For the complete documentation index, see llms.txt. This page is also available as Markdown.

Scanner Commands

enableScanners


Enables or disables source-code scanners and updates their scan configuration for one or more repositories.

Arguments

Arguments
Argument Name
Description
Required

repository_ids

A comma-separated list of repository asset IDs to configure scanners for.

Required

enable_scanners

A comma-separated list of scanners to enable. Possible values are: SECRETS, IAC, SCA.

Optional

disable_scanners

A comma-separated list of scanners to disable. Possible values are: SECRETS, IAC, SCA.

Optional

secret_validation

Whether to enable live validation of discovered secrets. Relevant only when the SECRETS scanner is enabled. Possible values are: true, false.

Optional

pr_scanning

Whether to enable scanning on pull requests. Possible values are: true, false.

Optional

block_on_error

Whether to block deployment when a scanner errors. Possible values are: true, false.

Optional

tag_resource_blocks

Whether to enable tagging of resource blocks. Possible values are: true, false.

Optional

tag_module_blocks

Whether to enable tagging of module blocks. Possible values are: true, false.

Optional

exclude_paths

A comma-separated list of file paths to exclude from scanning.

Optional

Outputs

Outputs

Core.ScannerConfiguration.RepositoryID string

The repository asset ID.

Core.ScannerConfiguration.Status string

The configuration update result: "updated" or "failed".

Core.ScannerConfiguration.Error string

The error message when the update failed.

Last updated

Was this helpful?