Add Seal Security CSV parser by amita-seal · Pull Request #15592 · DefectDojo/django-DefectDojo

amita-seal · 2026-08-09T13:20:39Z

Description

Adds a parser for the CSV export of the Seal Security CLI, produced by seal scan --csv <file>. Seal backports security fixes into "sealed" versions of open-source packages, so a vulnerable dependency can be remediated without a major-version upgrade.

The export has one row per vulnerable package, with a pipe-separated list of vulnerability identifiers:

Library,Version,Ecosystem,Vulnerabilities,Can Seal,Sealed Version
lodash,4.17.15,NPM,CVE-2021-23337|CVE-2020-8203,TRUE,4.17.15-sp1

Each identifier becomes its own Finding, so that each one can be triaged and risk-accepted independently. Identifiers are not always CVEs: Seal reports the most specific identifier it has, falling back to a GitHub advisory or Snyk identifier when no CVE is assigned.

Two properties of the export are worth calling out, both covered by test files:

A scan without findings leaves the export file empty rather than writing a header, so a zero-byte file is a valid report that yields no findings.
A vulnerability that reaches the project through an embedded (shaded) package is reported as CVE-2021-1234(via shaded lib1&lib2). The identifier is used for the Finding, and the embedding packages are named in the description. The Finding's component stays the package that is actually present in the project.

When a sealed version is available, fix_available is set and the mitigation names the version to update to.

Severity

Not every Seal report carries severity, so the parser supports both shapes of the export.
When a Score column is present its value is mapped onto the standard severity bands;
when it is absent there is nothing in the report to derive a severity from, and findings
are imported as Medium. Either export imports cleanly, with no configuration and no
scan-type variant.

For that reason severity is deliberately left out of the deduplication hashcode. A
project can import a report without a score today and one with a score tomorrow, and
including severity would fork every existing finding into a duplicate at that point.

Test results

$ ./run-unittest.sh --test-case unittests.tools.test_seal_parser.TestSealParser
Ran 6 tests in 0.020s
OK

$ ./run-unittest.sh --test-case unittests.test_parsers
Ran 2 tests in 0.513s
OK

$ ./run-unittest.sh --test-case unittests.test_factory
$ ./run-unittest.sh --test-case unittests.test_deduplication_logic
Ran 89 tests in 17.577s
OK (skipped=2)

Ruff clean against the pinned ruff==0.16.1.

Documentation

docs/content/supported_tools/parsers/file/seal.md added.

Checklist

Make sure to rebase your PR against the very latest dev.
Features/Changes should be submitted against the dev.
Give a meaningful name to your PR, as it may end up being used in the release notes.
Your code is Ruff compliant (see ruff.toml).
Your code is python 3.13 compliant.
If this is a new feature and not a bug fix, you've included the proper documentation in the docs at https://github.com/DefectDojo/django-DefectDojo/tree/dev/docs as part of this PR.
Add applicable tests to the unit tests.
Add the proper label to categorize your PR.

🤖 Generated with Claude Code

Adds a parser for the CSV export of the Seal Security CLI, produced by `seal scan --csv <file>`. The export has one row per vulnerable package, with a pipe-separated list of vulnerability identifiers. Each identifier becomes its own Finding so that it can be triaged independently. Identifiers are not always CVEs: Seal reports the most specific identifier it has, falling back to a GitHub advisory or Snyk identifier when no CVE is assigned. Two properties of the export are worth noting: - A scan without findings leaves the file empty rather than writing a header, so an empty file is a valid report and yields no findings. - A vulnerability reaching the project through an embedded (shaded) package is reported as `CVE-2021-1234(via shaded lib1&lib2)`. The identifier is used for the Finding and the embedding packages are named in the description. The export has no severity column, so findings default to Medium. The parser reads an optional Score column when present and maps it onto the standard severity bands. Severity is deliberately left out of the deduplication hashcode so that findings imported before and after a report gains that column are not treated as distinct. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

valentijnscholten

Clean, well-structured parser with good coverage (empty/header-only, one/many vulns, shaded, score column). Excluding severity from the dedupe hashcode is the right call and nicely justified. One minor, non-blocking consistency nit:

dojo/tools/seal/parser.py — fix_available can disagree with the mitigation text

fix_available=can_seal is derived only from the Can Seal column, but the sealed-version mitigation is used only when can_seal and sealed_version:

can_seal = (row.get("Can Seal") or "").strip().upper() == "TRUE"
...
if can_seal and sealed_version:
    mitigation = SEALED_MITIGATION_TEMPLATE.format(...)
else:
    mitigation = NO_FIX_MITIGATION
...
finding = Finding(..., fix_available=can_seal, ...)

