February 2021 - kovair.com

ServiceNow and Jile Integration Overview

Escalating helpdesk tickets to internal engineering teams and following up on the progress is tedious and challenging until and unless the teams are collaborating in a real-time manner.

Bi-Directional integration between Jile & SNOW as established through Kovair Omnibus will help organizations to solve these challenges by synchronizing the records and processes between helpdesk and internal development teams.

Kovair Omnibus integrates Jile and ServiceNow bidirectionally. It makes all Incidents, Change Requests/Enhancements with Work Items, Stories, Features under different programs or themes as per business requirement. All items along with their attachments and relationships get synchronized in a real-time manner. Based on the assignment of ticket at ServiceNow, Teams get assigned at Jile.

Benefits of Business Users

ServiceNow

Real-time visibility of ticket progress
Synchronized workflow with internal engineering
Reduced manual communication

Jile

End to End traceability for customer tickets from inception to delivery
Real-time visibility of customer tickets and its priorities
Objective quality assessment of customer deliveries

SNOW – ADO Integration Overview

It has often been observed that different teams need to share issues, however, the specifics of what they need to know are different. Therefore, to bring them on the same page without duplication or loss of information is a big challenge.

The Kovair Omnibus helps solve such challenges by establishing bi-directional integration between ServiceNow and Azure DevOps. It synchronizes Incidents, User Stories, Change Requests and Work Items under different programs or themes as per business requirement. All items along with their attachments and relationships get synchronized in a real-time manner. Let us consider a scenario where a support engineer opens a problem in ServiceNow, Kovair Omnibus moves the problem over to Azure DevOps automatically as a user story. This flow of information is bi-directional, and it allows all the teams involved to keep track of the status in real time, throughout the entire process.

Benefits of Business Users

ServiceNow

Real-time visibility to customer issues
Synchronized workflow with internal engineering
Automation eliminates manual work on customer issues

Azure DevOps

End to end traceability for requirements as well as customer issues
Real-time updates until the customer tickets are resolved
Quick and efficient decision making with no dependency on manual communication

Reference Documents:

ServiceNow Datasheet
Azure DevOps Datasheet

Micro Focus ALM – ADO Integration Overview

In the ALM domain, the choice of systems and the integration among the cross-functional teams play a great role. While the choice of tools might impact the productivity of a team, the cross-functional collaboration facilitates teams to have a clear picture of the business requirements.

The integration between Micro Focus ALM/QC and Azure DevOps brings rich functionalities to the ecosystem in the area of test and defect management. Kovair being an integration and migration specialist, helps organize and migrate data seamlessly without any downtime using their flagship product – Kovair QuickSync. It synchronizes Requirements, Defects, Bugs, Test Cases and Test Plans under different programs or themes as per business requirement. All items along with their attachments and relationships get synchronized in a real-time manner.

Benefits of Business Users

Micro Focus ALM

Real-time visibility into Stories and associated Changes or Enhancements
Access to Business Requirements, Status and Updates from within Micro Focus ALM
Automation eliminates manual work on customer issues

Azure DevOps

Eliminates the redundancy of entering same data into multiple systems
Complete visibility on QA artifacts such as QA schedule, test cases and test results
Quick and efficient decision making with no dependency on manual communication

Reference Documents:

Micro Focus ALM Datasheet
Azure DevOps Datasheet

Download eCopy

Card Summary

This integration brings the product management, portfolio management, development and quality teams together and establish a seamless collaboration between them. This will make the delivery process faster for organizations.

JILE & JIRA Integration Overview

Bi-Directional integration between JILE & JIRA as established through Kovair Omnibus will help organizations to solve these challenges by synchronizing the records and processes between different agile teams of the organization.

Kovair Omnibus integrates JILE and JIRA bidirectionally. It synchronizes Features, Stories, Tasks Epics & Iterations under different programs or themes as per business requirement. All items along with their attachments and relationships get synchronized in a real-time manner.

Benefits of Business Users

JIRA

Alignment with business strategy
Complete visibility to delivery priorities
Reduced manual communication

JILE

Complete visibility of delivery items from Portfolio
Real-time visibility of the development progress
Reduced manual dependency

AppScan Plugin Details

Plugin Version: 1.0

Overview

HCL AppScan is a family of desktop and web security testing and monitoring tools. AppScan is intended to test both on-premise and web applications for security vulnerabilities during the development process, when it is least expensive to fix such problems. It delivers best-in-class security testing tools to ensure your business, and your customers, are not vulnerable to attack. Rapidly identify, understand and remediate security vulnerabilities. This plug-in has been designed to manage AppScan environment from Kovair DevOps platform.

AppScan Information:

More information can be found at AppScan. (as on 2021/01/22)

Version Supported:

This plugin was developed and tested against AppScan SAAS instance.

Plugin Operation:

1. GetApplications
This operation fetches all latest applications that has been added to HCL AppScan platform for scan.

Input parameter(s):

Parameter	Is Mandatory	Help Text
Base URL	true	Provide the base URL of AppScan instance.
Client ID	true	Client ID is the corresponding user’s key id of AppScan instance.
Client Secret	true	Client Secret is the corresponding user’s key secret of AppScan instance.

Output parameter(s):

Parameter	Help Text
Status	Status of the operation.
OutputLog	Response message content.

