Skip to main content
A scan profile is a configuration that defines the scan parameters, and toolchains for each build setup required for a scan. Use scan profiles to ensure accurate scans and reduce failures caused by missing or mismatched dependencies. Associate a project with an appropriate scan profile to ensure that each scan uses the correct configuration. You can also configure automated scan parameters in your scan profile to customize scan behavior in cloud environments. Build tools in a scan profile help recreate the project’s build environment, ensuring reliable dependency resolution and accurate scans. See build tools to configure them and view the toolchains supported by Endor Labs. Use one of the following methods to create a scan profile:

​
Scan workflow

A scan workflow is a predefined sequence of scan steps that runs within a project. Each step applies a specific scan profile, enabling you to target different parts of your codebase. Analytics are generated once the entire workflow completes. A project can have only one scan workflow at a time. Use scan workflows to combine multiple scan profiles and apply them selectively—for example, when your project uses different languages or build tools across various components. Use the following method to create a scan workflow:
You require Admin role permissions to create and manage scan profiles and scan workflows. See authorization roles to learn about the different roles Endor Labs offers.