Scheduled Scans
DevGuard provides automatic scheduled scanning even when no code changes occur. The platform continuously rescans your repositories and updates vulnerability information throughout the day to detect new findings.
What the Scheduled Scans Do
DevGuard’s daemon system ensures that all repositories and assets are automatically rescanned on a regular schedule to detect new vulnerabilities as they emerge.
The automated scanning pipeline processes each asset through the following steps:
- Fetch Asset Details: Retrieves the latest repository information and metadata
- Delete Old Asset Versions: Removes outdated asset versions to maintain data integrity
- Scan Assets: Performs comprehensive security scans on all components and dependencies
- Sync Upstream: Downloads the latest vulnerability data from external security databases
- Auto-Reopen Tickets: Automatically reopens previously resolved tickets when new CVEs affect existing components
- Recalculate Risk: Updates risk scores and assessments based on the latest vulnerability data
- Sync Tickets: Synchronizes findings with your configured issue tracking systems
- Collect Statistics: Updates project metrics, dashboards, and compliance reports
Fully Automated: The entire asset scanning pipeline runs automatically. No manual intervention is required to keep your repositories secure.
Real-time Updates: DevGuard updates its vulnerability database multiple times per day with the latest CVE and vulnerability information from upstream sources. This ensures that previously clean code can be flagged immediately when new vulnerabilities are discovered.