This orb uses Netsparker Enterprise to scan your web application for security vulnerabilities. It enables security testing in your CircleCI pipeline.
CircleCI is a leading continuous integration tool that allows building, testing,and deploying applications. Orbs allow CircleCI to be extended with additional functionality. In this particular case, this orb integrates Netsparker Enterprise with CircleCI enabling security testing of your applications.
You can learn more about Orbs here.
Netsparker is an easy to use yet advanced web security solution that can easily scale up and automatically find vulnerabilities in hundreds and thousands of web applications and web services within a matter of hours. It can also be easily integrated within your secure SDLC.
- Accurate Reports with Proof-Based Scanning™
- Scan All Your Web Assets
- Advanced Scanning & Crawling Technology
- Identify the Most Complex Vulnerabilities
- Practical Vulnerability Details
- Include All the Team to Boost Security
- Automate Vulnerability Triage & Management
- Integration in the SDLC, DevOps & Other Environments
- Built-In Tools for Advanced Assessments
- Reports - all data at your fingertips
Example config.yml:
version: 2.1
orbs:
netsparker: netsparker/[email protected]
workflows:
scan-workflow:
jobs:
- netsparker/scan:
website_id: ${WEBSITE_ID}
api_url: ${API_URL}
# If scan_type is "FullWithPrimaryProfile", you do not need to fill in scanProfile_id.
scanProfile_id: ${SCANPROFILE_ID}
scan_type: ${SCAN_TYPE}For more detailed usage for this Orb, please check here.
Before using the plug-in, you need the API Key of a user with "Start Scan" privileges to start scanning with Netsparker Enterprise.
-
Log in to Netsparker Enterprise.
-
Select [Your Name] (top right of window), then API Settings. The API Settings window is displayed.
-
In the Current Password field, enter your current password.
-
Click Submit.
-
Your User ID and Token are displayed.
-
Then add these values to your project as shown here.
-
for more information click
In order to access other information (eg website_id, scan_type) required in ".yaml" file;
- Log in to Netsparker Enterprise.
- Click "Integrations> New Integration" from the menu on the left. From the page that opens, click CircleCI under the "Continuous Integration Systems" tab.
- Please select the type you want to scan. (Incremental, Full With primary profile, Full With selected profile). ApiUrl, WebsiteId, ScanType and ProfileId will be provided to you according to your choice. You can add values without quotation marks, as shown in the usage area.
