Install a Java agent directly
Use this workflow to install and configure a Contrast CVE Shield agent with Contrast Security’s Flex Agent. The Flex Agent lets CVE Shield scan your Java applications. CVE Shield only supports Java applications currently. Check that your application uses Java before you continue.
You'll need an active CVE Shield account. Learn more about signing up for CVE Shield and trying Contrast for free.
Before you begin
Make sure you have everything you need before you start.
The agent will need to be able to reach your Contrast instance. It can be a local/on-premise instance or a hosted instance. A proxy can be configured if the environment has limited network access.
Your web application is packaged in a JAR file.
It must use supported versions, frameworks, and tools
Understand the order of precedence
You will also need access to a command line interface (with a chosen directory for downloading the agent) and your organization's instance of Contrast.
Install an agent
In Northstar, go to Administration > Agent management, and select + Add Agent.
In the Agent Wizard, select Flex Agent directly.
Copy your Agent key. You'll use it in the next step.
Install the Flex Agent by running the command displayed in the wizard. Replace
<your_agent_token>with your Agent key.Check that the install file is safe before running it by running the command displayed in the wizard. This step is optional but recommended.
This step runs silently. If everything is set up correctly, the installer will start automatically and you'll see its output next. If nothing happens after a few seconds, the checksum didn't match. Check your internet connection and try again.
Verify agent deployment
Open your Java application. Click a few links or send a few requests. This gives the agent something to detect.
Select View agent activity. If your application appears, the agent is working.
Your application should appear in Northstar on the Agent management screen soon after you start using it.
When your application appears, CVE Shield starts finding vulnerabilities in that application.
See Also
Install Java agent with a Kubernetes Helm Chart