Español

Copado Essentials

Phil Lepanto
  • Updated

Prerequisites:

You will need access to at least two Salesforce Orgs (Source and Target). Both Orgs will need API Access enabled (Enterprise, Unlimited or Developer Editions). The Source Org must be connected to DigitSec and that is the Org you will use in steps 16-21. 

 

Note: In step 15, use https://s4.digitsec.com

  1. Log in to your Copado Essentials (Click Deploy) account.
  2. Go to CI Jobs and click on Create your first CI Job.
  3. The following screen will show up:

NewJobs_CopadoEssentials.png

  1. Add the Title, Source Org, Target Org, Action (needs to be Deploy) and Schedule:None. 
    Important Note: This webhook is configured to scan the salesforce org configured in the source org. Please make sure your CI Jobs are set up accordingly so security flaws can be identified and rectified before deployment to a production environment.
  2. The screen looks like below after entering information:

NewJob2_CopadoEssentials.png

  1. Click the Save button.
  2. This brings up the following screen.

JobDetailScreen_CopadoEssentials.png

  1. Click the Deploy Options tab.
  2. The following screen will now show up.

DeployOptions_CopadoEssentials.png

  1. Click Advanced Options at the bottom.
  2. Then click Change and select Outgoing webhooks as follows:

webhooks_CopadoEssentials.png

  1. Click Save.
  2. A new tab will appear next to Deploy Options named Outgoing Webhooks. Click that.
  3. The following screen will show up:

webhooks2_CopadoEssentials.png

  1. Enter the Webhook Url as: https://s4.digitsec.com/webhooks/copadoEssentials and select application/json in the Content Type.
  2. To get the secret, log in to DigitSec. Find the Workspace you wish to scan on the Workspaces Screen, then click the title.
  1. Now select Integrations and then click Copado Essentials

  1. Use the copy button to copy the Copado Secret.
  2. Now go back to step 14 and enter the secret in the Payload field in the following format:
    {"secret": “YOUR_COPADO_SECRET"}
  3. Click Save. The webhook setup is now complete. 
  4. To test if things are set up properly, click the "Run Now (deploy) button.
  5. Once the webhook gets triggered, a scan will start in DigitSec. This activity won’t be reflected on the Copado Essentials side. When the scan completes, your scan will appear on the Dashboard for that Workspace.