> For the complete documentation index, see [llms.txt](https://docs.prismacloud.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.prismacloud.io/admin-guide/33/tools/twistcli-scan-code-repos.md). # Scan code repos with twistcli Prisma Cloud ships a command-line scanner for scanning code repos. It is supported on Linux, macOS, and Windows. twistcli scans repositories locally and sends a bill of materials to Console for evaluation. Console assesses the components in the BoM against the latest threat data, and replies back to twistcli with the scan results. The policy Console uses to assess a code repo is set in **Defend > Vulnerabilities > Code repositories > CI** and **Defend > Compliance > Code repositories > CI**. By default, twistcli publishes scan results to Console. Scan results can viewed in Console under **Monitor > Vulnerabilities > Code repositories > CI**. Many developers don’t have access to Prisma Cloud directly, but may want to run twistcli to evaluate a repo before code is submitted and a build job is initiated. twistcli has can print detailed results locally and optionally suppress publishing scan results to Console (which they might not be able to access anyway). ## Basic command line format and options The basic command format is as follows: ``` twistcli coderepo scan --repository ``` Where: * REPO\_PATH can be an absolute or relative path * REPO\_NAME is the unique key that Console to identify the repo. If `--repository` isn’t specified, the repository’s path is used as the repository name. ## Print detailed scan results Detailed result contain all dependencies files and a vulnerability distribution summary. For each dependency file that has any vulnerabilities, a table with information about the vulnerability is printed. ``` twistcli coderepo scan --repository rowan --details ``` ## Excluding files from a scan To exclude files from the scan, use the `--excluded-paths` argument. Attach only a single value to the argument. The value should be a relative path from the root of the repository. To exclude a file: ``` twistcli coderepo scan --repository rowan --excluded-paths ``` To exclude multiple files, specify the `--excluded-paths` argument multiple times: ``` twistcli coderepo scan --repository rowan --excluded-paths --excluded-paths ``` ## Scanning specific files To explicitly scan files scan use the `--explicit-files` argument. Specify one file per argument. For multiple files, specify multiple `--explicit-files` arguments. ## Suppress publishing results Using—​publish=false to avoid publishing the result to the console. ``` twistcli coderepo scan --repository rowan --publish=false ``` --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter: ``` GET https://docs.prismacloud.io/admin-guide/33/tools/twistcli-scan-code-repos.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.