ShiftLeft Partners with CircleCI
January 15, 2020

ShiftLeft announced a partnership and deep integration with CircleCI that enables organizations to insert security directly into developer pull requests from code repositories.

ShiftLeft Inspect is the first static application security testing (SAST) vendor to partner with CircleCI to provide these capabilities.

The partnership and integration enables CircleCI users to run ShiftLeft Inspect on CircleCI builds and pull requests from any code repository integrated with CircleCI. Pull requests and builds can then automatically be escalated, alerted upon or failed based on security criteria. Hence, CircleCI users can mirror their DevOps initiatives with DevSecOps goals.

As part of the partnership, ShiftLeft Inspect will be free to CircleCI users for an unlimited number of applications and frameworks, totaling no more than 200,000 lines of code and 300 scans per year. The free license will include one programming language and enable CircleCI users to scan up to two applications concurrently.

"Today’s developers are building and delivering software at incredibly high velocity, which is required to meet the demands of organizations and customers,” said Tom Trahan, VP of Business Development, CircleCI. “Historically, security has been viewed as a step that slows down that velocity. CircleCI is excited to partner with ShiftLeft to enable developers to insert security further left in the CI/CD pipeline, for accurate vulnerability scanning."

“When it comes to source code analysis, most of what’s being delivered today in application security is automation for automation’s sake. The tools on the market today aren’t actually enabling organizations to make the right decisions automatically,” said Alok Shukla, VP of Product Management, ShiftLeft. “With ShiftLeft and CircleCI, organizations and developers are able to make accurate, fast decisions when it comes to their release quality, further left in the development lifecycle than ever before. By inserting security as far left as the pull requests, we’re delivering industry-first SAST capabilities that will help our customers harness the benefits modern CI/CD pipelines without leaving security behind.”

The integration is immediately available to ShiftLeft customers and CircleCI users.

Share this

Industry News

January 16, 2020

VAST Data announced the general availability of its new Container Storage Interface (CSI).

January 16, 2020

Fugue has open sourced Regula, a tool that evaluates Terraform infrastructure-as-code for security misconfigurations and compliance violations prior to deployment.

January 16, 2020

WhiteHat Security will offer free application scanning services to federal, state and municipal agencies in North America.

January 15, 2020

Micro Focus announced the release of Micro Focus AD Bridge 2.0, offering IT administrators the ability to extend Active Directory (AD) controls from on-premises resources, including Windows and Linux devices to the cloud - a solution not previously offered in the marketplace.

January 15, 2020

SaltStack announced the availability of three new open-source innovation modules: Heist, Umbra, and Idem.

January 15, 2020

ShiftLeft announced a partnership and deep integration with CircleCI that enables organizations to insert security directly into developer pull requests from code repositories.

January 14, 2020

Containous closed $10 million in Series A funding.

January 13, 2020

JFrog announced the launch of the free ConanCenter, enabling better search and discovery while streamlining C/C++ package management.

January 13, 2020

Perfect Sense launched Gyro - a cloud management tool that mitigates the risks associated with manually provisioning and managing infrastructure, lack of standards in configurations, and unpredictable results from changes to cloud infrastructure.

January 13, 2020

Synopsys has completed the acquisition of Tinfoil Security, a provider of dynamic application security testing (DAST) and Application Program Interface (API) security testing solutions.

January 09, 2020

IT Revolution, the industry leader for advancing DevOps, opened its call for presentations for both DevOps Enterprise Summit 2020 events in London and Las Vegas.

January 08, 2020

Anchore announced the immediate availability of Anchore Enterprise 2.2.

January 08, 2020

TigerGraph announced new functionality and performance for TigerGraph Cloud.

January 07, 2020

Compuware Corporation announced a CloudBees Technical Alliance Partner Program (TAPP) Premier Partnership and new advancements to Topaz that together enable organizations to quickly achieve low-risk, low-cost mainframe modernization by fully leveraging their existing mainframe resources.

January 07, 2020

Allegro A officially welcomes Allegro Trains Agent to the Allegro Trains ecosystem.