OWASP Glue Tool
summary
A Ruby gem orchestrates security tools, running analyzers (Brakeman, Bandit, safety, zap, nmap, trufflehog, dependency‑check, bundler-audit, retire, clamav, Scout2 and others), normalizing outputs into a common finding format, filtering duplicates via fingerprint dedupe, and reporting to JIRA reporter, JSON, CSV or CI systems. Mounters pull from git, Docker images or AMIs, the project ships a Docker image for easy execution, and integrations run in Jenkins or Kubernetes cron. Used at clients, the pipeline works end‑to‑end but requires task adapters and better tests/docs.
AI-written summary · about
chapters (6)
- 0:00Start
- 0:07Introduction
- 4:33JIRA Example
- 25:50Extension Points
- 28:38Recap of "Tasks"
- 35:15Help? What's next?
related talks
54mBuilding and Managing a Ruby Infrastructure
49mRuby Software Continuously Delivered and Exhaustively Explained
43mApplication Security is a Community Effort
40mTowards Tooling; A Look at What is Missing From our Toolbox
48mMind of a Hacker
20mAutomating maintainers work: The Prototype
35mMaking it on your own and the pitfalls of gem dependencies
24mA Collection of Fun with Ruby and Friends