Difference between the fields "date" and "created" for a finding.

[vini-ppro]

When getting a finding from the API, the finding json has these two fields:

• date pointing to a date in the format 2025-02-08
• created - pointing to a timestamp in the format 2025-02-10T13:55:21.073836Z

These same fields are available in the table dojo_finding of the database. date is of type date and created is of type timestamptz.

These fields tend to be the same for most findings and tend to point to the data the finding was created, but in a few cases the values are different.

What is the difference between these two fields and how to control their values when ingesting new findings via the import/re-import functions?

[valentijnscholten]

The date field is the logical date at which the finding was found/detected/discovered (Date Discovered field in the UI).
This date can be different (earlier) than the date at which the finding was created/imported in Defect Dojo (created field).

The date field can be set when (re)importing a scan via the UI or via settings the scan_date field in the API (re)import request. The date field can also be edited in the UI when editing a finding.

If applicable, please mark the correct answer as "Answer".

[vini-ppro]

Right, so the created field cannot be controlled and it will always be the timestamp when the issue was registered in DefectDojo.

I will mark this as answered, but please let me know if my understanding above is not corrected.

Thanks a lot.

[valentijnscholten]

correct