So a row with Can Seal=TRUE but an empty Sealed Version would yield a Finding marked fix_available=True whose mitigation reads "Seal has no sealed version for this package version yet." The sample data never hits that combination (every Can Seal=TRUE row carries a Sealed Version), so it isn't exercised by the tests — but the mitigation branch already anticipates that state, so it'd be good to keep the two consistent, e.g.:

fix_available=can_seal and bool(sealed_version),

Low severity — only matters if real Seal exports ever emit Can Seal=TRUE with a blank Sealed Version. Otherwise this looks close to merge-ready.

A row with Can Seal=TRUE but no Sealed Version yielded a finding marked fix_available while its mitigation said no sealed version exists. Derive both from the same condition.

amita-seal · 2026-08-16T08:32:53Z

Good catch, fixed in ba46da9.

Real exports can hit that combination: Can Seal reflects whether Seal is able to seal the package at all, and the sealed version is published asynchronously, so there is a window where a package is sealable with no Sealed Version yet.

Both now derive from the same condition:

has_fix = can_seal and bool(sealed_version)

used for the mitigation branch and for fix_available. Added a requests,2.19.1,...,TRUE, row to many_vulns.csv and a subtest asserting fix_available is false with the no-sealed-version mitigation, so the combination is exercised now.

Ran 6 tests in 0.021s
OK

dryrunsecurity · 2026-08-16T08:41:52Z

This pull request contains numerous critical findings where the author 'amita-seal' modified sensitive codepaths in the dojo directory without being on the allowed authors list. These unauthorized changes span across API, authorization, database migrations, models, and templates, violating configured security policies.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/api_v2/exception_handler.py (drs_ac852825)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/api_v2/exception_handler.py' matches configured sensitive codepath pattern 'dojo/api_v2/*.py' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/api_v2/serializers.py (drs_ec9882b7)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/api_v2/serializers.py' matches configured sensitive codepath pattern 'dojo/api_v2/*.py' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/authorization/api_permissions.py (drs_bdc360ef)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/authorization/api_permissions.py' matches configured sensitive codepath pattern 'dojo/authorization/*.py' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/db_migrations/0289_fileupload_title_not_unique.py (drs_34dc6fe1)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/db_migrations/0289_fileupload_title_not_unique.py' matches configured sensitive codepath pattern 'dojo/db_migrations/*.py' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/db_migrations/0290_notes_private_help_text.py (drs_40481572)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/db_migrations/0290_notes_private_help_text.py' matches configured sensitive codepath pattern 'dojo/db_migrations/*.py' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/db_migrations/0291_dojometa_location_product.py (drs_94630a2b)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/db_migrations/0291_dojometa_location_product.py' matches configured sensitive codepath pattern 'dojo/db_migrations/*.py' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/db_migrations/0292_remove_usercontactinfo_ui_use_tailwind.py (drs_cd54b2db)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/db_migrations/0292_remove_usercontactinfo_ui_use_tailwind.py' matches configured sensitive codepath pattern 'dojo/db_migrations/*.py' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/db_migrations/0293_usercontactinfo_token_expiry.py (drs_ec26003d)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/db_migrations/0293_usercontactinfo_token_expiry.py' matches configured sensitive codepath pattern 'dojo/db_migrations/*.py' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/db_migrations/0294_usercontactinfo_language.py (drs_1bfe1275)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/db_migrations/0294_usercontactinfo_language.py' matches configured sensitive codepath pattern 'dojo/db_migrations/*.py' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/db_migrations/0295_drop_unused_finding_indexes.py (drs_51904b37)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/db_migrations/0295_drop_unused_finding_indexes.py' matches configured sensitive codepath pattern 'dojo/db_migrations/*.py' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/endpoint/models.py (drs_86d0a958)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/endpoint/models.py' matches configured sensitive codepath pattern 'dojo/endpoint/*.py' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/endpoint/utils.py (drs_9bf5358c)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/endpoint/utils.py' matches configured sensitive codepath pattern 'dojo/endpoint/*.py' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/engagement/services.py (drs_b15e4c3d)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/engagement/services.py' matches configured sensitive codepath pattern 'dojo/engagement/*.py' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/finding/deduplication.py (drs_62bb7433)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/finding/deduplication.py' matches configured sensitive codepath pattern 'dojo/finding/*.py' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/finding/helper.py (drs_fe9012f2)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/finding/helper.py' matches configured sensitive codepath pattern 'dojo/finding/*.py' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/finding/models.py (drs_0f701476)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/finding/models.py' matches configured sensitive codepath pattern 'dojo/finding/*.py' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/finding/services.py (drs_dd255f2e)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/finding/services.py' matches configured sensitive codepath pattern 'dojo/finding/*.py' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/finding_group/views.py (drs_0824a4a5)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/finding_group/views.py' matches configured sensitive codepath pattern 'dojo/finding_group/*.py' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/forms.py (drs_1de75c6f)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/forms.py' matches configured sensitive codepath pattern 'dojo/forms.py' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/importers/base_importer.py (drs_1014bd49)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/importers/base_importer.py' matches configured sensitive codepath pattern 'dojo/importers/*.py' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/importers/default_importer.py (drs_8294f0ac)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/importers/default_importer.py' matches configured sensitive codepath pattern 'dojo/importers/*.py' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/importers/default_reimporter.py (drs_456acf4a)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/importers/default_reimporter.py' matches configured sensitive codepath pattern 'dojo/importers/*.py' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/importers/location_manager.py (drs_f4855931)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/importers/location_manager.py' matches