Tamp REST client for DefectDojo (API v2) — push SARIF findings and Dependency-Track FPF exports into engagements via import-scan / reimport-scan.
| Package | Status |
|---|---|
Tamp.DefectDojo.V2 |
1.11.2 (post-migration from main tamp) |
dotnet add package Tamp.DefectDojo.V2Multi-targets net8 / net9 / net10.
This package previously shipped from the main tamp repo (up to 1.11.1). It moved to its own satellite at 1.11.2 (TAM-254) so:
- Tool releases don't gate Tamp.Core releases (and vice versa).
- Adopters can pin the wrapper independently of Tamp.Core minors.
- The wrapper's release cadence tracks the wrapped tool instead of the whole framework.
Package ID, namespace, public API, and version line are unchanged — adopters see no break.
MIT — see LICENSE.