Introduction
The ServiceNow Discovery Plugin inventories cryptographic assets stored in a ServiceNow instance. It uses the ServiceNow Table API anddictionary metadata to identify tables containing certificate-, key-, or secret-related fields and converts matching records into therepository’s standardised discovery format.
The plugin can discover:
- X.509 certificates: Parsed certificate PEM when available, or certificate metadata when a body cannot be parsed
- Public keys: Metadata for asymmetric and public keys
- Private keys: Metadata only; private key material is never exported
- Symmetric and HMAC keys: Metadata only; key material is never exported
- Secrets and credentials: Metadata only; secret values are never exported
Features
- Dynamic table discovery through
sys_dictionary - Optional scanning of an explicit table list
- Multi-asset classification when one record contains evidence for more than one asset type
- ServiceNow display-value resolution for reference fields such as algorithms and key types
- Stable, paginated Table API retrieval
- Incremental scanning based on
sys_updated_on - Direct ServiceNow record URLs in scan results
- Shared formatter integration for normalized output and URN generation
- Sensitive-value filtering for passwords, tokens, private keys, key material, and PEM fields
- Certificate PEM normalization without duplicating PEM-intrinsic fields in
extra