Sysdig Integration with DefectDojo
Sysdig is a Cloud-Native Application Protection Platform (CNAPP) that provides comprehensive runtime security, vulnerability management, cloud security posture management (CSPM), cloud infrastructure entitlements management (CIEM), and threat detection and response capabilities across containers, Kubernetes, and multi-cloud environments by leveraging real-time runtime insights from the open-source Falco threat detection engine. The platform combines AI-powered security analysis through Sysdig Sage, automated Cloud Attack Graph visualization to reveal hidden attack paths, and eBPF-based monitoring to prioritize vulnerabilities based on what's actually running, enabling security teams to detect cloud threats in real time, reduce alert noise, and accelerate incident response while maintaining continuous compliance aligned with regulatory standards throughout the application lifecycle from development to production.
Data Granularity: What Gets Imported
The following fields are captured from Sysdig results and surfaced in DefectDojo findings:
| Field | Source | Notes |
|---|---|---|
| Title | Finding name from the scan | Matched to the tool's own naming |
| Severity | Critical / High / Medium / Low / Info | Mapped from the tool's own severity scale |
| Description | Finding detail from the report | Includes what the issue is and why it matters |
| Mitigation | Remediation guidance | Where the tool provides it |
Importing Into DefectDojo
Use the DefectDojo import API to create a new Test under the relevant Engagement for your product. The request body:
{
"scan_type": "Sysdig",
"engagement": "<engagement-id>",
"file": "results.json"
}