Scan your infrastructure as code (IaC) with the Mend CLI

This feature is currently a Closed Beta and is not available out-of-the-box. More details about signing up for this feature will be shared upon request.

Overview

The Mend CLI Infrastructure-as-Code (IaC) engine analyzes your configuration files thoroughly to identify missing or misconfigured variables.

Getting it done

Prerequisites before getting started with the Mend CLI IaC scan

The following prerequisites are required before running a Mend CLI IaC scan:

Download the Mend CLI
Authenticate your login for the Mend CLI
Provide the Mend CLI with access to read your application’s source code on a file system

Configure your Mend CLI IaC scan

The Mend CLI IaC scan is configurable via command line parameters. To learn more about our Container Image-supported languages and configurations, visit our Configure the Mend CLI for IaC article.

Run your Mend CLI IaC Image scan

To trigger the Mend CLI Container Image scan, execute the following command:

CODE

mend iac

The usage of the mend iac command is as follows:

CODE

mend iac my-folder

2024-08-07_15-20-42 (1)-20240807-192057.gif

View the steps of your Mend IaC scan

The Mend CLI has five default steps you will see it complete before it displays its findings from the Container Image scan:

Step Name	Description
`Initializing`	The scan is starting on your machine.
`Scanning`	Scanning the specified folder for IaC files and their misconfigurations
`Retrieving`	If any misconfigurations are found, data about these misconfigurations in retrieved (such as severity, details, etc.)

View your Mend CLI IaC scan results

Visit our View the results of your Mend CLI IaC scan article for more details on how to navigate the Container Image findings provided by the Mend CLI.