#Команда сканирования

$ ./johnny scan --help
NAME:
   johnny scan - Run scan

USAGE:
   johnny scan [command [command options]]

COMMANDS:
   dir          Scan directory
   file         Scan file
   image        Scan image
   bom          Scan bom
   java         Scan java
   js           Scan js
   go           Scan go
   clang        Scan clang
   objective-c  Scan objective-c
   csharp       Scan csharp
   php          Scan php
   python       Scan python
   ruby         Scan ruby
   rust         Scan rust
   conda        Scan conda
   swift        Scan swift
   hex          Scan hex
   lua          Scan lua
   perl         Scan perl
   dart         Scan dart

OPTIONS:
   --alerts-format string                        Alerts format. Supported formats: coloredtable, table, text, csv, json. Default output to console. Supports multiformat. Example: 'coloredtable,csv>>csv.csv' (default: "coloredtable")
   --block-on-empty-result                       Block on empty result
   --bom-format string                           Bom format. Supported formats: cyclonedx_v1_4_json,cyclonedx_v1_5_json,cyclonedx_v1_6_ext_json,cyclonedx_v1_6_json,cyclonedx_v1_7_ext_json,cyclonedx_v1_7_json,spdx_v2_3_json (default: "cyclonedx_v1_6_json")
   --bom-path string                             Path for save bom file (default: "bom.json")
   --branch-or-tag string                        Reference to repository branch or tag (e.g. refs/tags/v1.0)
   --cg-lang string                              Language to parse call graph with. Supported languages: csharp,go,java,javascript,kotlin,python
   --cg-path string                              Path to call graph for vulnerability reachability analysis
   --cloud-resolve                               Activate cloud resolve
   --commit string                               Commit
   --create-project                              Create project in CodeScoring if not exists
   --create-project-categories                   Create project categories in CodeScoring if not exist
   --create-project-group                        Create group in CodeScoring if not exists
   --exclude-envs string                         Exclude the listed dependency environments (scopes) from the result, comma-separated, e.g. --exclude-envs=test,dev
   --format string, -f string                    Report format. Supported formats: coloredtable, table, text, junit, sarif, csv, gl-dependency-scanning-report, gl-code-quality-report. Default output to console. Supports multiformat. Example: 'coloredtable,junit>>junit.xml' (default: "coloredtable")
   --group-vulnerabilities-by string, -g string  Group vulnerabilities by. Supported kinds 'vulnerability', 'affect' (default: "vulnerability")
   --ignore string [ --ignore string ]           Ignore paths (--ignore first --ignore "/**/onem?re")
   --ignores-format string                       Displays the ignores of the specified project with formatting. Supported formats: coloredtable, table, text, csv, json. Default output to console. Supports multiformat. Example: 'coloredtable,csv>>csv.csv' (default: "coloredtable")
   --include-envs string                         Include only the listed dependency environments (scopes) in the result, comma-separated, e.g. --include-envs=compile,runtime
   --license string                              Project license code
   --no-summary                                  Do not print summary
   --no-wait                                     No wait analysis results
   --only-hashes                                 Search only for direct inclusion of dependencies using file hashes
   --policy-ignores                              Displays the ignores
   --project string                              Project name in CodeScoring
   --project-categories string                   Category names for created project in CodeScoring (comma-separated list)
   --project-group string                        Group for created or added project in CodeScoring
   --project-proprietor string                   Proprietor for created project in CodeScoring
   --reachability-format string                  Reachability paths format. Supported formats: json, text, table, coloredtable. Default output coloredtable to console. Supports multiformat. Example: 'json>>reachability.json' (default: "coloredtable")
   --save-results                                Save results to CodeScoring. Used just together with project name
   --sca-analysis-mode string                    SCA analysis pipeline (index|backend) (default: "backend")
   --set-as-default-version                      Set branch or tag as the default project version in CodeScoring
   --sort-vulnerabilities-by string, -s string   Sort vulnerabilities by. Comma separated field names. For DESC - write field name with prefix '-'.
                                                 FieldNames: 'vulnerability', 'fixedversion', 'cvss2', 'cvss3', 'cwes', 'links', 'affect' (default: "-cvss4,-cvss3,-cvss2,fixedversion,vulnerability,cwes,links,affect")
   --stage string                                Policy stage (build, dev, source, stage, test, prod, proxy) (default: "build")
   --summary-format string                       Scan summary (info, found, manifests, licenses, severity distribution) format. Supported formats: coloredtable, table, text, json. Default output coloredtable to console. Supports multiformat. Example: 'json>>summary.json' (default: "coloredtable")
   --timeout int, -t int                         Timeout of analysis results waiting in seconds (default: 3600)
   --vex-file string                             Path to CycloneDX VEX file to apply before analysis
   --with-hashes                                 Search for direct inclusion of dependencies using file hashes
   --help, -h                                    show help

GLOBAL OPTIONS:
   --backend_api_token string, --api_token string  Backend API token (default: "backend_api_token")
   --backend_url string, --api_url string          Backend API URL (e.g. https://codescoring.mycompany.com) (required if backend_api_token is set) (default: "backend_url")
   --config string                                 config file (default: "codescoring-johnny-config.yaml")
   --index-mode string                             Index API mode (direct|proxy) (default: "direct")
   --index_token string                            Direct Index API authentication token
   --index_url string                              Index API URL (e.g., https://index.example_url)
   --insecure                                      Skip TLS certificate verification when connecting to CodeScoring server
   --judge_url string                              Judge API URL (e.g., https://judge.example_url)
   --localization string                           Localization language (en|ru) (default: "en")
   --progress-bar string                           Progress bar formats: spinner,text (default: "text")

GLOBAL OPTIONS:
   --backend_api_token string, --api_token string  Backend API token (default: "backend_api_token")
   --backend_url string, --api_url string          Backend API URL (e.g. https://codescoring.mycompany.com) (required if backend_api_token is set) (default: "backend_url")
   --config string                                 config file (default: "codescoring-johnny-config.yaml")
   --index-mode string                             Index API mode (direct|proxy) (default: "direct")
   --index_token string                            Direct Index API authentication token
   --index_url string                              Index API URL (e.g., https://index.example_url)
   --insecure                                      Skip TLS certificate verification when connecting to CodeScoring server
   --judge_url string                              Judge API URL (e.g., https://judge.example_url)
   --localization string                           Localization language (en|ru) (default: "en")
   --progress-bar string                           Progress bar formats: spinner,text (default: "text")