GitGuardian Ggshield Integration with DefectDojo
GitGuardian ggshield is an open-source command-line interface tool that detects and validates over 500 types of hardcoded secrets including API keys, passwords, tokens, certificates, and database credentials in source code, Docker images, CI/CD logs, and other text content by integrating GitGuardian's secrets detection engine with pattern matching and contextual analysis. The tool operates as a pre-commit hook, pre-push hook, or within CI/CD pipelines through seamless integration with GitHub Actions, GitLab CI, and other platforms to prevent credential leaks before code reaches remote repositories, enabling developers to proactively identify and remediate exposed secrets throughout the software development lifecycle while maintaining a stateless architecture that ensures scanned secrets are not stored externally.
Data Granularity: What Gets Imported
The following fields are captured from GitGuardian Ggshield results and surfaced in DefectDojo findings:
| Field | Source | Notes |
|---|---|---|
| Title | Finding name from the scan | Matched to the tool's own naming |
| Severity | Critical / High / Medium / Low / Info | Mapped from the tool's own severity scale |
| Description | Finding detail from the report | Includes what the issue is and why it matters |
| Mitigation | Remediation guidance | Where the tool provides it |
Importing Into DefectDojo
Use the DefectDojo import API to create a new Test under the relevant Engagement for your product. The request body:
{
"scan_type": "GitGuardian Ggshield",
"engagement": "<engagement-id>",
"file": "results.json"
}