Contrast - Bamboo plugin

Download the Contrast Bamboo plugin ( contrast-bamboo-plugin-#.#.#.jar) from the Bamboo Marketplace.

Select Add-Ons from the top-left settings menu.

Select Upload add-on.

When prompted to upload a file, select contrast-bamboo-plugin-#.#.#-SNAPSHOT.jar.

Verify you see the plugin under User-installed add-ons.

Now that the plugin is installed, configure a profile for Contrast. Select Contrast Profiles under Add-Ons in the side navigation bar.

In the Profile Configuration page, select New Profile and complete the form.

Select Test Connection to verify that your settings are correct. A success notification will appear when a connection is established.

Select Create a New Build Plan (you can also use an existing plan).

Enter a project name, plan name and link to the repository host. The project key and plan key is auto-generated.

Once you create the plan, add a task to the build process by selecting Add Task.

In the window that appears, find the Contrast CI for Assess task and select it.

The Tasks configuration page relies on a Contrast profile, as well as a server name, application name and a Passive parameter. The server name isn't required, but should correspond to a server name in Contrast if used. The application name must be on the designated server.

If you select the Passive parameter, the plugin will query all vulnerabilities for the application (not just build-specific vulnerabilities). If you do this, you don't have to run the application with its integration tests before the Contrast post-build action in the Bamboo build.

Next, define conditions for when to fail a build:

Select Add New Threshold Condition to configure multiple conditions for each task.

Select Save.

Enable the build plan by selecting the checkbox in the bottom left.