Sync Assets & Vulnerabilities from Veracode SAST to Strobes

This guide will walk you through how to sync your assets and vulnerabilities from Veracode SAST into the Strobes platform. Before you begin, ensure your Veracode credentials are already configured. If not, click here to learn how to set them up.

Step-by-Step Instructions

Step 1: Navigate to the Connector

1. Go to the Connectors section on the Strobes platform.
2. Under Static Security Scanners, click on Veracode SAST.

Step 2: Configure Your Sync Settings

You’ll be prompted to fill in the following details:

• Configuration Name: Give your configuration a recognizable name.
• Veracode Credential: Select the Veracode credential you've configured earlier.
• Baseline: Choose a baseline to which the vulnerabilities will be logged.

Click Next to proceed.

Step 3: Set Sync Preferences

• Agent: Choose Strobes Default Agent.
• Sync Frequency: Select how often you’d like the data to sync (e.g., daily, weekly).

Step 4: Map Assets to Veracode Projects

• You’ll now need to map your Strobes assets to the respective Veracode projects.

Step 5: Optional – Tracking & Notification Settings

• If you want to enable alerting or tracking, you can configure your preferred tools at this step. This is optional.
• Click Submit to finish setting up the configuration.

Step 6: Start the Sync

Once your configuration is created:

• Click on Sync Now to pull in the latest assets and vulnerabilities from Veracode SAST.

You're all set! Your Veracode SAST data will now start appearing inside Strobes as per your sync schedule.