Collaborate Disseminate
I have created custom policies in Blackduck. I want my CI pipeline to break if the policy is violated.
I am running Detect with parameters such as
–detect.wait.for.results
–detect.policy.check.fail.on.severities
–detect.risk.repor… Continue reading I have created custom policies in Blackduck. I want my CI pipeline to break if the policy is violated [closed]
We created a threat model using the Microsoft Threat Modelling Tool.
We expect the teams to use the threat model before development, so, we want to publish this model as a template.
I cannot find a way or tool which can do that. How do I d… Continue reading Microsoft Threat Model | Converting Threat Model to Threat Template
I am new to this role. So I am trying to understand a few things.
My organisation wants to evaluate the existing application according to ASVS https://github.com/OWASP/ASVS/blob/master/4.0/docs_en/OWASP%20Application%20Security%20Verificat… Continue reading Automate ASVS with ZAP
I am new to this role. So I am trying to understand a few things.
My organisation wants to evaluate the existing application according to ASVS https://github.com/OWASP/ASVS/blob/master/4.0/docs_en/OWASP%20Application%20Security%20Verificat… Continue reading Automate ASVS with ZAP
Our solution contains jquery and javascript files.
We want to integrate a scanning tool for these files.
We are already using one tool for static code analysis and it is unable to identify the embedded jquery code.
Please suggest what tool… Continue reading Vulnerability scanner for the custom jquery files