Skip to main content

Scan schedules

Run the analyses of a registered service automatically on a fixed schedule. Even when your code, image, or server does not change, newly disclosed vulnerabilities appear, so scheduled scans keep you up to date.

Difference from CI triggers​

The two automations run at different times.

  • Scan schedule : Time-based. Runs on a fixed cadence, either daily/weekly or a cron expression (down to hourly).
  • CI trigger : Event-based. Runs on code push or merge request.

Use schedules for periodic checks and CI triggers for checks at the moment of change, and the two complement each other.

Setup​

  1. Open the service and go to the [Scan Schedule] menu.
  2. Set the cadence to run on. Choose daily, weekly, or a cron expression, and use presets like "daily at 03:00", "Monday at 03:00", or "every hour" to set it quickly.
  3. Once saved, the analysis runs automatically on every cadence afterward.

Rescan comparison​

Scheduled scans are compared against previous results just like a regular rescan. If an item that was not remediated is found again, it is marked as recurring, and an item appearing for the first time is classified as new, so you can track trends.