ibm/asoc-devops-tooling

This project will provide DevOps automation in the form of snippets, sample apps, and plugins in support of integrating with IBM Application Security on Cloud for automated security scans of software projects using popular tools and frameworks across the DevOps landscape.

asoc-devops-tooling

This project will provide DevOps automation in the form of snippets, sample apps, and plugins in support of integrating with IBM Application Security on Cloud for automated security scans of software projects using popular tools and frameworks across the DevOps landscape.

We welcome contributions! Read our Contributors guide

IBM Application Security on Cloud

SaaS solution helping teams perform static, dynamic and mobile application security testing in the Cloud, letting you detect and fix security vulnerabilities early in the DevOps pipeline.

Taming the Open Source Beast with an Effective Application Security Testing Program

Integrations

• Jenkins
• Travis CI
• Python Wrapper
• AppScan Issues Gateway Resilient

asoc-devops-tooling's Issues

Create Dockerfiles for Desktop & Jenkins cli runners

Provide 2 Debian based Dockerfiles that import the latest CLI into the image build for usage in 2 scenarios:

• Jenkins Executor Container for usage by Kubernetes or Docker Plugins in dynamic executor clouds
• Local Desktop environments

Update outdated AppScan URLs

IBM Static Scan on Travis Integration (travis-appscan-automation) project contains outdated URLs that are not working anymore.

• Update Configfile and README.md files with the correct URLs

Shouldn't this repo be under the HCL org?

HCL bought ASOC from IBM some time ago. It doesn't make sense that this repo should still be under the IBM organization.