Getting Started With the New StackHawk Scanner
Blog post from StackHawk
The latest version of the StackHawk scanner, also known as HawkScan, introduces several new features aimed at simplifying the integration of application security testing into development workflows. Key enhancements include a new command-line interface (CLI), configuration linting, and custom authentication support, which address common challenges faced by engineers. The scanner is available as both a Docker image and a CLI, with each offering unique benefits depending on the deployment scenario. The CLI provides more granular control and speed, making it ideal for local development environments, while Docker is better suited for CI/CD pipelines. Configuration validation is improved through real-time feedback and YAML linting, helping prevent errors before scans are initiated. The new version also supports OpenAPI specification linting and offers enhanced authentication options, allowing for custom scripting in JavaScript and Kotlin to meet diverse authentication needs. These updates aim to ensure efficient and reliable application security testing as an integral part of the software delivery process.