Configure update set scanning properties

task australia Updated Oct 29, 2026 2 min read update-set-scanning-properties2.md
Raw file servicenow.com

The Scan Engine provides several options to further configure update set scanning and enhance the governance over update set management. Update set scanning occurs during scheduled instance scans and when developers attempt to mark update sets complete.

Before you begin

Update sets are scanned in the following scenarios:

  • During scheduled instance scans
  • When a user starts an update set scan manually
  • When an update set scan is triggered through the API
  • When a user attempts to mark an update set as Complete

Role required: scan_engine_admin

Procedure

  1. Navigate to All > Impact > Configuration > Scan Engine Properties.

  2. Select the Update Set Scanning tab.

  3. Configure the update set scanning condition using the condition builder.

    These conditions determine which update sets to scan. By default, the condition scans update sets whose State is In progress and whose names don't start with Default.

  4. Select the Enforce update set validation check box to require update sets to meet completion conditions.

    When enabled, update sets must meet the conditions specified in the Conditions for completing an update set field.

    When enforcement is enabled, a completion enforcement message appears in the scan modal warning users of requirements to complete the update set. Message content changes based on the scan type and enforcement condition. For example, if a specific suite is required, the message directs the user to select that suite.

  5. Configure conditions for completing an update set using the condition builder.

    These conditions determine whether an update set can be marked complete.

  6. Configure additional update set scanning options.

Field

Description

Enable update set summary scan synchronization

Allows update set summary scans to be synced between instances defined in the multi-instance communication API integration.

Table for update set scanning condition

Specifies which table the scan condition builder references. By default, this is the Update Set [sys_update_set] table and is typically not changed.

Override environment check for update set scans

Enables all active definitions to run during update set scans regardless of instance-specific settings. This setting is on the Definition tab. Useful for validating update sets before promoting them to production.

Allow Suite Scan for update sets

  • When selected, developers can choose between Full scan and Suite scan.
    • Suite Scan runs only selected definitions for faster validation.
    • Full Scan runs all active definitions for comprehensive validation.
  • When cleared, only Full scans are available.
  • If completion enforcement is enabled and requires a specific suite, users must select that suite from the dropdown to meet the completion condition. For example, if the condition requires the Scan Engine suite, users must select Scan Engine from the suite list.
7. Select **Save**.

Parent Topic:Configure Scan Engine properties

Related topics

Customize Scan Engine definition suites

Configure application scanning properties

Initiate update set scans

Search documentation
Search document titles and file paths on the australia branch