mirror of
https://github.com/SHOGGOTH-SECTOR/sica-fondt.git
synced 2026-08-01 08:30:20 +00:00
24f816b6a3
Place useful parts of the surrounding repos into sica-fondt by layer, per the
body model (Ada = membrane; brain/endocrine/capabilities/knowledge non-Ada):
- brain/ LLM reasoning + providers (dapr, hermes, MoMoA)
- capabilities/ REPRAG sidecars: hermes tools/skills, dapr tools, parallel
dispatch, A51 channels, and the OSINT cluster
- knowledge/ LORAG corpus: 754 cyber-skills, agency personas, secure-coding,
MITRE ATT&CK data
- reference/ defensive threat-reference (C3, shhbruh doc) + AdaYaml parser
License handling: AGPL sources (worldosint, advanced_evolution, mercury,
Reticulum) and GPL DeTTECT are SPEC-only clean-room/port descriptions — no
copyleft code copied. MIT/Apache/data parts copied as working trees.
Safety: shhbruh escape/persistence material and C3 covert-C2 kept as reference
only, not wired into the running organism. See CONSOLIDATION.md.
https://claude.ai/code/session_01UehUqEXXJJCsHoA4voCU5c
1.4 KiB
1.4 KiB
Standards and References - DefectDojo Vulnerability Dashboard
Primary References
DefectDojo Project
- GitHub: https://github.com/DefectDojo/django-DefectDojo
- Documentation: https://defectdojo.github.io/django-DefectDojo/
- API v2 Docs: https://defectdojo.github.io/django-DefectDojo/integrations/api-v2-docs/
- OWASP Project Page: https://owasp.org/www-project-defectdojo/
- License: BSD-3-Clause
Supported Scanner Integrations
- Full List: https://defectdojo.com/integrations
- 200+ parsers including Nessus, Qualys, Burp Suite, ZAP, Trivy, Semgrep, SonarQube, Snyk, Checkov, and more
OWASP Application Security Verification Standard (ASVS)
- URL: https://owasp.org/www-project-application-security-verification-standard/
- Relevance: DefectDojo categorizes findings using OWASP taxonomy
NIST SP 800-53 Rev 5 - RA-5
- Title: Vulnerability Monitoring and Scanning
- Relevance: DefectDojo supports centralized vulnerability tracking as required by RA-5
PCI DSS v4.0 - Requirement 6
- Relevance: DefectDojo tracks application security findings for PCI compliance
Deployment Requirements
| Component | Minimum | Recommended |
|---|---|---|
| CPU | 2 cores | 4 cores |
| RAM | 4 GB | 8 GB |
| Disk | 20 GB | 50 GB+ |
| PostgreSQL | 12+ | 15+ |
| Docker | 20.10+ | Latest stable |
| Docker Compose | 2.0+ | Latest stable |