Create an Automation Workflow in the Mend Platform

Overview

This article covers the instructions on how to create an Automation Workflow within the application of the Mend Platform.

Mend provides the option to create a workflow from a pre-defined template collection, which is Mend.io’s definition of security and compliance best practices, or to create a workflow manually from scratch.

Getting it done

Learn more about the implementation methods by referring to our Workflow Configuration Parameters in the Mend Platform documentation.

Pre-Defined Workflow Creation

Mend.io offers a variety of pre-defined Workflow templates. Clicking on a template will pre-fill a new Workflow on the creation page, which can also be customized.

Notes:

• Mend recommends using labels in the Workflow scope to easily target specific high-risk Applications or Projects. You can assign labels to applications and projects from the administration page.

• The pre-defined labels are examples and can be manually changed per each organization’s requirements.

1. Log into the Mend Platform.

2. Click Workflows in the top navigation.

3. Navigate to the Template Gallery section within the Workflow page.

   

4. In this screen, you can select Workflow templates for each Mend scan engine:

   1. Dependencies

   2. Code

   3. Containers

5. Once you select a pre-defined template, you’ll be navigated to the Workflow creation page with all pre-defined settings applied. You can save this Workflow as the provided Mend template or customize it to your specific needs.

   

6. Click Create to save this Workflow.

Note: Mend recommends changing the Workflow Name in case manual changes are applied to the pre-defined Workflow.

Manual Workflow Creation

1. Log into the Mend Platform.

2. Click Workflows in the top navigation

3. Click the + Create button.

4. Enter a name for the Workflow. The Workflow can be created in Active or Inactive mode.

5. Choose a Triggering Event option to define when the Workflow should run:

   1. Code Analysis

   2. Containers Analysis

   3. Dependencies Analysis

   4. New Application Created

   5. New Project Created

6. Set the Scope Conditions to define when the triggering event will apply. You can use Exclude or Include and apply the conditions by Name or by standard Regex:

   1. Entire Organization

   2. Application

   3. Project

   4. Labels

7. Define the Event Conditions from the list of properties:

   1. Finding Age

   2. Finding CWE Type

   3. Finding Severity

8. Select the Actions to perform:

   1. Assign Label

   2. Create Jira Issue

   3. Create Policy Violation

   4. Send Email

9. Click Create to save this Workflow.

Reference

To view or edit your created Workflows, please refer to our Edit an Automation Workflow in the Mend Platform documentation.