Docs Updates: Feb

[paulOsinski]

• Retitle articles to specify OS context
• Remove index pages and other irrelevant articles from search
• Add more notes on windows CLI tool installation
• Add docs on Universal Parser (upcoming Pro feature)
• Add back defectdojo.com/pricing links
• Add an SCSS override to fix the 'static width central column' issue and accommodate wider screens

[sc-8970]
[sc-9508]
[sc-10106]
[sc-10136]

[dryrunsecurity]

DryRun Security Summary

Documentation updates include adding 'exclude_search: true' to front matter metadata, security-related changes to hyperlinks and contact information, and addressing configuration risks related to environment variables and API tokens across multiple files.

Expand for full summary

The pull request introduces multiple documentation configuration updates across several files, primarily adding exclude_search: true to front matter metadata. In the "about_defectdojo/request_a_trial.md" file, a security-sensitive hyperlink was added, and potential information exposure was identified through email contact points and trial signup process details. The "connecting_your_tools/external_tools.md" file contains security considerations around environment variable configuration, with risks related to API token exposure and potential configuration inconsistencies.

Security Findings:

1. Email Contact Exposure: Multiple public email addresses ([email protected], [email protected]) potentially vulnerable to social engineering
2. Environment Variable Risks: Potential security concerns with API token configuration in Windows environments
3. Potential Information Disclosure: URLs revealing internal directory structures and system details
4. Sensitive Configuration Handling: Risks in setting environment variables and API token management
5. Hyperlink Security: Added links using HTTPS to DefectDojo-owned domains

Code Analysis

We ran 9 analyzers against 27 files and 1 analyzer had findings. 8 analyzers had no findings.

Analyzer	Findings
Configured Codepaths Analyzer	2 findings

Overall Riskiness

🔴 Risk threshold exceeded.

We've notified @mtesauro, @grendel513.

View PR in the DryRun Dashboard.

[mtesauro]

Approved