Understanding the Launch Artifacts

The Configuration Tool CLI creates scripts for Windows and Linux containers. The dast-windows-start.zip file contains scripts for starting Windows containers. The dast-linux-start.tar.gz file contains scripts for starting Linux containers.

If you provide an --outputDirectory setting in the configureEnvironment command, then these files will be written to the directory you specify. If you do not provide an --outputDirectory setting, then these files will be written to the directory where the DAST.ConfigurationToolCLI.exe file is located.

For more information about the DAST components mentioned here, see What is ScanCentral DAST? and ScanCentral DAST with Two-factor Authentication.

The following table provides details about these files.

File Description

appsettings.json

Configures the sensor service. Use this file to run the Fortify ScanCentral DAST Sensor Service and a Fortify WebInspect sensor.

DAST-api.pfx

If you generated a certificate for the DAST API service using the Configuration Tool CLI, this certificate file must be on the host computer where the DAST API container will be running.

Note: This file is not downloaded if you use a certificate provided by a certificate authority (CA) or use an existing certificate.

DAST-utilityservice.pfx

If you generated a certificate for the DAST Utility service using the Configuration Tool CLI, this certificate file must be on the host computer where the DAST Utility service container will be running.

Note: This file is not downloaded if you use a certificate provided by a certificate authority (CA) or use an existing certificate.

docker-compose.scancentral-dast-sensor.yaml

(Linux only)

Pulls the Fortify WebInspect Linux scanner, database, WebInspect script engine (WISE), and 2FA server images from Docker Hub, and then starts the containers as a DAST sensor.

docker-compose.scancentral-dast-utilityservice.yaml

(Linux only)

 Pulls the Fortify WebInspect Linux scanner image and database from Docker Hub, and then starts the containers as the DAST Utility Service.

docker-compose.yml

Pulls images and starts containers for the DAST API, DAST Global Service, and DAST Utility Service.

pull-and-start-containers.ps1

pull-and-start-containers.sh

Pulls the DAST API, DAST Global Service, and DAST Utility Service images from Docker Hub, and then starts the containers.

pull-and-start-sensor-container.ps1

pull-and-start-sensor-container.sh

Pulls the Fortify WebInspect Windows image or the scanner Linux image from Docker Hub, and then starts the container.

pull-and-start-twofactorauth-container.ps1

pull-and-start-twofactorauth-container.sh

Pulls the 2FA Server image from Docker Hub, and then starts the container.

For instructions on using the PowerShell script, see Using PowerShell Scripts for the 2FA Server. For information about executing the bash script, refer to your Linux distribution documentation.

pull-images.ps1

pull-images.sh

Pulls the DAST API, DAST Global Service, and DAST Utility Service images from Docker Hub, but does not start the containers.

pull-sensor-image.ps1

pull-sensor-image.sh

Pulls the Fortify WebInspect Windows image or the scanner Linux image from Docker Hub, but does not start the container.

pull-twofactorauth-image.ps1

pull-twofactorauth-image.sh

Pulls the 2FA Server image from Docker Hub, but does not start the container.

For instructions on using the PowerShell script, see Using PowerShell Scripts for the 2FA Server. For information about executing the bash script, refer to your Linux distribution documentation.

service-token.txt

Contains the shared secret that all your DAST sensors must use to authenticate with the DAST API.

start-containers.ps1

start-containers.sh

Starts the DAST API, DAST Global Service, and DAST Utility Service containers, but does not pull the images.

start-sensor-container.ps1

start-sensor-container.sh

Starts the Fortify WebInspect container, but does not pull the image.

start-twofactorauth-container.ps1

start-twofactorauth-container.sh

Starts the 2FA Server container, but does not pull the image.

For instructions on using the PowerShell script, see Using PowerShell Scripts for the 2FA Server. For information about executing the bash script, refer to your Linux distribution documentation.

What's Next?

You can use the launch artifacts to pull the DAST API, DAST Global Service, DAST Utility Service, and Fortify WebInspect images from Docker Hub and start the containers. You can accomplish this task in one of the following ways: