NowSecure Auto Jenkins Plugin

Deprecation Notice

This Extension has been deprecated. NowSecure strongly recommends migrating to the updated NowSecure Jenkins Plugin which can be found in the JenkinsCI Organization's GitHub.

Migration to the new extension is straightforward:

1. Install the new NowSecure CI Assessments plugin from the Jenkins Plugin Manager
2. Review the parameters for the new extension taking care to evaluate the updated default values of parameters to ensure the meet your requirements.

Take note of analysis_type which is a new parameter. This parameter allows you to run static only or full assessments.

Overview

This plugin provides the ability to send Android or iOS applications to NowSecure Auto for Mobile Application Security Testing (aka MAST)

Documentation for

Building

mvn hpi:run

Findbugs

mvn findbugs:gui

Installing

mvn clean install
cp target/nowsecure-auto-security-test.hpi ~/.jenkins/plugins/

Then redeploy Jenkins.

Deploying

Generate API Key

See https://docs.nowsecure.com/auto/integration-services/jenkins-integration for adding API token.

Store API Key in Jenkins Credentials

Select Credentials from sideline:

Store API Key as Secret text:

Define Jenkins Job

Bind Credentials with apiKey variable

Adding Plugin to your mobile build

Select Configure option from Jenkins console, then select dropdown of build step and choose NS Auto Jenkins Plugin, e.g.

Specify configuration parameters

Advanced configuration options

Kick off build

Kick off your mobile builds and you will see the raw JSON reports and score under artifacts folder.

Pipeline

Adding plugin to pipeline:

Resources

• https://wiki.jenkins.io/display/JENKINS/Credentials+Plugin