Podman

Our containerized scanners support podman and you can perform scans by invoking the tool and following up with the supported flags that our scanners offer.

Here follows an example script that you can use to launch the IAC scanner's analysis

Linux

podman pull docker.io/meterian/isaac:latest

# export your token in your env
export METERIAN_API_TOKEN=f806cd0a-3e00-46f0-b9a9-1bd7XXXXXXXX

#Run the Scan
podman run --rm -it \
    --volume /path/to/your/project:/workspace/YOUR_PROJECT_NAME_HERE \
    --workdir /workspace/YOUR_PROJECT_NAME_HERE \
    --env METERIAN_API_TOKEN=$METERIAN_API_TOKEN \
    docker.io/meterian/isaac [ your additional args ]

Windows

podman pull docker.io/meterian/isaac:latest

# export your token in your env
$env:METERIAN_API_TOKEN = 'f806cd0a-3e00-46f0-b9a9-1bd7XXXXXXXX'

#Run the Scan
podman run --rm -it `
    --volume /path/to/your/project:/workspace/YOUR_PROJECT_NAME_HERE `
    --workdir /workspace/YOUR_PROJECT_NAME_HERE `
    --env METERIAN_API_TOKEN=$env:METERIAN_API_TOKEN `
    docker.io/meterian/isaac [ your additional args ]

A comprehensive list of flags can be found here:

• Container scanner flags

• IAC scanner flags

• SAST scanner flags

Meterian convenience scripts

We've provided a set of scripts that you can use to perform analyses if podman is you container engine tool of choice:

• Container scanner convenience scripts

• SAST scanner convenience scripts