Skip to content

Add bulk DAST audit action for SSC application versions - #1094

Open
kireetivar wants to merge 1 commit into
fortify:feat/v3.x/aviator/26.4from
kireetivar:p/kireetivar/bulk_dast_audit
Open

Add bulk DAST audit action for SSC application versions#1094
kireetivar wants to merge 1 commit into
fortify:feat/v3.x/aviator/26.4from
kireetivar:p/kireetivar/bulk_dast_audit

Conversation

@kireetivar

Copy link
Copy Markdown
Contributor

Summary

Adds fcli ssc action run bulkaudit-dast for organization-wide DAST auditing across SSC application versions.

The action discovers application versions with processed WebInspect results, skips versions already audited against the current scan, and runs aviator ssc audit-dast for the remaining candidates.

Changes

  • Added the bulkaudit-dast SSC action.
  • Added support for:
    • --filter
    • --exclude-filter
    • --max-audits
    • --dry-run
    • --aviator-app-mapping
    • custom DAST tag mappings
    • refresh and refresh-timeout options
  • Added processed WebInspect artifact detection.
  • Added last_dast_audit marker tracking.
  • Added Aviator application creation and entitlement handling.
  • Continued processing after per-version artifact, attribute, application, or audit failures.
  • Added separate selection-failure and audit-failure summary counts.
  • Renamed correlation-specific SSC attribute helpers to neutral Aviator SSC attribute helpers.
  • Updated bulk correlation to resolve attribute identities from SSC.
  • Documented SSC, Aviator user-session, and Aviator admin-configuration requirements.
  • Added regression coverage for attribute updates and marker-write failures.

Usage

fcli ssc action run bulkaudit-dast 

@kireetivar kireetivar self-assigned this Sep 10, 2026
@kireetivar
kireetivar marked this pull request as ready for review September 10, 2026 10:54
@kireetivar
kireetivar requested a review from rsenden September 10, 2026 10:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant