TOOL
Supported tools
SD Elements supports file-based and remote connection verification integrations. If a remote connection to the tool is desired, SD Elements should have network connectivity to the server, such as being on the same internal network or being Software As A Service (SAAS) deployments. If this is not possible, then at least one other system must have connectivity to both SD Elements and the server.
This determines which integration method must be used. If the SD Elements server can communicate directly with the verification server, then you can use the normal integration process inside of the SD Elements application. If the SD Elements and verification server cannot communicate directly, use the Remote Integration Agent.
If HTTPS is used and the certificate authority is not public, then SD Elements or the Remote Integration Agent must be set up to trust the server certificate. The verification products supported by SD Elements are listed below:
Latest Versions Supported
VERSION |
|
Black Duck |
On Premise, 2023.7.2 |
Checkmarx AST (CxOne) |
Cloud, Latest Version |
Checkmarx Static Code Analysis (CxSAST) |
Cloud, Latest Version |
Fortify on Demand |
Cloud, Latest Version |
Fortify Software Security Center (SSC) |
On Premise, 23 |
HCL AppScan Enterprise, Standard and Source & Security on Cloud |
On Premise, 10.3.0 |
HP WebInspect (File Upload) |
On Premise, 20.1.0 |
Klocwork |
On Premise, 2023 |
Prisma Cloud (formerly known as Twistlock) |
Cloud, Latest Version |
Snyk, SCA |
Cloud, Latest Version |
SonarQube |
On Premise, 9.9.0 |
Tenable Nessus |
On Premise, 10.7.4 |
Veracode |
Cloud, Latest Version |
WhiteHat Sentinel |
Cloud Latest Version |