Jenkins Plugin
Code Insight provides a Jenkins scan-agent plugin that enables automated scanning of the Jenkins workspace as part of the build process or Jenkins Pipeline process. The scan results are sent to Code Insight for inventory creation, review, and security alerting. Optionally, you can have Code Insight generate a report based on the scan results and send it back to Jenkins for review.
The Jenkins scan-agent plugin installation and configuration process proceeds in the following manner:
-
Phase 1—Address the prerequisites for the Jenkins scan-agent plugin. See Prerequisites for the Jenkins Scan-Agent Plugin.
-
Phase 2—Set the heap size. See Setting Heap Size for the Jenkins Scan-Agent Plugin.
-
Phase 3—Set up the Jenkins scan-agent plugin. See Setting Up the Code Insight Jenkins Scan-Agent Plugin.
-
Phase 4—(Optional) Configure the publication of a Code Insight report in Jenkins as part of the build scan. See Configuring the Publication of a Code Insight Report in Jenkins.
For examples on how to include the Code Insight scan as a part of a Jenkins Pipeline, see Support for the Jenkins Pipeline.