Run a SAST scan - Endor Labs Documentation

Run a SAST scan with endorctl to identify security vulnerabilities and code quality issues in your source code. Ensure that you install endorctl and configure your environment to run Endor Labs scans before you run a SAST scan.

SAST scan

You can run a SAST scan on a project with endorctl using the following command.

endorctl scan --sast --path=/path/to/code -n <namespace>

To view findings generated by this scan, see view SAST findings.

SAST scan options

You can run the endorctl scan --sast command with the following options.