Overview of How to Set Up for Remote Scanning
The following is an overview of setting up for remote scanning.
|
Phase |
Description |
|
1 |
Create a project in Code Insight. See About Code Insight Projects. |
|
2 |
Create a valid JSON Web Token (JWT) for the user whose account will be used to connect to Code Insight. For instructions on generating the JWT, see Managing Authorization Tokens. |
|
3 |
Install and configure the appropriate scan-agent plugin. (For information how to install and configure the plugin, see the Code Insight Plugins Guide.) As part of the configuration process, you will need to provide the name of the project that you created, the URL of the Code Insight core server, and the JWT. |
When the scan-agent plugin is invoked (for example, during a build in Jenkins), the remote codebase will be scanned and any identified inventory items will be created in the existing project on the Code Insight server for further review and remediation.