Using Jenkins to Import ZAP Scan results to DefectDojo
I have set up Jenkins and DefectDojo on two different Linux boxes.
I am trying to automate the files being sent from Jenkins to DefectDojo via the defect dojo API v2
The Jenkins installation runs a OWASP Zap scan and stores the XML files locally, then using the Jenkins HTTP Request plugin, I am trying to send off a json post containing the file path and the other necessary values, including Authorization headers etc..
I have tried the "file" as a URL and also as a file path, but keep getting the error "The submitted data was not a file. Check the encoding type on the form."
{
"engagement": "/api/v2/engagements/1/",
"lead": "/api/v2/users/1/",
"verified": true,
"scan_date": "2018-12-27",
"scan_type": "ZAP Scan",
"minimum_severity": "High",
"file": "/var/lib/jenkins/workspace/ZAP_CI_Demo/reports/JENKINS_ZAP_VULNERABILITY_REPORT_28.xml",
"active": true
}
I am expecting a "201 Created" response, but the response is
HttpMethod: POST
URL: http://<defect-dojo-url>:8080/api/v2/import-scan/
Content-type: application/json
Accept: application/json
Authorization: *****
Sending request to url: http://<defect-dojo-url>8080/api/v2/import-scan/
Response Code: HTTP/1.0 400 Bad Request
Response:
{"file":["The submitted data was not a file. Check the encoding type on the form."]}
[Pipeline] End of Pipeline
I have been able to get the API to work ok using PostMan, however in this case I am doing a form post as opposed to using a json post.
jenkins httprequest jenkins-plugins zap
asked Dec 27 '18 at 16:23
nb1
11
add a comment |
I have set up Jenkins and DefectDojo on two different Linux boxes.
I am trying to automate the files being sent from Jenkins to DefectDojo via the defect dojo API v2
The Jenkins installation runs a OWASP Zap scan and stores the XML files locally, then using the Jenkins HTTP Request plugin, I am trying to send off a json post containing the file path and the other necessary values, including Authorization headers etc..
I have tried the "file" as a URL and also as a file path, but keep getting the error "The submitted data was not a file. Check the encoding type on the form."
{
"engagement": "/api/v2/engagements/1/",
"lead": "/api/v2/users/1/",
"verified": true,
"scan_date": "2018-12-27",
"scan_type": "ZAP Scan",
"minimum_severity": "High",
"file": "/var/lib/jenkins/workspace/ZAP_CI_Demo/reports/JENKINS_ZAP_VULNERABILITY_REPORT_28.xml",
"active": true
}
I am expecting a "201 Created" response, but the response is
HttpMethod: POST
URL: http://<defect-dojo-url>:8080/api/v2/import-scan/
Content-type: application/json
Accept: application/json
Authorization: *****
Sending request to url: http://<defect-dojo-url>8080/api/v2/import-scan/
Response Code: HTTP/1.0 400 Bad Request
Response:
{"file":["The submitted data was not a file. Check the encoding type on the form."]}
[Pipeline] End of Pipeline
I have been able to get the API to work ok using PostMan, however in this case I am doing a form post as opposed to using a json post.
jenkins httprequest jenkins-plugins zap
asked Dec 27 '18 at 16:23
nb1
11
Defect-dojo likely expects a multipart form post: w3.org/Protocols/rfc1341/7_2_Multipart.html
– kingthorin
Dec 28 '18 at 3:28
add a comment |
I have set up Jenkins and DefectDojo on two different Linux boxes.
I am trying to automate the files being sent from Jenkins to DefectDojo via the defect dojo API v2
The Jenkins installation runs a OWASP Zap scan and stores the XML files locally, then using the Jenkins HTTP Request plugin, I am trying to send off a json post containing the file path and the other necessary values, including Authorization headers etc..
I have tried the "file" as a URL and also as a file path, but keep getting the error "The submitted data was not a file. Check the encoding type on the form."
