WhiteHat Sentinel Source (Apps vice Sites)

[Phil Cox]

When I integrate with WhiteHat, it give me site (dynamic) assets, I want apps (static) assets. How can I get TF to use the latter?

Phil

[Dan Cornell]

Phil - We talked about this on Twitter, but wanted to update the conversation on the Google Group as well.

WhiteHat has two API constructs - "sites" for their dynamic testing and "applications" for the static testing (or so it appears) We now have access to a demo account that has applications and static data so now we are working to add support for WhiteHat static results.

You can track progress with this GitHub issue here:

https://github.com/denimgroup/threadfix/issues/6

Thanks,

Dan

[Dan Cornell]

For anyone following this thread, the code has been written:

https://github.com/denimgroup/threadfix/pull/1128

Just need to merge the pull request and it will be available in the "dev" branch.

Thanks,

Dan