Compliment you SaST, DaST and IaST finding in SSC with Open Source security data from Sonatype's Nexus Lifecycle solution, powered by Nexus Intelligence, to get a complete, 360 degree view of your applications security posture.
Sonatype's Nexus Lifecycle is an open source Software Supply Chain Governance platform that allows organizations to precisely identify and reduce risk from the use of open source software without introducing false positives. This integration service and parser plugin can automatically publish results to Fortify Software Security Center (SSC) providing a consolidated view of vulnerable component findings alongside your SaAST, DaST and IaST findings. This Nexus Lifecycle integration accomplishes this by:
- The Service looks for new reports in Nexus Lifecycle and pushes findings to Fortify SSC on a periodic basis (configurable)
- There is a configurable mappings file to correlate application/phase repots in Nexus Lifecycle with application/version in SSC
- A plugin for Fortify SSC parses Nexus Lifecycle findings
This plugin is free for all Sonatype Nexus Lifecycle customers.
41 items
9 items
7 items
2 items
5 items
1 item
2 items
1 item
13 items
