Polaris prerequisites

Continuous integration for Polaris

To integrate Polaris with Bridge the following prerequisites are required:

  1. Access to a Polaris server with permission granted to create access tokens and projects.
  2. A Polaris access token or service account token to allow integration with a Polaris server instance.
  3. Bridge automates application onboarding based on license model:
    License model Description Onboarding
    Concurrent(team member)
    • Seat based license model
    • Automated onboarding for SAST and SCA scans
    • Unlimited applications, projects and branches can be created.
    Subscriptions
    • Customers purchase a specific number of applications.
    • An application contains one or more entitlements(SAST, DAST or SCA) that determine what type of tests can be run on Polaris.
    • Application should be created manually before SAST and/or SCA scan is run.
    Note: For DAST assessments the application and project must be created manually. DAST projects require additional configurations when Creating A DAST projects for Web Applications and APIs.
  4. Languages that are compiled with a build system (e.g. C++ Make, Java Maven, C# dotnet CLI and MSBuild) require configuration for Coverity to capture and analyze the build.
    1. Configuration details are provided in this guide.
    2. The pipeline environment should have the required build tools installed.
    3. Languages that do not require a build system are detected and configured automatically.