2. CreateAndExecuteScan

Create and execute a dynamic scan for a particular application and presence into HCL AppScan platform

Input parameter(s):

Parameter	Is Mandatory	Help Text
Base URL	true	Provide the base URL of AppScan instance.
Client ID	true	Client ID is the corresponding user’s key id of AppScan instance.
Client Secret	true	Client Secret is the corresponding user’s key secret of AppScan instance.
Starting Url	true	Starting Url of application is required to find out the application for scan
Presence Name	true	Presence name is required to identify the presence through which scan will be done.
Scan Name	true	Provide a scan name to create and execute a scan
Application Name	true	Application name is required to indentify the application that is going to be scanned, application must be added manually to HCL AppScan platfrom.
TestOptimizationLevel	true	TestOptimizationLevel is required(like Fast, Faster, Fastest) to mention test optimization of the scan.
ScanType	true	ScanType is required to mention environment of the scan like(Production, Staging).

Output parameter(s):

Parameter	Help Text
Status	Status of the operation.
OutputLog	Response message content.
Scan ID	Scan ID of scan which is created and executed by this operation

3. GetScanStatus

This operation fetches scan status of a particular scan

Input parameter(s):

Parameter	Is Mandatory	Help Text
Base URL	true	Provide the base URL of AppScan instance.
Client ID	true	Client ID is the corresponding user’s key id of AppScan instance.
Client Secret	true	Client Secret is the corresponding user’s key secret of AppScan instance.
Scan ID	true	The scan id is required to fetch status of a particular scan

Output parameter(s):

Parameter	Help Text
Status	Status of the operation.
OutputLog	Response message content

4. DeleteScan

This operatoin delete any particular scan when scan is in “Ready” or “Failed” state.

Input parameter(s):

Parameter	Is Mandatory	Help Text
Base URL	true	Provide the base URL of AppScan instance.
Client ID	true	Client ID is the corresponding user’s key id of AppScan instance.
Client Secret	true	Client Secret is the corresponding user’s key secret of AppScan instance.
Scan ID	true	The ID of scan which one you want to delete.

Output parameter(s):

Parameter	Help Text
Status	Status of the operation.
OutputLog	Response message content

Pass/Fail Conditions:

Method	Status	Condition
GetApplications	Passed	If HTTP Status Code of 200 (OK) is received from AppScan and OutputLog is not empty and can be deserialized into a collection of Applications_RESPONSE objects.
GetApplications	Failed	If HTTP Status Code of 200 (OK) is not received from AppScan or If OutputLog is empty or if OutputLog is not empty but cannot be deserialized into a collection of Applications_RESPONSE objects.
CreateAndExecuteScan	Passed	If HTTP Status Code of 201 (CREATED) is received from AppScan and if OutputLog is not empty and can be deserialized into a DynamicScan_RESPONSE object.
CreateAndExecuteScan	Failed	If HTTP Status Code of 201 (CREATED) is not received from AppScan or if OutputLog is empty or if OutputLog is not empty but cannot be deserialized into a DynamicScan_RESPONSE object.
GetScanStatus	Passed	If HTTP Status Code of 200 (OK) is received from AppScan and if OutputLog is not empty and can be deserialized into a DynamicScanStatus_RESPONSE object.
GetScanStatus	Failed	If HTTP Status Code of 200 (OK) is not received from AppScan or if OutputLog is empty or if OutputLog is not empty but cannot be deserialized into a DynamicScanStatus_RESPONSE object.
GetScanReport	Passed	If HTTP Status Code of 200 (OK) is received from AppScan and if OutputLog is not empty and can be deserialized into a Report_RESPONSE object.
GetScanReport	Failed	If HTTP Status Code of 200 (OK) is not received from AppScan or if OutputLog is empty or if OutputLog is not empty but cannot be deserialized into a Report_RESPONSE object.
DeleteScan	Passed	If HTTP Status Code of 204 (NO_CONTENT) is received from AppScan and if OutputLog is not empty.
DeleteScan	Failed	If HTTP Status Code of 204 (NO_CONTENT) is not received from AppScan or if OutputLog is empty or if OutputLog is not empty.

Limitations:

This plug-in has been tested in AppScan SAAS environment only.
Currently this plug-in has been designed for dynamic scan only.
Connectivity with AppScan SAAS instance must be ensured.
Base URL, Client ID, Client Secret are required to generate API Token which is required for successful REST calls to AppScan.
At the time of adding application manually to HCL AppScan platform, application name should not contains any special character.
AppScanPresence should be downloaded in client node(machine) and presence should be in active state while creating any scan.
More information about AppScanPresence can be found at AppScanPresence (as on 2021/01/22)

Release Details:

AppScan : 1.0
Initial version with basic functionalities.

Contact us:

Veracode Plugin Details

Plugin Version: Cloud

Overview

Veracode enables you to quickly and cost-effectively scan software for flaws and get actionable source code analysis results.

Veracode Information:

More information can be found at Veracode.

Version Supported:

This plugin was developed and tested against version : Cloud

Plugin Operation:

Plugin operations are synchronous execution, they will wait for long running operations such as — prescan, Static/Dynamic scan. So, task execution will wait until this scans are complete. Calling api very frequently (without any delay) will overload the applications (veracode, kovairDevops) api engine. Hence, a delay is introduced and can be configured accordingly to check the status of long running task.

1. Static Analysis
Veracode Static Analysis is a Static Application Security Testing (SAST) solution that enables you to quickly identify and remediate application security findings.

