Automatically generate work item based on scan results

InsightVM
1

Hi,

I am looking to see if there is a solution that would allow us to automatically generate work items within Azure DevOps Boards based on a vulnerability raised at a specific severity?

Thanks.

1 Like
2

I don’t know of an existing solution for this offhand. One option for a creating a new solution may be to use the InsightVM API to get vulnerabilities with the desired severity, and then use the data retrieved there. I’m less familiar with Azure DevOps Boards, but I know they do have an API which you could then ideally use to generate work items with the vuln data pulled from InsightVM.

3

Kieran, Were you able to find a solution to generate work items from Appsec?

4

@holly_wilsey any update?

5

As Holly mentioned, we don’t have a default integration for this. However, using the API you could accomplish this by querying for the vulnerabilities and then in tandem using the Azure API to create the work items.

I do however suggest using the cloud API for InsightVM instead of the console API