TOC & Recently Viewed

Recently Viewed Topics

Configure and Run the Tenable.io CS Scanner

To scan images using the Tenable.io CS Scanner, you must use the CLI to configure the environment variables and deploy the scanner. The steps to configure and run the Tenable.io CS Scanner differ depending on how you want to deploy it.

You can configure and run the Tenable.io CS Scanner as many times as necessary, using any combination of registries and registry sources.

Environment Variables

Variable Description Type Required Configuration?
TENABLE_ACCESS_KEY

Your Tenable.io API access key.

Note: If you want to deploy via Kubernetes, you must prepare a secret for this variable. For more information, see Prepare Kubernetes Objects to Configure and Run the Tenable.io CS Scanner.

String Yes.
TENABLE_SECRET_KEY

Your Tenable.io API secret key.

Note: If you want to deploy via Kubernetes, you must prepare a secret for this variable. For more information, see Prepare Kubernetes Objects to Configure and Run the Tenable.io CS Scanner.

String Yes.
IMPORT_REPO_NAME

The name of the Tenable.io CS Scanner repository where you want to import the image. This name cannot contain spaces.

String Yes.
REGISTRY_URI The URI of the registry from which you want to import the image. String Yes, if you are pulling images from an internally-hosted registry (e.g., Docker).
REGISTRY_USERNAME

Your username for authenticating to the registry from which you want to import the image.

Note: If you want to deploy via Kubernetes, you must prepare a secret for this variable. For more information, see Prepare Kubernetes Objects to Configure and Run the Tenable.io CS Scanner.

String Yes, if you want to authenticate to the registry.
REGISTRY_PASSWORD

Your password for authenticating to the registry from which you want to import the image.

Note: If you want to deploy via Kubernetes, you must prepare a secret for this variable. For more information, see Prepare Kubernetes Objects to Configure and Run the Tenable.io CS Scanner.

String Yes, if you want to authenticate to the registry.
IMPORT_INTERVAL_MINUTES The frequency, in minutes, you want the Tenable.io CS Scanner to import the image from the selected registry. Integer Yes, if you want the scan to run repeatedly at set intervals.

Copyright © 2019 Tenable, Inc. All rights reserved. Tenable, Tenable.io, Tenable Network Security, Nessus, SecurityCenter, SecurityCenter Continuous View and Log Correlation Engine are registered trademarks of Tenable, Inc.. Tenable.sc, Lumin, Assure, and the Cyber Exposure Company are trademarks of Tenable, Inc. All other products or services are trademarks of their respective owners.