DependencyTrack / DependencyTrack/dependency-track
SSL Verification For Integrations Toogle
Open
enhancement
- Dominant language
- Java
- Stars
- 4.2k
- Forks
- 811
- Avg merge
- 8h 39m
- Merged PRs (30d)
- 237
Description
Hello! I tried to integration DT with Defect Dojo, but I ran into the problem that my certificate wasn't trusted. I could add it to the cacerts, but DT is deployed in k8s and it looks difficult.
I found a similar issue with the Fortify SSC: https://github.com/DependencyTrack/dependency-track/issues/589
What do you think about the optional disabling of certificate verification, for example, for Unirest the simple way is: `Unirest.config().VerifySsl(false);`
### Proposed Behavior:
`alpine.integrations.ssl.verify` option
Contributor guide
Assessment
This issue has not been assessed yet.