Skip to main content

​
Create active scan

Action ID: tools.tenable_sc.create_active_scan Create a Tenable Security Center scan using an existing policy and set of assets or targets. Reference: https://docs.tenable.com/security-center/api/Scan.htm

​
Secrets

Required secrets:
  • tenable_sc: required values TENABLE_SC_ACCESS_KEY, TENABLE_SC_SECRET_KEY.

​
Input fields

​
name
string
required
Name of the scan to create.
​
repository_id
integer
required
Repository ID targeted by the scan.
​
asset_ids
array[integer]
Asset object IDs that the scan should target.Default: [].
​
base_url
string | null
Tenable Security Center base URL (e.g. https://security-center.example.com).Default: null.
​
credentials
array[object]
Credential objects to use for authenticated scanning.Default: [].
​
description
string | null
Optional scan description shown in Tenable Security Center.Default: null.
​
ip_list
string | null
Comma-separated list of additional targets/IP ranges.Default: null.
​
policy_id
integer | null
Policy ID to associate with the scan (required for policy scans).Default: null.
​
scan_type
string
Scan type (e.g. policy, discovery, agent).Default: "policy".
​
verify_ssl
boolean
Whether to verify TLS certificates when calling the API.Default: true.

​
Run analysis query

Action ID: tools.tenable_sc.run_analysis_query Execute a Tenable Security Center analysis query (e.g. vuln details for a scan). Reference: https://docs.tenable.com/security-center/api/Analysis.htm

​
Secrets

Required secrets:
  • tenable_sc: required values TENABLE_SC_ACCESS_KEY, TENABLE_SC_SECRET_KEY.

​
Input fields

​
scan_id
integer
required
ID of the scan whose results the query should evaluate.
​
analysis_type
string
Analysis type to pass to the Analysis API.Default: "vuln".
​
base_url
string | null
Tenable Security Center base URL (e.g. https://security-center.example.com).Default: null.
​
end_offset
integer
Ending offset for pagination.Default: 100.
​
query
object
Tenable Security Center analysis query block (tool, type, filters, etc.).Default: { "tool": "vulndetails", "type": "vuln" }.
​
sort_dir
string
Sort direction for the results.Default: "desc".
​
sort_field
string
Field to sort results by.Default: "severity".
​
source_type
string
Result source type (e.g. individual, cumulative, lce).Default: "individual".
​
start_offset
integer
Starting offset for pagination.Default: 0.
​
verify_ssl
boolean
Whether to verify TLS certificates when calling the API.Default: true.
​
view
string
View applied to the result set (e.g. all, exploitable, accepted).Default: "all".