LogoLogo
Book a demo
  • Welcome to OXdocs
  • Get started
    • Connect to OX
      • Create an organization
      • Accept an invitation
    • Supported languages
    • Supported connectors
  • A tour of OX
    • Common page elements
    • Dashboard
    • Applications
    • Issues
    • Connectors
    • Policies
    • Exclusions
    • SaaS BOM
    • API BOM
    • Cloud BOM
    • Users
    • Settings
  • Scanning Selected Repositories
  • Securing Docker Images
  • OX Extension for VS Code
  • Artifact Integrity
  • Securing Multiple Branches
  • Enforcing SLA
  • Making connections
    • Asana Ticketing
    • GitHub
    • Getting GitHub Tokens
    • Tenable
    • GitGuardian
    • GitLab
    • Bitbucket
    • Azure
      • Azure Boards
      • Connecting to Azure
      • Azure Cloud
    • AWS
      • AWS OX Integration Policy
    • Jenkins
    • Google
    • JFrog Artifactory
    • EKS
    • Jira
      • Jira Permissions
      • Automating Jira Ticketing
    • Slack
    • Microsoft Teams
    • Red Hat Quay
    • Monday
    • Nexus IQ CLI
    • ServiceNow
    • OX Broker
    • GitHub Issues
    • GKE
  • Privacy policy
  • Reporting
    • Executive Reports
    • SBOM Reports
    • SLA Reports
  • Contact us
  • API Documentation
    • Working with OX APIs
    • API Reference
      • OX API Authentication
      • API Security
        • Queries
          • getApiSecurityFiltersLazy
          • getApiSecurityItems
        • Types
          • Objects
            • apiDefinitions
            • apiInventoryCommitInfo
            • apiInventoryCommit
            • apiSecurityItemFunction
            • apiSecurityItem
            • apiSecurityItemsResponse
            • methodParameter
            • methodResponse
          • Inputs
            • apiSecFilters
            • apiSecurityOrderBy
            • getApiSecurityInput
      • Application
        • Queries
          • getApplications
          • getSingleApplicationInfo
        • Mutations
          • setPriority
        • Types
          • Objects
            • appCategories
            • appFlowItemLocation
            • appSeverities
            • appTag
            • appToolCoverage
            • applicationExtraInfo
            • applicationFlow
            • applicationSeverityChangedReason
            • application
            • applicationsResponse
            • artifactItem
            • cicdInfoLocation
            • cicdInfo
            • cloudDeployment
            • dockerfile
            • extraInfoSnippet
            • kubernetesItem
            • language
            • matchedProject
            • matchedProjects
            • orchestratorItem
            • ownerInfo
            • pipeline
            • repositoryItem
            • scoreHistoryItem
            • serverSecurityInfraItem
            • setPriorityResponse
            • severities
            • toolCoverageSources
          • Inputs
            • appFilters
            • autoCompleteSearch
            • conditionalFilters
            • dateRange
            • getApplicationsInput
            • orderAppsBy
            • priorityInput
            • range
            • singleApplicationInput
            • systemFilter
          • Enums
            • appOwnerRole
            • appSystemsTypes
            • applicationsFilter
            • conditionType
            • filterTypes
            • irrelevancyFilter
            • orderByField
            • oxTagType
            • pipelineScanResult
      • Applications Owners
        • Queries
          • getAppOwnersByAppIdsAndRole
          • getAppOwners
        • Mutations
          • setAppOwners
        • Types
          • Objects
            • appOwner
            • getAppOwnersByAppIdsAndRoleRes
          • Inputs
            • getAppOwnersByAppIdsAndRoleInput
            • getAppOwnersInput
            • ownersByRoleInput
            • setApplicationsOwnersByRoleInput
            • userInputDto
      • Artifact
        • Queries
          • getArtifact
          • getArtifactsTopFilters
          • getArtifacts
        • Types
          • Objects
            • artifactApplication
            • artifactCategories
            • artifactInfo
            • artifactPackage
            • artifactRegistryDescription
            • artifactsResponse
            • artifactsTopFiltersResponse
            • cloudArtifactData
            • cloudDescription
            • ecs
            • iArtifactInfo
          • Inputs
            • artifactFilters
            • artifactsSort
            • getArtifactInput
            • getArtifactsInput
          • Enums
            • artifactInfoTypes
            • artifactTopFilters
            • artifactsSortByFields
            • cloudSubTypes
            • cloudTypes
          • Unions
            • commonCloudAttributesUnion
      • Audit
        • Queries
          • getLogsCount
          • getLogs
        • Types
          • Objects
            • auditLogCount
            • auditLog
            • excludedIssue
            • logPolicy
            • multipliedBranchWithReason
            • owner
            • pipelineSettingsV2
          • Inputs
            • getLogsInput
