Introduction

This is an example that demonstrate the ease of use of ASoC's powerful REST API capabilities integrating with Circle CI.

Within 7 simple REST API method calls, we were was able to check out a source code from a github repo, have a SAST scan submitted into ASoC for static analysis and get scan result/report back.

The example shows the process of scanning a node JS project using React. The full Circle CI YAML script is in the file config.yml

ASoC REST API used in this example

Account/ApiKeyLogin

/FileUpload

/Scans/StaticAnalyzer

/Scans/$scan_ID/Executions

/Reports/Security/Scan/$scan_ID

/Reports/$report_ID

/Reports/Download/$report_ID

ASoC's full REST API list:

https://cloud.appscan.com/swagger/ui/index

To set this up, first setup ASoC API Key and Secret as environment variables for the Circle CI project

Screenshot of the pipeline steps

The report is automatically saved as a Circle CI artifact

Checking out the "html" report in Circle CI