add RXSA VULNERABILITY_URL

[manuel-sommer]

No description provided.

[dryrunsecurity]

DryRun Security Summary

The changes in this pull request focus on maintaining the integrity of the application's configuration files and expanding the functionality of the DefectDojo application to support additional vulnerability sources and file types.

Expand for full summary

Summary:

The changes in this pull request are focused on maintaining the integrity of the application's configuration files and expanding the functionality of the DefectDojo application to support additional vulnerability sources and file types.

The first change updates the SHA-256 checksum file for the .settings.dist.py configuration file, which is a routine update to ensure the integrity of the configuration file. While this change does not have any direct security implications, it is important to verify that the new checksum value matches the actual contents of the configuration file to prevent any potential issues with the application's configuration.

The second change updates the dojo/settings/settings.dist.py file, which includes the addition of a new entry in the VULNERABILITY_URLS dictionary to support Rocky Linux Security Advisories (RXSA) and the expansion of the FILE_UPLOAD_TYPES setting to include the ".rxsa" file extension. These changes indicate that the application is being updated to support additional vulnerability sources and file types, which can be beneficial for maintaining comprehensive security coverage. However, it is important to ensure that the application has appropriate security controls in place to validate and sanitize the uploaded files to prevent potential security risks.

Files Changed:

1. dojo/settings/.settings.dist.py.sha256sum: The SHA-256 checksum value for the .settings.dist.py configuration file has been updated from 42026ac47884ee26fe742e59fb7dc621b5f927ee6ee3c92daf09b97f2a740163 to 002b28325f11793c5aa9f09326c2d5cc66de518cce51b2cb4cb681a920b89909. This change is routine and is used to maintain the integrity of the configuration file.

2. dojo/settings/settings.dist.py: The changes in this file include the addition of a new entry in the VULNERABILITY_URLS dictionary to support Rocky Linux Security Advisories (RXSA) and the expansion of the FILE_UPLOAD_TYPES setting to include the ".rxsa" file extension. These changes are focused on expanding the functionality of the DefectDojo application to support additional vulnerability sources and file types.

Code Analysis

We ran 9 analyzers against 2 files and 0 analyzers had findings. 9 analyzers had no findings.

Riskiness

🟢 Risk threshold not exceeded.

View PR in the DryRun Dashboard.

[manuel-sommer]

@mtesauro, could you please retrigger the pipeline?

[mtesauro]

Approved