Skip to main content
Version: 1.7

Preparing to use CLI tools

You can add the following CLI tools to the system:

  • AppSec.Sting;
  • Aqua;
  • CodeScoring;
  • ESLint;
  • GitLab Advanced SAST;
  • Gitleaks;
  • Grype;
  • Kaspersky Container Security;
  • KICS;
  • Manual;
  • OWASP Dependency Track;
  • PT Application Inspector;
  • PVS-Studio;
  • SASTAV;
  • Semgrep;
  • Solar Appscreener;
  • Trivy.
info

Manual is a third-party tool that lets you upload scan results to the system. The system uses these results during further data processing.

Upload results in JSON format, similar to reports from the Upload external report section.

To send scan results from CLI tools (Command Line Interface), follow these steps:

  1. Add the CLI tool to the list of available security tools. For more information about adding security tools, see Security tools.
  2. Add a scan source. For more information about adding scan sources, see Scan sources.

Next, create security layers and security checks for the project, then upload scan results in SARIF format.

warning

The system only supports importing SARIF scan reports for CLI tools. The scan button is also unavailable because the scan runs from the command line.