Enter the security result attributes.
Jenkins-Veracode:
'{"scanner": "Veracode", "applicationName": "", "buildVersion": "", "securityToolId": ""}'
scanner: Scanning tool and is required e.g. Veracode.
applicationName: Name of your Veracode application and is required. This attribute is applicable only for Veracode.
buildVersion: Veracode Scan name / build version and is optional. This attribute is applicable only for Veracode.
securityToolId: Security tool onboarded in ServiceNow (sys_id of the onboarded security tool) and is optional.
Jenkins-Checkmarx One:
'{"scanner": "Checkmarx One", "projectName": "", "projectId": "", "scanId": "", "securityToolId": ""}'
scanner: Scanning tool and is required e.g. Checkmarx One.
projectName/ProjectId: Name/Id of your Checkmarx One project and is required. This attribute is applicable only for Checkmarx One.
scanId: Checkmarx One scan id and is optional. This attribute is applicable only for Checkmarx One.
securityToolId: Security tool onboarded in ServiceNow (sys_id of the onboarded security tool) and is optional.
Jenkins-CheckMarx SAST:
'{"scanner": "Checkmarx SAST", "projectId": "", "securityToolId": ""}'
scanner: Scanning tool and is required e.g. Checkmarx SAST.
ProjectId: Id of your Checkmarx SAST project and is required. This attribute is applicable only for Checkmarx SAST.
securityToolId: Security tool onboarded in ServiceNow (sys_id of the onboarded security tool) and is optional.
Jenkins-Others:
You can use this snippet if you are using any other security tool that ServiceNow doesn't support in the base system.
In addition to "scanner" and "securityToolId" you must provide the required project information (e.g. scanId or ProjectId or ProjectName or any other attribute that is applicable) for us to retrieve the security scan results from your custom security tool.
'{"scanner": "", "securityToolId": ""}'
scanner: Scanning tool and is required e.g. Custom security tool.
securityToolId: Security tool onboarded in ServiceNow (sys_id of the onboarded security tool) and is optional.