CodeSanitize-Pro currently ships as a Python package delivered after purchase. Install it with the file we email you, then use the codesanitize commands below. The npm, Docker, and GitHub Action distributions are on the roadmap.
# Install the package we email you after purchasepip install codesanitize_pro-2.0.0-py3-none-any.whl# Scan a projectcodesanitize scan ./my-project# Fix security issues automaticallycodesanitize fix --auto ./my-project# Generate executive reportcodesanitize report --format html --executive ./my-project
# Roadmap โ npm distribution is not published yet.# Today, Pro ships as a Python package (see the Python tab).# Scan a projectcodesanitize scan ./my-project# Generate compliance reportcodesanitize report --format pdf --compliance ./my-project# Integrate with CI/CDcodesanitize ci --fail-on-high ./my-project
# Roadmap โ the Docker image is not published yet.# Today, Pro ships as a Python package (see the Python tab).# Scan a projectdocker run -v $(pwd):/workspace \
codesanitizepro/codesanitize-pro scan /workspace# Generate report with volume mountdocker run -v $(pwd):/workspace -v $(pwd)/reports:/reports \
codesanitizepro/codesanitize-pro report --output /reports /workspace
# A dedicated GitHub Action is on the roadmap. Today, run the# Python package directly in CI (no API key required):# .github/workflows/security-scan.yml
name: Security Scan
on: [push, pull_request]
jobs:
security:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v3
- run: pip install codesanitize_pro-2.0.0-py3-none-any.whl
- run: codesanitize scan . --fail-on high