docs: Update the API pull documentation

[sNiXx]

Description

Updating a few minor inconsistencies and errors, but also adding more details about custom trust configuration.

Test results

N/A

Documentation

This is a docs-only PR

[Maffooch]

Please remove additional commits for other PRs

[paulOsinski]

REQUESTS_CA_BUNDLE environment variable

this is an env var within SonarQube? Just want to specify

[sNiXx]

No, this appears to be an env variable of the python requests library (see here). Although its usage in DefectDojo is not really documented besides in one sentence here and in the helm instructions (e.g. here)

As far as I understand, REQUESTS_CA_BUNDLE should ideally point to a file (or a directory) that includes custom trusted CA certificate(s) as well as the other trusted CA certificates already present (i.e. it overrides the default trust store).

I would propose to reflect this in the documentation by referencing the official requests docs.

Another alternative could be to bind /etc/ssl/certs to a read-only mounted volume, add the custom trusted CA certificates with Ubuntu's update-ca-certificates command and then set REQUESTS_CA_BUNDLE to /etc/ssl/certs/ca-certificates.crt

Writing these lines, I wonder, if it would make sense to have a dedicated page for this?

[valentijnscholten]

@sNiXx That would be very helpful (a page about REQUESTS_CA_BUNDLE). But can be a follow up PR as it's not blocking this.

[mtesauro]

Approved.

Pinged @paulOsinski and he's good with the extra docs happening in a future PR

Confirmed with paulOsinski that we're good here before dismissing.