OTHER DATA PROTECTION CASE STUDIES
Customer is a leading SaaS based Application security solution provider
Client demanded development of a Gradle plugin that would automate the scanning of Gradle repositories
Sacumen developed the certified Gradle Plugin
The plugin was written in Groovy language using the Gradle Plugin framework
User has ability to define the Failure Criteria, Scan API details as Environment Variables or Build Properties
As part of build step, the plugin launches a scan on the selected repo with the configured options. Plugin makes the REST API call to the platform to perform the scan
Failure criteria is built based on severity of vulnerabilities, QID values etc. If the failure conditions are met then the build will fail. After scan is performed, users will be able to see results in the build log.