> For the complete documentation index, see [llms.txt](https://developer.harness.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://developer.harness.io/sast-and-sca/prezero/customization/policies/partial-scan.md).

# Run a partial scan

This article will show you how to run a partial scan with Qwiet AI by Harness.

Qwiet AI by Harness allows you to scan only for specific vulnerability categories instead of running a complete scan. You can create a policy that imports only the dictionaries for the categories you're interested in.

For example, let's say that you're interested in **XSS** and **Remote Code Execution** issues. You would need to:

1. [Create a new policy](/sast-and-sca/prezero/customization/policies/custom-policies.md) and modify the `IMPORT` calls so that you only import the categories of interest

   ```prism-code
   IMPORT io.shiftleft/defaultdict

   IMPORT io.shiftleft/xss
   IMPORT io.shiftleft/execute
   ```

   ![](/files/DfHDmRpYn5HJOmhRtTva) ![](/files/P5vj8JOtHNJWVEvAqKym)
2. Validate, push, and assign your policy when invoking `sl analyze`.

## Available dictionary categories for import <a href="#available-dictionary-categories-for-import" id="available-dictionary-categories-for-import"></a>

The following is a list of dictionary categories that you can import into your policies for partial scans.

|                                        |                                                              |                               |
| -------------------------------------- | ------------------------------------------------------------ | ----------------------------- |
| Category/Import                        | Description                                                  | CWE/OWASP                     |
| IMPORT io.shiftleft/environment        | Environment variables get leaked over HTTP or to the console | CWE: 200, OWASP: A3           |
| IMPORT io.shiftleft/sqlinjection       | SQL injection over HTTP or via UI                            | CWE: 89, OWASP: A1            |
| IMPORT io.shiftleft/nosqlinjection     | NoSQL injection over HTTP                                    | CWE: 943, OWASP: A1           |
| IMPORT io.shiftleft/xss                | XSS to HTTP header or HTML                                   | CWE: 79, OWASP: A7            |
| IMPORT io.shiftleft/execute            | Remote code execution via HTTP or cloud                      | CWE: 77, 78, OWASP: A1        |
| IMPORT io.shiftleft/httpWrite          | Data to HTTP                                                 | CWE: 200, OWASP: A3           |
| IMPORT io.shiftleft/logWrite           | Sensitive data leak                                          | CWE: 200, 117, OWASP: A3      |
| IMPORT io.shiftleft/fileWrite          | Directory traversal, unsafe unzipping and file write         | CWE: 22, OWASP: A5            |
| IMPORT io.shiftleft/fileRead           | Directory traversal                                          | CWE: 22, OWASP: A5            |
| IMPORT io.shiftleft/deserialization    | Deserialization                                              | CWE: 502, OWASP: A8           |
| IMPORT io.shiftleft/xpath              | XPath injection                                              | CWE: 643, 91, OWASP: A1       |
| IMPORT io.shiftleft/ldapi              | LDAP injection                                               | CWE: 90, OWASP: A1            |
| IMPORT io.shiftleft/cookie             | Insecure cookie                                              | CWE: 1004, OWASP: A6          |
| IMPORT io.shiftleft/sessionInject      | Session injection (HTTP data to session)                     | CWE: 384, OWASP: A2           |
| IMPORT io.shiftleft/leakTerminal       | Sensitive data leak to terminal                              | CWE: 200, OWASP: A3           |
| IMPORT io.shiftleft/xxe                | XXE injection                                                | CWE: 611, OWASP: A4           |
| IMPORT io.shiftleft/mailSend           | Mail injection                                               | CWE: 159, 93, OWASP: A1       |
| IMPORT io.shiftleft/weakRandom         | Weak Pseudo-Random Number Generator                          | CWE: 338, OWASP: A1           |
| IMPORT io.shiftleft/weakHash           | Weak hash                                                    | CWE: 916, OWASP: A1           |
| IMPORT io.shiftleft/dllinjection       | Sensitive data to Windows registry                           | CWE: 74, OWASP: A1            |
| IMPORT io.shiftleft/xmlinjection       | XML Injection (HTTP data to XML write)                       | CWE: 643, OWASP: A1           |
| IMPORT io.shiftleft/cloudAccess        | Directory traversal (cloud)                                  | CWE: 22, OWASP: A5            |
| IMPORT io.shiftleft/jwtParser          | JWT parsing rules                                            | CWE: 347, OWASP: A6           |
| IMPORT io.shiftleft/connectionRedirect | Network connection redirect                                  | CWE: 918, OWASP: A5           |
| IMPORT io.shiftleft/ssrf               | Server-side request forgery                                  | CWE: 918, OWASP: A5           |
| IMPORT io.shiftleft/httpHeader         | HTTP header injection                                        | CWE: 113, OWASP: Aq           |
| IMPORT io.shiftleft/weakCipher         | Weak cipher used                                             | CWE: 327, OWASP: A6           |
| IMPORT io.shiftleft/redos              | Regular expression denial of service                         | CWE: 1333, OWASP: N/A - ReDoS |
| IMPORT io.shiftleft/grpcWrite          | Sensitivate data contained in GRPC response                  | CWE: 200, OWASP: A3           |
| IMPORT io.shiftleft/deprecated         | Use of deprecated `url.parse()` function with HTTP data      | CWE: 477, OWASP: A9           |
| IMPORT io.shiftleft/prototypePollution | Prototype pollution                                          | CWE: 1321, OWASP: A1          |
| IMPORT io.shiftleft/zipbomb            | Denial of service                                            | CWE: 409, OWASP: A6           |
| IMPORT io.shiftleft/transformers       | Common transformers such as encrypt, encode, and decode      |                               |
| IMPORT io.shiftleft/android            | Policies for Android applications                            |                               |
| IMPORT io.shiftleft/aws                | Policies for AWS environments                                |                               |