Extension to integrate Contrast in your deployment flow.
Here you can specify your Contrast URL and credentials so our tasks are able to retrieve information from Contrast.
The task can be used to verify if an application has vulnerabilities.
Note: This task can only be used in an agentless job
Step one - Enter Edit mode
The task can be used in a Build or Release pipeline
Enter Edit mode for the release pipeline you wish to add the task.
Select a stage for which you wish to add the task
Enter Edit mode for the build pipeline you wish to add the task.
Step two - add the task
Now that you are in edit mode for a Release Pipeline or Build Pipeline, click on the ellipsis (...) menu and add an agentless job.
Click on the + button next to you agentless job and add the Contrast Assess - Application Vulnerability Detection task.
Step three - choose connection and application
Select a Service Connection from the Contrast Service Connection field. You can also click on the Manage option to go to the Service connections settings in your Project Settings.
Select one of your applications from the Application dropdown. This enables more fields for configuring the task.
Step four - configure the task
You can use the Allowed Status and Build Number fields to filter your results from Contrast, leave them blank if you don't want to filter. The values set in these fields will be validated against the conditions you configure in the following fields.
Proceed to your severity counters, where you must set the maximum number of vulnerabilities allowed per severity. If your selected application has more vulnerabilities than allowed for that severity level, your task will fail.
Step five - set job dependency
For Build Pipelines - If you would like to prevent the execution of a job if the task fails, you must set the job to depend on the agentless job that includes the Contrast task.
Select the job you want to prevent from executing.
In the Dependencies section, add the agentless job.
For more information, visit the Contrast OpenDocs Project