DefectDojo DB - products and findings

[fabiolanza]

Hi,

I am working on creating custom DefectDojo reports by directly querying the database, and I would like to know which tables should be considered for associating products and findings. I did not find any column on the finding table that would allow an association with the product.

Basic idea is to have a final table with the following columns: product, product version, component, component version, cve, cve severity, analysis fields

Can you please advise?

Thanks

[fabiolanza]

I came up with the following query. Isn't there a way to have the product version?
select p."name", f."component_name", f."component_version", f."cve", f."severity" from "public"."dojo_engagement" e, "public"."dojo_product" p, "public"."dojo_test" t, "public"."dojo_finding" f where e."product_id" = p."id" and t."engagement_id" = e."id" and f."test_id" = t."id"