---
title: "Jenkins Security Scan"
url: "https://docs.indusface.com/en/article/jenkins-security-scan"
language: "en"
last_updated: "2025-03-11T06:44:45.328Z"
---

# Jenkins Security Scan

### Introduction 

**CI/CD Implementation Using Jenkins** 

The practice of identifying vulnerabilities early helps prevent potential issues from affecting applications. It allows developers to find and fix vulnerabilities more quickly, rather than discovering them later during DAST scanning after deployment. 

### How does Jenkins Integration Work?

The integration is carried out in four steps. 

**Install and configure the WAS Plugin in Jenkins**   
Begin by installing and configuring the WAS Plugin in Jenkins to enable seamless integration between your build environment and Indusface WAS. 

**Configure Scan Build Pass/Fail Criteria in Indusface WAS**   
Set up the scan build criteria to ensure that your build process accurately reflects the defined vulnerability thresholds. 

**Retrieve the Scan Summary, Results, and Download the Report**   
After the scan, access the summary status, review detailed results, and download the comprehensive scan report. 

**Manage Vulnerabilities in the JIRA Dashboard**   
Once the build completes successfully, configure and manage the identified vulnerabilities directly within your JIRA dashboard. 

### Integrating Jenkins with WAS 

-   Navigate to **Indusface WAS** **Settings** \> **Integration** \> **Jenkins**. 
-   This section lets you generate a security key to integrate the site with Jenkins. 
-   Click **Generate Key**. 

![](https://cdn-assets.productfruits.com/164b0e7c-31aa-4e80-8035-af60ffc24d94)

-   **Result**: A pop-up window opens. 
-   Select the service URL and then click **Generate**. 

![](https://cdn-assets.productfruits.com/8d6e9b6e-4131-45ff-93e1-3883a130cc9b)

-   **Result**: The system generates a security key for the URL. 
-   The table displays the security keys of all the sites and allows you to configure the scan build criteria. 
-   Click the **eye** icon to **view** the secret key. 
-   Click the **delete** icon to **remove** the security key for a selected URL. 

![](https://cdn-assets.productfruits.com/324e70a1-d1b6-4f5d-b9a0-19d9a855fe9e)

#### Configure Scan Build Pass/Fail Criteria 

Users must set the pass/fail criteria for scan build. The **Fail/Pass criteria** are determined based on the threshold set by the customer for vulnerabilities found at different severity levels. 

-   Click the settings icon in the **Action** column. 

![](https://cdn-assets.productfruits.com/1871ae48-3de6-4513-a95c-946205f195b0)

-    **Result**: A pop-up window opens. 
-   Click the toggle switch to set threshold value and configure scan build **Pass**/**Fail** criteria. 

![](https://cdn-assets.productfruits.com/8b8c737d-b67e-4f5b-a268-22b356fffff7)

#### Example case 

-   A user sets the **threshold** at **2 critical** and **3 high** vulnerabilities. 
-   The build is considered **Fail** if it has **2 or more critical** vulnerabilities and **3 or more high** vulnerabilities. 
-   If either condition is not met, the build **Fails**. 

| Critical Vulnerabilities | High Vulnerabilities | Result |
| --- | --- | --- |
| 2 | 5 | Fail (Critical count is below 2) |
| 3 | 3 | Fail (High count is equal to threshold) |
| 2 | 3 | Fail (Both High and Critical equal to threshold) |
| 4 | 5 | Pass (Both critical and high met conditions) |

### Install WAS Plugin in Jenkins 

-   Go to Jenkins **Dashboard** \> **Manage Jenkins**. 

![](https://cdn-assets.productfruits.com/5fbc8c32-bfa0-4a2d-b844-51acf83ce291)

-   Click **Plugins** from **System Configuration** section.

![](https://cdn-assets.productfruits.com/88912d5a-ff83-4ab3-82f3-fa906891bdad)

-    Go to **Available Plugins** and in the search box, type **Indusface-WAS-Plugin**.

![](https://cdn-assets.productfruits.com/da807d4a-3204-46d2-a869-d11ced8fb601)

-   **Indusface-WAS-Plugin** is reflected on the available items, click on the check box and then click **Install**. 
-   After successful installation, restart the Jenkins. 

#### Enable Plugin 

-   Go to **Installed Plugins**. 
-   Search **Indusface-WAS-Plugin**. 
-   Click the toggle button to enable plugin.

![](https://cdn-assets.productfruits.com/b9ad7e83-8b74-436e-ae35-1bf7113aa2fd)

####   
Plugin Configuration 

-   Select the Job from **Dashboard** menu. 

![](https://cdn-assets.productfruits.com/6ddff30a-cb9b-453b-9b3f-f03ed5cd4f3e)

-    Click **Configure**. 
-   In the **Post-Build Actions** section, click **on Add-post build action**. 
-   In the post build action prompt, Enter **WAS-Post-build-action.** 

![](https://cdn-assets.productfruits.com/cb5173c9-1d5e-498a-8987-0d4bbe118378)

-   Provide the build details, such as **Build Name** and **Access Key**.  
-   (Suggested build name: *Website name*). 
-   Copy the access key for your website from **Secret Key** field (**Indusface WAS** \> **Settings** \> **Integration** > **Jenkins** > **Secret Key**)  
-   Enter in **WAS Post build action** > **Access Key**. 
-   Click **Save**. 

![](https://cdn-assets.productfruits.com/69e1e7c4-7bd9-464f-a096-b98cc664bc30)

#### Initiate Scan 

  
Once the post-build action is added, return to the build page and click **Build with Parameters** to run the job. 

![](https://cdn-assets.productfruits.com/37375144-4618-421f-ad8a-f53cfe83f5fe)

#### Check Build Scan Status 

-   Navigate to the build page and locate the status in the build history. The build history displays the status of each scan as follows: 
    1.  **Success (Green):** The scan was completed successfully, and the post-build action was executed. 
    2.  **Fail (Red):** The scan failed. 
    3.  **Aborted (Yellow):** The scan was interrupted. 
-   The build history displays the scans performed both earlier and recently, along with their build number, date, and time. 
-   Use the filter option to view a specific scan result by entering its build number in the search field. 
-   Scroll to the build date and time to see how long it took the scan to complete. 

![](https://cdn-assets.productfruits.com/0df5c0e1-b457-4d1e-9b27-93341425d0a1)

-   Click on the build number and go to Scan Status. 

![](https://cdn-assets.productfruits.com/73be1bf7-8f08-42a1-9302-8134e0b03fda)

-    Click **Console Output** to see the scan results clearly. 

![](https://cdn-assets.productfruits.com/3d416928-6964-433a-af93-6e3ef511dfc5)

####  Download Report 

To download the scan report, click **WAS Scan Status**, then click **Download Report**. 

![](https://cdn-assets.productfruits.com/238a10a6-4993-4ad4-b07d-b9d92b0fc81c)

![](https://cdn-assets.productfruits.com/08685e70-2d62-4d89-a4aa-c43c8a1fab52)

 The downloaded report provides information of each vulnerability found and their details. 

![](https://cdn-assets.productfruits.com/98120aad-4a7e-456a-8928-28499a6e0fdf)

![](https://cdn-assets.productfruits.com/5a05dc91-1d34-4572-8dd0-2b6904465dfa)

![](https://cdn-assets.productfruits.com/359afdde-43b2-4ef0-8bf4-ce3f336930bf)