Meterian Integration with DefectDojo
Meterian is a software composition analysis (SCA) platform that automatically identifies and analyzes open-source components, dependencies, and third-party libraries within codebases and container images to detect security vulnerabilities, license compliance risks, and outdated dependencies across over 30 programming languages and package ecosystems throughout the software development lifecycle. The platform integrates seamlessly into CI/CD pipelines and provides comprehensive reporting with Software Bill of Materials (SBOM) generation, dependency tree visualization, automated remediation guidance, and license risk analysis to help development teams proactively manage supply chain security, maintain compliance with regulatory standards, and reduce security debt while preserving development velocity.
Data Granularity: What Gets Imported
The following fields are captured from Meterian results and surfaced in DefectDojo findings:
| Field | Source | Notes |
|---|---|---|
| Title | Finding name from the scan | Matched to the tool's own naming |
| Severity | Critical / High / Medium / Low / Info | Mapped from the tool's own severity scale |
| Description | Finding detail from the report | Includes what the issue is and why it matters |
| Mitigation | Remediation guidance | Where the tool provides it |
Importing Into DefectDojo
Use the DefectDojo import API to create a new Test under the relevant Engagement for your product. The request body:
{
"scan_type": "Meterian",
"engagement": "<engagement-id>",
"file": "results.json"
}