Create and scan an app

An app is a named target you register once in your workspace. Scanning by app id runs against the stored URL and files results under that app, so its scan history and security posture accumulate over time.

Set an app key first: creating an app and reading its scans are both authenticated with one.

Register an app

Give it a name and the URL to scan. You get back an app id.

$ sentrasec app create --name "Store" --url https://shop.example.com/

Only register targets you own or have written permission to scan.

List your apps

See every registered app with its id and URL.

$ sentrasec app list

Scan by app id

Runs a full scan against the stored URL. Results are deduplicated, enriched and saved under the app.

$ sentrasec app scan <APP-ID>

Gate CI on severity

$ sentrasec app scan <APP-ID> --fail-on high

Exits non-zero if any finding is at or above the given severity. See the DAST guide for what the scan covers.

Commands

Command	Purpose
`app create --name --url`	Register a new app with a name and URL.
`app list`	List registered apps with their ids.
`app scan <id>`	Scan the app by id.
`app scan <id> --fail-on <sev>`	Scan and gate CI on severity.
`app scan <id> --timeout <secs>`	Poll timeout. Defaults to 300 seconds.