Hari 55: Laporan Audit, Data DefectDojo Ternyata Basi
Menyusun laporan audit dari DefectDojo? Ternyata datanya basi. Scan ulang mengubah cerita: IaC turun 14 ke 2 temuan, dan muncul CVE stdlib yang belum ke-fix.
6 Agu 20263 min read
Hari 49: AI Remediation Node — LLM Auto-Summarize Scanner Findings ke Slack
Scanner findings (Semgrep, Checkov, Trivy) otomatis di-summarize oleh LLM gratis (OpenCode Zen deepseek-v4-flash-free) dan diposting ke Slack. 3 format scanner dinormalisasi ke unified schema. Cloudflare WAF block urllib fixed.
27 Jul 20263 min read
Hari 47: DefectDojo API — 7 Scans, 16 Findings Centralized
Upload 7 scanner reports (Trivy, Semgrep, Checkov) ke DefectDojo via import-scan API. 15 tests imported, 46 findings centralized. upload-scans.sh script + conditional CI job. ZAP needs XML format.
25 Jul 20264 min read
Hari 46: DefectDojo — Vuln Management Dashboard
DefectDojo via Docker Compose — no clone 358MB repo, standalone compose file, 7 containers, port 8088. Single pane of glass untuk semua scan findings. Fase 4 dimulai!
23 Jul 20263 min read