Introduction

The most flexible way to run the scanner is to use a configuration file.

The scanner supports a configuration file in YAML syntax.

The most simple and recommended configuration file is shown below:

namespace: myapp
output:
  file_path: ./Fluid-Attacks-Results.csv
  format: CSV
working_dir: .
language: EN
apk:
  include:
    - glob(**/*.apk)
sast:
  include:
    - .
  exclude:
    - glob(**/node_modules/**)
    - glob(**/test/**)
sca:
  include:
    - .
  exclude:
    - glob(**/test/**)

Check the keys and format sections for a detailed explanation of all the keys and paths format that you can use to take full advantage of the scanner capabilities.