Static Analysis includes following operations,

Create application if not exist.
Create build
Upload war file into the scan
Perform pre-scan
Perform static scan
Fetch report data

Input parameter(s):

Parameter	Is Mandatory	Help Text
Api ID	true	Provide the api id. for more information visit to API Credentials
Api Key	true	Provide the api key.
Application Name	true	Provide the application name.
Create Application If not Exist?	true	On ‘Yes’ selection, the API will check whether the given application is present or not. If not, then it will create an application.
Business Criticality	false	Provide the value of this field if create application is set to ‘Yes’.
Scan Name	true	In the Scan Name field, enter a name for the static scan we want to submit to the Veracode Platform for this application.
Upload files location	true	In the Upload field, To concat multiple file location use ‘\|\|’ operator.Ex. E:\\Demo\\Jars\\Sample.war\|\|E:\\Demo\\Jars\\Sample1.war.
Wait for prescan to complete	true	Until or unless the prescan is not getting completed the static scan can’t be started, if this lookup value set to ‘No’ then no scan will be performed, only the prescan get triggered.
Scan all top level modules	false	If this value set to Yes then by default veracode will choose all top level modules for scanning and if not it will choose all the module that has been uploaded.
Wait for scan to complete	true	Until or unless the scan is not getting completed the result will not be available. If this lookup value set to ‘No’ then no proper output will be received.
File path for Detailed GUI report	false	Full file path for detailed gui report in pdf form. Ex. E:\\Demo\\Jars\\DetailedReport.pdf
File path for Summary GUI report	false	Full file path for summary gui report in pdf form. Ex. E:\\Demo\\Jars\\SummaryReport.pdf
Waiting Time	false	Execution will wait for this time, provide the value in seconds. Note: if the provided value is 0 or left empty then default 20 seconds will be taken.

Output parameter(s):

Parameter	Help Text
Application_Name	Application name.
Build_Name	Build name.
Veracode_Rating	Veracode rating.
Veracode_Level	Veracode level.
Score	Analysis score.
Overall_Status	Veracode overall status.
Overall_Status	Veracode overall status.
Flaws_By_Severity_Total_Flaw_Count	No. of total flaws by severity.
Flaws_By_Severity_Very_High	No. of very high severity flaws.
Flaws_By_Severity_Very_High_Categories	Very High level categories.
Flaws_By_Severity_High	No. of high severity flaws.
Flaws_By_Severity_High_Categories	High level categories.
Flaws_By_Severity_Medium	No. of medium severity flaws
Flaws_By_Severity_Medium_Categories	Medium level categories.
Flaws_By_Severity_Low	No. of low severity flaws
Flaws_By_Severity_Low_Categories	Low level categories.
Flaws_By_Severity_Very_Low	No. of very low severity flaws
Flaws_By_Severity_Very_Low_Categories	Very Low level categories.
Flaws_By_Severity_Informational	No. of informational severity flaws
Flaws_By_Severity_Informational_Categories	Informational level categories.
Flaw_Status_Cannot_Reproduce	Cannot reproduce flaws count.
Flaw_Status_Fixed	Fixed flaws count.
Flaw_Status_New	New flaws count.
Flaw_Status_Not_Mitigated	Not Mitigated flaws count.
Flaw_Status_Open	Open flaws count.
Flaw_Status_Reopen	Reopen flaws count.
Detailed Report Link	Hyperlink to download detailed report.
Summary Report Link	Hyperlink to download summary report.

2. Dynamic Analysis

Veracode Dynamic Analysis is a Dynamic Application Security Testing (DAST) solution that delivers an automated and scalable dynamic scanning capability that enables broad coverage at speed.

Dynamic Analysis includes following operations,

Create application if not exist.
Create dynamic analysis
Fetch report data

Input parameter(s):

Parameter	Is Mandatory	Help Text
Api ID	true	Provide the api id. for more information visit to API Credentials
Api Key	true	Provide the api key.
Application Name	true	Provide the application name. Note: For dynamic analysis, don’t provide the application which is already linked with a dynamic analysis.
Create Application If not Exist?	true	On ‘Yes’ selection, the API will check whether the given application is present or not. If not, then it will create an application.
Business Criticality	false	Provide the value of this field if create application is set to ‘Yes’.
Analysis Name	true	Analysis name must be unique. Analysis name must be minimum of 6 and maximum of 190 characters.
Maximum Duration	true	Maximum duration (in hours).
Target Url	true	Put Single url at a time.
Wait for scan to complete	true	Until or unless the scan is not getting completed the result will not be available. If this lookup value set to ‘No’ then no proper output will be received.
File path for Detailed GUI report	false	Full file path for detailed gui report in pdf form. Ex. E:\\Demo\\Jars\\DetailedReport.pdf.
File path for Summary GUI report	false	Full file path for summary gui report in pdf form. Ex. E:\\Demo\\Jars\\SummaryReport.pdf
Waiting Time	false	Execution will wait for this time, provide the value in seconds. Note: if the provided value is 0 or left empty then default 20 seconds will be taken.

