Red Hat Integration with DefectDojo
Red Hat Satellite and Red Hat Quay are comprehensive infrastructure management solutions that enable centralized deployment, configuration, patching, and lifecycle management of Red Hat Enterprise Linux systems and other Red Hat infrastructure across physical, virtual, cloud, and edge environments from a single console. The platforms deliver predictive analytics through Red Hat Insights integration to identify systems requiring CVE updates, support disconnected and air-gapped environments through content delivery via ISO images or dedicated connected servers, and provide extensive automation capabilities for standardizing operating environments at scale while reducing total cost of ownership through improved system-to-administrator ratios and streamlined patch management aligned with PCI-DSS, NIST, and other regulatory compliance standards.
Data Granularity: What Gets Imported
The following fields are captured from Red Hat results and surfaced in DefectDojo findings:
| Field | Source | Notes |
|---|---|---|
| Title | Finding name from the scan | Matched to the tool's own naming |
| Severity | Critical / High / Medium / Low / Info | Mapped from the tool's own severity scale |
| Description | Finding detail from the report | Includes what the issue is and why it matters |
| Mitigation | Remediation guidance | Where the tool provides it |
Importing Into DefectDojo
Use the DefectDojo import API to create a new Test under the relevant Engagement for your product. The request body:
{
"scan_type": "Red Hat",
"engagement": "<engagement-id>",
"file": "results.json"
}