Re-design, UI enhancements and more

Merge pull request #657 from DefectDojo/dev

1.5 Upgrade

1.3.0

ASVS Support
JIRA Fixes
Product Grading
HTML Reports
Bug Fixes

Product Grading

Added Product rating which will score an app A-F based on the criticality of the findings.

1.2.7: Merge pull request #530 from aaronweaver/master

Adding version to docker hub.

1.2.6: Merge pull request #529 from aaronweaver/master

Adding version to docker hub.

1.2.2

Bug fixes, improvement to unit tests, restructuring of settings.

Dedupe and minor bug fixes.

• Improved Deduplication logic and added a Celery task to remove dupes
• Migrated to Yarn from Bower
• Import re-order for tests

1.2.0

Added a credential manager
Scanner de-duplication / consolidation
Health dashboards for critical products
A guide on running DefectDojo in production
Added '@' mention alerts to notifications
Upgraded Django 1.8 to 1.11
Added remote database support to the setup script
Consolidated all documentation to our Read The Docs page
Added support for Qualys, Retire.JS, and the Node Security Platform
Made application settings changeable from the UI
Created the ability to assign tests so that engagements can be split between multiple people
Made the calendar toggleable between engagements and tests
Improved the engagements' interface
Overhauled notifications
Slack integration
HipChat integration
Numerous bug fixes
False positive history

Jira Support

This release includes support for Jira.

Release 1.1.2

This release includes the following:

1. Bugs fixes and improvements.
2. Docker improvements
3. Fix for Travis
4. Readme update, slack integration and docker speed improvements
5. Added Active, Verified, and tags to Reupload Scan form
6. Adds Arachni Scanner JSON upload - takes care of #101.
   Used Json rport found at http://www.arachni-scanner.com/reports/report.json for testing
7. Added tag lookup to all forms, takes care of #135. Tags are now a multiselect field, all
   tags used for same Model type will be presented as options, additionally users can add
   new tags.
8. Able to bulk update severity, active, verified, false_p, duplicate, and out of scope
   status for checked findings. Takes care of #98
9. Takes care of #62. Product now has three new fields: product_manager, team_manager, and
   technical_contact.
   These replace the fields prod_manager, manager, and tech_contact.
   The new fields are foreign keys to User objects.
   User is now extended by UserContactInfo which adds ability to store a title, phone, cell,
   twitter and github for each user.
   Fields prod_manager, manager, and tech_contact are no longer used anywhere, but left in
   Product model for backwards compatibility. They will be removed in future updates.
   References to these in the project have been replaced by new fields product_manager,
   team_manager, and technical_contact.
10. Added functionality to import Visual Code Grepper scan results.
11. Added functionality to import OWASP Dependency Check scan results.
12. Adds model Finding_Template to the API.
13. Fixed #64
14. Added functionality to import findings from a CSV file.

This update requires the following commands:

./manage.py makemigrations dojo
./manage.py migrate
./manage.py collectstatic
./manage.py migrate_product_contacts