Changelog update 2.42.3 + fix docs image refs

[paulOsinski]

• Updating changelog for 2.42.3
• Changing heading format so that sidebar is easier to navigate across versions
• fixing broken image refs that were preventing site update

[dryrunsecurity]

DryRun Security Summary

The pull request updates DefectDojo's API v2 documentation and changelog, focusing on security improvements including API key management, authentication methods, and various security-related enhancements for the Pro version while emphasizing secure development practices.

Expand for full summary

Summary:

The code changes in this pull request focus on updating the documentation for the DefectDojo API v2. The key updates include providing information on how to generate API keys, interact with the API using the Swagger UI, and leverage alternative authentication methods. From a security perspective, these changes are positive as they highlight the importance of secure API key management, the ability to use alternative authentication methods, and the versioning of the API to allow for breaking changes without impacting existing integrations.

The changelog also covers several security-related changes and improvements to the DefectDojo Pro (Cloud Version) application, such as the addition of severity-based filtering for connectors, limiting API payloads, proper RBAC implementation, audit trails for risk acceptance, and secure configurations for multiple AWS Security Hub accounts. These changes demonstrate a security-conscious approach to the development and maintenance of the DefectDojo application.

Files Changed:

1. docs/content/en/api/api-v2-docs.md: This file has been updated to provide comprehensive documentation for the DefectDojo API v2, including information on generating API keys, using the Swagger UI, and leveraging alternative authentication methods. The documentation emphasizes the importance of secure API key management and the ability to use SSO for authentication.

2. docs/content/en/changelog/changelog.md: This file has been updated to include several security-related changes and improvements to the DefectDojo Pro (Cloud Version) application, such as severity-based filtering for connectors, limiting API payloads, proper RBAC implementation, audit trails for risk acceptance, and secure configurations for multiple AWS Security Hub accounts. These changes demonstrate a strong focus on application security.

Code Analysis

We ran 9 analyzers against 3 files and 0 analyzers had findings. 9 analyzers had no findings.

View PR in the DryRun Dashboard.

[dryrunsecurity]

DryRun Security Summary

The pull request updates DefectDojo's API v2 documentation and changelog, focusing on security improvements including API key management, authentication methods, and various security enhancements for the Pro version while emphasizing secure development practices.

Expand for full summary

Summary:

The code changes in this pull request focus on updating the documentation for the DefectDojo API v2. The key updates include providing information on how to generate API keys, interact with the API using the Swagger UI, and leverage alternative authentication methods. From a security perspective, these changes are positive as they highlight the importance of secure API key management, the ability to use alternative authentication methods, and the versioning of the API to allow for breaking changes without impacting existing integrations.

The changelog also covers several security-related changes and improvements to the DefectDojo Pro (Cloud Version) application, such as the addition of severity-based filtering for connectors, limiting API payloads, proper RBAC implementation, audit trails for risk acceptance, and secure configurations for multiple AWS Security Hub accounts. These changes demonstrate a security-conscious approach to the development and maintenance of the DefectDojo application.

Files Changed:

1. docs/content/en/api/api-v2-docs.md: This file has been updated to provide comprehensive documentation for the DefectDojo API v2, including information on generating API keys, using the Swagger UI, and leveraging alternative authentication methods. The documentation emphasizes the importance of secure API key management and the ability to use SSO for authentication.

2. docs/content/en/changelog/changelog.md: This file has been updated to include several security-related changes and improvements to the DefectDojo Pro (Cloud Version) application, such as severity-based filtering for connectors, limiting API payloads, proper RBAC implementation, audit trails for risk acceptance, and secure configurations for multiple AWS Security Hub accounts. These changes demonstrate a strong focus on application security.

Code Analysis

We ran 9 analyzers against 3 files and 0 analyzers had findings. 9 analyzers had no findings.

View PR in the DryRun Dashboard.

[mtesauro]

Approved