Uploading Scans

Users have a choice between two options: the Corgea Dropsite and the Corgea CLI.

​

Corgea Dropsite

The Corgea Dropsite is a web interface that allows you to easily add your project to Corgea for analysis. It provides several options to upload your code and reports from various security scanners.

​

Adding a Project

To add a project to Corgea, follow these steps: Navigate to the Dropsite page by clicking on the “Add Project” button in the Corgea Projects page or the Scans page.

On the Dropsite page, you will see several options to add your project:

​

Connect Your Repository (Recommended)

This option allows you to connect your code repository directly to Corgea. Currently, GitHub and Azure DevOps are supported. Click on the GitHub or Azure DevOps button to authorize Corgea to access your repositories. Select the repository you want to add to Corgea.

​

Add a Public Repository

If your repository is publicly accessible, you can provide the URL to add it to Corgea. Click on the “Add a public repository” accordion. 2. Enter the URL of your public repository in the input field. Click the “Add” button.

​

Web Upload

This option allows you to upload a ZIP file containing your project’s code. Click on the “Web upload” accordion. Click the “Upload” button and select the ZIP file containing your project’s code.

After adding your project, you can proceed to the next step to upload a report from a supported security scanner.

​

Uploading a Report

By following these steps, you can easily add your project and upload security reports to Corgea for analysis and remediation.

​

Corgea CLI

The Corgea CLI (Command-Line Interface) provides advanced features for integrating Corgea with your CI/CD pipeline, performing custom scans, and uploading large projects (>1GB). Click on the “Corgea CLI” accordion to learn more about installing and using the CLI.

You can install the Corgea CLI using pip:

pip install corgea-cli

More info on here

​

Upload with the CLI

​

Troubleshooting

bash: corgea: command not found

  semgrep login

  Command failed with output:
  fatal: not a git repository (or any of the parent directories): .git


  Failed to run 'git show -s --format=%B'. Possible reasons:

  - the git binary is not available
  - the current working directory is not a git repository
  - the current working directory is not marked as safe
      (fix with `git config --global --add safe.directory $(pwd)`)

  Try running the command yourself to debug the issue.
  Could not start scan Command failed with exit code: 128