ATS components

‍

Agilitest offers numerous services to improve user comfort and protect user data.

The components used by Agilitest come from the editor and ATS.

‍

For each new version of ATS, ATS components will be pushed by the Agilitest team to the MVN Repository, which is a directory containing all libraries developed in MVN.

‍

Access to the MVN Repository website is free and open to the public: https://mvnrepository.com/artifact/com.actiontestscript/ats-automated-testing/3.5.5

‍

Agilitest's policy is to use the latest versions of components in order to be as aligned as possible with the stability and security of the latest versions.

Using the latest versions improves the software's compatibility with components, minimizes bugs that may be present in the component code, and, above all, addresses vulnerability issues.

‍

Vulnerabilities can take time to detect. A vulnerability in a component version can impact the security of the devices and data used.

It is often difficult to find vulnerabilities in real time, whether using tools or conducting in-depth research. Certain algorithms will analyze the code of components and be able to detect vulnerabilities that indicate that the code is vulnerable to certain things.

‍

‍

With the latest versions of component, it is easier to manage the vulnerability and this also avoids major code modification updates.

Users have access to the MVN Repository site to view the latest versions used, but also to check for potential vulnerabilities.

If a vulnerability is present in the ATS code, it appears in the version description.

‍

Example :

In version 3.2.0, there were vulnerabilities that only became apparent later and were fixed starting with version 3.2.1.

‍

‍

Docker version of ATS

It is also possible to view vulnerabilities on Docker images: https://hub.docker.com/repository/docker/actiontestscript/linux/general

‍

Vulnerabilities are displayed directly in the version descriptions. They do not necessarily correspond to the same vulnerabilities as those in MVN.

In the MVN Repository, it is indicated whether vulnerabilities are present or not. Whereas for Docker, we talk about vulnerability levels.

Agilitest is committed to not delivering any “critical” or “high severity” versions. If they were to be delivered despite this, a fix would be scheduled as soon as possible.

‍

‍

For Agilitest, Linux desktop distributes docker images: https://hub.docker.com/repository/docker/agilitest/linux-desktop/general

These images largely incorporate ATS Docker components, but also include others.

‍

Agilitest performs constant monitoring so that its users can use ATS components, and therefore Agilitest, without encountering any issues.

‍