Continuous Integration is a software development practice which involves the frequent merging, or integration of work from different developers on a team. Not only does CI help eliminate tedious and error-prone work, but it also reduces the chance of bugs – including web vulnerabilities. With the Invicti Jenkins Plugin, Invicti can be embedded into the CI process of web applications. DevOps can now ensure the quick remediation and continuous monitoring of vulnerabilities during the SDLC.
The Invicti plugin for Jenkins the popular open source Continuous Integration (CI) and automation platform, allows development and operations teams to identify and track web application vulnerabilities early on in the Software Development Life Cycle (SDLC), and crucially, before they make it into production. The Invicti Jenkins Plugin integrates seamlessly with the Jenkins’ build process, triggering automated Invicti scans as part of the web application’s build process inside of the Jenkins CI platform. It can be configured to fail the build and optionally abort the scan, as soon as a specific threat-level is reached. All scan data is stored in Invicti for further analysis and vulnerability management. Reports are automatically generated, and while these reports will remain in Invicti, a download link will be provided inside the job console output for convenience.
The Invicti Jenkins Plugin enables you to:
- Trigger Invicti scans from within Jenkins upon each build.
- Trigger Invicti scans with built-in or custom Scan Types to only scan for specific vulnerabilities.
- Configure Jenkins to fail a build (and optionally abort the scan) as soon as a specific threat-level (high, medium or low severity) is reached.
- Automatically generate reports with download link inside the Jenkins job console output.
How to obtain the Invicti Jenkins Plugin
The Invicti Jenkins Plugin is available to all Invicti Enterprise customers. The Invicti plugin can be downloaded from the Jenkins plugins repository. Read how to install the plugin from here: Configuring Invicti Jenkins Plugin.
Get the latest content on web security
in your inbox each week.
THE AUTHOR
Marketing Manager
