Fix Tenable hash code calculation by removing dynamic description fie… by tejas0077 · Pull Request #14529 · DefectDojo/django-DefectDojo
Description
The Tenable Scan hash code configuration included the description field:
["title", "severity", "vulnerability_ids", "cwe", "description"]
The description field contains dynamic data (plugin_output) that changes
between scans of the same host and finding, causing deduplication to fail
and creating duplicate findings on reimport.
Fix: removed description from the hash code fields. The title, severity,
vulnerability_ids and cwe fields are sufficient to uniquely identify a
Tenable finding. Endpoint deduplication handles port-level separation.
Fixes #11994
Test results
Manually verified the hash code configuration change. The remaining fields
(title, severity, vulnerability_ids, cwe) are stable between scans and
sufficient to uniquely identify findings.
Documentation
No documentation changes needed.
Checklist
- Bugfix submitted against the bugfix branch.
- Meaningful PR name given.
- Proper labels added.