📙 You will learn

How to create a new scanner source in order to upload vulnerability reports to ThreadFix 3.0.

Prerequisites

Audience: IT Professional or End User
Difficulty: Basic
Time needed: Approximately 5 minutes
Tools required: N/A

A new scanner source can be created to upload vulnerability reports from other 3rd-party or non-natively-supported scanning tools. Scans from these tools are required to be formatted as .threadfix files to upload to ThreadFix. Before uploading scans, first create the scanner identifier in ThreadFix. If the scanner isn’t created first, the following error will be received when trying to upload a .threadfix file with an unknown source: "Could not determine the scan type."

Create a New Scanner

1. Click on Global from the Navigation sidebar, then click on Administration to access the System Settings page.
   

2. From within the Scanner Settings page tab, click the Create New Scanner button.
   

   Image RemovedImage Added

3. Complete necessary details with the Name and Version fields being required. Click the Create Scanner button.
   

   Image Removed

   After successfully being created, the pop-up modal will close and a banner will display indicating success.
   

   Image RemovedImage Added

4. The new scanner will not immediately appear to be allowed for import, logging out and back into ThreadFix will reflect that it is allowed and a user may now upload a .threadfix scan file with the new scanner as the source.