Need to give a default severity value during import through API

[sannki]

Problem description

While uploading a Gitleaks file during import under an engagement, we've found that all the findings are given a High severity.
We want to give a specify default value here, for ex. Low, Medium or Info during the import as for almost every findings it is showing High as default.

We also found a minimum_severity feature as part of the payload during payload, but it only ignores the findings with severity lower than the value we give.

To make changes for all the findings, we would've to make those number of request to the finding API endpoint.
We want to make such change over a single request if it can be done.

Is there any way we can give a default enum value for all the findings during the import so that all the findings under it show that exact value as severity?

Screenshot displaying high severity as default:

[valentijnscholten]

Currently it's possible to override the Active and Verified fields during an import, but not the Serverity. It's possible to use Bulk Edit in the UI to change all findings at once to another Severity. I am not sure if it's a very common use case to override the Severity during import. I would maybe more think about adding a "bulk edit" feature to the API to edit many findings at once. That would be useful in many more scenario's. What do you think?

For now it would indeed to be a script that performs one API call per finding to set the desired Severity. Maybe that's doable anyway because you're already running a script to perform the upload to Defect Dojo?

[sannki]

Hi @valentijnscholten ,

First of all thanks for a quick response.

We are seeking a way to override the Severity during the import process via the API. While we explored the bulk-edit functionality available in the UI, it cannot be automated through our scripts. In our use case, some repositories within a GitHub organization contain a significant number of leaked secrets, resulting in a large volume of findings. Making individual API calls for each finding creates a substantial load on our infrastructure. Although we are currently proceeding with this approach as a temporary solution, it would be highly beneficial in the future to support bulk-editing of Severity in a single API call.

[valentijnscholten]

Defect Dojo Pro will get a rules engine where things like bulk editing of Severity can be automated. In Open Source it's possible via the API.