Scans issued via CLI not visible in GUI about securecodebox HOT 7 CLOSED

You can do this by using the api:

wget http://{engine-url}/box/securityTests/{id} --user {username} --password {password}

from securecodebox.

Hi @wheelq
you are right, the CLI can be improved in that way... I'll write a new feature request for that and close this issue afterwards.

from securecodebox.

Hi @wheelq
do you mean the UI of the secureCodeBox Engine (Tasklist) or the Kibana Dashboard? If you launch a security scan via CLI everything should behave the same like using the Rest API directly (or the engine UI).

As @J12934 already mention i think we have to fix some bugs in the CLI, because the latest API changes are maybe not reflected in the JSON templates.

from securecodebox.

Hi @rseedorff

do you mean the UI of the secureCodeBox Engine (Tasklist) or the Kibana Dashboard? If you launch a security scan via CLI everything should behave the same like using the Rest API directly (or the engine UI).
Both actually. None of the scans issued via CLI are visible for review/claim in the GUI
I also got another 2 questions, not sure whether should it be posted here or as a new issue:

• How do I select format of the report when launched from the CLI. I only get JSON, how do I select XML, HTML, CSV, PDF?
• How can I get the reports using CLI without issuing a scan? I'd like to integrate SCB in the pipeline, launched via bash scripts.

from securecodebox.

We don't have other report formats other than json.
If you need other formats i'd recommend using defect-dojo as a persistence provider, then you use the defect dojo report mechanisms to generate them.

The cli is atm only a utility to start scans. It doesn't support getting scan results without starting a scan first.

from securecodebox.

The cli is atm only a utility to start scans. It doesn't support getting scan results without starting a scan first.

That's logical, but I was more interested in getting the results from other scans, issued via GUI or a scan from 5 days ago

from securecodebox.

Closed due to inactivity

from securecodebox.