jenkinsci / contrast-continuous-application-security-plugin

Jenkins Plugin from Contrast Security

Contrast Jenkins Plugin

Repository for the Contrast Jenkins plugin. This plugin adds the ability to configure a connection to a Jenkins Build.

Requirements

• Jenkins version >= 2.60.3

Note: for Jenkins versions between 1.625.3 and 2.60.3, use plugin version 2.12.1

Documentation

Contrast Docs

Charts

There are 2 charts that are generated after each build Vulnerability Trends Across Builds and Severity Trends Across Builds.

Here are two examples of the charts:

Note: The Vulnerability Report is not supported by the pipeline step and jobs that have applications with overridden Vulnerability Security Controls. Your Contrast admin can override the Vulnerability Security Controls for certain applications using the Job Outcome Policies in Contrast.

Exported Configurations

TeamServer Profile Config

Contrast Vulnerability Security Controls Config

Building the plugin

mvn clean install

Running Locally

./run.sh