configured sensitive codepath pattern 'dojo/importers/*.py' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/importers/services.py (drs_98e0fcc8)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/importers/services.py' matches configured sensitive codepath pattern 'dojo/importers/*.py' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/jira/helper.py (drs_5e5f1535)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/jira/helper.py' matches configured sensitive codepath pattern 'dojo/jira/*.py' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/jira/views.py (drs_19df9d6a)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/jira/views.py' matches configured sensitive codepath pattern 'dojo/jira/*.py' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/middleware.py (drs_f928376b)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/middleware.py' matches configured sensitive codepath pattern 'dojo/middleware.py' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/models.py (drs_37553d87)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/models.py' matches configured sensitive codepath pattern 'dojo/models.py' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/notes/helper.py (drs_d6c5787d)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/notes/helper.py' matches configured sensitive codepath pattern 'dojo/notes/*.py' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/notes/models.py (drs_da07583b)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/notes/models.py' matches configured sensitive codepath pattern 'dojo/notes/*.py' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/risk_acceptance/helper.py (drs_49724252)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/risk_acceptance/helper.py' matches configured sensitive codepath pattern 'dojo/risk_acceptance/*.py' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/risk_acceptance/models.py (drs_d1743e0f)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/risk_acceptance/models.py' matches configured sensitive codepath pattern 'dojo/risk_acceptance/*.py' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/search/views.py (drs_d009c975)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/search/views.py' matches configured sensitive codepath pattern 'dojo/search/*.py' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/tasks.py (drs_4f88794e)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/tasks.py' matches configured sensitive codepath pattern 'dojo/tasks.py' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/base.html (drs_ffdda60b)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/base.html' matches configured sensitive codepath pattern 'dojo/templates/*.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/defectDojo-engagement-survey/add_surveys.html (drs_387d0146)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/defectDojo-engagement-survey/add_surveys.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/defectDojo-engagement-survey/list_questions.html (drs_1592cd04)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/defectDojo-engagement-survey/list_questions.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/defectDojo-engagement-survey/list_surveys.html (drs_4c566344)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/defectDojo-engagement-survey/list_surveys.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/add_note_type.html (drs_aab69b4a)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/add_note_type.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/announcement.html (drs_3cfe7cc6)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/announcement.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/apply_finding_template_form_fields.html (drs_f78c8f01)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/apply_finding_template_form_fields.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/banner.html (drs_f7a8c031)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/banner.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/benchmark.html (drs_655f501c)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/benchmark.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/breadcrumbs/custom_breadcrumb.html (drs_2aea7a5d)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/breadcrumbs/custom_breadcrumb.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/breadcrumbs/endpoint_breadcrumb.html (drs_bd7b9851)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/breadcrumbs/endpoint_breadcrumb.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/breadcrumbs/engagement_breadcrumb.html (drs_056830e3)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/breadcrumbs/engagement_breadcrumb.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/breadcrumbs/finding_breadcrumb.html (drs_306ad191)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/breadcrumbs/finding_breadcrumb.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/breadcrumbs/settings_breadcrumb.html (drs_e7126103)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/breadcrumbs/settings_breadcrumb.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/calendar.html (drs_1a480dca)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/calendar.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/celery_status.html (drs_157ff783)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/celery_status.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/close_finding.html (drs_7a5eb279)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/close_finding.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/components.html (drs_a0668797)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/components.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/dashboard-metrics.html (drs_c59e1f0c)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/dashboard-metrics.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/delete_endpoint.html (drs_22710189)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/delete_endpoint.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/dev_env.html (drs_6c288bd7)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/dev_env.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/disable_note_type.html (drs_72465af8)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/disable_note_type.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/edit_note.html (drs_d3e5419e)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/edit_note.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/edit_note_type.html (drs_19b63293)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/edit_note_type.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/enable_note_type.html (drs_fbca2ed4)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/enable_note_type.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/endpoint_pdf_report.html (drs_301839f0)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/endpoint_pdf_report.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/endpoints.html (drs_c1dd00d9)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/endpoints.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/engagement.html (drs_38cdb878)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/engagement.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/engagement_pdf_report.html (drs_493e1caa)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/engagement_pdf_report.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/engagements_all.html (drs_828ab9ea)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/engagements_all.