Provide API that produces information as to which platforms would be scanned if the scan command was run

[binarymist]

HI.

Are there any plans to provide API that produces information as to which platforms would be scanned if the scan command was run.
We are looking to not initiate a scan at all if specific or all supported platforms are not represented in the source under test.

Thanks.

[nunoocx]

Hi @binarymist
Whenever a scan is triggered, we output the technologies that will be scanned (the ones we could identify).

We have the -t, --type strings flag that will scan only specific technologies. This forces the scan of specified techs even if the relevant files are not present (which is the opposite of your request).

We are proposing to change its behavior to not force the scan if the relevant files are not there. But still seems not what you want.

Please, open a feature request for this, and provide us some use cases so we can prioritize it, accordingly.
Or, consider to contribute with such an API! We would be glad to help you in the process!

[binarymist]

Hi @nunoocx.

Actually we check for the presense of the file types that kics supports prior to a scan in another service that I wasn't aware of, so that should be all we need currently.

Thanks.

[nunoocx]

Great to know that!
If something else is needed, don't hesitate in reaching us!
Thanks

[niro-lightspin]

Hi, we're also looking for such API so we can clear all the non supported extensions from the repo before scanning it (as we don't like to show files with 0 findings)
Was there a feature request eventually?
Is such API available today?
Is there some place in the code where such list is available?

[niro-lightspin]

It is but i'm missing the file extensions, for example:
{
"platforms": [
{
"id": 1,
"platform": "ServerlessFW",
"extension: ".yml"
},
...

[niro-lightspin]

Or maybe this:
{
"platforms": [
{
"id": 1,
"platform": "ServerlessFW",
"extensions: [".yml"]
},
...

[gabriel-cx]

The supported file extensions can be checked in the code itself, here, line 70.

I think this is the info you are looking for!

[niro-lightspin]

Yes, thanks @gabriel-cx

[gabriel-cx]

No problem! Feel free to contact us if you need more information!