Skip to main content

​
Overview

Scans, under Findings in the sidebar, lists the scans run on the repositories you can view, in two tabs: Full Scans and PR Scans. You can search by repository with Search repositories… and narrow the list to chosen repositories. On the PR Scans tab, Has issues shows only finished PR scans with currently open issues, and Group by PR shows the latest scan per repository and pull request. Start Manual Scan starts a new scan. The page is shown to members with the View Scans permission. See Navigating ZeroPath for the sidebar. The list is grouped by day, newest first. Each day header shows Today or the date, and how many scans of that day are loaded. Scroll down, or click Load older scans at the bottom, to load more. The footer reads, for example, “40 scans loaded · Newest first”, and All matching scans loaded once there are no more.

​
Filters

The toolbar has:
  • Search repositories…, which matches repository names.
  • Repositories, a picker that narrows the list to the repositories you select. It has its own search and a Clear button.
  • Score, which shows only finished scans with at least one currently open issue in the selected score bands: Critical, High, Medium, Low and Info.
  • On the PR Scans tab only, Has issues and Group by PR. With Group by PR on, a row shows ×N when the pull request has N scans.
  • Clear filters, shown while any filter is set.
The tab and filters are kept in the page URL, so you can bookmark or share a view.

​
Columns

On narrow windows, and while the details panel is open, the list shows only Status, the repository and Issues. Click a row to open that scan’s findings on the repository’s Issues tab. For a scan still running, the tab shows “Scan in progress. Results will appear when complete.” until the scan finishes.

​
Row actions

Each row has three buttons:
  • Open in Issues opens the scan’s findings, the same as clicking the row.
  • Logs opens the scan logs. While the scan runs, it reads Live logs.
  • Scan details opens the details panel.

​
Issue counts

The Issues column shows how many issues from the scan are open now, and how many of those the scan found first. PR scans also show how many are currently marked false positive, accepted risk and patched. Hover a count for its meaning. The counts include dependency findings recorded on the scan. They use each issue’s current status, so they change as issues are triaged: an issue counts as open while it is Needs review, Reviewing, Patching or Backlog. The footer says “Issue counts reflect current status.” While a scan is still running, its counts are not available yet.

​
Scan details

Scan details opens a panel beside the list. On narrower windows it opens full screen. The panel shows:
  • The status, the repository and when the scan started.
  • Scan error, with Copy error, for a failed scan.
  • Issues: the same counts as the row, with the note “Counts reflect current issue status and change as issues are triaged.”
  • Type and Branch / ref for every scan. A PR scan adds Pull request, Target branch and Bypassed, and Related scans when there is more than one. Any other scan adds Trigger.
  • Started UTC, Duration and Scan ID.
  • A preview of the latest log lines, with Full logs.
The up and down arrows, Previous scan and Next scan, move through the loaded scans. The panel’s buttons are Open in Issues, Logs / Tracker and, for a full scan, Start new scan, which opens the scan dialog for the same repository and branch.

​
Starting scans

Start Manual Scan opens the scan dialog, where you choose repositories and branches. You can also start a scan from the + Create menu, with the S shortcut, or with Scan repository on a repository page. When there are no scans yet, the Full Scans tab offers Start a Scan. The PR Scans tab explains how to turn on PR scanning and links to Open pull request settings. See PR Scanning.

​
Scan explorer

The scan explorer shows the results of one full scan as a tree and a graph. To open it:
  • On a repository page, click Explore latest scan to open the repository’s most recent full scan.
  • On an issue, the application, source, data flow and sink previews have an Explorer link that opens the scan explorer at that item.
  • In the warning a repository page shows after a failed scan, Scan details opens that scan.
The explorer has:
  • A header with when the scan completed, how many issues it found, Show Exploitable Only to switch between exploitable findings and all findings, and Focus View On / Focus View Off.
  • On the left, a repository menu and a scan menu to switch to another repository’s latest full scan or to a recent scan of this repository, a Search box, and a tree of the scan’s applications, sources, data flow steps, sinks and dependency manifests. Findings linked to an application without a specific source appear under Standalone Findings. A failed scan shows Incomplete - Error, which opens the error.
  • In the middle, a graph with two views: Dataflow, which draws the scan’s data flows, and Relationships, which shows the repositories this repository is related to.
  • On the right, the details of the item you select.
When a scan cannot be shown in the explorer, the page says “Not supported” and offers Back to scans.