Oracle Cloud Infrastructure Documentation

Editing a Compute Scan Recipe

Edit an existing Compute (host) scan recipe.

  • Note

    After you create an OCI agent or Qualys agent Compute scan recipe, don't change that recipe to change agents. Create another recipe.
    1. On the Scan recipes list page, select the recipe that you want to work with. If you need help finding the list page or the recipe, see Listing Compute Scan Recipes.
    2. On the details page, select Edit.
    3. Change any of the following settings for the recipe.
      • Name

        Avoid entering confidential information.

      • Public IP port scanning
      • Agent based scanning
      • CIS benchmark scanning (for OCI agents)
      • CIS benchmark profile (for OCI agents)
      • Enable file scans (for OCI agents)
      • Linux folders to scan (for OCI agents)

        Separate multiple folders by using semicolons.

      • Windows folders to scan (for OCI agents)
        Note

        Reserved for future use by Oracle. File scans aren't available for the Windows operating system.
      • Vault (for Qualys agents)
      • Secret (for Qualys agents)
      • File scan schedule
      • Schedule

      The Vulnerability Scanning agent checks the OS configuration of targets for vulnerabilities, such as missing patches. The agent can also check targets for the following information:

      • Compliance with industry-standard benchmarks published by the Center for Internet Security (CIS)
      • Vulnerabilities in third-party applications within specific folders

      The schedule controls how often the targets assigned to this recipe are scanned.

    4. Select Update.

  • Use the oci vulnerability-scanning host scan recipe update command and required parameters to updates the host scan recipe identified by the recipe ID:

    oci vulnerability-scanning host scan recipe update [OPTIONS]

    For a complete list of flags and variable options for CLI commands, see the Command Line Reference.

  • Run the UpdateHostScanRecipe operation to updates the host scan recipe identified by the recipe ID.