Running a Scan

Before you run your first scan, read https://mend-io.atlassian.net/wiki/spaces/CTS/pages/2487746649 .

Scans are run from the CLI, as follows:

To run a scan, set the --app parameter to the name of the application that you are scanning (which will be automatically created in your SAST dashboards) as well as the --dir parameter if it is not already set through the interactive advanced configuration.

Command line parameters can override any configuration set in JSON files. For example:

You can set the scan parameters (for example, the application name or directory) either in the command line, as environment variables, or in the wscli-config.json JSON file.

The CLI and engine logs will be automatically submitted to the SAST server, but if you want to manually review them, they are located under the users HOME directory (%USERPROFILE% on Windows and $HOME on Linux), in the .sastcli/logs directory.

You can run wscli with the --help parameter to get more information about supported command line parameters.