Output parameter(s):

Parameter	Help Text
Application_Name	Application name.
Build_Name	Build name.
Veracode_Rating	Veracode rating.
Veracode_Level	Veracode level.
Score	Analysis score.
Overall_Status	Veracode overall status.
Overall_Status	Veracode overall status.
Flaws_By_Severity_Total_Flaw_Count	No. of total flaws by severity.
Flaws_By_Severity_Very_High	No. of very high severity flaws.
Flaws_By_Severity_Very_High_Categories	Very High level categories.
Flaws_By_Severity_High	No. of high severity flaws.
Flaws_By_Severity_High_Categories	High level categories.
Flaws_By_Severity_Medium	No. of medium severity flaws
Flaws_By_Severity_Medium_Categories	Medium level categories.
Flaws_By_Severity_Low	No. of low severity flaws
Flaws_By_Severity_Low_Categories	Low level categories.
Flaws_By_Severity_Very_Low	No. of very low severity flaws
Flaws_By_Severity_Very_Low_Categories	Very Low level categories.
Flaws_By_Severity_Informational	No. of informational severity flaws
Flaws_By_Severity_Informational_Categories	Informational level categories.
Flaw_Status_Cannot_Reproduce	Cannot reproduce flaws count.
Flaw_Status_Fixed	Fixed flaws count.
Flaw_Status_New	New flaws count.
Flaw_Status_Not_Mitigated	Not Mitigated flaws count.
Flaw_Status_Open	Open flaws count.
Flaw_Status_Reopen	Reopen flaws count.
Detailed Report Link	Hyperlink to download detailed report.
Summary Report Link	Hyperlink to download summary report.

Pass/Fail Condition

No application details found. Unable to proceed….
Application is not exist, neither create application flag set to Y. Unable to proceed….
Scan name already exists. Please provide the unique name. Unable to proceed….
Wait for prescan field set to Yes otherwise won’t proceed with the execution….
Neither modules are selected nor the top level modules are chosen for scanning. Unable to proceed….
There is an error while performing the static scan :
No app details found. Unable to proceed….
Scan in progress. result is not available….
No result available as scan is not completed….
No build details found….
Unable to fetch application details….
No application present named :

Note:

The plugin is tested with the user having below accesses:

Creator
Delete Scans
Security Insights
Security Labs User
Greenlight IDE User
Mitigation Approver
Vendor Manager
Reviewer
Workspace Editor

Limitations:

Providing input at runtime is not supported.
Don’t use -no-color as additional option. This is already used internally.

Release Details:

Veracode : V.1.0
Initial version with basic functionalities.

Contact us:

Terraform Plugin Details

Plugin Version: 0.12.26

Overview

Terraform is a tool for building, changing, and versioning infrastructure safely and efficiently. Terraform can manage existing and popular service providers as well as custom in-house solutions. Configuration files describe to Terraform the components needed to run a single application or your entire datacenter. Terraform generates an execution plan describing what it will do to reach the desired state, and then executes it to build the described infrastructure. As the configuration changes, Terraform is able to determine what changed and create incremental execution plans which can be applied. The infrastructure Terraform can manage includes low-level components such as compute instances, storage, and networking, as well as high-level components such as DNS entries, SaaS features, etc.

Terraform Information:

More information can be found at Terraform.

Version Supported:

This plugin was developed and tested against version : 0.12.26

Plugin Operation:

1. Init
The terraform init command is used to initialize a working directory containing Terraform configuration files. This is the first command that should be run after writing a new Terraform configuration or cloning an existing one from version control. It is safe to run this command multiple times.

Input parameter(s):

Parameter	Is Mandatory	Help Text
Terraform Directory Path	true	Location of main.tf file directory.
Error Text	false	If given text found in console log, overall task status will be error. To concat multiple error text use ‘\|\|’ operator.
Additional Options	false	Provide the additional options.ex. -input=false.

Output parameter(s):

Parameter	Help Text
TerraformStatus	Status of the operation
TerraformLog	Console log of the operation

2. Plan

The terraform plan command is used to create an execution plan. Terraform performs a refresh, unless explicitly disabled, and then determines what actions are necessary to achieve the desired state specified in the configuration files.

Input parameter(s):

Parameter	Is Mandatory	Help Text
Terraform Directory Path	true	Location of main.tf file directory.
Error Text	false	If given text found in console log, overall task status will be error. To concat multiple error text use ‘\|\|’ operator.
Additional Options	false	Provide the additional options.ex. -input=false.

Output parameter(s):

Parameter	Help Text
TerraformStatus	Status of the operation
TerraformLog	Console log of the operation

3. Apply

The apply operation shows us the same plan output and asks us to confirm if we actually want to proceed with this plan. So while plan is available as a separate command, it’s mainly useful for quick sanity checks and during code reviews, and most of the time we’ll run apply directly and review the plan output it shows you.

Input parameter(s):

Parameter	Is Mandatory	Help Text
Terraform Directory Path	true	Location of main.tf file directory.
Error Text	false	If given text found in console log, overall task status will be error. To concat multiple error text use ‘\|\|’ operator.
Additional Options	false	Provide the additional options.ex. -input=false.

Output parameter(s):

Parameter	Help Text
TerraformStatus	Status of the operation
TerraformLog	Console log of the operation

4. Destroy

The terraform destroy command is used to destroy the Terraform-managed infrastructure.

Input parameter(s):

Parameter	Is Mandatory	Help Text
Terraform Directory Path	true	Location of main.tf file directory.
Error Text	false	If given text found in console log, overall task status will be error. To concat multiple error text use ‘\|\|’ operator.
Additional Options	false	Provide the additional options.ex. -input=false.

