AZURE scanning agent

[Avox]

Hi

We have a on prem AZURE development environment and have automated the SCA to scan on build. Two questions:

1. Can we also launch WIE scans from AZURE environment, how to do it as we did not get anything for that in the AZURE pack... should the pack contain also DAST possibility

2. We have 20.1 on prem full environment, does 20.2 give improvements to speed up scans in AZURE environment as now they take a bit too long 🙂

[COEST]

Thank you for submitting your question, one of our experts is working on it and will get back to you in a moment!

[Dawid]

Hi,

WIE scans can be triggered using its REST API, the details about it are available at  https://<WIEManager_URL>/WIE/REST/swagger

Version 20.2 provides many improvements, not limited to performance - one new feature you might be interested in is ScanCentral DAST

Regards - Dawid

[Avox]

Hi again

I was checking the new documentation and from that it seems that DAST is coming to the AZURE plugin in version 7.0 and the earlier versions does not include it... is this the case?

[Dawid · Accepted solution]

Correct, the Fortify Azure DevOps Extension started supporting WebInspect Dynamic Assessment tasks in version 7.0, which is documented at

https://www.microfocus.com/documentation/fortify-azure-devops-extension/7.0.0/AzureDO_Ext_Help_7.0.0/index.htm#WebInspect/WI_GetStarted.htm

This however requires a standalone WebInspect license and installation, not WebInspect Enterprise where such installations are acting as sensors.