Skip to main content

Use Repositories

Click Repositories on the left panel of the Lacework IaC Security Console to display the repositories page, which lists the GitHub and Gitlab repositories scanned.

You can invoke iacbot, view insights, assign IaC Security badges, and disable repositories from the repositories page.

Invoke iacbot

You can invoke iacbot on any of your repositories using the trigger option available on the repository.

  1. Click Repositories on the left panel to display the repositories page.
  2. Click the action icon action icon corresponding to the repository and select Invoke IaC Bot to display the Invoke Iac Bot window.
  3. Enter the repository name, branch name, and commit name, and click INVOKE NOW.

IaC Repositories

Invoke iacbot

View Insights

Click any repository to view its insights page, which displays the results of the IaC Security analysis.

IaC Insights Page

Use the navigation bar on the top right and click the icons to invoke iacbot, assign badges, or view the config.yaml file.

Use Badges

Badges provide a snapshot of whether the code repository is compliant or noncompliant with the benchmarks and the number of violations.

A badge includes the benchmark name (CIS, IAC, or HIPAA) from your README.md file and the number of violations. You can use badges to track the violations in your repository without accessing the Lacework IaC Security Console.

Click a repository to view its insights page and click the badge icon on the top right to assign badges.

Assign IaC Security Badges

Git repository badges provide metrics of all the Lacework IaC Security Assessments enabled on this repository. Optionally, select a badge and copy the markdown to your repository README file. The badge is automatically updated with the latest metrics. Or, merge the badges pull request that Lacework emails you into your repository to assign a badge.

Disable Repositories

Sometimes, users enable all repositories in GitHub. In GitLab, there is no option to select repositories. So, a lot of repositories are added to Lacework IaC and only a few are relevant. You can disable such repositories in the IaC Security console.

If you disable a repository, IaC Security excludes it from running automatic assessments, scheduled jobs, and the repositories main list view.

To disable a repository:

  1. Click Repositories on the left panel to display the repositories page.
  2. Click the action icon action icon corresponding to the reposiroty and select Go to Settings to display the repository settings page.
  3. Toggle the Enabled slider to enable or disable the repository.