Output parameter(s):

Parameter	Help Text
TerraformStatus	Status of the operation
TerraformLog	Console log of the operation

Pass/Fail Condition

Status	Condition
Passed	All Path should be valid.
Failed	If the console log contains any of the value of Error Text field value.
Failed	Outputlog should contain ‘Unable to determine the workspace’..
Failed	Outputlog should contain ‘NO SUCH FILE OR DIRECTORY’..
Failed	Outputlog should contain ‘FULLYQUALIFIEDERRORID’..
Failed	Outputlog should contain ‘ERROR: MISSING ARGUMENT TO OPTION’..
Failed	Outputlog should contain ‘DOESN’T EXIST OR CAN’T BE OPENED’..
Failed	Outputlog should contain ‘JAVA.RMI.CONNECTEXCEPTION’..
Failed	Outputlog should contain ‘JAVA.SECURITY.CERT.CERTIFICATEEXCEPTION’..

Limitations:

Providing input at runtime is not supported.
Don’t use -no-color as additional option. This is already used internally.

Release Details:

Terraform : 0.12.26
Initial version with basic functionalities.

Contact us:

Jasmine Plugin Details

Plugin Version: 3.5.0

Overview

Jasmine is a Behavior Driven Development testing framework for JavaScript. It does not rely on browsers, DOM, or any JavaScript framework. Thus it’s suited for websites, Node.js projects, or anywhere that JavaScript can run.

Jasmine Information:

More information can be found at Jasmine

Version Supported:

This plugin was developed and tested against version : 3.5.0

Plugin Operation:

1. Run Jasmine
This operation allows to execute a job: Input parameter(s):

Parameter	Is Mandatory	Help Text
Project Path	true	Location of the project directory.
Spec Path	false	To run a particular spec(provide the full path), i.e.E:/Demo/DEVOPS material/Jasmine-tool/spec/Project/calculator.spec.js.
Config Path	false	Path to your optional jasmine.json. (This is the command-line ‘–config’ option) i.e. E:/Demo/DEVOPS material/Jasmine-tool/spec/config/jasmine.json.
Filter	false	Filter specs to run only those that match the given string. (This is the command-line ‘–filter’ option).
Additional Options	false	Provide any additional options to add to the jasmine command. Don’t use the command that is already exposed as parameters. i.e. –no-color
Error Text	false	From jasmine execution log success or error can’t be identified. This field can be used to supply error text to search in Jasmine console log after execution. If given text found in console log, overall task status will be error. To concat multiple error text use ‘\|\|’ operator. Leading and trailing space will be trimmed before searching. i.e. Sample Error Text : Execution Failed \|\| URL unavailable.

Output parameter(s):

Parameter	Help Text
JasmineStatus	Status of the operation
JasmineLog	Console log of the operation

2. Run Jasmine Command

This operation allows to execute a job:

Input parameter(s):

Parameter	Is Mandatory	Help Text
Command	true	Provide the command to excute as it is
Error Text	false	From jasmine execution log success or error can’t be identified. This field can be used to supply error text to search in Jasmine console log after execution. If given text found in console log, overall task status will be error. To concat multiple error text use ‘\|\|’ operator. Leading and trailing space will be trimmed before searching. i.e. Sample Error Text : Execution Failed \|\| URL unavailable.

Output parameter(s):

Parameter	Help Text
JasmineStatus	Status of the operation
JasmineLog	Console log of the operation

Pass/Fail Condition:

Status	Condition
Passed	All Path should be valid.
Failed	If the console log contains any of the value of Error Text field value.
Failed	Outputlog should contain ‘Unable to determine the workspace’..
Failed	Outputlog should contain ‘NO SUCH FILE OR DIRECTORY’..
Failed	Outputlog should contain ‘FULLYQUALIFIEDERRORID’..
Failed	Outputlog should contain ‘ERROR: MISSING ARGUMENT TO OPTION’..
Failed	Outputlog should contain ‘DOESN’T EXIST OR CAN’T BE OPENED’..
Failed	Outputlog should contain ‘JAVA.RMI.CONNECTEXCEPTION’..
Failed	Outputlog should contain ‘JAVA.SECURITY.CERT.CERTIFICATEEXCEPTION’..

Limitations:

Run Jasmine function only supports node.js. For other language like Ruby, Python –> Use Run Jasmine Command.
Plugin only supports to test node.js project.

Release Details:

Jasmine: 3.5.0
Initial version with basic functionalities.

Contact us:

Seamless-Collaboration-between-Teams-by-a-Major-Application

Download eCopy

One of the world’s largest Organizations specialized in networking and application services, headquartered in USA was using Bugzilla for managing the customer tickets & Jira for managing internal development and testing. The usage of disparate tools from different vendors by different teams for software delivery brought in the challenge of real-time collaboration between the teams and visibility to the management.

Challenges

The company invested heavily for both Bugzilla and Jira for increasing efficiency of teams. This use of different tools by different teams brought in information silos and introduced collaboration challenges between teams. Manually synchronizing artifacts between the two tools and keeping both the teams in sync was becoming error prone. The major challenges which they wanted to solve in terms of data synchronization were:

Customer facing teams using Bugzilla to log all issues as Bugs under several products as and when reported by end customers. These issues were getting synched to the internal teams manually, thus causing delays.
Any update on the reported bugs by engineering was not getting updated to the support team on a regular interval.
The complexity of assigning defects to multiple Jira teams based on certain criteria cause further delays when things get handled manually.
Another major problem which existed due to lack of real time synchronization is the visibility of bugs to both internal and external teams in a real-time manner.