{
"engagement": "/api/v2/engagements/1/",
"lead": "/api/v2/users/1/",
"verified": true,
"scan_date": "2018-12-27",
"scan_type": "ZAP Scan",
"minimum_severity": "High",
"file": "/var/lib/jenkins/workspace/ZAP_CI_Demo/reports/JENKINS_ZAP_VULNERABILITY_REPORT_28.xml",
"active": true
}
I am expecting a "201 Created" response, but the response is
HttpMethod: POST
URL: http://<defect-dojo-url>:8080/api/v2/import-scan/
Content-type: application/json
Accept: application/json
Authorization: *****
Sending request to url: http://<defect-dojo-url>8080/api/v2/import-scan/
Response Code: HTTP/1.0 400 Bad Request
Response:
{"file":["The submitted data was not a file. Check the encoding type on the form."]}
[Pipeline] End of Pipeline
I have been able to get the API to work ok using PostMan, however in this case I am doing a form post as opposed to using a json post.
jenkins httprequest jenkins-plugins zap
asked Dec 27 '18 at 16:23
nb1
11
I have set up Jenkins and DefectDojo on two different Linux boxes.
I am trying to automate the files being sent from Jenkins to DefectDojo via the defect dojo API v2
The Jenkins installation runs a OWASP Zap scan and stores the XML files locally, then using the Jenkins HTTP Request plugin, I am trying to send off a json post containing the file path and the other necessary values, including Authorization headers etc..
I have tried the "file" as a URL and also as a file path, but keep getting the error "The submitted data was not a file. Check the encoding type on the form."
{
"engagement": "/api/v2/engagements/1/",
"lead": "/api/v2/users/1/",
"verified": true,
"scan_date": "2018-12-27",
"scan_type": "ZAP Scan",
"minimum_severity": "High",
"file": "/var/lib/jenkins/workspace/ZAP_CI_Demo/reports/JENKINS_ZAP_VULNERABILITY_REPORT_28.xml",
"active": true
}
I am expecting a "201 Created" response, but the response is
HttpMethod: POST
URL: http://<defect-dojo-url>:8080/api/v2/import-scan/
Content-type: application/json
Accept: application/json
Authorization: *****
Sending request to url: http://<defect-dojo-url>8080/api/v2/import-scan/
Response Code: HTTP/1.0 400 Bad Request
Response:
{"file":["The submitted data was not a file. Check the encoding type on the form."]}
[Pipeline] End of Pipeline
I have been able to get the API to work ok using PostMan, however in this case I am doing a form post as opposed to using a json post.
jenkins httprequest jenkins-plugins zap
jenkins httprequest jenkins-plugins zap
asked Dec 27 '18 at 16:23
nb1
11
asked Dec 27 '18 at 16:23
nb1
11
edited Dec 27 '18 at 16:34
asked Dec 27 '18 at 16:23
nb1
11
asked Dec 27 '18 at 16:23
nb1
11
asked Dec 27 '18 at 16:23
nb1
11
11
Defect-dojo likely expects a multipart form post: w3.org/Protocols/rfc1341/7_2_Multipart.html
– kingthorin
Dec 28 '18 at 3:28
add a comment |
Defect-dojo likely expects a multipart form post: w3.org/Protocols/rfc1341/7_2_Multipart.html
– kingthorin
Dec 28 '18 at 3:28
Defect-dojo likely expects a multipart form post: w3.org/Protocols/rfc1341/7_2_Multipart.html
– kingthorin
Dec 28 '18 at 3:28
Defect-dojo likely expects a multipart form post: w3.org/Protocols/rfc1341/7_2_Multipart.html
– kingthorin
Dec 28 '18 at 3:28
add a comment |
active
oldest
votes
Your Answer
StackExchange.ifUsing("editor", function () {
StackExchange.using("externalEditor", function () {
StackExchange.using("snippets", function () {
StackExchange.snippets.init();
});
});
}, "code-snippets");
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "1"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53947982%2fusing-jenkins-to-import-zap-scan-results-to-defectdojo%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
active
oldest
votes
active
oldest
votes
active
oldest
votes
active
oldest
votes
Thanks for contributing an answer to Stack Overflow!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Some of your past answers have not been well-received, and you're in danger of being blocked from answering.
Please pay close attention to the following guidance:
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53947982%2fusing-jenkins-to-import-zap-scan-results-to-defectdojo%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Defect-dojo likely expects a multipart form post: w3.org/Protocols/rfc1341/7_2_Multipart.html
– kingthorin
Dec 28 '18 at 3:28