Improving the Validation and Verification Process for Workpath Apps

Improving the Validation and Verification Process for Workpath Apps

HP continues to invest in our platforms and process to help developers innovate with speed and security on the HP Workpath Platform. We are excited to announce a major improvement to the VAV submissions process, migrating from a date-driven submission period to an On-Demand VAV process completing reviews within 72 hours. Developers wanted the VAV process to support fast innovation, customers’ needs and the occasional bugfix. So now as a developer you can submit your app for VAV anytime you wish, and we will target 3 business days to complete the security review of your Workpath app! We are starting these improvements now as a trial (not yet reflected in the App Center UI) and expect more improvements in the coming months as part of our October Workpath Release.

Here are steps below that describes updates to the Workpath app VAV Process.

Previous VAV Process: (8 days up to 5 weeks)

  • 1st Thursday of the Month VAV Submission Deadline
  • VAV Deadline +8 Days, your App Security Review Report is Posted on App Center
  • 3rd Thursday of the Month Resubmissions of Apps Accepted (new versions)
  • Resubmission VAV Date +3 Days, App Security Review Report is Posted on App Center

New On-Demand VAV Process: (up to 4 Business days)

  • You can submit an App for VAV in App Center at any time
  • +3 days from your App Submission, App Security Review Report Posted on App Center
  • When your app passes VAV; the HP Publishing team makes your app Available in HP Command Center within 1 business day of VAV completion
  • Resubmissions of Apps (New Versions) accepted anytime

Here are some specifics of our new HP Workpath App VAV submission process.

Resubmissions of failed apps can happen any time, we suggest prior to your app resubmission that you address ALL the critical, high and medium issues flagged in your app.
VAV submission limitations do apply. Number of VAV’d passed versions is based on the App Center Program you choose for your app. (Private, Listed Transacted)
If you have specific security notes that you would like to share with our security team, you can submit them along with your app as a comment and/or an attachment within App Center.

We know that high demand can occur for HP Workpath VAV services. In the event we high demand occurs we will move quickly to catch up, and in the meantime we will prioritize app security reviews to minimize customer and developer impact.

HP App Center will complete a high level automated scan of your app when submitted, If you are interested in the additional security items we review for your app you can download documentation here.

Please visit the enroll and publish page for more detailed information on publishing apps.