The following plugin provides functionality available through Pipeline-compatible steps. Read more about how to integrate steps into your Pipeline in the Steps section of the Pipeline Syntax page.

For a list of other such plugins, see the Pipeline Steps Reference page.

Contrast Continuous Application Security

contrastAgent: Download latest Contrast agent

Pipeline step for adding a Contrast agent to your build.
Usage Example:
contrastAgent profile: 'Localhost', outputDirectory: "${project.build.directory} + '/tmp'"
  • profile (optional)
    • Type: String
  • outputDirectory (optional)
    • Type: String
  • agentType (optional)
    • Type: String

contrastVerification: Verify vulnerabilities in a build

Pipeline step for verifying your build with Contrast.
Usage Example:
contrastVerification profile: 'Localhost', applicationId: 'cb3ea678-38c8-4487-ba94-692a117e7966', count: 10, rule: 'xss', severity: 'High', queryBy: 1
The plugin can use either the unique identifier appVersionTag or the startDate to filter vulnerabilities and check conditions. You can change the format used by the plugin to create appVersionTag or set the plugin to use startDate using queryBy pipeline parameter. Three options are available:
1 - appVersionTag, format: applicationId-${BUILD_NUMBER} (default)
2 - appVersionTag, format: applicationId-${JOB_NAME}-${BUILD_NUMBER}
3 - startDate (Build timestamp)

Please note that the "queryBy" option should match the "contrast.override.appversion" parameter you pass to the Contrast Java agent when running your application. In case you use the third "queryBy" option, passing the "contrast.override.appversion" parameter to Contrast Java agent is not required.
  • profile (optional)
    • Type: String
  • count (optional)
    • Type: int
  • rule (optional)
    • Type: String
  • severity (optional)
    • Type: String
  • applicationId (optional)
    • Type: String
  • queryBy (optional)
    • Type: int
  • applicationName (optional)
    • Type: String

Was this page helpful?

Please submit your feedback about this page through this quick form.

Alternatively, if you don't wish to complete the quick form, you can simply indicate if you found this page helpful?

    


See existing feedback here.