TargetFolder: '$(build.artifactStagingDirectory)'
Copy the API key (You can add a name and an expiry date to your key)įind it in Azure Devops Marketplace using "Ostorlab Security Test Extension". Click the new button to generate a new key. OSTORLAB_RISK_THRESHOLD - Specifies your risk rating threshold. OSTORLAB_BREAK_BUILD_ON_SCORE - Set to true to generate an exception if the scan risk rating is higher than the threshold. OSTORLAB_WAIT_MINUTES - Specifies the number of minutes to wait. OSTORLAB_WAIT_FOR_RESULTS - Set to true if you want to wait for the scan to finish and retrieve the result. OSTORLAB_TITLE - Specifies the scan title. You can choose between Fast Scan for rapid static analysis or Full Scan for full Static, Dynamic and Backend analysis. OSTORLAB_SCAN_PROFILE - Select the scan profile to run. 
FILE_PATH - Specifies the path to the Android APK file or the iOS IPA file. Job Parametersįollowing are parameters needed for the job: Required environment variables Ostorlab provides both static and dynamic analysis capabilities, detecting over 500 vulnerability classes, like hardcoded secrets, privacy data leakage, untrusted input inject, outdated dependencies with a database of over 120k known vulnerable dependency. 
This includes Java, Kotlin, Objective C, Swift, Flutter, Cordova, React Native, Ionic and Xamarin. Ostorlab supports all major frameworks, both native and multi-platform. It provides full coverage by detecting issues on both the client-side and service-side, covering both the application code and all of its dependencies. Ostorlab scans mobile applications (Android APK, AAB, iOS IPA) for security and privacy issues. This extension/plugin adds the ability to perform automatic mobile app security testing for Android and iOS mobile apps through the Ostorlab SaaS platform. Azure Extension for Ostorlab Mobile security & privacy scanner
0 kommentar(er)
