CI/CD Scans
ArcherySec integrates with CI/CD pipelines using the archerysec-cli. archerysec-cli
automated and inject scanners in CI/CD pipeline.
CI/CD Scan Policies
CI/CD policies define the criteria for passing or failing a archerysec-cli scan. The archerysec-cli scanner returns either exit code 0 pass or exit code 1 fail after each scan, enabling you to stop the build or deployment process on basis of defined criteria.
Add New CI/CD Scan Policie
To define a CI/CD policy:
- Move to CI/CD module
- Click on Add Policy
- Provide
Policies Name
- Select
Project
from options. Create new project if you have not created one. - Define
Threshold
from issue typeHigh
Medium
andLow
- Select
SCM Server
- Select
Build Server
- Provide
Target Name
- Provide
Code Path/Target
(Code Path for SAST or SCA scan and Target for DAST) - Select your scanner type
- Copy Command and inject into your Pipeline script
- Now Click on
Submit
archerysec-cli Scan