CO056906 (Community Member) asked a question.
Is there a way to link DAST essentials scans to application just as we can link current dynamic scans?
Currently we have dynamic scans linked with applications defined on our veracode platform so that static and dynamic scans are applied to policy. I would like to start switching over to DAST Essentials, but I cannot find a way to link the results to applications. I also cannot find a way to use custom selenium scripts either so it limits our use of DAST Essentials. Any insights on these would be appreciated.
.png){kind=logo}
Hello user,
I would recommend you contact our technical support team. Here's how you can log a case:
1. Navigate to the upper right corner of any page in the Community, and click on your user avatar.
2. Select Contact Support from the drop-down menu.Open a case with Support, for Dynamic analysis and they will be able to help you with the query.
Regards,
Pranita
Veracode Inc.
I checked with support and currently DAST essentials does not support selenium or other scripting at this time.
I am still looking for a way to link the DAST essentials results to policy scans so they can stop our azure devops builds if they don't meet policy.
Hello @CO056906 (Community Member)
At the moment, the scans runned by Essentials does not affect policies because DAST Essentials came from Crashtest (independent tool which was bought by Veracode and integrated).
In a future, Veracode will merge the scanners and the results will affect the policies.
What is the timeline for adding this feature? DAST Essentials has been available in the platform for almost 2 years now, but we still cant start using it for policy scans until app linking is available...
Hi @Blomgren (Community Member) Automated app linking works now, and manual app linking is coming soon. If your company has auto-app linking enable for the "org" within Veracode then it automatically creates the app profile for all Enterprise mode scans in DAST Essentials. We are currently working on enabling the same manual app linking flow as in DA - coming in the next several weeks-ish.
I've also let the PM and Docs teams know about your request, so we will be updating our docs re: this topic 🙂
Thanks for the update. I was not aware that this feature would be released so soon. Manual linking is an essential feature required for our organization to implement DAST Essentials in place of DAST Analysis because automatic recreation of app profiles would result in duplicate profiles, which already have prior DAST history, SAST scans mapped through automation, policy assignments, and custom metadata defined. The autocreation of new profiles as it was described does not sound like a viable or scalable solution for us.