Scheduling Periodic and Incremental Scans

Periodic scans are useful for maintaining an up-to-date view of vulnerabilities, especially as both the codebase and scanner rules evolve over time.

🔄 Scheduled and incremental scans are only available for Git repositories. This feature is not supported when using ZIP file uploads.


Setting Up a Scheduled Scan

  1. Navigate to the Static Analysis tab.

  2. Choose the desired scan frequency (e.g., daily, weekly).

  3. The first scan will run immediately upon setup.

  4. All subsequent scans will execute at the same time interval, based on the initial run time.

Enabling Repository Monitoring

The Monitor feature performs:

  • An initial full scan of the target repository branch.

  • Then, hourly checks for new commits.

If changes are detected in the specified branch:

  • Only the modified files will be downloaded.

  • An incremental scan will be performed, improving efficiency.

Managing Scheduled Scans

To view or edit existing scheduled scans:

  • Use the top drop-down list available in the Static Analysis section.

  • Select the relevant scan configuration to review or adjust its schedule.

Last updated