Skip to main content

​
Create active scan

Action ID: tools.tenable_sc.create_active_scan Create a Tenable Security Center scan using an existing policy and set of assets or targets. Reference: https://docs.tenable.com/security-center/api/Scan.htm

​
Secrets

Required secrets:
  • tenable_sc: required values TENABLE_SC_ACCESS_KEY, TENABLE_SC_SECRET_KEY.

​
Input fields

​
string
required
Name of the scan to create.
​
integer
required
Repository ID targeted by the scan.
​
array[integer]
Asset object IDs that the scan should target.Default: [].
​
string | null
Tenable Security Center base URL (e.g. https://security-center.example.com).Default: null.
​
array[object]
Credential objects to use for authenticated scanning.Default: [].
​
string | null
Optional scan description shown in Tenable Security Center.Default: null.
​
string | null
Comma-separated list of additional targets/IP ranges.Default: null.
​
integer | null
Policy ID to associate with the scan (required for policy scans).Default: null.
​
string
Scan type (e.g. policy, discovery, agent).Default: "policy".
​
boolean
Whether to verify TLS certificates when calling the API.Default: true.

​
Run analysis query

Action ID: tools.tenable_sc.run_analysis_query Execute a Tenable Security Center analysis query (e.g. vuln details for a scan). Reference: https://docs.tenable.com/security-center/api/Analysis.htm

​
Secrets

Required secrets:
  • tenable_sc: required values TENABLE_SC_ACCESS_KEY, TENABLE_SC_SECRET_KEY.

​
Input fields

​
integer
required
ID of the scan whose results the query should evaluate.
​
string
Analysis type to pass to the Analysis API.Default: "vuln".
​
string | null
Tenable Security Center base URL (e.g. https://security-center.example.com).Default: null.
​
integer
Ending offset for pagination.Default: 100.
​
object
Tenable Security Center analysis query block (tool, type, filters, etc.).Default: { "tool": "vulndetails", "type": "vuln" }.
​
string
Sort direction for the results.Default: "desc".
​
string
Field to sort results by.Default: "severity".
​
string
Result source type (e.g. individual, cumulative, lce).Default: "individual".
​
integer
Starting offset for pagination.Default: 0.
​
boolean
Whether to verify TLS certificates when calling the API.Default: true.
​
string
View applied to the result set (e.g. all, exploitable, accepted).Default: "all".