorrelate CVE scan results with infrastructure to prioritize patching and create Jira tickets.
kivo360Mitigate security vulnerabilities in CI/CD pipelines using OWASP Top 10 and SAST/DAST workflows.
oborchersDeploy managed cloud security services for threat detection and compliance scanning.
