Added some new additional DefectDojo parser.

Author: rfelber

src/main/java/io/securecodebox/persistence/defectdojo/ScanType.java

@@ -1,3 +1,20 @@
+/*
+ *  secureCodeBox (SCB)
+ *  Copyright 2021 iteratec GmbH
+ *  https://www.iteratec.com
+ *
+ *  Licensed under the Apache License, Version 2.0 (the "License");
+ *  you may not use this file except in compliance with the License.
+ *  You may obtain a copy of the License at
+ *
+ *  	http://www.apache.org/licenses/LICENSE-2.0
+ *
+ *  Unless required by applicable law or agreed to in writing, software
+ *  distributed under the License is distributed on an "AS IS" BASIS,
+ *  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ *  See the License for the specific language governing permissions and
+ *  limitations under the License.
+ */
 package io.securecodebox.persistence.defectdojo;
 
 import lombok.Getter;
@@ -6,6 +23,7 @@ public enum ScanType {
   ACUNETIX_SCAN("Acunetix Scan"),
   ANCHORE_ENGINE_SCAN("Anchore Engine Scan"),
   ANCHORE_ENTERPRISE_POLICY_CHECK("Anchore Enterprise Policy Check"),
+  ANCHORE_GRYPE_SCAN("Anchore Grype Scan"),
   API_TEST("API Test"),
   APP_SPIDER_SCAN("AppSpider Scan"),
   AQUA_SCAN("Aqua Scan"),
@@ -20,6 +38,7 @@ public enum ScanType {
   BUG_CROWD("BugCrowd "),
   BUNDLER_AUDIT_SCAN("Bundler-Audit Scan"),
   BURP_SCAN("Burp Scan"),
+  BURP_API_SCAN("Burp REST API"),
   BURP_SUITE_ENTERPRISE("Burp Suite Enterprise"),
   CCVS_REPORT("CCVS Report"),
   CHECKMARX_SCAN("Checkmarx Scan"),
@@ -28,7 +47,8 @@ public enum ScanType {
   CLAIR_SCAN("Clair Scan"),
   COBALT_IO_SCAN("Cobalt.io Scan"),
   CONTRAST_SCAN("Contrast Scan"),
-  CRASHTEST_SECURITY_SCAN("Crashtest Security Scan"),
+  CRASHTEST_SECURITY_JSON_SCAN("Crashtest Security JSON File"),
+  CRASHTEST_SECURITY_XML_SCAN("Crashtest Security XML File"),
   DAWN_SCANNER_SCAN("DawnScanner Scan"),
   DEPENDENCY_CHECK_SCAN("Dependency Check Scan"),
   DEPENDENCY_TRACK_FINDING_PACKAGING_FORMAT_FPF_EXPORT("Dependency Track Finding Packaging Format (FPF) Export"),
@@ -37,8 +57,10 @@ public enum ScanType {
   ES_LINT_SCAN("ESLint Scan"),
   FORTIFY("Fortify"),
   GENERIC_FINDINGS_IMPORT("Generic Findings Import"),
+  GITHUB_VULNERABILITY_SCAN("Github Vulnerability Scan"),
+  GITLAB_SAST_REPORT("GitLab SAST Report"),
+  GITLAB_DEPENDENCY_SCANNING_REPORT("GitLab Dependency Scanning Report"),
   GITLEAKS_SCAN("Gitleaks Scan"),
-  GIT_LAB_SAST_REPORT("GitLab SAST Report"),
   GOSEC_SCANNER("Gosec Scanner"),
   HACKER_ONE_CASES("HackerOne Cases"),
