Skip to content

zerothreatai/azure-devops

Repository files navigation

Zero Threat AI Powered Security Scanner

Secure your code proactively. Use the ZeroThreat AI Powered Web Application/API Security Scanner to perform Dynamic Application Security Testing (DAST). It enables comprehensive Dynamic Application Security Testing (DAST) to detect vulnerabilities, making findings readily available on the ZeroThreat Portal for review.

Inputs

Input Description Required Default
ZT_TOKEN ZT_TOKEN to authenticate API request & start the scan. Yes
WAIT_FOR_ANALYSIS Set this true to wait for analysis to complete before finishing job. No false

How It Works

  1. ZeroThreat AI Scanner: The DAST scan is triggered by passing the zt_token. Each token corresponds to a specific target defined within the ZeroThreat application. Upon receiving the token, the ZeroThreat DevOps Bot executes prerequisite checks before commencing the scan process.
  2. Scan Report: As soon as the ZeroThreat DevOps Bot starts the security scan, The scan report will be available in the ZeroThreat Portal.

Secrets Setup

  1. Generate the zt_token from the ZeroThreat Portal.

  2. Add the secret where needed.

Notes

  • ZeroThreat offers a centralized dashboard displaying all scan results.