CI/CD

SECURITY ON EVERY COMMIT, NOT EVERY QUARTER.

Push findings from any pipeline straight into DefectDojo over the REST API.

DefectDojo parses results from every stage of your CI/CD pipeline into one data model, so scans triggered by a build are just as comparable as ones run by hand. Wire in one pipeline job or five; the findings land in the same deduplicated queue. Ingest results straight from the pipeline, so every build leaves a test record behind.

Browse all integrations

SECURITY ON EVERY COMMIT, NOT EVERY QUARTER.

Every CI/CD Tool We Parse

GitLab SAST

GitLab Dependency Scanning

GitLab Secret Detection

GitLab Container Scanning

GitLab DAST

GitHub Vulnerability

SARIF

Generic Findings Import

Get your backlog to zero.