Skip to main content
Version: 1.5.2

Run a security scan

System users can run all security checks in a project layer or run individual checks.

Run a security scan for a project layer​

Follow these steps to run a security scan for a project layer:

  1. Go to Projects → Project name → Security layers.
  2. Select Start a new scan.
note

When you select Start a new scan, the system runs all security checks in the layer.

caution

Running a large number of security checks at the same time—several dozen or more—with the Solar AppScreener tool can cause issues due to the tool's architecture.

If you encounter issues, run the security checks individually. For more information, see "Run a security scan" below.

Special considerations for running security scans in project layers with different tools​

If a project layer contains security checks that use different types of tools—for example, tools with direct API integration and external CLI tools—the system automatically determines which checks it can run and which tasks to perform. This feature means you don't have to manually split checks across different layers, and you can run scans even when the layer contains different types of tools.

In this case, whether the system can run a security scan depends on the following conditions:

  1. If the project layer contains at least one check that uses a tool with direct API integration, you can start the scan. In this case, the system runs only the checks that use this tool. It skips checks that use external CLI tools that can't run in Kubernetes.
  2. If the project layer contains only checks that use CLI tools that can't run in Kubernetes, you can't start the scan.

Run a security scan​

Follow these steps to run an individual security scan:

  1. Go to the required project layer in Projects → Project name → Security layers.
  2. Select the additional actions button Additional actions in the check row.
  3. Select Start a new scan.

When a security scan starts, its status changes to Scanning.

After the scan completes successfully, its status changes to Completed.

The default maximum runtime for a scan cycle is 24 hours. If the cycle reaches the maximum runtime, the check's status changes to Failed, and the process ends. The system also assigns the Failed status when an error occurs at any stage of the scan.

Stop a scan​

You can also force-stop a security scan with the In progress status. To do this:

  1. Select the additional actions button Additional actions in the check row.
  2. Select Stop.