[devGregA]

Summary

These pages describe a DefectDojo Pro feature that ships in an upcoming release. Please merge this with that release and not before, so the docs do not describe something readers cannot use yet.

DefectDojo Pro's PSIRT module can publish an authored advisory to a public advisory site at advisory.defectdojo.com. This change documents that, in text only.

PSIRT Settings (docs/content/psirt/settings.md) gains an Advisory Site section:

• what publishing needs (the PSIRT: Advisory Site feature flag, which DefectDojo turns on per instance, and a license that includes advisory publishing)
• the publisher profile fields: display name, namespace, contact, requested slug and the CSAF aggregator choice
• that DefectDojo staff review and activate a publisher before anything goes public
• the statuses the card shows (Not Sent, Pending, Active, Suspended) and what each means for publishing and for pages already on the site
• that the display name, namespace and slug are fixed once the publisher is active
• what happens to public pages when a subscription stops including advisory publishing
• that an airgapped instance cannot use the feature

Advisories (docs/content/psirt/advisories.md) gains a "Publishing to the advisory site" section:

• what the advisory site is
• the "Publish to the advisory site" switch, and that it is part of what reviewers approve
• the six readiness checks and what to do about each
• what the public document contains and what stays out
• what happens at publish, the states of the Advisory Site delivery row, and how a failed send is retried
• how a revision reaches the site
• Withdraw: what it does, who can do it, that it cannot be undone from the product, and that an advisory on the site cannot be deleted until it is withdrawn
• an API example for reading the delivery state and for withdrawing, on /api/v2/

Corrected, because the page no longer matched the product:

• Preflight runs seven checks. The CSAF export check builds and validates the document and reports a problem as a warning, where the page said it was not implemented. The new advisory site check is listed.
• The "Flag errata" action is removed. The section is now "Revisions" and says a correction is made by revising and publishing a new version.
• Branding captured with a snapshot is removed. "Snapshots" now says a snapshot is the frozen content of a published version.

The PSIRT index page and the Feature Flags page each get one line that points at the new section. Translated copies of these pages are not touched.

🤖 Generated with Claude Code