            • logDateRange
            • logOrderBy
          • Enums
            • direction
            • logName
            • logType
      • Cicd Issue
        • Queries
          • getCicdIssue
          • getCicdIssues
        • Types
          • Inputs
            • cicdIssueFilters
            • cicdIssuesInput
            • cicdIssuesSort
          • Enums
            • cicdIssueSortByFields
      • Cloud Security
        • Queries
          • getCloudItems
          • getSingleCloudBomItem
        • Types
          • Objects
            • appInfo
            • cloudItemImageHash
            • cloudItemImage
            • cloudItem
            • cloudItemsResponse
            • exposurePathItem
            • issueStat
            • issuesStats
            • workload
          • Inputs
            • cloudItemsFilters
            • cloudItemsInput
            • cloudItemsOrderBy
            • getSingleCloudBomItem
      • Connectors
        • Queries
          • getConnectorResources
          • getConnectorsByFamily
        • Mutations
          • addCredentials
          • monitorConnectorResources
          • removeCredentials
          • verifySingleConnectorCredentials
        • Types
          • Objects
            • aksCredentials
            • apiSecretAndAccessKeyCredentials
            • appIdAndTokenCredentials
            • atlassianCredsOutput
            • awsAssumeRoleCredentialsOnprem
            • awsAssumeRoleCredentials
            • awsCloudFormationInfo
            • awseksCredentials
            • azureCloudCredentials
            • bitbucketAppCredentials
            • bitbucketAppInfo
            • botIdentityProvider
            • brokerCredentials
            • clientIdClientSecretCredentials
            • clientIdSecretApiUrlCredentials
            • clientIdSecretKeyCredentials
            • conditionalOptionalTabs
            • connectionInstructions
            • connectorResourceResponse
            • connectorResponse
            • connector
            • connectorsByFamily
            • extraOptionalCreds
            • gitHubAppCredentials
            • gitHubAppInfo
            • identityProviderInfo
            • identityProvider
            • k8sInspectorCredentials
            • linkToDocs
            • monitorConnectorResourceResponse
            • optionalConnectorInput
            • optionalFields
            • organizationIdAndApiKeyCredentials
            • resourceItem
            • resourceOptions
            • resource
            • servicePrincipalCredentials
            • tabInputs
            • tenantClientsubscriptionIdSecretCredentials
            • tenantIdClientIdClientSecretCredentials
            • tokenAndProjectIdCredentials
            • tokenAndUserCredentials
            • tokenCredentials
            • tokenOnlyCredentials
            • userPasswordAndTenantCredentials
            • userPasswordCredentials
            • userPasswordOnlyCredentials
            • verifySingleCredentialsResponse
            • webhookCredentials
          • Inputs
            • addCredentialsInput
            • atlassianCreds
            • credentialsInput
            • extraOptionalCredsInput
            • getConnectorResourcesInput
            • gitHubAppInstallationTokenInput
            • idpTokenInput
            • monitorConnectorResourceInput
            • optionalFieldsInput
            • removeCredentialsInput
            • resourceInput
            • verifyCredentialsInput
          • Enums
            • credentialsType
            • inputTypes
            • resourceIcon
            • resourceName
            • resourceType
          • Unions
            • credential
      • Exclusions
        • Queries
          • getExclusions
        • Types
          • Objects
            • exclusionMatch
            • exclusion
            • getExclusionsRes
          • Inputs
            • exclusionsFilters
            • expiredAtFilter
            • getExclusionsInput
          • Enums
            • exclusionMode
            • exclusionScope
            • exclusionType
            • statusMode
      • Issue
        • Queries
          • getDisappearedIssue
          • getDisappearedIssues
          • getIssueGraph
          • getIssuePrioritization
          • getIssuesConditionalFiltersLazy
          • getIssuesTrendData
          • getIssues
          • getRemovedIssue
          • getRemovedIssues
          • getResolvedIssue
          • getResolvedIssues
          • getSbomIssuesBreakdown
          • getSingleIssueInfo
        • Mutations
          • addCommentToIssue
          • updateIssueSeverity
        • Types
          • Objects
            • additionalTab
            • aggItem
            • aggregationColumn
            • artifactInSbomLibs
            • cicdFields
            • codeLocation
            • complianceItem
            • cweList
            • dependencyEdge
            • dependencyNode
            • disappearedIssuesResponse
            • edge
            • exposedByApiItem
            • extraInfoContainer
            • extraInfo
            • filterExtraInfo
            • filterInfo
            • filterLazyResponse
