Workflow Repo

1. Add a Build or Security stage to your pipeline.

2. If you're setting up an orchestratedScan or a dataLoad scan of a code repository, set up your codebase.

3. If you're setting up an ingestionOnly scan, add a Run step and set it up to save your scan results to a shared folder.

   The step might run the scan locally, download results from an external source, or copy results from another location in the workspace into the shared folder.

4. Add a Custom Scan step.

5. Review the Important notes for Custom Scan steps for additional requirements and relevant information.

   If you're running an orchestrated or extraction scan on a Kubernetes or Docker build infrastructure, you need to add a Docker-in-Docker background step to the stage.

6. Add the following key:value pairs to Settings.