Veracode Automation CLI (using Jenkins for SDL integration)
5 likes3,443 views
The Veracode Automation CLI is designed to automate application security scans and integrate them into CI/CD processes using Jenkins. It offers features such as listing applications, managing builds, and triggering scans, all while leveraging existing REST APIs. The CLI is hosted on GitHub and aims to improve productivity by simplifying scan script creation and results management.
1 of 16
Downloaded 32 times
More Related Content
What's hot (20)
PDF
Cloud Computing Architecture with Open Nebula - HPC Cloud Use Cases - NASA A...Ignacio M. LlorenteViewers also liked (20)
Ad
Similar to Veracode Automation CLI (using Jenkins for SDL integration) (20)
PDF
Security DevOps - Free pentesters' time to focus on high-hanging fruits // Ha...Christian SchneiderPDF
Security DevOps - Staying secure in agile projects // OWASP AppSecEU 2015 - A...Christian SchneiderPDF
Security DevOps - Wie Sie in agilen Projekten trotzdem sicher bleiben // DevO...Christian SchneiderAd
More from Dinis Cruz (20)
Recently uploaded (20)
Veracode Automation CLI (using Jenkins for SDL integration)
- 1. v0.5 (nov 2016) Veracode Automation CLI
- 2. VERACODE AUTOMATION CLI Why? ▸ Automate Application Security Scans ▸ Embed security scans in CI ▸ Based on Jenkins build pipeline ▸ Leverage central AppSec skills and distributed (one per app) network of Security Champions
- 3. VERACODE CLI
- 4. VERACODE AUTOMATION CLI Veracode CLI ▸ Based on existing official REST API ▸ Hosted on GitHub, released under Apache 2.0 license ▸ https://github.com/DinisCruz/veracode-api ▸ Created to improve productivity and to allow easy creation of scan scripts ▸ Provides easy access to apps, scans, builds and results
- 5. VERACODE AUTOMATION CLI List existing applications and builds
- 6. VERACODE AUTOMATION CLI Current scan status
- 7. VERACODE AUTOMATION CLI Create app, upload file, trigger scan, download, delete app
- 9. VERACODE AUTOMATION CLI Product Jenkins job triggers scan (on code push)
- 10. VERACODE AUTOMATION CLI Simple configuration
- 11. VERACODE AUTOMATION CLI Jenkins job to Download reports ▸ Runs every x minutes (at the moment set to 15m)
- 12. VERACODE AUTOMATION CLI Downloads reports that are ready, deletes app
- 13. VERACODE AUTOMATION CLI Results stored in GitHub (pushed from Jenkins)
- 14. CONCURRENT SCANS
- 16. Thanks