OX Code Scanning
About OX Code Scanning
OX Security scans your development and runtime environments to identify and prioritize security issues across the software supply chain.
OX connects to your source control, CI/CD pipelines, artifact registries, cloud environments, and external security tools to collect findings and security context. Scan results enrich the OX graph, providing a unified view of issues, ownership, impact, and required actions.
OX supports multiple scan entry points to fit different development workflows. Repository and registry integrations keep OX synchronized with your development environment so that changes such as new commits, pull requests, images, and packages can be analyzed. CI/CD pipeline scanning analyzes code and artifacts as part of the build and delivery process and can enforce OX policies before software is released.
Developers can also use OX IDE integrations to identify issues during development, or use the OX CLI to run targeted scans manually or as part of automated workflows.
Scanning options
The OX scanning engine supports multiple scanning methods, providing flexible coverage across different workflows and environments.
Run scans for selected repositories when you need to scan specific parts of your environment.
Scan additional branches beyond the repository's default branch.
Scan source code and software artifacts as part of your CI/CD workflows and enforce security policies before release.
Configure scanning for repositories that contain multiple applications or projects.
Integrate OX with supported development environments to identify security issues as part of the developer workflow.
Run OX scans from the command line for manual, scripted, or automated scanning workflows.
Last updated