Integrating Invicti Standard with Jazz Team Server

This document is for:

Invicti Standard

Jazz Team Server – a part of IBM Application Lifecycle Management – is an issue-tracking system to maintain transparency and traceability across the entire development team.

This topic explains how to configure Invicti Standard to send a detected vulnerability to Jazz Team Server.

For further information, see Configuring the User Interface for Custom Send To Actions in Invicti Standard and Configuring Auto Send To Actions in Invicti Standard and What Systems Does Invicti Integrate With?.

Jazz Team Server Fields

This table lists and explains the Jazz Team Server fields in the Send to Actions tab.

Button/Section/Field	Description
Action	This section contains general fields about the Send To Action.
Display Name	This is the name of the configuration that will be shown in menus.
Mandatory	This section contains fields that must be completed.
Server URL	This is the Jazz Team Server instance URL.
Username	This is the name of the user.
Password	This is the password of the user.
Project Area Id	This is the project identifier of the issue. To identify the project area id, from the main menu, select Project Dashboards > Project Area. See the highlighted part in the URL for the project area id.
Category Name	This is the category name.
Vulnerability	This section contains fields with vulnerability details.
Body Template	This is the template file that is used to create description fields.
Title Format	This is the string format that is used to create the vulnerability title.
Optional	This section contains optional fields.
Tags	These are the work item tags, separated by a space.
Due Days	This is the number of days between the date the issue was created to the date it’s due.
Work Item Type	This is the type of work item (defect, task).
Work Item Severity	This is the severity of the work item (blocker, critical, etc. ).
Work Item Priority	This is the priority of the work item (high, medium, etc. ).

How to Integrate Invicti Standard with Jazz Team Server

Open Invicti Standard.
From the Home tab on the ribbon, select Options > Send To Actions.
From the Add drop-down, select Jazz Team Server.
In the Mandatory section, complete the connection details:

- Server URL
- Username
- Password
- Project Area Id
- Category Name

In the Vulnerability section, you can change the default Body Template and Title Format.
In the Optional section you can specify:

- Tags
- Due Days
- Work Item Type
- Work Item Severity
- Work Item Priority

Select Apply and OK.

You can select Create Sample Issue to confirm that Invicti Standard can connect to the configured system.

The issue is created in the Jazz Team Server as the following way:

How to Export Reported Vulnerabilities to Jazz Team Server

Please ensure that you have first configured Jazz Team Server integration (see How to Integrate Invicti Standard with Jazz Team Server).

Open Invicti Standard.
From the ribbon, select the File tab. Local Scans are displayed. Double-click the relevant scan to display its results.
In the Issues panel, right-click the vulnerability you want to export and select Send to Jazz Team Server. (Alternatively, from the ribbon, select the Vulnerability tab, then Send To Jazz Team Server.) A confirmation message and link are displayed at the bottom of the screen.