            • filterLazy
            • fixAppliedDeatils
            • fixInputOption
            • fixInput
            • fixIssue
            • gptInfo
            • iAggColumns
            • iAggSummary
            • iAggregations
            • iAppsInfo
            • iCategory
            • iPolicy
            • issueDetailsTabs
            • issueGraph
            • issueMessage
            • issueResource
            • issueScore
            • issue
            • issuesBreakdown
            • issuesBySeverity
            • issuesPrioritizationResponse
            • issuesResponse
            • issuesTrendResponse
            • languageInfo
            • latestCommit
            • maintainer
            • node
            • oscarItem
            • policyFix
            • prevSeverity
            • prioritizationInfo
            • pullRequest
            • reasonDetails
            • recipient
            • sbomCommit
            • sbomDependencyGraphResponse
            • sbomLib
            • sbomReference
            • scaVulnerability
            • severityChangedExtraInfo
            • severityChangedReason
            • severityFactorsDiff
            • slaData
            • slackNotification
            • snippetInfo
            • ticket
            • triggerPackage
          • Inputs
            • addCommentToIssueInput
            • dIssuesSort
            • dateRangeFilter
            • disappearedIssuesInput
            • fetchDashboardInput
            • issueFilters
            • issuesExportOptions
            • issuesInput
            • issuesSort
            • orderBy
            • rIssuesSort
            • reportSlaExportColumn
            • resolvedIssuesInput
            • singleDisappearedIssueInput
            • singleIssueInput
            • updateIssueSeverityInput
          • Enums
            • cicdIssueStatus
            • countRule
            • criticalityFilter
            • edgeType
            • inventoryTypes
            • issueSortByFields
            • issueStatus
            • issuesExportOptionsType
            • messagingVendorsTypes
            • nodeType
            • provider
            • reportSlaExportColumnKeys
            • scaFixType
            • severityFactorStatus
            • slaStatus
      • Organization
        • Queries
          • getGlobalRoles
          • getInvitations
          • getMembers
        • Mutations
          • createInvitation
          • createMultipleInvitations
          • deleteInvitation
          • resendInvitation
        • Types
          • Objects
            • invitation
            • member
            • role
          • Inputs
            • invitationInput
      • Pipeline
        • Queries
          • getBlockedVsMonitorTrend
          • getDurationTrend
          • getPipelineSummary
          • getSeverityTrendsInPipeline
        • Types
          • Objects
            • blockedVsMonitorTrendRes
            • durationTrendRes
            • pipelineSummaryResponse
            • pipelineSummary
            • severityTrendsInPipelineRes
            • singleApp
            • tagOutput
          • Inputs
            • getPipelineSummaryInput
            • pipelineSummaryFilters
          • Enums
            • pipelineScanCompletionStatus
      • Saas SBOM
        • Queries
          • getSaasBomItems
        • Types
          • Objects
            • saasBomItem
            • saasBomItemsResponse
          • Inputs
            • getSaasBomItemsInput
            • saasBomFilters
            • saasBomOrderBy
      • SBOM
        • Queries
          • getSbomLibraries
          • getSbomVulnerableLibraries
          • getSingleSbomLibrary
        • Types
          • Objects
            • sbomLibResponse
            • sbomVulnerableLibrariesResponseItem
            • sbomVulnerableLibrariesResponse
          • Inputs
            • getApplicationsSbom
            • getSingleSbomLibraryInput
            • sbomLibFilters
            • sbomLibSortInput
            • sbomVulnerableLibrariesInput
          • Enums
            • sbomLibSortFields
            • severityRisk
      • Scan
        • Queries
          • checkScanInProgress
        • Mutations
          • scanAll
          • singleRepoScan
        • Types
          • Objects
            • scanInProgressResponse
            • scanResponse
          • Inputs
            • applicationToScanInput
            • singleRepoScanInput
          • Enums
            • scanStage
      • Tags
        • Queries
          • getAllTags
          • getAppTags
        • Mutations
          • addTags
          • modifyAppsTags
          • removeTags
        • Types
          • Objects
            • acknowledge
            • addTagRes
            • appTagObject
            • getAllTagsResponse
            • getAppsTagsRes
            • tagObject
          • Inputs
            • addTagInput
            • deleteTagsFilter
            • deleteTagsInput
            • getAppsTagsInputFilter
            • getAppsTagsInput
            • getTagsFilters
            • getTagsInput
            • modifyAppsTagsInput
            • tagDto
Powered by GitBook