With this need, the customer looked for multiple integration solutions to establish a bridge between Bugzilla and JIRA. Due to high customization and lower version of Bugzilla at their end, it was extremely difficult for vendors to establish the connectivity between the tools. After thorough evaluation, Kovair Omnibus was selected over other vendors by the customer as Kovair could satisfy all their integration and solutions needs.

Kovair Omnibus – SOA Architected Proprietary Enterprise Service Bus

The only way to resolve all the problems stated above was to establish a bi-directional integration between Bugzilla & Jira. Kovair used its SOA architected proprietary ESB Omnibus for integrating these two tools.

Kovair Omnibus is an SOA architected proprietary Enterprise Service Bus (ESB) platform that can seamlessly connect 110+ commercial tools from different vendors and areas like Agile, DevOps, PPM, ALM, PLM, ITSM, ERP and CRM. Being an ESB, the solution also provides the facility to integrate other tools in future. Some of major the benefits of Kovair Omnibus over other solutions are:

Web based configuration: Complete web-based configuration without any client footprint. Integrations can be configured with simple mouse clicks in a codeless manner.
Real-time Monitoring: Kovair Omnibus provides on-screen monitoring capabilities for organizations to achieve multiple benefits like:
- Monitor the data movement in a real-time manner.
- Easily find the number of pending, processed, and attempted items.
- Monitor the health of all bridges configured in the integrated environment.
- Quickly find out the reason for any failure in data movement.
User Mapping Across Tools: Same user not belonging to or having access to every tool is a very common scenario. Sam in one tool may be Samuel in other tool which makes it very difficult to associate the same user when a record is synched between multiple tools. With the user mapping capability of Kovair Omnibus you can easily solve this problem and map users across multiple tools or use the LDAP authentication.
Synchronize Attachment, Comment and Relationships: Kovair Omnibus synchronizes attachments, comments as well as relationship between artifacts between the tools along with the actual record that is getting synchronized. This way it ensures that every attribute attached to a record gets synchronized through integration.
Synchronization of status: Kovair Omnibus synchronizes the status of records across tools pertaining to the workflows configured in the respective tool. This enables users to synchronize the status of records across multiple tools providing a real-time insight into the progress of the item.
Built-In disaster recovery: Kovair Omnibus comes with built-in disaster recovery mechanism. In case of any loss in connectivity between tools, Omnibus maintains queues at every level and resume the integration from the point it was left. This way zero loss of data is ensured when tools are reconnected with Kovair Omnibus.

With all these unique aspects and capabilities of integrating in-house tools, Kovair Omnibus provided a very elegant solution for their integration needs.

Journey with Kovair Omnibus

After selecting Kovair Omnibus as the solution to go for. the client got engaged with Kovair team to design and implement the integration scenarios between Bugzilla and Jira. Their main idea was to synchronize the external bugs reported at Bugzilla with the internal defect management tool JIRA and track the progress of each defect in a real-time manner.

Fig: Integration Flow Diagram between Bugzilla and Jira

Heavy customization of Bugzilla at the customer end and usage of a lower version of Bugzilla had increased the challenge of integration many folds. Kovair with its extensive experience in the area of tools integration, could successfully overcome the challenges and could deliver a solution pertaining to their business needs.

The above-mentioned use cases got configured in their staging instance and was successfully demonstrated to them. Values of different custom fields created at their Bugzilla instance got synchronised with different fields of JIRA in a bi-directional manner. All attachments and series of comments associated with the records also got synchronized. Any status update done on any defect in JIRA got reflected in Bugzilla keeping both the teams informed in a real-time manner.

Within a short time Kovair Omnibus gained the confidence of teams and they have started expressing how Omnibus is positively affecting their work. They started their production implementation in a phased manner and teams are getting onboarded in an incremental manner.

Beyond just establishing bi-directional integration between the tools, the solution also provided a live sync monitor to manage and monitor data flows with ease in a single interface. This interface provided facilities to track the status of each individual data and made troubleshooting easier.

The customer development team appreciated the benefits achieved from the integrated tools ecosystem established using Kovair Omnibus. With this implementation, the silos of data were broken and both the teams got synchronized with the same set of data in a real-time manner.

Conclusion

The client has now successfully implemented Integration of Bugzilla & JIRA using Kovair Omnibus platform and thus removed their regular pains. Kovair is not only helping them to integrate tools which they are using today but is working hand in hand with them to ensure that the implementation is correct and successful. Stakeholders of their organization have already started recognizing the benefits of having an integrated environment achieved through Kovair Omnibus.

Smooth collaboration between teams
Real-time status of all items across different teams
Single source of information for all teams
Productivity gains through integration and Data Synchronization

To know more about Kovair Omnibus and to read more such Case studies please visit www.kovair.com

Download eCopy

Questions & answers and audio interview by Outlook Series on Kovair VSMP for DevSecOps

