Create and Report a Full Scan
A 4-step recipe with Socket. We can help you get access.
Recipe · 4 steps
Create and Report a Full Scan
with Socket
Create a repo-scoped full scan, wait for completion, and export its alert CSV.
- Create the repository, redirecting to the existing repo when the slug is already present so the flow is safe to re-run.
- Create a full scan for the repository from the supplied manifest files. Returns the new full scan id and its initial scan_state.
- Fetch the full scan metadata and inspect scan_state. While the scan is in a processing state (pending, precrawl, resolve, scan) loop back; once it leaves those states the scan is complete.
- Export a CSV of all alerts detected in the completed full scan, including license details.
What you'll need to have ready
- orgSlug: The slug of the organization.
- repoSlug: The repository slug to associate the full scan with.
- branch: Optional branch name to associate the full scan with.
- manifestFiles: Map of manifest file names to file contents uploaded as multipart/form-data.
For your developer
Arazzo workflow socket-dev:create-and-report-full-scan, 4 operations: createOrgRepo → CreateOrgFullScan → getOrgFullScanMetadata → getOrgFullScanCsv. Specs on APIs.io.