ArmorCode

Loading version...

Port's ArmorCode integration allows you to model ArmorCode resources in your software catalog and ingest data into them.

Supported resources ProductsSub-ProductsFindings

Setup

Choose your preferred installation method below. Not sure which to pick? See the installation methods overview.

Configuration

Port integrations use a YAML mapping block to ingest data from the third-party api into Port.

The mapping makes use of the JQ JSON processor to select, modify, concatenate, transform and perform other operations on existing fields and values from the integration API.

Default mapping configuration

This is the default mapping configuration for this integration:

Default mapping configuration (click to expand)

deleteDependentEntities: true
createMissingRelatedEntities: true
enableMergeEntity: true
resources:
  - kind: product
    selector:
      query: 'true'
    port:
      entity:
        mappings:
          blueprint: '"armorcodeProduct"'
          identifier: .id | tostring
          title: .name
          properties:
            name: .name
            description: .description
            businessOwner: .business_owner
            securityOwner: .security_owner
  - kind: sub-product
    selector:
      query: 'true'
    port:
      entity:
        mappings:
          blueprint: '"armorcodeSubProduct"'
          identifier: .id | tostring
          title: .name
          properties:
            name: .name
            repoLink: .repo_link
            programmingLanguage: .programming_language
            technologies: .technologies
          relations:
            product: .product_id
  - kind: finding
    selector:
      query: 'true'
    port:
      entity:
        mappings:
          blueprint: '"armorcodeFinding"'
          identifier: .id | tostring
          title: .title
          properties:
            source: .source
            description: .description
            mitigation: .mitigation
            severity: .severity
            findingCategory: .finding_category
            status: .status
            productStatus: .product_status
            subProductStatuses: .sub_product_statuses
            title: .title
            toolSeverity: .tool_severity
            createdAt: .created_at
            lastUpdated: .last_updated
            cwe: .cwe
            cve: .cve
            link: .link
            riskScore: .risk_score
            findingScore: .finding_score
          relations:
            product: .product_id
            subProduct: .sub_product_id

Mapping & examples per resource

- kind: product
  selector:
    query: 'true'
  port:
    entity:
      mappings:
        blueprint: '"armorcodeProduct"'
        identifier: .id | tostring
        title: .name
        properties:
          name: .name
          description: .description
          businessOwner: .business_owner
          securityOwner: .security_owner

{
  "id": 1,
  "name": "E-commerce Platform",
  "description": "Main e-commerce application for online retail",
  "business_owner": "John Smith",
  "security_owner": "Sarah Johnson",
  "created_at": "2024-01-15T10:30:00Z",
  "updated_at": "2024-01-20T14:45:00Z"
}

- kind: sub-product
  selector:
    query: 'true'
  port:
    entity:
      mappings:
        blueprint: '"armorcodeSubProduct"'
        identifier: .id | tostring
        title: .name
        properties:
          name: .name
          repoLink: .repo_link
          programmingLanguage: .programming_language
          technologies: .technologies
        relations:
          product: .product_id

{
  "id": 101,
  "name": "payment-service",
  "repo_link": "https://github.com/company/payment-service",
  "programming_language": "Java",
  "technologies": ["Spring Boot", "PostgreSQL", "Redis"],
  "product_id": 1,
  "created_at": "2024-01-15T10:30:00Z",
  "updated_at": "2024-01-20T14:45:00Z"
}

- kind: finding
  selector:
    query: 'true'
  port:
    entity:
      mappings:
        blueprint: '"armorcodeFinding"'
        identifier: .id | tostring
        title: .title
        properties:
          source: .source
          description: .description
          mitigation: .mitigation
          severity: .severity
          findingCategory: .finding_category
          status: .status
          productStatus: .product_status
          subProductStatuses: .sub_product_statuses
          title: .title
          toolSeverity: .tool_severity
          createdAt: .created_at
          lastUpdated: .last_updated
          cwe: .cwe
          cve: .cve
          link: .link
          riskScore: .risk_score
          findingScore: .finding_score
        relations:
          product: .product_id
          subProduct: .sub_product_id

{
  "id": 1001,
  "title": "SQL Injection Vulnerability",
  "source": "SAST",
  "description": "Potential SQL injection vulnerability detected in user input validation",
  "mitigation": "Use parameterized queries and input validation",
  "severity": "HIGH",
  "finding_category": "Code Security",
  "status": "OPEN",
  "product_status": "ACTIVE",
  "sub_product_statuses": "ACTIVE",
  "tool_severity": "HIGH",
  "created_at": "2024-01-15T10:30:00Z",
  "last_updated": "2024-01-20T14:45:00Z",
  "cwe": ["CWE-89"],
  "cve": ["CVE-2023-1234"],
  "link": "https://app.armorcode.com/findings/1001",
  "risk_score": 8.5,
  "finding_score": 7.2,
  "product_id": 1,
  "sub_product_id": 101
}

Monitoring and sync status

To learn more about how to monitor and check the sync status of your integration, see the relevant documentation.