Quickstart

Please refer to the Installation page to set up either the standalone binary or the Docker image of the HoundDog.ai's code scanner.

Standalone Binary

To scan a file or directory using the standalone binary:

Bash
Copy

To see all available command-line options:

Bash
Copy

Docker Image

To scan the current directory:

Bash
Copy

Let's break down the command above:

Argument / OptionRequiredDescription
docker runYesStart a new Docker container.
--pull=alwaysNoAlways pull the latest version of the Docker image.
-itNoCreate an interactive session and attach a pseudo-TTY to enable colored output and proper rendering based on your terminal window size. Important: When running the scanner in a non-interactive environment (e.g., build pipelines), you must only use the -t flag.
--rmNoClean up the container after it exits.
-v <path>:/dataYesMount the host directory <path> to the container’s /data directory, the default hardcoded path in HoundDog.ai's scanner Docker image for accessing host files during scans.
hounddogai/hounddogYesName of the HoundDog.ai scanner image, hosted on Docker Hub.
hounddog scanYesEntrypoint command that scans the code mounted in the container's /data directory .

Use --help to display all available command-line options for hounddog scan:

Bash
Copy

Demonstration

To demonstrate the capabilities of the scanner, HoundDog.ai provides a test web application with deliberate security flaws. First, clone the repository:

Bash
Copy

Then scan it with the --output-format=markdown option to generate a Markdown report:

Bash
Copy

Open the generated file hounddog-test-healthcare-app/hounddog-{timestamp}.md on your browser. We recommend using Google Chrome and the Markdown Viewer extension, with mermaid and toc settings enabled. See Markdown Report for more details.

Type to search, ESC to discard
Type to search, ESC to discard
Type to search, ESC to discard