mirror of
https://github.com/SHOGGOTH-SECTOR/sica-fondt.git
synced 2026-08-01 16:40:24 +00:00
24f816b6a3
Place useful parts of the surrounding repos into sica-fondt by layer, per the
body model (Ada = membrane; brain/endocrine/capabilities/knowledge non-Ada):
- brain/ LLM reasoning + providers (dapr, hermes, MoMoA)
- capabilities/ REPRAG sidecars: hermes tools/skills, dapr tools, parallel
dispatch, A51 channels, and the OSINT cluster
- knowledge/ LORAG corpus: 754 cyber-skills, agency personas, secure-coding,
MITRE ATT&CK data
- reference/ defensive threat-reference (C3, shhbruh doc) + AdaYaml parser
License handling: AGPL sources (worldosint, advanced_evolution, mercury,
Reticulum) and GPL DeTTECT are SPEC-only clean-room/port descriptions — no
copyleft code copied. MIT/Apache/data parts copied as working trees.
Safety: shhbruh escape/persistence material and C3 covert-C2 kept as reference
only, not wired into the running organism. See CONSOLIDATION.md.
https://claude.ai/code/session_01UehUqEXXJJCsHoA4voCU5c
37 lines
1.4 KiB
Markdown
37 lines
1.4 KiB
Markdown
# Standards and References - DefectDojo Vulnerability Dashboard
|
|
|
|
## Primary References
|
|
|
|
### DefectDojo Project
|
|
- **GitHub**: https://github.com/DefectDojo/django-DefectDojo
|
|
- **Documentation**: https://defectdojo.github.io/django-DefectDojo/
|
|
- **API v2 Docs**: https://defectdojo.github.io/django-DefectDojo/integrations/api-v2-docs/
|
|
- **OWASP Project Page**: https://owasp.org/www-project-defectdojo/
|
|
- **License**: BSD-3-Clause
|
|
|
|
### Supported Scanner Integrations
|
|
- **Full List**: https://defectdojo.com/integrations
|
|
- **200+ parsers** including Nessus, Qualys, Burp Suite, ZAP, Trivy, Semgrep, SonarQube, Snyk, Checkov, and more
|
|
|
|
### OWASP Application Security Verification Standard (ASVS)
|
|
- **URL**: https://owasp.org/www-project-application-security-verification-standard/
|
|
- **Relevance**: DefectDojo categorizes findings using OWASP taxonomy
|
|
|
|
### NIST SP 800-53 Rev 5 - RA-5
|
|
- **Title**: Vulnerability Monitoring and Scanning
|
|
- **Relevance**: DefectDojo supports centralized vulnerability tracking as required by RA-5
|
|
|
|
### PCI DSS v4.0 - Requirement 6
|
|
- **Relevance**: DefectDojo tracks application security findings for PCI compliance
|
|
|
|
## Deployment Requirements
|
|
|
|
| Component | Minimum | Recommended |
|
|
|-----------|---------|-------------|
|
|
| CPU | 2 cores | 4 cores |
|
|
| RAM | 4 GB | 8 GB |
|
|
| Disk | 20 GB | 50 GB+ |
|
|
| PostgreSQL | 12+ | 15+ |
|
|
| Docker | 20.10+ | Latest stable |
|
|
| Docker Compose | 2.0+ | Latest stable |
|