Manage App Files

App files are used primarily to manage content that is required to successfully scan an app. When you encounter a website that is hard to crawl, use Macro, Traffic, and Selenium or other supported files to help with scanning and crawling. You can add, edit, download, and delete files that are shared across all scan configurations in an app. You can also replace a file, which allows you to edit file contents while retaining metadata from the original file.

Looking for information on how to use files in a scan config?

This article refers to file management. For information on how to use files within a scan configuration, see Scan Scope.

Supported file types

You can upload the following file types to your app:

  • Macro (.rec)
  • Selenium (.htm, .html, .side)
  • Traffic (.trec, .xml, .txt, .har, .saz)
  • Swagger (.json)
  • WSDL (.wsdl)
  • Certificate (.pfx)

How to access app files

The Files tab of the app screen allows you to upload, download, delete, and change permissions to files.

Files tab on the app page

View app file details

The Manage Files window is where you update the file information, as well as replace, download, and delete the file. To open the Manage Files Window, click the Files tab and select a file.

Manage Files window from the app page

Use case: Edit a Macro file

Replace a file

Re-recording macros for small changes like credentials can be tedious. In InsightAppSec, you can update the file without having to re-create the file. Replacing the macro file keeps the same metadata from the original macro file.

Let’s walk through editing the macro file:

  1. On the Files tab of the app page, in the Actions column of the file you want to edit, click the Download icon.
  2. Open the downloaded macro file and replace the credentials as needed.
  3. In the Manage Files window for the file you have edited, click Update File.
  4. Select the edited macro file and click Open.

Macro file edited

The credentials for the Macro file are updated and the metadata was retained.

App permissions

PersonaUploadDownloadDeleteReplace
File owner

The user that creates and uploads a file. Anyone in your organization with read/write access to a specific app can be a file owner
New filesYour own filesYour own filesYour own files

All unlocked files in the app
App User

A user able to access the app
--Unlocked fileUnlocked files
Administrator or user with additional privileges--Any fileAny file

Add new files to an app

Files are limited to an app and cannot be used in a different app. If a file is unlocked, users with read/write access to the app can reference and overwrite the file:

  1. On the Apps page, select your app.
  2. On the Files tab, click Upload File.
  3. Select one or more files and click Open.
  4. (Optional) Add file information.
    1. On the Files tab, click the file you want to edit.
    2. In Manage Files, enter the file details.
    3. Click Save.
    4. Repeat step 4 for each file.

Change file permissions

Control who can use, replace or delete your app files by setting the toggle in the Locked column of the Files tab.

  • Locked. locked toggle option All app users can use the file in a scan configuration.
  • Unlocked. unlocked toggle option All app users can use the file in a scan configuration, delete the file or upload a new version, and replace the existing file.

Downloading files

Files can not be edited within InsightAppSec. If you are the file owner, you can download the file to edit and re-upload without needing to create a new file.

  1. On the Apps page, select your app.
  2. On the Files tab, in the Actions column of the file you want to download, click the Download icon.

Who can download a file?

Files can only be downloaded by the file owner whether it is locked or unlocked.

A user cannot download another user’s file, even if they are an administrator. If the owner of a file leaves the company, an administrator can delete that file and upload a new version.

Overwrite an existing file

If you have existing files that you'd like to replace while keeping the original metadata, you can overwrite the app file with a new file:

  1. On the Apps page, select your app.
  2. On the Files tab, click the file name you want to overwrite.
  3. In Manage Files, in File Actions, click Update File.
  4. Select the file and click Open.

Edit file information

Enter a description of files to provide more context for the file than just the name. You can also complete other actions from the Manage Files window:

  1. On the Apps page, select your app.
  2. On the Files tab, click the file you want to edit.
  3. In Manage Files, edit the details.
  4. Click Save.

Delete files

Files are permanently deleted

App files are permanently deleted and cannot be recovered.

Deleting unused files keeps your app files up to date and easy to sort:

  1. On the Apps page, select your app.
  2. On the Files tab, in the Actions column of the file you want to delete, click the Delete icon.
  3. Click Delete.

File dependencies

Depending on the scan configuration, you may have to update scan configurations before you can delete the file. If scan configuration update is necessary, the specific scan configurations display below the inactive Delete button.