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/engineer_metrics.html (drs_5eb7ae98)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/engineer_metrics.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/filter_snippet.html (drs_013f4ae2)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/filter_snippet.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/finding_groups_list_snippet.html (drs_95449fbc)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/finding_groups_list_snippet.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/finding_pdf_report.html (drs_030ec273)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/finding_pdf_report.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/finding_related_row.html (drs_be491a0f)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/finding_related_row.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/findings_list_snippet.html (drs_5fe9e24d)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/findings_list_snippet.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/form_fields.html (drs_e9047580)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/form_fields.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/jira.html (drs_3826187d)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/jira.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/login.html (drs_007eaae6)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/login.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/metrics.html (drs_6503dff4)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/metrics.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/new_jira.html (drs_afb3edeb)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/new_jira.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/note_type.html (drs_35bcb026)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/note_type.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/paging_snippet.html (drs_916e8d36)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/paging_snippet.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/partials/alerts_dropdown.html (drs_9bd497ef)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/partials/alerts_dropdown.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/product.html (drs_f2ddf1a7)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/product.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/product_components.html (drs_8f04d64a)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/product_components.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/product_endpoint_pdf_report.html (drs_07f82016)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/product_endpoint_pdf_report.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/product_metrics.html (drs_1989f1e4)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/product_metrics.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/product_pdf_report.html (drs_a0c78729)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/product_pdf_report.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/product_type.html (drs_0b9c5766)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/product_type.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/product_type_pdf_report.html (drs_52b5027a)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/product_type_pdf_report.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/pt_counts.html (drs_3d6b6a12)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/pt_counts.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/regulations.html (drs_a6b9b1c6)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/regulations.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/regulations_config.html (drs_33a9e967)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/regulations_config.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/remediation_date.html (drs_c7ce0717)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/remediation_date.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/report_builder.html (drs_b400e14d)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/report_builder.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/report_cover_page.html (drs_fe5d1205)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/report_cover_page.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/report_endpoints.html (drs_63b87115)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/report_endpoints.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/report_findings.html (drs_0a25a8b9)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/report_findings.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/report_widget.html (drs_84c3c134)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/report_widget.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/request_endpoint_report.html (drs_c6464082)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/request_endpoint_report.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/request_report.html (drs_0b631f57)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/request_report.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/simple_metrics.html (drs_d5c02830)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/simple_metrics.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/simple_search.html (drs_49b93000)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/simple_search.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/sla_config.html (drs_194f7eed)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/sla_config.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/snippets/comments.html (drs_5037e63a)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/snippets/comments.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/snippets/empty_state.html (drs_824ac1df)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/snippets/empty_state.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/snippets/endpoints.html (drs_1e93b7a2)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/snippets/endpoints.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/snippets/engagement_list.html (drs_34e2914d)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/snippets/engagement_list.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/snippets/file_images.html (drs_c208a09a)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/snippets/file_images.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/snippets/risk_acceptance_actions_snippet.html (drs_636a2b0e)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/snippets/risk_acceptance_actions_snippet.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/templates.html (drs_a22a1790)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/templates.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/test_pdf_report.html (drs_a255a32e)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/test_pdf_report.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/test_type.html (drs_fd1baa78)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/test_type.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/tool_config.html (drs_9ba77729)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/tool_config.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/tool_type.html (drs_a01354b9)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/tool_type.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/url/delete.html (drs_09e54bff)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/url/delete.