Introduced in August 2021 by Guardsquare, AppSweep is a free Android app security testing tool designed to address mobile security issues and eliminate risks in your code and dependencies as quickly as possible. We’re delighted to announce that the ‘Scan with AppSweep’ Step is now ready to be added to your Bitrise Workflow: taking you a step closer to DevSecOps, it makes your apps more secure with continuous security assurance.
About the Step
Mobile app security requires a sophisticated and multi-layered approach. It became crucial to make not only DevOps but also DevSecOps integral parts of the software development lifecycle to minimize vulnerabilities across our apps. This is where AppSweep comes into the picture, which is a convenient tool for developers, who can review the security scan results in a way that is similar to navigating their app in Android Studio or another IDE.
AppSweep is an app security testing solution based on GuardSquare’s Proguard Technology. By integrating it with your Mobile DevOps toolchain — in this case, Bitrise — you can continuously monitor the security of your applications.
The benefits of adding AppSweep to your Bitrise Workflow at an early stage:
- Shortened feedback cycles
- Reduced workload
- Faster releases with higher success rates
How it works
By combining Bitrise and the free tool of AppSweep, you can submit your app for analysis and receive an actionable list of security issues and recommended fixes. However, registered users get a lot more: read the details here.
For an in-depth tutorial and pre-requirements to set up the integration, read this article on Guardsquare's blog!
Now go and add the ‘Scan with AppSweep’ Step to your Workflow!
Bitrise Verified Steps are official integrations developed and maintained by the service owner. If you'd like to know more about our Verified Step Program and create your Verified Step, read more about it here. Feel free to reach out to us on Twitter or on our public Slack with your experiences about the Step, or to send us any great ideas that would help mobile devs in their daily tasks.