reimport_scan
Upload a scan report to an existing DefectDojo test, with options to close outdated findings, deduplicate, and auto-create product or engagement if needed.
Instructions
Re-import a scan report into an existing test in DefectDojo. Requires write scope. Rate-limited.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| file | Yes | Base64-encoded scan result file content. | |
| tags | No | List of tags to apply. | |
| active | No | Mark imported findings as active (default True). | |
| test_id | No | Existing test ID to reimport into (> 0). | |
| version | No | Version string for the scan. | |
| build_id | No | Build identifier. | |
| group_by | No | Grouping strategy (e.g. "component_name+component_version"). | |
| verified | No | Mark imported findings as verified (default False). | |
| file_name | Yes | Original filename of the scan result. | |
| scan_type | Yes | Scanner type (e.g. "Semgrep JSON Report", "Trivy Scan", "ZAP Scan"). | |
| branch_tag | No | Branch or tag name. | |
| commit_hash | No | Commit hash. | |
| product_name | No | Product name (required when auto_create_context is True). | |
| push_to_jira | No | Push findings to Jira (default False). | |
| engagement_name | No | Engagement name (required when auto_create_context is True). | |
| minimum_severity | No | Minimum severity to import (Critical/High/Medium/Low/Info). | |
| do_not_reactivate | No | Don't reactivate previously closed findings (default False). | |
| product_type_name | No | Product type name for auto-creation. | |
| close_old_findings | No | Close findings not present in this scan (default True). | |
| auto_create_context | No | Auto-create product/engagement if they don't exist (default True). | |
| deduplication_on_engagement | No | Deduplicate within the engagement (default True). |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |