> For the complete documentation index, see [llms.txt](https://developer.harness.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://developer.harness.io/security-testing-orchestration/use-sto/sto-scanner-configuration.md).

# Scanner Configuration

{% content-ref url="/pages/FCUa9DSEkdmqX3cs0JL4" %}
[API DAST step configuration](/security-testing-orchestration/use-sto/sto-scanner-configuration/traceable-step-configuration.md)
{% endcontent-ref %}

{% content-ref url="/pages/WLHZ8qgSPBjQ1jWhqwUA" %}
[Anchore Enterprise step configuration](/security-testing-orchestration/use-sto/sto-scanner-configuration/anchore-enterprise-scanner-reference.md)
{% endcontent-ref %}

{% content-ref url="/pages/8ULXXbHVWig9WaLvS45K" %}
[Aqua Security step configuration](/security-testing-orchestration/use-sto/sto-scanner-configuration/aquasec-scanner-reference.md)
{% endcontent-ref %}

{% content-ref url="/pages/muWcdvmJCMoZqKiNq9hV" %}
[Aqua Trivy](/security-testing-orchestration/use-sto/sto-scanner-configuration/trivy.md)
{% endcontent-ref %}

{% content-ref url="/pages/KONGmWwXaUstYga5Ebb7" %}
[AWS ECR step configuration](/security-testing-orchestration/use-sto/sto-scanner-configuration/aws-ecr-scanner-reference.md)
{% endcontent-ref %}

{% content-ref url="/pages/ELJoDtNqKjuEFVSjX7sR" %}
[AWS Security Hub step configuration](/security-testing-orchestration/use-sto/sto-scanner-configuration/aws-security-hub-scanner-reference.md)
{% endcontent-ref %}

{% content-ref url="/pages/B3kiWh7EYrEjJaGjhzjm" %}
[Bandit step configuration](/security-testing-orchestration/use-sto/sto-scanner-configuration/bandit-scanner-reference.md)
{% endcontent-ref %}

{% content-ref url="/pages/uZ4FcDljjjs96XA6198k" %}
[Black Duck step configuration](/security-testing-orchestration/use-sto/sto-scanner-configuration/black-duck-hub-scanner-reference.md)
{% endcontent-ref %}

{% content-ref url="/pages/jTMCzNgTtDkMdCxMh21h" %}
[Brakeman step configuration](/security-testing-orchestration/use-sto/sto-scanner-configuration/brakeman-scanner-reference.md)
{% endcontent-ref %}

{% content-ref url="/pages/HZ6r28cmn2aNCNMzCQw0" %}
[Burp Suite step configuration](/security-testing-orchestration/use-sto/sto-scanner-configuration/burp-scanner-reference.md)
{% endcontent-ref %}

{% content-ref url="/pages/I0hmdEpxqYWz0aEqDoWo" %}
[Checkmarx](/security-testing-orchestration/use-sto/sto-scanner-configuration/checkmarx.md)
{% endcontent-ref %}

{% content-ref url="/pages/CA7ppN7WIZFxgCWDqSgY" %}
[Checkov IaC scanning](/security-testing-orchestration/use-sto/sto-scanner-configuration/checkov-iac-scan.md)
{% endcontent-ref %}

{% content-ref url="/pages/tmeH3lMPGU632obBOjBD" %}
[Clair step configuration](/security-testing-orchestration/use-sto/sto-scanner-configuration/clair-scanner-reference.md)
{% endcontent-ref %}

{% content-ref url="/pages/dHgQJZWW4spU31HvxiyU" %}
[Cortex Cloud step configuration](/security-testing-orchestration/use-sto/sto-scanner-configuration/cortex-cloud-scanner-reference.md)
{% endcontent-ref %}

{% content-ref url="/pages/VEWA3zmK7B3knJ7P28MQ" %}
[CodeQL step configuration](/security-testing-orchestration/use-sto/sto-scanner-configuration/codeql-scanner-reference.md)
{% endcontent-ref %}

