IAC Scan Artifacts

The IaC Scanning page gives you a centralized view to monitor and manage the security posture of all Infrastructure as Code (IaC) artifacts — such as Terraform, CloudFormation, Kubernetes manifests, and Helm charts — used across your environments. From here, you can assess misconfigurations and risks, review detailed scan reports, and take timely action to remediate issues before they reach production.

• Navigate to Security Issues → IaC Scanning.

• The panel at the top displays the total number of IaC artifacts scanned, along with their risk status:

  • Critical Risk - The artifacts that are of critical risk.

  • High Risk - The artifacts that are of high risk.

  • Medium Risk - The artifacts that are of medium risk.

  • Low Risk - The artifacts that are of low risk.

The panel below displays the various details of the artifacts.

• Artifact - Displays the name/identifier of the IaC artifact (e.g., Terraform plan, Helm chart, Kubernetes manifest) that was scanned.

• Artifact Version - Displays the specific version or tag of the artifact at the time of the IaC security scan.

• Semantic Tags - Displays the human-readable labels attached to the artifact for categorization and filtering purposes.

• Artifact SHA - Displays the cryptographic SHA hash of the artifact that uniquely identifies its exact content and ensures integrity.

• Open Issues - Displays the count of currently unresolved security findings or policy violations detected in the artifact.

• Vulnerability - Displays the severity-bucketed summary (Critical / High / Medium / Low) of CVEs or misconfigurations found in the artifact.

• Created On - Displays the timestamp indicating when this artifact record or scan entry was first created in the system.

• Built by - Displays the CI/CD pipeline, user, or tool that produced and submitted the artifact for scanning.

• Source Repository - Displays the URL or name of the version-control repository where the IaC source code originates.

• Branch - Displays the Git branch from which the artifact was built or scanned.

• Team - Displays the organizational team or group that owns or is responsible for this artifact.

• OSS - On clicking View, it displays the open-source page software components detected in the artifact along with their associated license/risk status.

• DBOM Status - Displays the DBOM risk status of the artifact.

• Actions - On clicking Actions, The scan report for the artifact can be downloaded.