Scan your Infrastructure as Code (IaC) with the Mend CLI

Note: This feature is currently in a closed beta. To join the beta program, please contact your Customer Success Manager at Mend.io.

Overview

The Mend CLI Infrastructure-as-Code (IaC) engine analyzes your configuration files thoroughly to identify missing or misconfigured variables.

Getting it done

Prerequisites before getting started with the Mend CLI IaC scan

The following prerequisites are required before running a Mend CLI IaC scan:

Download the Mend CLI
Authenticate your login for the Mend CLI
Provide the Mend CLI with access to read your application’s source code on a file system

Configure your Mend CLI IaC scan

The Mend CLI IaC scan is configurable via command line parameters. To learn more about our Container Image-supported languages and configurations, visit our Configure the Mend CLI for IaC article.

Run your Mend CLI IaC Image scan

To trigger the Mend CLI Container Image scan, execute the following command:

mend iac

The usage of the mend iac command is as follows:

mend iac my-folder

View the steps of your Mend IaC scan

The Mend CLI has five default steps you will see it complete before it displays its findings from the Container Image scan:

Step Name	Description
`Initializing`	The scan is starting on your machine.
`Scanning`	Scanning the specified folder for IaC files and their misconfigurations
`Retrieving`	If any misconfigurations are found, data about these misconfigurations in retrieved (such as severity, details, etc.)

View your Mend CLI IaC scan results

Visit our View the results of your Mend CLI IaC scan article for more details on how to navigate the Container Image findings provided by the Mend CLI.