---
title: Integrating AppSweep with Bitrise | Guardsquare
description: Learn how you can automate mobile app security testing and protect your application from security threats by integrating AppSweep with Bitrise.
image: https://23593082.hs-sites.com/hubfs/Imported_Blog_Media/Automate-Mobile-App-Security-Testing-by-Integrating-AppSweep-with-Bitrise-2.jpg
---

[![guardsquare-logo](https://insights.guardsquare.com/hs-fs/hubfs/Logos/logo-white.png?length=536&name=logo-white.png "guardsquare-logo") ](https://23593082.hs-sites.com/)

- pricing

[Request Pricing](https://www.guardsquare.com/request-pricing?hsCtaTracking=646b0379-d596-4b1a-8526-2ccbdbb0f81b%7Ce8809087-a83f-4476-8b22-34b9572013fd)

[Login](https://customers.guardsquare.com/login?utm_referrer=https%3A%2F%2Fwww.guardsquare.com%2F)

En

- [中文](https://www.guardsquare.com/zh-hans)
- [한국어](https://www.guardsquare.com/ko)
- [Português](https://www.guardsquare.com/pt-br)
- [Español](https://www.guardsquare.com/es)

<https://twitter.com/intent/tweet?original_referer=https://23593082.hs-sites.com/amilia-test/blog/automate-mobile-app-security-testing-by-integrating-appsweep-with-bitrise&url=https://23593082.hs-sites.com/amilia-test/blog/automate-mobile-app-security-testing-by-integrating-appsweep-with-bitrise&source=tweetbutton> <http://www.linkedin.com/shareArticle?mini=true&url=https://23593082.hs-sites.com/amilia-test/blog/automate-mobile-app-security-testing-by-integrating-appsweep-with-bitrise> <http://www.facebook.com/share.php?u=https://23593082.hs-sites.com/amilia-test/blog/automate-mobile-app-security-testing-by-integrating-appsweep-with-bitrise> [mailto:?subject=Check%20out%20https://23593082.hs-sites.com/amilia-test/blog/automate-mobile-app-security-testing-by-integrating-appsweep-with-bitrise](mailto:?subject=Check%20out%20https://23593082.hs-sites.com/amilia-test/blog/automate-mobile-app-security-testing-by-integrating-appsweep-with-bitrise)

February 22, 2022

# Automate Mobile App Security Testing by Integrating AppSweep with Bitrise

Written by: Andre Carvalho - Software Engineer

![](https://23593082.hs-sites.com/hubfs/Imported_Blog_Media/Automate-Mobile-App-Security-Testing-by-Integrating-AppSweep-with-Bitrise-2.jpg)

## Why integrate with Bitrise?

[AppSweep](https://23593082.hs-sites.com/appsweep-mobile-application-security-testing) allows developers to analyze their mobile app for potential security issues. This process can be automated by triggering the analysis from within your Continuous Integration (CI) pipeline with [Bitrise](https://blog.bitrise.io/post/mobile-app-security-made-easy-with-appsweeps-verified-step). For this, we have built a Bitrise step that will automatically fetch your built application and then upload it to AppSweep. Doing so enables you to continuously scan your application for security issues, without any manual steps. AppSweep also provides an intuitive UI to drill down into the scan details to quickly navigate to the relevant findings for specific builds.

## Pre-requirements for the Bitrise Integration

Before diving into the integration with [Bitrise](https://www.bitrise.io/integrations/steps/scan-with-appsweep), you should create an API key for your project. This can be easily done inside your project’s settings page in AppSweep. Once you have created such a key, save it for use in a later step of this tutorial.

![Screenshot from 2022-02-17 08-52-01 (1)](https://23593082.hs-sites.com/hs-fs/hubfs/Imported_Blog_Media/Screenshot%20from%202022-02-17%2008-52-01%20(1)-2.png?width=800&name=Screenshot%20from%202022-02-17%2008-52-01%20(1)-2.png)

## AppSweep Gradle plugin

In order to upload your application to AppSweep, you need to have our Gradle plugin installed in your app build. When using our Bitrise integration, the plugin is injected automatically into your Gradle configuration so you don’t have to worry about it as long as your project has a default structure. However, you can also install the Gradle plugin yourself using our [documentation](https://github.com/Guardsquare/appsweep-gradle).

## Automating the scanning process within your Bitrise workflow

Automating the scan in your Bitrise workflow is fairly simple and straightforward. You start by adding the API Key you created for your project into Bitrise as a secret. To do this, you should go to your workflow, press edit, and then you should see on top a Secrets tab. Inside this tab, you add the previously generated key with a name of your own choice.