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/url/list.html (drs_ef533a65)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/url/list.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/url/view.html (drs_8d3c1ff7)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/url/view.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/users.html (drs_08dc4bf4)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/users.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/view_endpoint.html (drs_b252b14c)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/view_endpoint.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/view_eng.html (drs_cb6f61d3)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/view_eng.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/view_finding.html (drs_3a7758d0)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/view_finding.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/view_note_history.html (drs_5e3ea6ba)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/view_note_history.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/view_objects.html (drs_c4f8142f)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/view_objects.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/view_presets.html (drs_379a9357)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/view_presets.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/view_product_api_scan_configurations.html (drs_ceef4755)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/view_product_api_scan_configurations.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/view_product_details.html (drs_ebb67653)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/view_product_details.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/view_product_type.html (drs_3d5a1d8e)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/view_product_type.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/view_risk_acceptance.html (drs_f8cca020)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/view_risk_acceptance.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/view_test.html (drs_0af287d8)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/view_test.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/view_tool_product_all.html (drs_492febc0)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/view_tool_product_all.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templates/dojo/view_user.html (drs_881752be)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templates/dojo/view_user.html' matches configured sensitive codepath pattern 'dojo/templates/*/.html' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templatetags/display_tags.py (drs_83acb7cb)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templatetags/display_tags.py' matches configured sensitive codepath pattern 'dojo/templatetags/*.py' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/templatetags/get_note_status.py (drs_f0bf1f60)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/templatetags/get_note_status.py' matches configured sensitive codepath pattern 'dojo/templatetags/*.py' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/test/services.py (drs_4a1d85fb)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/test/services.py' matches configured sensitive codepath pattern 'dojo/test/*.py' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/urls.py (drs_ff3f3362)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/urls.py' matches configured sensitive codepath pattern 'dojo/urls.py' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/user/models.py (drs_ca9a053a)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/user/models.py' matches configured sensitive codepath pattern 'dojo/user/*.py' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/utils.py (drs_4b4da685)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/utils.py' matches configured sensitive codepath pattern 'dojo/utils.py' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/views.py (drs_80dbbcbe)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/views.py' matches configured sensitive codepath pattern 'dojo/views.py' and was modified by 'amita-seal' (commit `38c1b24`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/api_v2/prefetch/prefetcher.py (drs_17c9f795)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/api_v2/prefetch/prefetcher.py' matches configured sensitive codepath pattern 'dojo/api_v2/*/.py' and was modified by 'amita-seal' (commit `d799c87`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/api_v2/views.py (drs_06173ed0)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/api_v2/views.py' matches configured sensitive codepath pattern 'dojo/api_v2/*.py' and was modified by 'amita-seal' (commit `d799c87`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/authorization/serializer_guards.py (drs_589aba9e)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/authorization/serializer_guards.py' matches configured sensitive codepath pattern 'dojo/authorization/*.py' and was modified by 'amita-seal' (commit `d799c87`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/authorization/url_permissions.py (drs_eef9e7db)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/authorization/url_permissions.py' matches configured sensitive codepath pattern 'dojo/authorization/*.py' and was modified by 'amita-seal' (commit `d799c87`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/context_processors.py (drs_be9be24e)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/context_processors.py' matches configured sensitive codepath pattern 'dojo/context_processors.py' and was modified by 'amita-seal' (commit `d799c87`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/decorators.py (drs_05976109)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/decorators.py' matches configured sensitive codepath pattern 'dojo/decorators.py' and was modified by 'amita-seal' (commit `d799c87`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/filters.py (drs_befdd5ac)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/filters.py' matches configured sensitive codepath pattern 'dojo/filters.py' and was modified by 'amita-seal' (commit `d799c87`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/finding/queries.py (drs_1c848ec4)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/finding/queries.py' matches configured sensitive codepath pattern 'dojo/finding/*.py' and was modified by 'amita-seal' (commit `d799c87`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/importers/auto_create_context.py (drs_2cd13c3f)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/importers/auto_create_context.py' matches configured sensitive codepath pattern 'dojo/importers/*.py' and was modified by 'amita-seal' (commit `d799c87`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/importers/base_location_manager.py (drs_28564cdc)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/importers/base_location_manager.py' matches configured sensitive codepath pattern 'dojo/importers/*.py' and was modified by 'amita-seal' (commit `d799c87`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/reports/queries.py (drs_72ce9a85)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/reports/queries.py' matches configured sensitive codepath pattern 'dojo/reports/*.py' and was modified by 'amita-seal' (commit `d799c87`) who is not in the allowed authors list.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/reports/widgets.py (drs_5a1787d1)