Download document

Kovair DevOps Process Flow from Customer Change Input to Deployment

Kovair DevOps Comprehensive Features and Detailed Capabilities

Kovair VSMP/VSDP for DevSecOps – Interview Questions and Responses

1. Welcome Akshay, Akshay, as the CTO for Kovair, what is new with this Kovair VSMP/VSDP for DevSecOps release?

Thanks Michael, with this new release, in a nutshell, it eliminates the need to switch to 3rd party tools from DevOps CI/CD (continuous integration and continuous delivery), to Cybersecurity tools assessments as it now can get done as the software is developed, all seamlessly integrated, with VSMP and VSDP governance, dashboards, and process automation supported.
VSMP stands for Value Stream Management Platforms, while VSDP stands for Value Stream Delivery Platforms and both are the hottest topics in software development. In Gartner’s recent Webinar in January 2021, entitled: “The Future of DevOps Toolchains”, Kovair was mentioned in their Market Guide, and a key prediction from Gartner is: “By 2023, 70% of organizations will use value stream management to improve flow in the DevOps pipeline, leading to faster delivery of customer value.” Gartner also stated a Key Finding: “55% of organizations, in a recent survey, of CIOs/CTOs, are looking for combined VSMP and VSDP solutions”, which Kovair uniquely provides for DevSecOps.
DevSecOps value stream delivery and management platforms provide visibility and traceability into workflows throughout the DevSecOps value stream, because they plug into planning, development and operational tools, from Kovair. The Kovair platform provides visualization tools to analyze customer-focused metrics, such as delivery time, deployment frequency, defect rate, trouble tickets, Hazard and Risk Assessments, PLM Gantt Charts, and time to respond to failures. The visualization of how work flows throughout the phases: from requirements capture, plan, build, test, preproduction, release, configure and operate, bug tracking, and end-to-end Lifecycle Management phases, all constitute a value stream map.
If you recall, the prior Kovair release allowed for WFH: work from home support with remote management via dashboards showing all the process metrics and statuses to be visualized in real-time, and provided remote control of workflow pipelines via email, with role-based policy controls. it supported multiple databases from SQL Server, Oracle, and MariaDB, across hybrid multi-clouds, and Kovair’s Workflow Process Engine is unique with Task-based models that supports concurrency, which is more representative of real-world teams as teams are likely working on multiple tasks concurrently.
Now with Kovair’s latest release, we are adding Pipeline as Code, via YAML and SAML (Security Assertion Markup Language) which extends markup languages with OpenAPI scripting languages to allow for scripting of the workflows, and modification of the scripts by external partner tools like AIOps platforms, to allow for CLA: Closed Loop Automation.

2. Akshay, How Does Kovair’s VSMP/VSDP fit in within DevSecOps?

Kovair with its suite of products offers a complete Value Stream Management and Delivery Platform – VSMP and VSDP for DevOps and now DevSecOps.
Kovair’s VSMP Toolchain addresses the need for unified visibility, orchestration, integration, governance and management of the ALM and DevOps value stream, and now added Security Vulnerability Assessments are included with operational management dashboards for ISO Security and Risk Management, per ISO 27005 standards. Kovair’s VSMP for DevSecOps solution improves flow and traceability, with process compliance, and end-to-end product lifecycle management, which is especially needed for newer 5G Edge Computing services, as well as legacy applications.
All This now will allow for the breaking down of silos, of legacy siloed tools. Kovair enables more open, best-of-breed tools, to be seamlessly integrated like Broadcom’s Veracode, HCL’s AppScan and other solutions in the DevSecOps workflows.
With this new release, and the Concurrent Task-based Workflow Engine, it’s graphically shown where some teams can work on legacy ALM systems concurrently while other teams can work on DevSecOps systems, and how, within the workflow, these systems come together, and with newer YAML: pipeline as code, these are now scripted and automated, with SAML supported as well.

Key Capabilities of Kovair’s Value Stream Management and Delivery Platform –

Kovair uniquely provides industry-specific, guided templates empowering teams to instantly begin process compliant workflows, within the Value Stream. Kovair uniquely provides integrations with multiple security tools providing visibility to security vulnerabilities, in open source software, or other risks such as inventory control problems to cloud-based resiliency problems in the field Kovair gives complete visibility of Risks threats or opportunities through real-time reports & dashboards, including process compliance dashboards, throughout the Value Stream, including process compliance to ISO Standards like 27005 for Security and Risk Management. Kovair allows managers to define and maintain instantaneous traceability between Design, Process requirements, Risks and Hazards, to operational metrics from tools like APM (applications performance monitoring), in the field Kovair supports cross-platform installation, complete CI/CD solutions, with containerization supported for microservices, all from remote role-based, process-compliant email controls Kovair DevSecOps supports notification on the build status, so every movement is notified to management These are supported within Kovair’s toolset, including plug-ins for Microservices and Kubernetes support, which can all be managed from the Kovair Process Workflow Engine, with status reporting in dashboards, role-based controls on who can launch the CI/CD deployments, with Work-From-Home controls.

3. How does Kovair’s Omnibus platform play a role in this release?

Kovair’s Omnibus platform supports all of the new DevSecOps Kubernetes solutions, by having a common software bus platform to over 115 3rd-party solutions, shared data lake offerings, supporting shared analytics, an API platform supporting REST interfaces along with Connectors to businesses own systems as well, leads to more collaboration between legacy ALM development and Agile DevSecOps development, enabling this transition, all done with Encryption supported and DRaaS (Disaster Recovery as a Service) supported.
Kovair’s Omnibus is also offered either on-prem or cloud-based as an Enterprise Integration Platform as a Service, and was awarded a Gartner Cool Vendor award, putting it in an elite category.

Key benefits of Kovair Omnibus include the following:

Kovair uniquely provides synchronization of data between tools over heterogenous and hybrid cloud environment, including 5G Edge Cloud Enablement
Kovair facilitates connections to existing tools and applications and makes them part of the integrated tools ecosystem by protecting the investment of the organization, and can be offered as a Service, the hybrid multi-cloud
Kovair uniquely provides Low Code/No Code Drag-and-Drop configurable task-based CI/CD Pipeline, and now Scriptable Pipeline as Code offerings.
Kovair supports Secure edge computing with deployments over public/private/hybrid cloud, Kubernetes clusters or any on premise and VM environment
Kovair allows for hybrid multi-cloud solutions, with secure, DRaaS (disaster recovery as a service).