![Screenshot from 2022-02-17 11-09-15](https://23593082.hs-sites.com/hs-fs/hubfs/Imported_Blog_Media/Screenshot%20from%202022-02-17%2011-09-15-2.png?width=902&name=Screenshot%20from%202022-02-17%2011-09-15-2.png)

After the secrets are set up, you need to add our Bitrise step into your workflow. For this, you must go back to the *Workflows* tab and scroll to where you wish to scan your app (as long as it is built since AppSweep takes a built app) and press the + button. A window will pop up where you can search for appsweep to find our Bitrise step:

![Screenshot from 2022-02-17 09-02-17](https://23593082.hs-sites.com/hs-fs/hubfs/Imported_Blog_Media/Screenshot%20from%202022-02-17%2009-02-17-2.png?width=803&name=Screenshot%20from%202022-02-17%2009-02-17-2.png)

By clicking on it, the AppSweep scan step will be added to your pipeline and you’ll see the configurations for the step:

- AppSweep API Key - This is the API Key for your application. You should select the key you added in the first step.
- Select the build variant which should be uploaded. By default, the release build is uploaded.
- AppSweep gradle plugin version - The version of injected AppSweep gradle plugin. Can be set to *latest.version* or to the version you wish. If the plugin is already configured in your repository then this option has no impact.

After configuring the AppSweep step you can rebuild the pipeline and your application will be automatically uploaded for scanning. The logs will contain the link for the AppSweep build. However, it is also possible to print this information to other platforms like Slack or send an email to the developers.

![Screenshot from 2022-02-17 09-03-05](https://23593082.hs-sites.com/hs-fs/hubfs/Imported_Blog_Media/Screenshot%20from%202022-02-17%2009-03-05-2.png?width=744&name=Screenshot%20from%202022-02-17%2009-03-05-2.png)

## View the results

After configuring the pipeline steps, your pipeline automatically uploads your application to AppSweep whenever the pipeline is executed (e.g. for each commit, release, nightly test, etc…). In the AppSweep UI you will see all scans, chronologically ordered. Clicking on the most recent build allows you to explore the detailed results of your last pipeline execution.

![Screenshot from 2022-02-17 09-05-21 (1)](https://23593082.hs-sites.com/hs-fs/hubfs/Imported_Blog_Media/Screenshot%20from%202022-02-17%2009-05-21%20(1)-2.png?width=800&name=Screenshot%20from%202022-02-17%2009-05-21%20(1)-2.png)

Developers in your team will no longer have to worry about manually uploading their app into AppSweep. Instead, everytime the pipeline is triggered (i.e. a pull request) it will automatically upload your app to AppSweep for scanning. This way they can immediately see which issues and vulnerabilities their app contains and easily fix them by applying the provided recommendations.

Tag(s): [AppSweep](https://23593082.hs-sites.com/amilia-test/tag/appsweep) , [Technical](https://23593082.hs-sites.com/amilia-test/tag/technical) , [Security Testing](https://23593082.hs-sites.com/amilia-test/tag/security-testing)

## [Andre Carvalho - Software Engineer](https://23593082.hs-sites.com/amilia-test/author/andre-carvalho-software-engineer)

Connect with the author

## Discover how Guardsquare provides industry-leading protection for mobile apps.

## Other posts you might be interested in

[

** 11 min read  | August 22, 2023

## Webinar Recap: Accessibility Features and Overlays on Android

Android Protection Security Research 

](https://23593082.hs-sites.com/amilia-test/blog/app-permissions-abuse) [

** 7 min read  | August 15, 2023

## What is RASP and Why It Matters to Mobile App Developers

Android iOS Protection DexGuard iXGuard 

](https://23593082.hs-sites.com/amilia-test/blog/rasp-dynamic-analysis)

## Subscribe to our newsletter

Stay in the know with monthly updates right to your inbox.

![HubSpot CMS](https://cdn2.hubspot.net/hubfs/302335/hubspot-cms-logo-gray.svg "HubSpot CMS")

[General Terms](https://23593082.hs-sites.com/terms-of-use) | [Privacy Policy](https://23593082.hs-sites.com/privacy-policy) | [Cookie Policy](https://23593082.hs-sites.com/cookie-policy)

Tervuursevest 362 bus 1, 3000 Leuven, Belgium | VAT: BE0550675829 |

© 2016-2026 Guardsquare nv. All rights reserved.

<https://www.facebook.com/guardsquare> <https://twitter.com/Guardsquare> <https://www.linkedin.com/company/guardsquare/> <https://www.youtube.com/channel/UCP9s5F1ksT1E-7vSF2CDyhw> <https://github.com/Guardsquare>

```json
{
  "@context" : "https://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "Andre Carvalho - Software Engineer",
    "url" : "https://23593082.hs-sites.com/amilia-test/author/andre-carvalho-software-engineer"
  },
  "dateModified" : "2023-09-19T17:46:05.503Z",
  "datePublished" : "2022-02-22T05:00:00.000Z",
  "headline" : "Integrating AppSweep with Bitrise | Guardsquare",
  "image" : [ "https://23593082.hs-sites.com/hubfs/Imported_Blog_Media/Automate-Mobile-App-Security-Testing-by-Integrating-AppSweep-with-Bitrise-2.jpg" ],
  "mainEntityOfPage" : {
    "@id" : "https://23593082.hs-sites.com/amilia-test/blog/automate-mobile-app-security-testing-by-integrating-appsweep-with-bitrise",
    "@type" : "WebPage"
  },
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject"
    }
  }
}
```