Skip to main content

Use Repositories

Click Repositories on the left panel of the Lacework IaC Security Console to display the Repositories page that lists the GitHub and GitLab repositories scanned.

You can invoke iacbot, view insights, assign IaC Security badges, and disable repositories from the Repositories page.

Invoke iacbot​

You can invoke iacbot on any of your repositories using the trigger option available in the repository.

  1. Click Repositories on the left panel to display the Repositories page.
  2. Click the action icon action icon corresponding to the repository and select Invoke IaC Bot to display the Invoke Iac Bot window.
  3. Enter the repository name, branch name, and commit name, and click INVOKE NOW.

IaC Repositories

Invoke iacbot

View Insights​

Click any repository to view its insights page, which displays the results of the IaC Security analysis.

IaC Insights Page

Use the navigation bar on the top right and click the icons to invoke iacbot, assign badges, or view the config.yaml file.

View Repository branches​

Click any repository to view its branches information, which displays the Lacework IaC Security Assessment results of the latest commits for the most recent branches.

IaC Branches Page

Use Badges​

Badges provide a snapshot of whether the code repository is compliant or noncompliant with the benchmarks and the number of violations.

A badge includes the benchmark name (CIS, IAC, or HIPAA) from your README.md file and the number of violations. You can use badges to track the violations in your repository without accessing the Lacework IaC Security Console.

Click a repository to view its insights page and click the badge icon on the top right to assign badges.

Assign IaC Security Badges

Git repository badges provide metrics of all the Lacework IaC Security Assessments enabled for this repository. Optionally, select a badge and copy the markdown to your repository README file. The badge is automatically updated with the latest metrics. Or, merge the badges pull request that Lacework emails you into your repository to assign a badge.

Disable Repositories​

Sometimes, users enable all repositories in GitHub. In GitLab, there is no option to select repositories. Therefore, several repositories are added to Lacework IaC and only a few are relevant. You can disable such repositories in the IaC Security Console.

If you disable a repository, IaC Security excludes it from running automatic assessments, scheduled jobs, and the repositories main list view.

To disable a repository:

  1. Click Repositories on the left panel to display the Repositories page.
  2. Click the action icon action icon corresponding to the repository and select Go to Settings to display the Repository Settings page.
  3. Toggle the Enabled slider to enable or disable the repository.