---
title: "[bojemoi] feat(vuln-mgmt): migrate Faraday CE → DefectDojo"
date: 2026-04-15T23:00:02+02:00
draft: false
tags: ["commit", "bojemoi", "main"]
categories: ["Git Activity"]
summary: "Commit 4fa26f4 par Betty dans bojemoi"
author: "Betty"
---

## Commit `4fa26f4`

| | |
|---|---|
| **Repository** | bojemoi |
| **Branch** | `main` |
| **Author** | Betty |
| **Hash** | `4fa26f4a4ccf477472a6642963dcd9578daf9b83` |


### Description

Replace Faraday CE with DefectDojo across the full stack:

- stack/70-service-defectdojo.yml: new stack (nginx+uwsgi+celery+initializer+triage)
- mcp-server/tools/defectdojo.py: DefectDojo API v2 client (list_products, get_findings, add_finding)
- medved/honeypot/defectdojo_reporter.py: token-based reporter, idempotent DB column migration
- faraday-triage/triage.py: rewrite to use REST API instead of direct PostgreSQL access
- borodino, nuclei-api, zap-scanner: FARADAY_* → DEFECTDOJO_* env vars + dojo_api_token secret
- nginx: faraday.conf → defectdojo.conf, upstream faraday → defectdojo
- prometheus: FaradayDown → DefectDojoDown, faraday_vulnerabilities → triage_findings_pending

Fixes: NYM_PROXY :+ interpolation, postgres role password sync, uwsgi DNS alias,
       node.labels.defectdojo=true on meta-68, old honeypot stack removal.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

### Files Changed

```
A	faraday-triage/Dockerfile
A	faraday-triage/requirements.txt
A	faraday-triage/triage.py
M	mcp-server/server.py
A	mcp-server/tools/defectdojo.py
D	mcp-server/tools/faraday.py
M	medved/honeypot/config.py
M	medved/honeypot/db.py
A	medved/honeypot/defectdojo_reporter.py
D	medved/honeypot/faraday_reporter.py
M	medved/honeypot/main.py
M	medved/honeypot/metrics.py
M	oblast-1/zap_scanner.py
M	samsonov/nuclei_api/main.py
D	samsonov/pentest_orchestrator/plugins/plugin_faraday.py
M	stack/40-service-borodino.yml
M	stack/49-service-mcp.yml
M	stack/65-service-medved.yml
A	stack/70-service-defectdojo.yml
M	volumes/nginx/conf.d/default.conf
A	volumes/nginx/conf.d/sites/defectdojo.conf
D	volumes/nginx/conf.d/sites/faraday.conf
M	volumes/nginx/conf.d/upstreams/upstreams.conf
M	volumes/prometheus/rules/alert_rules.yml
M	volumes/prometheus/rules/alerts.yml
```

### Diff Summary

```
 faraday-triage/Dockerfile                          |  10 +
 faraday-triage/requirements.txt                    |   3 +
 faraday-triage/triage.py                           | 354 ++++++++++++++
 mcp-server/server.py                               |  49 +-
 mcp-server/tools/defectdojo.py                     | 190 ++++++++
 mcp-server/tools/faraday.py                        | 126 -----
 medved/honeypot/config.py                          |  16 +-
 medved/honeypot/db.py                              |  29 +-
 medved/honeypot/defectdojo_reporter.py             | 234 +++++++++
 medved/honeypot/faraday_reporter.py                | 200 --------
 medved/honeypot/main.py                            |   6 +-
 medved/honeypot/metrics.py                         |   6 +-
 oblast-1/zap_scanner.py                            | 212 ++++++---
 samsonov/nuclei_api/main.py                        | 212 +++++----
 .../pentest_orchestrator/plugins/plugin_faraday.py | 522 ---------------------
 stack/40-service-borodino.yml                      |  99 +---
 stack/49-service-mcp.yml                           |   7 +-
 stack/65-service-medved.yml                        |  14 +-
 stack/70-service-defectdojo.yml                    | 295 ++++++++++++
 volumes/nginx/conf.d/default.conf                  |   6 +-
 volumes/nginx/conf.d/sites/defectdojo.conf         |  31 ++
 volumes/nginx/conf.d/sites/faraday.conf            |  65 ---
 volumes/nginx/conf.d/upstreams/upstreams.conf      |   6 +-
 volumes/prometheus/rules/alert_rules.yml           |   8 +-
 volumes/prometheus/rules/alerts.yml                |  52 +-
 25 files changed, 1502 insertions(+), 1250 deletions(-)
```