Skip to content

Ostorlab Integration with App Center

Overview

In this guide, we will explore how to easily integrate Ostorlab automated security testing for Android and iOS mobile apps into your build process.

Video Demonstration

Watch this brief video for a visual walkthrough of the integration process.

Create App Center API Key:

Click on the app for which you want to create a configuration.

Click 'insecure_app_ostorlab'

Navigate to "Settings".

Click 'Settings'

Click on the edit icon for App API tokens.

Edit icon for App API tokens

Select the "New API token" button.

Click 'New API token'

Enter a brief description.

Fill 'ostorlab scanner webhook'

Select "Full Access".

Fill 'all'

Click on the "Add new API token" button.

Click 'Add new API token'

Make sure to copy your API key token.

Copy the API key token

Create the Configuration:

Click the menu button.

The menu button

Next, click "Integrations/API" to expand.

Click 'Integrations/API'

Access the Integrations page.

Click 'Integrations/API'

Go to the App Center.

Go to the App Center

Go to the Configuration settings.

Click 'Configuration'

Create a new configuration.

Click 'New'

All the fields are required except for UI rules and test credentials. Ensure that the app name, owner name, and API key match the ones you obtained from App Center.

Fill 'insecure-app-ostorlab'

Click Save. The configuration shows up in the list.

Click 'Save'

Verify the Configuration on App Center:

Click on the edit icon for Webhooks.

Edit icon for Webhooks

You should be able to see a webhook with the status ENABLED.

Webhook with the status ENABLED

Conclusion

This guide covers the steps required to effectively and easily integrate Ostorlab autonomous security testing for Android and iOS mobile apps into your App Center build process.