endorctl toolchains command to detect the current tools used in your repository, create a scan profile, or generate a Dockerfile.
Toolchain commands are not supported on Windows.
Usage
-
Use the
helpargument to see the options associated with toolchains command.
Detect tools in your repository
Useendorctl detect to identify the tools currently used in your repository.
The following arguments can help you refine your scan:
-
Use the
-pargument to define the local filesystem path to the repository you want to scan. -
Use the
--exclude-pathargument to exclude specific file paths or directories. -
Use the
--include-pathargument to limit the scan to a specific file path or directory.
Create a scan profile
Useendorctl generate to create a scan profile. See Configure build tools for more details.
-
Use the
profile-nameargument to assign a name to your profile. This command creates a.endorctl/scanprofile.yamlfile with the tools in the repository. -
Use the
output-typeargument to specify the format of the output file. -
Use the
--output-pathargument to set the location where the output file will be saved. -
Use the
--create-profileargument to create and save the scan profile using the specified options.
Options
Theendorctl toolchains command uses the following flags and environment variables.