You will learn

How to generate and upload a Brakeman report into ThreadFix.

Prerequisites

Audience: IT Professional or End User
Difficulty: Basic
Time needed: Approximately 5 minutes
Tools required: N/A

Generate Results

After launching Command Prompt, run Brakeman with a .json output file:

brakeman \path\to\sourcecode -o \destination\reportname.json

Threadfix only accepts the .json format from Brakeman so the output file must be .json.

Upload Results

1. After generating a report, log in to ThreadFix and navigate to the Portfolio page, found on the Navigation sidebar under the Application sub-menu. Expand the Team the report will be uploaded to.
   

   

2. After picking one of the Team's applications, select Upload Scan and drag the report into the pane:

   

3. Once ThreadFix finishes processing the report, the results can be viewed on the individual application's page: