No Finding Founds from Sonatype LifeCycle (SCA - IQ Server)

[tanatipmfec]

Hi All,

We have tried to test import report which are JSON format and CycloneDX format from Sonatype LifeCycle (SCA - IQ Server) to Defect Dojo and we found issues as below details

• JSON format can import but get only new engagement without any findings
• CycloneDX format got error from null information and we also tried to adding description but still got same errors
  

Not sure that anyone got similar issues like this or has any recommendations for this one?

[manuel-sommer]

Hi @tanatipmfec could you please open up an issue with a sample which produces the error. Maybe the parser has to be fixed. Then, we can reproduce this.

[tanatipmfec]

Hi @manuel-sommer

We can import scan result from Sonatype LifeCycle to Defect Dojo but they required JSON Format with RAW data type from solution itself not standard JSON format.