SAST Configuration Options
The following table shows the configuration options available for the SAST scanner. These configuration options can be applied on the Account > Project > Scan levels. These configurations can be set via the web application (UI), CLI or API, as shown in the table below.
Notice
CLI flags are submitted on the scan level with the scan create command. API configs can be configured on the account or project level using the Configuration API.
Parameter | Values | Notes | CLI | API |
---|---|---|---|---|
presetName | All the available SAST Presets that exist in the system |
|
|
|
fastScanMode | true / false | By default, the Fast Scan mode is false. For more information, refer to Fast Scan Mode |
|
|
incremental | true / false | Determines whether the scan should be performed incrementally or as a full scan.
|
|
|
recommendedExclusions | true / false | Determines whether the system should automatically exclude certain files and folders from the scan.
| Not Supported |
|
languageMode | primary / multi | For more information see: Specifying a Code Language for Scanning Supported Code Languages and Frameworks:
NoteBy default, the languageMode is Multi. | Not Supported |
|
folder/filter | Allow users to select specific folders or files to include or exclude from the code scanning process. |
|
|
|
engineVerbose | true / false |
| Not Supported |
|
compliance | Submit a list of compliances | This parameter is used to filter which compliance standards are included in the scan results. By default, all supported compliances are returned. If you would like to limit the compliances returned, you can set this parameter and specify an array of compliances to include. This filter applies to the results shown in the UI on the Project Overview page as well as to the results returned in the Results Summary API. WarningSupported only via API. | Not Supported |
|