Setting up a Fortify WebInspect Dynamic Assessment

To configure a Fortify WebInspect Dynamic Assessment task:

  1. In an Azure DevOps project, navigate to your existing build pipeline.

  2. Click Edit.

  3. Find and add the Fortify WebInspect Dynamic Assessment task.

  4. In the Scan Settings box, type the name of the settings file to use in the scan.

  5. In the WebInspect API box, type http://<hostname>:<port>/, where <hostname> and <port> identify where the WebInspect API is installed.

    You must specify the WebInspect API location. The task will not start without this information.

  6. In the Scan Results box, type the location where you want the scan results written.

WebInspect Dynamic Assessment Task

For more information about the WebInspect API, see the API documentation at http://<hostname>:<port>/webinspect/api on the agent where Fortify WebInspect is installed. If you used the default settings when configuring the Fortify WebInspect API, then type http://localhost:8083/webinspect/api.