Sonatype CLM for CLI

Chapter 4. Evaluating an Application

Now that you have Sonatype CLM for CLI set up, you are ready to evaluate an application. As a Java application, it can be started using the java command, and adding the necessary parameters. The syntax below represents the minimum set of options required to evaluate an application:

java -jar [scanner jar] -i [application id] -s [server URL] [target]
scanner jar
This is the path to Sonatype CLM for CLI (scanner) jar file e.g. ./sonatype-clm-scanner.jar.
--authentication
Using the switch -a, enter the user name:password (e.g. MyUserName:MyUserPassword).
[Note]

Authentication will permit (or prevent) the ability to submit an application for evaluation, as well as retrieve the summary results and URL. At this time, it is not required.

--application-id
Using the switch -i, enter the application id for your application (see instructions above).
--server-url
Using the switch -s enter the location of your CLM server (e.g. http://localhost:8070).
Target
This is the path to a specific application archive file or a directory containing such archives. A number of formats are supported, including jar, war, ear, tar, tar.gz, zip and many others.
[Tip]

Listed in the options below, you can specify the specific CLM stage. However, if you do not include this option the system will default to the Build stage.