defectdojo-SKILL.md

Automate DefectDojo vulnerability dashboard provisioning via the REST API.

Updated Apr 20, 2026
One-click install
npx skills add https://github.com/DCx7C5/ai-marketplace --skill defectdojo-skill-md
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: defectdojo-SKILL.md
Source: https://github.com/DCx7C5/ai-marketplace/tree/main/skills/vulnerabilities/management/defectdojo
Command: npx skills add https://github.com/DCx7C5/ai-marketplace --skill defectdojo-skill-md

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires requests, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill automates deploying and operating a centralized DefectDojo vulnerability dashboard, aggregating findings from multiple scanners, deduplicating results, and surfacing actionable metrics for security teams.

Core Features & Use Cases

  • Centralized dashboard for vulnerability findings with deduplication, scoring, and executive metrics.
  • CI/CD ready: automates provisioning of product, engagement, and scanner imports, and integrates with Jira for ticketing workflows.
  • Use Case: A security team links their scanners, runs a CI pipeline to import results, and tracks remediation status in DefectDojo and Jira.

Quick Start

Set up DefectDojo resources and run the dashboard scripts to generate the vulnerability metrics for your fleet.

Frequently Asked Questions about defectdojo-SKILL.md

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I build a centralized vulnerability dashboard with DefectDojo?

Build a centralized vulnerability dashboard with DefectDojo by using scripts to interface with the REST API, automating the provisioning of products and engagements to aggregate scanner findings and generate metrics.

Can I automate Jira ticketing workflows from DefectDojo scanner findings?

Yes, you can automate Jira ticketing workflows from DefectDojo scanner findings by linking your scanners and running script-driven provisioning to import results and track remediation status across both platforms.

What do I need to set up before automating DefectDojo vulnerability management?

Before automating DefectDojo vulnerability management, you need DefectDojo REST API access, a valid API key, and the Python requests library to run the dashboard scripts for product and engagement metrics.

How does DefectDojo handle duplicated vulnerability findings from multiple scanners?

DefectDojo handles duplicated vulnerability findings from multiple scanners by applying deduplication and scoring logic within the centralized dashboard, surfacing actionable metrics for security teams.

Is DefectDojo dashboard automation suitable for CI/CD pipeline integration?

Yes, DefectDojo dashboard automation is suitable for CI/CD pipeline integration, allowing security teams to automate scanner imports and track vulnerability remediation status continuously.

What is the best way to track remediation status across multiple products in DefectDojo?

The best way to track remediation status across multiple products in DefectDojo is by automating product and engagement provisioning through the REST API to coordinate finding metrics and Jira integration.