VCS 3rd Parties

VCS 3rd Parties displays an inventory of third party applications (apps) and webhooks found in your organization’s version control system (VCS). This allows you to understand where they are in use in the organization, and to remove unused apps or webhooks in order to reduce your attack surface. In addition, you can view and understand permissions that applications have and remove excessive permissions where not required. This will help you abide by the 'least permission' principle, which states that applications should only be granted the permissions that they need to do their job.

To access ''VCS 3rd Parties', in Application Security select > Home > Technologies > click on the VCS 3rd Parties tab.

The VCS 3rd Parties inventory includes the following details:

• Name: The application/webhook name
• Type: The type of third party. Values: 'App', 'Webhook'
• Scope: The scope of the application/webhook. Values: 'Organization', 'Repository', 'Subscription', 'Team'
• Permissions: A summary of permissions granted to an application. See the 'Details' tab of the resource explorer for additional details about permissions when available
• VCS: The VCS hosting the application/webhook
• Organization: The organization in the VCS hosting the third party
• Repos: The number of repositories that host the application/webhook. See the Repositories tab of the resource explorer below for more details

Selecting an entity in the inventory table opens the resource explorer displaying additional information about the entity.

• The Details tab opens as the default view, providing third party metadata such as a list permissions that the app has been granted and a list of events that the app or webhook listens to

  
• The Repositories tab displays a list of repositories in your organization hosting the apps or webhooks. Includes a link to the repositories

  
• The URL tab provides a list of the webhook URLs detected

  

Filters

You can apply the following filters to narrow a search for a third party application or webhook.

• Repository: Filter by repositories in the system
• Type: Filter by application, webhook or both
• Scope: Filter by repository, organization or subscription
• URL: Filter by webhook URL
• VCS: Filter by the VCS in use in your organization. Values: 'GitHub', 'GitLab', 'Azure DevOps' and 'Bitbucket'