Connecting Fibery to Drata allows for the automated checks and evidence collection to prove to auditors that your company follows its vulnerability management policy and procedures.
BEFORE DIVING IN
Make sure you have admin access to your company's Fibery account.
Connect Fibery to Drata
Select Connections on the side navigation menu.
Select the Available connections tab, search for Fibery and select Connect.
Follow the instructions in the slide-out panel carefully. Take your time and complete one step entirely before moving on to the next.
Retrieve your Fibery authentication token
Fibery Documentation: https://api.fibery.io/#authentication
To acquire a token, log in into your Fibery workspace and execute the following code in the browser console (there are some handy tips on browser console usage below this step if you aren’t familiar with it):
fetch(`https://${window.location.host}/api/tokens`, { method: 'POST' }) .then(res => res.json()) .then(obj => console.log("Your API token:", obj.value));
The browser will set the cookie automatically and your token will be printed in the console. It should look similar to the following:
a1b2c3d4.sdfab89766532g91aye2nd38d4dls23ya17ks
Your API token carries the same privileges as your user, so be sure to keep it secret. Tokens cannot be shared across workspaces. To add a separate workspace you must obtain a new token from the workspace and create a new Fibery connection.
Tips on opening your browser console:
Supported/Required Fibery Column Field Types
Your Entity type must utilize the Fibery "Assignments" column field type.
Supported Tag field column types are
Text
Single Select
Multi Select
Supported Priority field column types are
Text
Single Select
Identifying Column Field Types
The column types in Fibery supported by Drata can be identified by their associated icons shown below.
Assignments Field Type
Text Field Type
Single Select Field Type
Multi Select Field Type
Validating your Fibery Connection
Due to the flexible nature of Fibery, it’s a good idea to validate that your connection is working as expected.
You can confirm this by triggering a failure and then correcting it. Create a new example entity in Fibery with the security label, but without a priority. Then manually run the Security Issues are Prioritized test and check it fails. Then set a priority in Fibery. Rerun the test and it should now pass.
If you have any problems click the See Raw Data button on the tests. Make sure that the test entities reflect the entities in your Fibery space appropriately.