General requirements

Usage is universal across all CI/CD providers. Optional variables allow you additional control over your CI/CD scans and are noted with (Optional). All other variables are required.

All scans require authentication using the FortiCNAPP API key and secret. We generally recommend storing the values as environment variables in your CI/CD settings.

Secret	Description
LW_ACCOUNT	FortiCNAPP account URL subdomain. For example, <ACCOUNT>.lacework.net. LW_ACCOUNT should be the part before .lacework.net in the URL you use to access the FortiCNAPP UI. For instance, if you access the UI at https://mycompany.lacework.net then LW_ACCOUNT should be mycompany. Do not include HTTPS:// or HTTP://.
LW_API_KEY	FortiCNAPP API access key ID
LW_API_SECRET	FortiCNAPP API secret access key

Obtaining the component environment secrets

To collect the environment secrets:

1. Log in to the console.

2. Click Settings > API keys.

3. Select or create an API key.

4. Click the download icon.

5. Open the downloaded .json file to view your API Key and Secret.