Import Github APi results to Dojo

[vyastj]

Hello

I want to import Github's API results to defect dojo having vulnerability data of around 2000 repositories. This doesn't seem to be possible. Any suggestions?

[damiencarol]

A parser exists today for Github API. you vulnerabilities are sec advisory?

[vyastj]

The vulnerability data is from Github's Depandabot Security alerts in form of json. I have got that using Github's Graphql API

[damiencarol]

so it should be compatible with one of the parser.

[vyastj]

Yes, I am able to parse results for limited data (1-2 repositories), but when it comes to importing data to Dojo for the whole organization, it doesnt work

[damiencarol]

could you discuss it in Slack? better to discuss. => https://owasp-slack.herokuapp.com/

[vyastj]

yep, sure