Audit and compliance reports

3 minute readAudit and compliance

CloudBees CD/RO built-in audit reports aggregate data generated and collected from CloudBees CI and CloudBees CD/RO processes. This data is compiled into reports that can be used to address auditing requirements.

Access CloudBees CD/RO audit reports one of the following ways:

  • Navigate to Release Orchestration  Pipeline Runs. Then select Audit Reports from the pipeline three-dots menu.

  • From the Release editor or Pipeline editor select the Pipeline runs tab. Then select Audit Reports from the pipeline three-dots menu.

    Approvals
    Figure 1. Audit Reports
CloudBees TV

Audit every action and leverage built-in role-based access controls to enforce governance, security, and compliance.

Built-in Audit Reports in CloudBees CD/RO

The following audit reports are available:

Select Export report to download a PDF of the full audit report.

Approvals

The Approvals audit report provides a detailed view of pipeline approval data. For parent entities and triggered sub actions the report contains the following information:

  • Stage in which the approval occurred.

  • Pipeline task type and name.

  • Approver comments and name.

  • Task status and run date.

    Approvals
    Figure 2. Approvals

Time duration

The Time duration audit report provides the time (duration) to complete all stage and gate tasks. For parent entities and triggered sub actions the report contains the following information:

  • Pipeline stage name.

  • Pipeline task type and name.

  • Name of user who launched the pipeline.

  • The amount of time the task took to complete.

  • Status of the task.

    Time duration
    Figure 3. Time duration

Evidence

The Evidence audit report collates all the pipeline evidence information into a single downloadable report. To access report: . Select the Download Report link to review the pipeline evidence data.

Evidence
Figure 4. Evidence

Deployments

The Deployments audit report for microservice application requires the EC-Helm plugin version 1.4.0 or later. For traditional applications, this is not a prerequisite.

The deployments report provides details for each application deployed during the pipeline run. For parent entities and triggered sub actions the report displays these application deployment details:

  • Name of the pipeline stage.

  • Task name and type.

  • Application component or microservice with Argo Rollouts.

    For more information on advanced deployments with Argo Rollouts, refer to Argo Rollout deployment and delivery.
  • Task status.

  • Application artifact name and version.

    Deployments
    Figure 5. Deployment with component
    Deployments
    Figure 6. Deployment with Argo Rollouts
Audit-Ready Pipelines Are Table Stakes for DevSecOps

Watch the DevOps World 2020 session on Audit-Ready Pipelines for CloudBees CD/RO.

Build data is available for pipelines that execute a CloudBees CI job as a pipeline task. For more information, refer to Native CI integration.

The related build report provides details related to CloudBees CI jobs executed as part of the pipeline run. For parent entities and triggered sub actions the report contains the following CloudBees CI job data:

  • Build name and status.

  • Branch name.

  • Triggering entity.

  • Job duration.

  • Name of the user who executed the pipeline.

  • Related actions.

    Related builds
    Figure 7. Related builds

Export audit reports

From the CloudBees CD/RO UI, you can export audit reports as a PDF. To export a report:

  1. Navigate to the pipeline run you want to export the audit report for.

  2. Select the pipeline three-dots menu , and then select Audit reports.

  3. On the Audit reports page, select the type of audit report you want to export.

  4. Select the Export button on the right side of the page.

The audit report is exported as a PDF.