   HADOLINT_DOCKERFILE_CHECK("Hadolint Dockerfile check"),
@@ -48,19 +70,22 @@ public enum ScanType {
   IMMUNIWEB_SCAN("Immuniweb Scan"),
   J_FROG_XRAY_SCAN("JFrog Xray Scan"),
   KIUWAN_SCAN("Kiuwan Scan"),
+  KUBEBENCH_SCAN("kube-bench Scan"),
   MANUAL_CODE_REVIEW("Manual Code Review"),
   MICROFOCUS_WEBINSPECT_SCAN("Microfocus Webinspect Scan"),
   MOB_SF_SCANNER("MobSF Scanner"),
   MOZILLA_OBSERVATORY_SCAN("Mozilla Observatory Scan"),
   NESSUS_SCAN("Nessus Scan"),
   NETSPARKER_SCAN("Netsparker Scan"),
   NEXPOSE_SCAN("Nexpose Scan"),
-  NIKTO_SCAN("Nikto Scan"),
-  NMAP_SCAN("Nmap Scan"),
+  NIKTO_XML_SCAN("Nikto Scan"),
+  NMAP_XML_SCAN("Nmap Scan"),
   NODE_SECURITY_PLATFORM_SCAN("Node Security Platform Scan"),
   NPM_AUDIT_SCAN("NPM Audit Scan"),
   OPENSCAP_VULNERABILITY_SCAN("Openscap Vulnerability Scan"),
   OPEN_VAS_CSV("OpenVAS CSV"),
+  ORT_MODEL_IMPORTER("ORT evaluated model Importer"),
+  OSSINDEX_DEVAUDIT_SCAN_IMPORTER("OssIndex Devaudit SCA Scan Importer"),
   OUTPOST24_SCAN("Outpost24 Scan"),
   PEN_TEST("Pen Test"),
   PHP_SECURITY_AUDIT_V2("PHP Security Audit v2"),
@@ -71,29 +96,32 @@ public enum ScanType {
   RETIRE_JS_SCAN("Retire.js Scan"),
   RISK_RECON_API_IMPORTER("Risk Recon API Importer"),
   SAFETY_SCAN("Safety Scan"),
+  SARIF_SCAN("SARIF"),
   SECURITY_RESEARCH("Security Research"),
   SKF_SCAN("SKF Scan"),
   SNYK_SCAN("Snyk Scan"),
-  SONAR_QUBE("SonarQube"),
+  SONAR_QUBE_SCAN("SonarQube Scan"),
+  SONAR_QUBE_API_IMPORT("SonarQube API Import"),
+  SONAR_QUBE_DETAILED_SCAN("SonarQube Scan detailed"),
   SONATYPE_APPLICATION_SCAN("Sonatype Application Scan"),
-  SPOT_BUGS("SpotBugs"),
+  SPOTBUGS_XML_SCAN("SpotBugs Scan"),
   SSLSCAN("Sslscan"),
-  SSLYZE_SCAN("Sslyze Scan"),
   SSL_LABS_SCAN("SSL Labs Scan"),
-  SS_LYZE_3_SCAN_JSON("SSLyze 3 Scan (JSON)"),
+  SSLYZE_3_JSON_SCAN("SSLyze 3 Scan (JSON)"),
+  SSLYZE_XML_SCAN("Sslyze Scan"),
   STATIC_CHECK("Static Check"),
   TESTSSL_SCAN("Testssl Scan"),
   THREAT_MODELING("Threat Modeling"),
   TRIVY_SCAN("Trivy Scan"),
   TRUFFLEHOG("Trufflehog"),
-  TRUSTWAVE("Trustwave"),
+  TRUSTWAVE_CSV_SCAN("Trustwave Scan (CSV)"),
   TWISTLOCK_IMAGE_SCAN("Twistlock Image Scan"),
   VCG_SCAN("VCG Scan"),
   VERACODE_SCAN("Veracode Scan"),
   WAPITI_SCAN("Wapiti Scan"),
   WEB_APPLICATION_TEST("Web Application Test"),
   WHITESOURCE_SCAN("Whitesource Scan"),
-  WPSCAN("Wpscan"),
+  WPSCAN_JSON("Wpscan"),
   XANITIZER_SCAN("Xanitizer Scan"),
   YARN_AUDIT_SCAN("Yarn Audit Scan"),
   ZAP_SCAN("ZAP Scan"),