Copyright ©2024 OX Security. All rights reserved.

On this page
  • Overview
  • Development & production infrastructure
  • Security tools
  • Connecting your tools
  • Connection status
  1. A tour of OX

Connectors

Last updated 1 year ago

At a glance: Integrate your infrastructure systems and (optionally) additional security tools with OX to get your full application security posture in our single, centralized platform – providing complete coverage, issue aggregation and prioritization, and automation.

Overview

The Connectors page is the single location from which you can connect your infrastructure and security tools to OX.

OX supports 2 primary types of connectors:

  • Development & production infrastructure

  • Security tools

Additionally, you can connect tools such as ChatGPT, Jira, Slack, Logz.io, and Splunk to facilitate collaboration and remediation of issues.

You can find a full list of all supported connectors here.

Development & production infrastructure

These are the systems that provide your supply chain infrastructure, including:

  • Source control systems (such as GitHub, GitLab, and Bitbucket)

  • CI/CD systems (such as Jenkins and Azure Pipelines)

  • Registries (such as Docker Hub and JFrog)

  • Cloud deployment infrastructure (such as AWS and Google Cloud Platform)

Security tools

These are the security tools that scan and secure your software throughout the development lifecycle.

  • OX provides complete coverage for each lifecycle stage with its combination of proprietary and open-source tools (such as Trivy, Bandit, DevSkim, Semgrep, GitLeaks, Checkov, and Prowler).

  • We also provide you the flexibility to integrate other dedicated, security tools you are using (either commercial or open source) into the OX platform.

    • Examples of these tools include Snyk for SCA, Checkmarx for static code analysis, or Prisma for CSPM.

OX security tools

By default, OX security tools (proprietary and open source) are enabled to provide full supply chain coverage out of the box in the optimal configuration for your environment.

OX tools cover any stage you have not protected with dedicated tools. Additionally, all of these tools can work in parallel with any dedicated security tools you already have installed. In other words, you can keep the OX tools active even if you do add additional tools to cover specific categories.

Of course, you can elect to disable any of the OX tools according to your needs.

Connecting your tools

To connect a tool, click its box on the Connector page. Each tool has its specific connection options and instructions. Usually, the connection can be made using one or more of the following methods:

  • Identity provider

  • Token

  • Username & password

  • Shared secret

Specific instructions for each connector can be found inside its box on the Connectors page. For certain connectors, additional details are available in the Making connections section of this help center.

Connection status

An icon in a connector's box on the Connectors page indicates its status:

Tool is connected and active

Tool was discovered in your environment, but it is not yet connected

Tool was connected, but there are connection issues