Wiz Integration

​

Overview

Wiz is a cloud security platform that provides comprehensive vulnerability scanning across your software supply chain, including source code dependencies and container images. This integration connects Backline with Wiz to automatically import vulnerability findings, enabling centralized remediation workflows.

​

What You Can Do

With the Wiz integration, Backline can:

• Automatically import SCA vulnerabilities detected in source code repository dependencies
• Automatically import container image vulnerabilities detected in your container images
• Track vulnerabilities detected across your repositories and container images
• Create remediation workflows for imported vulnerabilities
• Maintain vulnerability detection timestamps from Wiz
• Centralize security vulnerabilities from multiple scanners in one place

​

Prerequisites

Before connecting Wiz, ensure you have:

• A Wiz account with Project Admin role
• Access to the Integration Hub in Backline
• A connected source control management (SCM) integration in Backline (e.g., GitHub, GitLab) for SCA findings

​

Getting Your API Endpoint URL

​

Creating a Service Account

Wiz requires a dedicated service account to authenticate API requests. You must have the Project Admin role to create one.

​

Connecting Wiz

​

Scan Options

Backline supports two types of findings from Wiz, which can be enabled or disabled independently: Disabling an option reduces the volume of imported findings to only the relevant asset type.

​

How It Works

Once connected, Backline will:

1. Fetch Vulnerabilities: Periodically query the Wiz API for open vulnerability findings
2. Map to Repositories: Associate SCA & Container Image vulnerabilities with the correct repositories in your Backline workspace
3. Track Detection Time: Preserve the original detection timestamp from Wiz

​

Scan Schedule

After connecting Wiz, Backline automatically schedules periodic scans to fetch new vulnerabilities. The scan runs every 6 hours to ensure your vulnerabilities stay up to date.

​

Managing the Integration

​

Viewing Connection Status

To check your Wiz connection:

1. Open the Integration Hub
2. Find the Wiz card
3. A Configure button indicates the integration is connected

​

Reconnecting

If your credentials expire or need to be updated:

1. Click Configure on the Wiz card
2. Enter the new Client ID and Client Secret
3. Click Connect to verify the new credentials

​

Troubleshooting

​

Connection Failed — Authentication Error

If Backline cannot authenticate with Wiz:

• Verify your Client ID and Client Secret are correct
• Confirm the service account has not been deleted or disabled in Wiz
• Ensure the credentials were copied correctly (the Client Secret is only shown once)

​

Connection Failed — API Endpoint Error

If authentication succeeds but the API endpoint cannot be reached:

• Check that the API Endpoint URL matches the value shown in your Wiz Tenant Info
• Ensure the service account has the Read vulnerabilities API scope enabled
• Verify the region in the URL is correct for your Wiz tenant

​

Missing Vulnerabilities

If expected vulnerabilities are not appearing:

• Only findings with a CVE identifier are imported
• For SCA findings, verify the relevant repositories are accessible to Backline via your connected SCM integration
• Confirm the Scan SCA Vulnerabilities or Scan Container Image Vulnerabilities option is enabled for the finding type you expect
• Check that the vulnerability status is Open in Wiz (closed or accepted findings are not imported)

​

SCA Findings Not Matched to Repositories

If SCA vulnerabilities are not appearing for certain repositories:

• Backline filters SCA findings to repositories accessible via your connected SCM integration
• Ensure the repository is connected and visible in Backline through your GitHub or GitLab integration