4. How would you advise organizations seeking to arrive at a new DevSecOps mindset?

First the organizations need to come together with common goals, common business metrics, common training on common platforms. And by breaking down the silos and learning by doing, it all comes together. Kovair’s VSMP and VSDP for DevSecOps solution can be a key enabler for this transition.
Secondly, Championing from a legacy Lifecycle Process-based world to a newer Real-time Event-Driven world, where newer MicroServices are opened up, and newer services are provided, with Security engineered in holistically, as opposed to being an afterthought.
Thirdly, Forming teams with an Adaptive and DevSecOps-style Deployment Architecture with re-training of folks as needed on the legacy systems, but also bringing the next-gen folks to become aware of the legacy platforms, tools, and Q/A processes as well, as Security policies, tools, and solutions.
Fourthly, Establishing next-gen Security Frameworks for Secure Services and Infrastructure using Secure software bus, and API Middleware, Agile DevSecOps developments tools, with Real-time Diagnostics and Analytics, Test and Measurement metrics, that have business outcomes, with common business goals and rewards to drive change. In this new world, with role-based work-from-home development, managers can view dashboards of process status in real-time, and control the development release pipelines using email, and now have automated tools to launch the pipeline-as-code scripts additionally.
Finally automating feedback loops with Closed Loop Automation, AI/ML or Algorithmic solutions eventually to tune the services as needed, potentially by re-configuring the pipeline-as-code scripts additionally.

With Kovair’s Omnibus integrated solution to APM: Applications Performance Management solutions, with security monitoring, or to Trouble Ticket systems, real-time feedback can occur within the process to improve the systems, such as Kovair’s secure Omnibus connections between partners like ServiceNow, and RPA providers like UI Path, which can help in achieving AIOps, another hot topic in the industry.

5.Would you like to add anything to our discussion before we wrap up for today?

Yes, these are challenging times now but with newer solutions, and newer thinking, hopefully this will all be alleviated with better solutions from platform providers like Kovair as we discussed. Hopefully the result is better harmony within IT teams, and better business outcomes…and now with better security engineered in holistically.

6. Where can our audience get more information on the new Kovair DevOps solution?

www.kovair.com … would be the best place to start!

About the Partner

Tazan International is a venture advisory, investment and management consulting firm.

Tazan International CEO Tsuyoshi Taira has been investing in and advising startups including such notable companies as Atmel (Microchip), Silicon Storage Technology (Microchip), Armedia (Broadcom), Aptivity (Progress Software), Junglee (Amazon), and i3 Systems (Mothers, Tokyo Stock Exchange) for more than twenty years.

Our team helps primarily US based startups with business development and partnerships in Japan, fundraising and M&A using its experience and network in Silicon Valley, Japan and India.

Join Us as a Partner

Company Info

Company: Tazan International
Country: United States, Florida.
Address: 8865 NW 37 TH DR
Phone: +1 954 624 6042
E-mail: ventas@paradigmtech.us
Website: tazaninternational.com

Month: February 2021

ServiceNow and Jile Integration Overview

Benefits of Business Users

Categories

Category Posts

SNOW – ADO Integration Overview

Benefits of Business Users

Categories

Category Posts

Micro Focus ALM – ADO Integration Overview

Benefits of Business Users

Categories

Category Posts

Card Summary

JILE & JIRA Integration Overview

Benefits of Business Users

Categories

Category Posts

Grab your free copy now!

AppScan Plugin Details

Overview

AppScan Information:

Version Supported:

Plugin Operation:

Pass/Fail Conditions:

Release Details:

Contact us:

Categories

Category Posts

Veracode Plugin Details

Overview

Veracode Information:

Version Supported:

Plugin Operation:

Limitations:

Release Details:

Contact us:

Categories

Category Posts

Terraform Plugin Details

Overview

Terraform Information:

Version Supported:

Plugin Operation:

Limitations:

Release Details:

Contact us:

Categories

Category Posts

Jasmine Plugin Details

Overview

Jasmine Information:

Version Supported:

Plugin Operation:

Limitations:

Release Details:

Contact us:

Categories

Category Posts

Challenges

Kovair Omnibus – SOA Architected Proprietary Enterprise Service Bus

Journey with Kovair Omnibus

Conclusion

Categories

Category Posts

Grab your free copy now!

Questions & answers and audio interview by Outlook Series on Kovair VSMP for DevSecOps

Download document

Kovair DevOps Process Flow from Customer Change Input to Deployment

Kovair DevOps Comprehensive Features and Detailed Capabilities

Kovair VSMP/VSDP for DevSecOps – Interview Questions and Responses

1. Welcome Akshay, Akshay, as the CTO for Kovair, what is new with this Kovair VSMP/VSDP for DevSecOps release?

2. Akshay, How Does Kovair’s VSMP/VSDP fit in within DevSecOps?

3. How does Kovair’s Omnibus platform play a role in this release?

4. How would you advise organizations seeking to arrive at a new DevSecOps mindset?

5.Would you like to add anything to our discussion before we wrap up for today?

6. Where can our audience get more information on the new Kovair DevOps solution?

Request A Live Demo

Categories

Category Posts