Mobb User Docs
Start NowBlogsWatch NowContact Us
  • What is Mobb?
  • What's New with Mobb
  • Supported Fixes
  • Getting Started
    • System Requirements
    • Onboarding Guide
      • Registering a Mobb account
      • Try Mobb now!
      • Running Mobb against your own code
      • Automate Mobb in a CI/CD pipeline
    • Working with the Fix Report
    • Mobb CLI Overview
      • Analyze Mode
      • Scan Mode
      • Add SCM Token Mode
      • Review Mode
      • Common Deployment Scenarios
  • Mobb Dashboard
  • Integrating SAST Findings
    • Checkmarx
      • Generating Checkmarx One JSON Report from CLI
    • Snyk
    • SonarQube
      • Generating a SonarQube SAST Report
    • Fortify
    • CodeQL
    • Semgrep/Opengrep
      • Generating a Semgrep SAST Report
      • Generating an Opengrep SAST Report
  • CI/CD Integrations
    • GitHub Actions
      • GitHub Fixer for CxOne
      • GitHub Fixer for Opengrep
    • GitLab Pipeline
    • Azure DevOps
    • Jenkins
    • CircleCI
    • Bamboo
    • Bitbucket Pipeline
  • Administration
    • User Management
    • Project Settings
    • Access Tokens
    • Organization-Level Fix Policy
    • Integrations Page
    • SAML Single Sign-On Flow
  • More Info
    • Mobb Broker
      • Mobb Broker Token Rotation
      • Secure storage of Mobb broker in AWS Secrets Manager
    • Providing Fix Feedback
    • Frequently Asked Questions (FAQ)
    • Data Protection and Retention
    • Service Level Agreement
  • Fixing Guides
    • SQL Injection
    • Path Traversal
    • Log Forging
    • XSS
    • XXE
    • Server Side Request Forgery
    • HttpOnly Cookie Vulnerabilities
    • Hardcoded Domain in HTML
    • Hardcoded Secrets
    • HTTP Response Splitting Attacks
    • Insecure Cookie Vulnerabilities
    • Insecure Randomness
    • Missing Check against Null
    • Missing Rate Limiting
    • Regex Missing Timeout
    • System Information Leakage
  • Mobb REST API Guide
Powered by GitBook
On this page
  • Overview
  • Output
  • Parameters:

Was this helpful?

  1. Getting Started
  2. Mobb CLI Overview

Add SCM Token Mode

PreviousScan ModeNextReview Mode

Last updated 2 months ago

Was this helpful?

Overview

Mobb supports on-premise repositories as explained in the . However, to analyze an on-premise repository, the SCM token must be added to your Mobb account to grant Mobb access to read and write to your repository (To run analysis and commit fixes). This task can either be done on the Mobb UI as explained , or via the Mobb CLI.

To add the SCM token via the CLI, you can use the add-scm-token mode. To learn more about what's required for this mode, you can run the following command:

npx mobbdev@latest add-scm-token --help

Output

cli.mjs add-scm-token

Add your SCM (Github, Gitlab, Azure DevOps) token to Mobb to enable automated fixes.

Options:
  --scm-type       SCM type                                 [required] [choices: "GitHub", "GitLab", "Ado", "Bitbucket"]
  --url            URL of the repository (used in GitHub, GitLab, Ado, Bitbucket)                    [string] [required]
  --token          SCM API token                                                                     [string] [required]
  --organization   Organization name in SCM (used in Azure DevOps)                                              [string]
  --refresh-token  SCM refresh token (used in GitLab)                                                           [string]
  --api-key        Mobb authentication api-key                                                                  [string]
  --ci             Run in CI mode, prompts and browser will not be opened                     [boolean] [default: false]
  --help           Show help                                                                                   [boolean]

Parameters:

--scm-type Description: SCM type [required] [choices: "GitHub", "GitLab", "Ado", "Bitbucket"]

--url Description: URL of the repository (used in GitHub, GitLab, Ado, Bitbucket) [string] [required]

--token Description: SCM API token [string] [required]

--organization Description: Organization name in SCM (used in Azure DevOps) [string]

--refresh-token Description: SCM refresh token (used in GitLab) [string]

--api-key Description: Mobb authentication api-key [string]

--help Description: Show help [boolean]

system requirements
here