Skip to content

Aqua Security Scanner integration with CI/CD tools like CircleCI and Jenkins.

Notifications You must be signed in to change notification settings

sanjay-shah/aqua-ci-example

Repository files navigation

Aqua CI/CD Scanner Example

CircleCI
Click on the CircleCI logo above to see the build example with aqua scanner.

CircleCI integration with Aqua Scanner Container

CircleCI pipeline config.yml example.

Jenkins integration with Aqua Scanner Plugin

Watch this video on youtube.

Jenkin pipeline Jenkinsfile example.

Jenkins Aqua Security Scanner Plugin configurations

Any CI/CD integration without Aqua Plugin

For any CI/CD that doesn't have Aqua plugin, follow the the steps below to perform scans within your pipeline with scanner container.

##############################
# STEP 1: DOCKER BUILD IMAGE #
##############################
docker build -t aqua-ci-example:${CIRCLE_SHA1} .

##############################################
# STEP 2: DOCKER LOGIN AND PULL AQUA SCANNER #
##############################################
docker login registry.aquasec.com \
-u ${AQUA_USER} -p ${AQUA_PASSWORD} \
&& docker pull registry.aquasec.com/scanner:5.3

##############################################
# STEP 3: SCAN BUILT IMAGE WITH AQUA SCANNER #
##############################################
docker run -e BUILD_JOB_NAME=${CIRCLE_BUILD_URL} \
-e BUILD_NUMBER=${CIRCLE_BUILD_NUM} \
--rm -v /var/run/docker.sock:/var/run/docker.sock \
registry.aquasec.com/scanner:5.3 scan \
--host=${AQUA_CONSOLE} \
--user=${AQUA_SCANNER_USER} \
--password=${AQUA_SCANNER_PASSWORD} \
--no-verify --verbose-errors --local \
aqua-ci-example:${CIRCLE_SHA1}

#############################
# STEP 4: DOCKER PUSH IMAGE #
#############################
docker push [OPTIONS] NAME[:TAG]

Jenkins Aqua Security Scanner Plugin

Install Aqua Security Scanner Plugin for Jenkins

Aqua Security Scanner Plugin

Configure Aqua Security Scanner Plugin for Jenkins

Aqua Security Scanner Plugin Configuration

Releases

No releases published

Packages

No packages published