Integration with self hosted SAST & DAST tools

Question

Can someone please guide me to find the documentation which talks about the integration of self-hosted SAST/DAST tools (like Fortify & Web-inspect) with bitbucket pipelines?

Do we have any agents/runners to be installed & configured on the VMs which runs these tools?

Santanoo Bhattacharjee · Answer

so are the tools to be integrated with some available apis for bit-bucket pipeline OR are they to be converted to docker images & then staged for run?

Is there any reference documentation for this? that would really help.

thank you Michael.

Michael March · Answer

If you want to "open up" your network to Pipelines, here's the IP range from Atlassian:

https://ip-ranges.amazonaws.com/ip-ranges.json

That will make operating your SAST tools as easy as possible.