adioss / threadfix-plugin

Jenkins ThreadFix plugin publisher provides the ability to upload any supported scan artifact, from your Jenkins server to your ThreadFix deployment. Allowing integration between your continuous integration (CI) environment to your centralized software vulnerability management system.

Note

• This plugin is not maintained by Denim Group
• Plugin version 1.0 supports ThreadFix versions 1.0 and 2.x.

Features

• Upload any supported scan file(s) from your Jenkins Slave/Master to your ThreadFix web server using your ThreadFix API Keys.
• Ability to specify any scan filename under the Project's workspace using Jenkin's environmental variables.
• ThreadFix REST API is used for all communication from the Jenkins Server.

Installation & Setup

A ThreadFix server deployment with an API Key created from your ThreadFix installation.

Jenkins Global Config

Jenkins Project Config

License

MIT License (MIT)

Contact

brandon [at] automationdomination [dot] me