Vulnerability	Configured Sensitive Codepath Modified by Non-Allowed Author
Description	File 'dojo/reports/widgets.py' matches configured sensitive codepath pattern 'dojo/reports/*.py' and was modified by 'amita-seal' (commit `d799c87`) who is not in the allowed authors list.

We've notified @mtesauro.

Comment to provide feedback on these findings.

Report false positive: @dryrunsecurity fp [FINDING ID] [FEEDBACK]
Report low-impact: @dryrunsecurity nit [FINDING ID] [FEEDBACK]

Example: @dryrunsecurity fp drs_90eda195 This code is not user-facing

All finding details can be found in the DryRun Security Dashboard.

amita-seal · 2026-08-17T20:28:18Z

This pull request contains numerous critical findings where the author 'amita-seal' modified sensitive codepaths in the dojo directory without being on the allowed authors list. These unauthorized changes span across API handlers, database migrations, models, and templates, violating configured security policies.

🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/api_v2/exception_handler.py (drs_ec8b3c03)

....

@valentijnscholten this seems like a mistake, right? we didn't edit those files.

mtesauro · 2026-08-17T22:11:07Z

This pull request contains numerous critical findings where the author 'amita-seal' modified sensitive codepaths in the dojo directory without being on the allowed authors list. These unauthorized changes span across API handlers, database migrations, models, and templates, violating configured security policies.
🔴 Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/api_v2/exception_handler.py (drs_ec8b3c03)

....

@valentijnscholten this seems like a mistake, right? we didn't edit those files.

@amita-seal Yes, your PR won't fail for issues reported by DryRun. Green Github Actions are required. HTH

amita-seal requested review from Maffooch and blakeaowens as code owners August 9, 2026 13:20

github-actions Bot added settings_changes Needs changes to settings.py based on changes in settings.dist.py included in this PR docs unittests parser labels Aug 9, 2026

Describe the sealed-version model in the Seal parser docs

908848d

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

devGregA modified the milestones: 3.2.200, 3.3.0 Aug 10, 2026

Maffooch requested a review from valentijnscholten August 12, 2026 16:38

valentijnscholten reviewed Aug 12, 2026

View reviewed changes

Keep Seal parser fix_available consistent with the mitigation text

ba46da9

A row with Can Seal=TRUE but no Sealed Version yielded a finding marked fix_available while its mitigation said no sealed version exists. Derive both from the same condition.

amita-seal requested a review from valentijnscholten August 16, 2026 08:40

Merge branch 'dev' into seal-parser

38c1b24

Merge remote-tracking branch 'origin/dev' into seal-parser

d799c87

Navigation Menu

Uh oh!

Add Seal Security CSV parser - #15592

Add Seal Security CSV parser#15592
amita-seal wants to merge 5 commits into
DefectDojo:devfrom
amita-seal:seal-parser

amita-seal commented Aug 9, 2026 •

edited

Loading

Uh oh!

valentijnscholten left a comment

Uh oh!

amita-seal commented Aug 16, 2026

Uh oh!

dryrunsecurity Bot commented Aug 16, 2026 •

edited

Loading

Uh oh!

amita-seal commented Aug 17, 2026

Uh oh!

mtesauro commented Aug 17, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

Uh oh!

Conversation

amita-seal commented Aug 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

valentijnscholten left a comment

Choose a reason for hiding this comment

Uh oh!

amita-seal commented Aug 16, 2026

Uh oh!

dryrunsecurity Bot commented Aug 16, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

amita-seal commented Aug 17, 2026

Uh oh!

mtesauro commented Aug 17, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

amita-seal commented Aug 9, 2026 •

edited

Loading

dryrunsecurity Bot commented Aug 16, 2026 •

edited

Loading