Lieutenant Lieutenant
Lieutenant
327 views

AZURE scanning agent

Jump to solution

Hi

We have a on prem AZURE development environment and have automated the SCA to scan on build. Two questions:

1. Can we also launch WIE scans from AZURE environment, how to do it as we did not get anything for that in the AZURE pack... should the pack contain also DAST possibility

2. We have 20.1 on prem full environment, does 20.2 give improvements to speed up scans in AZURE environment as now they take a bit too long 🙂

0 Likes
1 Solution

Accepted Solutions
Micro Focus Frequent Contributor
Micro Focus Frequent Contributor

Correct, the Fortify Azure DevOps Extension started supporting WebInspect Dynamic Assessment tasks in version 7.0, which is documented at

https://www.microfocus.com/documentation/fortify-azure-devops-extension/7.0.0/AzureDO_Ext_Help_7.0.0/index.htm#WebInspect/WI_GetStarted.htm

This however requires a standalone WebInspect license and installation, not WebInspect Enterprise where such installations are acting as sensors.

View solution in original post

0 Likes
4 Replies
Community Manager Community Manager
Community Manager

Thank you for submitting your question, one of our experts is working on it and will get back to you in a moment!

0 Likes
Micro Focus Frequent Contributor
Micro Focus Frequent Contributor

Hi,

WIE scans can be triggered using its REST API, the details about it are available at  https://<WIEManager_URL>/WIE/REST/swagger

Version 20.2 provides many improvements, not limited to performance - one new feature you might be interested in is ScanCentral DAST

Regards - Dawid

 

Lieutenant Lieutenant
Lieutenant

Hi again

I was checking the new documentation and from that it seems that DAST is coming to the AZURE plugin in version 7.0 and the earlier versions does not include it... is this the case?

0 Likes
Micro Focus Frequent Contributor
Micro Focus Frequent Contributor

Correct, the Fortify Azure DevOps Extension started supporting WebInspect Dynamic Assessment tasks in version 7.0, which is documented at

https://www.microfocus.com/documentation/fortify-azure-devops-extension/7.0.0/AzureDO_Ext_Help_7.0.0/index.htm#WebInspect/WI_GetStarted.htm

This however requires a standalone WebInspect license and installation, not WebInspect Enterprise where such installations are acting as sensors.

View solution in original post

0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.