Kubescape Integration with DefectDojo
Kubescape is an open-source Kubernetes security platform designed for DevSecOps practitioners that provides comprehensive risk analysis, vulnerability scanning, misconfiguration detection, and compliance assessment across IDEs, CI/CD pipelines, and live Kubernetes clusters by evaluating resources against industry frameworks including NSA-CISA, MITRE ATT&CK, and CIS Benchmarks. The platform integrates seamlessly into development workflows through CLI, Helm charts, and IDE extensions to deliver automated security scanning of clusters, YAML files, Helm charts, and container images with flexible output formats and actionable remediation guidance, enabling organizations to identify and address security issues throughout the entire development and deployment lifecycle.
Data Granularity: What Gets Imported
The following fields are captured from Kubescape results and surfaced in DefectDojo findings:
| Field | Source | Notes |
|---|---|---|
| Title | Finding name from the scan | Matched to the tool's own naming |
| Severity | Critical / High / Medium / Low / Info | Mapped from the tool's own severity scale |
| Description | Finding detail from the report | Includes what the issue is and why it matters |
| Mitigation | Remediation guidance | Where the tool provides it |
Importing Into DefectDojo
Use the DefectDojo import API to create a new Test under the relevant Engagement for your product. The request body:
{
"scan_type": "Kubescape",
"engagement": "<engagement-id>",
"file": "results.json"
}