Scan Agent Plugins
The following enhancements to Code Insight remote scanning are now available.
Processing of Remote-Scan Results in Code Insight Now a Background Job
For scans performed by the generic and Docker Images scan-agent plugins only, the phase in which the scan results are processed in Code Insight for a given project is now run as a background job that users can track in the Jobs queue. During such scans, the remote plugin sends the scan results in JSON format to Code Insight as a .txt file to be stored temporarily in Code Insight. Once the results are successfully sent, the job ID for processing the results in Code Insight is created and the job is added to the job queue. (The ID is also returned to the plugin to indicate that the results were successfully sent.) Users can track the progress of the results-processing as a Remote Scan job in the Jobs queue. (Progress is shown as Active, Scheduled, Completed, or Failed.) When Code Insight completes the processing, the temporary file is removed.
The Queued On value for a Remote Scan job is the time when the scan results from the scan-agent plugin were successfully sent to Code Insight for processing.
Note:As soon as Code Insight receives results from a scan-agent plugin other than the generic plugin or the Docker Images plugin, the results are processed in the foreground (just as they have been processed in all previous releases).
For more information, refer to the following topics in the Code Insight User Guide.
| • | “Monitoring Code Insight Jobs Queue” |
| • | “Support for Processing Remote Scan Results in the Background” |
Also see the description of the API update related to this Jobs queue enhancement in REST API Enhancements (for Jobs APIs).
Support for Running Docker Images Plugin Scan with Command-Line Options
In previous releases, users were required to run a Docker Images agent scan with a properties file that they manually updated before the executing scan.
Users now have the option to run the scan using command-line options instead of a properties file. For more information, refer to “Running a Docker Images Plugin Scan with Command-Line Options” in the Code Insight Plugins Guide.