{% content-ref url="/pages/c3PPkQbTqkX2SK0enTHD" %}
[Coverity step configuration](/security-testing-orchestration/use-sto/sto-scanner-configuration/coverity-scanner-reference.md)
{% endcontent-ref %}

{% content-ref url="/pages/UWFE0VVTpBrZULPzYIDi" %}
[Data Theorem step configuration](/security-testing-orchestration/use-sto/sto-scanner-configuration/data-theorem-scanner-reference.md)
{% endcontent-ref %}

{% content-ref url="/pages/rZuNElRsGBqu61BQCax9" %}
[Docker Content Trust (DCT) step configuration](/security-testing-orchestration/use-sto/sto-scanner-configuration/docker-content-trust-dct-scanner-reference.md)
{% endcontent-ref %}

{% content-ref url="/pages/uV4b6LTPCH2UlnrjqMra" %}
[Fortify Static Code Analyzer step configuration](/security-testing-orchestration/use-sto/sto-scanner-configuration/fortify-scanner-reference.md)
{% endcontent-ref %}

{% content-ref url="/pages/nNFCqq611X3xYMVcqk4J" %}
[Fortify on Demand step configuration](/security-testing-orchestration/use-sto/sto-scanner-configuration/fortify-on-demand-scanner-reference.md)
{% endcontent-ref %}

{% content-ref url="/pages/4EJVPXXNIXqrkpSOzqGg" %}
[Fossa step configuration](/security-testing-orchestration/use-sto/sto-scanner-configuration/fossa-scanner-reference.md)
{% endcontent-ref %}

{% content-ref url="/pages/krSpWP4zO8naGT8BFLBJ" %}
[Gitleaks step configuration](/security-testing-orchestration/use-sto/sto-scanner-configuration/gitleaks-scanner-reference.md)
{% endcontent-ref %}

{% content-ref url="/pages/xnQAEUwXBOrZ1eDBAL3c" %}
[GitHub Advanced Security step configuration](/security-testing-orchestration/use-sto/sto-scanner-configuration/github-advanced-security.md)
{% endcontent-ref %}

{% content-ref url="/pages/RkoCICLgNR90QZrxPCVA" %}
[Grype](/security-testing-orchestration/use-sto/sto-scanner-configuration/grype.md)
{% endcontent-ref %}

{% content-ref url="/pages/jRgmxJgWZLiuEXsy8i9o" %}
[HCL AppScan step configuration](/security-testing-orchestration/use-sto/sto-scanner-configuration/hql-appscan-scanner-reference.md)
{% endcontent-ref %}

{% content-ref url="/pages/CKVfl1fCF4CMfV2MB16T" %}
[Mend step configuration](/security-testing-orchestration/use-sto/sto-scanner-configuration/mend-scanner-reference.md)
{% endcontent-ref %}

{% content-ref url="/pages/49S3FVsCQYoUEIp0HeVG" %}
[Metasploit Framework step configuration](/security-testing-orchestration/use-sto/sto-scanner-configuration/metasploit-scanner-reference.md)
{% endcontent-ref %}

{% content-ref url="/pages/2KYmOpuwhoMKMdu9gFMH" %}
[ModelScan Step Configuration](/security-testing-orchestration/use-sto/sto-scanner-configuration/modelscan.md)
{% endcontent-ref %}

{% content-ref url="/pages/BCIP5mPloaUVFYE7DltO" %}
[Nessus step configuration](/security-testing-orchestration/use-sto/sto-scanner-configuration/nessus-scanner-reference.md)
{% endcontent-ref %}

{% content-ref url="/pages/YPw69MOGCLYVscYsYoM9" %}
[Nexus step configuration](/security-testing-orchestration/use-sto/sto-scanner-configuration/nexus-scanner-reference.md)
{% endcontent-ref %}

{% content-ref url="/pages/k7IkzmGgMZZmZMcbg5M3" %}
[Nikto step configuration](/security-testing-orchestration/use-sto/sto-scanner-configuration/nikto-scanner-reference.md)
{% endcontent-ref %}

