Vulnerability Scanning
Introduction
The Vulnerability Scanning plugin by Devtron enables you to scan and detect vulnerabilities of your applications using Trivy/Clair. The Vulnerability Scanning plugin is recommended to be integrated into the Job Pipeline, especially when you are using external CI pipelines like Jenkins, GitLab, or GitHub Actions. Based on Vulnerability Scanning results, you can enforce security policies to either proceed with or abort the deployment process, giving you more control over your deployment process.
Prerequisites
Before integrating the Vulnerability Scanning plugin, ensure that you have installed the Vulnerability Scanning (Trivy/Clair) integration from Devtron Stack Manager.
Steps
Go to Applications → Devtron Apps.
Click your application.
Go to App Configuration → Workflow Editor.
Click New Workflow and navigate to the CREATE JOB PIPELINE.
Enter the required fields in the Basic configuration window.
Click Task to be executed.
Under 'TASKS', click the + Add task button.
Click the Vulnerability Scanning plugin.
Enter the following user inputs with appropriate values.
User Inputs
Task Name
Enter the name of your task
e.g., Vulnerability Scanning for External CI
Description
Add a brief explanation of the task and the reason for choosing the plugin. Include information for someone else to understand the purpose of the task.
e.g., The Vulnerability Scanning plugin is integrated for detecting vulnerabilities in applications.
Input Variables
IMAGE_SCAN_MAX_RETRIES
STRING
Maximum retries for image scanning.
2
IMAGE_SCAN_RETRY_DELAY
STRING
Delay between image scanning retries (seconds).
120
Trigger/Skip Condition
Here you can set conditions to execute or skip the task. You can select Set trigger conditions for the execution of a task or Set skip conditions to skip the task.
Output Variables
Vulnerability Scanning will not be generating an output variable.
Click Update Pipeline.
Last updated