Appknox mDevSecOps

Appknox platform now supports CLI to enable you to set up a complete continuous integration (CI/CD) with Appknox Tool for your mobile application’s security needs. This can be easily achieved by integrating Appknox CLI in your development CI/CD pipeline.
After integrating Appknox into a CI/CD workflow, teams can achieve a complete cycle from uploading the mobile app binary to reporting the vulnerabilities and performing reaudit at a much faster pace.

Benefits of continuous integration with Appknox:
● Reduced human effort and intervention
● Developer friendly and easy setup process
● Efficient and less effort
● Faster Turn around
● Always up to date on security for each and every build

**Integration Instructions **

Prerequisites:
● cURL(or equivalent) to download the Appknox CLI binary

Steps of setup:

1. Get Personal Access Token from Appknox dashboard from the below link:
   https://secure.appknox.com/settings/developersettings

2. Download the appknox binary with the following command:

3. Set an environment variable APPKNOX_ACCESS_TOKEN with the personal token.
   For example:

4. Use the command appknox upload <assert> to upload the respective file to Appknox.
   For example: For Android, applications do the below:

5. To check if your file contains any vulnerabilities with the risk greater than or equal to
   when the static scan is completed after the file upload. Use the following command. E.g.:

Tip: You can combine the upload and cicheck command as below:

The above command will list down all the vulnerabilities equal to or above the specified
risk threshold and will exit with an error status.

Updated on: 01/15/2020