Prepare to use CLI tools
You can add the following CLI tools to the system:
- AppSec.Sting;
- Aqua;
- CodeScoring;
- ESLint;
- GitLab Advanced SAST;
- Gitleaks;
- Grype;
- Kaspersky Container Security;
- KICS;
- Manual;
- OWASP Dependency Track;
- PT Application Inspector;
- PVS-Studio;
- SASTAV;
- Semgrep;
- Solar Appscreener;
- Trivy.
info
Manual is a third-party tool that lets you upload scan results to the system. The system includes these results in further data processing.
Upload results in JSON format, similar to reports from the Upload an external report section.
To send scan results from CLI (Command Line Interface) tools, follow these steps:
- Add the CLI tool to the list of available security tools. For more information about adding security tools, see Security tools.
- Add a scan source. For more information about adding scan sources, see Scan sources.
Next, you'll need to create project security layers and security checks for the relevant project, then upload scan results in SARIF format.
warning
The system supports importing only SARIF scan reports from CLI tools. The button to start a scan is also unavailable because you run scans from the command line.