56 lines
1.8 KiB
Markdown
56 lines
1.8 KiB
Markdown
---
|
|
title: "[bojemoi] refactor(pipeline): centralize DefectDojo push in pentest-orchestrator via Valkey queue"
|
|
date: 2026-06-28T21:56:42+02:00
|
|
draft: false
|
|
tags: ["commit", "bojemoi", "main"]
|
|
categories: ["Git Activity"]
|
|
summary: "Commit dcd3a41 par Betty dans bojemoi"
|
|
author: "Betty"
|
|
---
|
|
|
|
## Commit `dcd3a41`
|
|
|
|
| | |
|
|
|---|---|
|
|
| **Repository** | bojemoi |
|
|
| **Branch** | `main` |
|
|
| **Author** | Betty |
|
|
| **Hash** | `dcd3a41da2ab186a68eb603c5ce0fd46d9e4178d` |
|
|
|
|
|
|
### Description
|
|
|
|
Workers (UZI, ZAP, Sliver) no longer push directly to DefectDojo.
|
|
Instead they RPUSH findings to pentest:dojo_queue (Valkey).
|
|
pentest-orchestrator consumes via BRPOP in a dedicated dojo_worker_loop thread
|
|
and is now the sole responsible for all DefectDojo writes.
|
|
|
|
- thearm_uzi: remove dojo_report_pwn + Dojo client code → dojo_queue_pwn (RPUSH)
|
|
- thearm_sliver: remove push_finding_to_dojo → queue_finding_for_dojo (RPUSH)
|
|
- zap_scanner: remove 250-line Dojo client → dojo_queue_alerts (RPUSH), drop dojo_ok column
|
|
- pentest_orchestrator: add dojo_worker_loop (BRPOP) with per-source finding handlers
|
|
- samsonov/Dockerfile.samsonov: remove unavailable valkey-tools apt package
|
|
|
|
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
|
|
|
|
### Files Changed
|
|
|
|
```
|
|
M borodino/thearm_sliver/thearm_sliver
|
|
M borodino/thearm_uzi
|
|
M oblast-1/zap_scanner.py
|
|
M samsonov/Dockerfile.samsonov
|
|
M samsonov/pentest_orchestrator/main.py
|
|
```
|
|
|
|
### Diff Summary
|
|
|
|
```
|
|
borodino/thearm_sliver/thearm_sliver | 95 +++----------
|
|
borodino/thearm_uzi | 179 ++++---------------------
|
|
oblast-1/zap_scanner.py | 245 +++++-----------------------------
|
|
samsonov/Dockerfile.samsonov | 2 +-
|
|
samsonov/pentest_orchestrator/main.py | 129 ++++++++++++++----
|
|
5 files changed, 181 insertions(+), 469 deletions(-)
|
|
```
|