{% content-ref url="/pages/wh16d11M58h54kV0GhtV" %}
[Nmap (Network Mapper) step configuration](/security-testing-orchestration/use-sto/sto-scanner-configuration/nmap-scanner-reference.md)
{% endcontent-ref %}

{% content-ref url="/pages/WV5FRodEusp7U5EgyjfJ" %}
[OpenVAS step configuration](/security-testing-orchestration/use-sto/sto-scanner-configuration/openvas-scanner-reference.md)
{% endcontent-ref %}

{% content-ref url="/pages/zWEZ025qW4U8vJt09aMc" %}
[Open Source Vulnerabilities (OSV) step configuration](/security-testing-orchestration/use-sto/sto-scanner-configuration/osv-scanner-reference.md)
{% endcontent-ref %}

{% content-ref url="/pages/IJFf0mnvJcMwQxWIJVle" %}
[OWASP Dependency-Check step configuration](/security-testing-orchestration/use-sto/sto-scanner-configuration/owasp-scanner-reference.md)
{% endcontent-ref %}

{% content-ref url="/pages/uHfF4vGNNqedbbhoHTTp" %}
[Prisma Cloud (formerly Twistlock) step configuration](/security-testing-orchestration/use-sto/sto-scanner-configuration/prisma-cloud-scanner-reference.md)
{% endcontent-ref %}

{% content-ref url="/pages/dTms74BDE2X5Q8bBUPIP" %}
[Prowler step configuration](/security-testing-orchestration/use-sto/sto-scanner-configuration/prowler-scanner-reference.md)
{% endcontent-ref %}

{% content-ref url="/pages/fxv4k647WlipkDpsDLna" %}
[Qualys Web Application Scanning (WAS) step configuration](/security-testing-orchestration/use-sto/sto-scanner-configuration/qualys-web-app-scanner-reference.md)
{% endcontent-ref %}

{% content-ref url="/pages/VZdjQVprimmzNEm0VIBB" %}
[Reapsaw step configuration step configuration](/security-testing-orchestration/use-sto/sto-scanner-configuration/reapsaw-scanner-reference.md)
{% endcontent-ref %}

{% content-ref url="/pages/3ZV2AuGoNCNBtNM7wYmN" %}
[ScoutSuite step configuration](/security-testing-orchestration/use-sto/sto-scanner-configuration/scoutsuite-scanner-reference.md)
{% endcontent-ref %}

{% content-ref url="/pages/zG1QknvuR7b5OoOLNo44" %}
[Semgrep](/security-testing-orchestration/use-sto/sto-scanner-configuration/semgrep.md)
{% endcontent-ref %}

{% content-ref url="/pages/f8n8OvOU1NcDzpj0YQe3" %}
[Snyk](/security-testing-orchestration/use-sto/sto-scanner-configuration/snyk.md)
{% endcontent-ref %}

{% content-ref url="/pages/6QAuma5RdUSV2SS0yeBb" %}
[SonarQube step configuration](/security-testing-orchestration/use-sto/sto-scanner-configuration/sonarqube-sonar-scanner-reference.md)
{% endcontent-ref %}

{% content-ref url="/pages/ffQHSoe9Ci5XFtX7rqwU" %}
[Sysdig step configuration](/security-testing-orchestration/use-sto/sto-scanner-configuration/sysdig-scanner-reference.md)
{% endcontent-ref %}

{% content-ref url="/pages/ikyFnPfGWqZZpHHjhukt" %}
[Tenable step configuration](/security-testing-orchestration/use-sto/sto-scanner-configuration/tenable-scanner-reference.md)
{% endcontent-ref %}

{% content-ref url="/pages/UMXByqUuf7uG127HZM9P" %}
[Veracode step configuration](/security-testing-orchestration/use-sto/sto-scanner-configuration/veracode-scanner-reference.md)
{% endcontent-ref %}

{% content-ref url="/pages/4oTpMfhEDWmGLZiA66uB" %}
[Wiz](/security-testing-orchestration/use-sto/sto-scanner-configuration/wiz.md)
{% endcontent-ref %}

{% content-ref url="/pages/evF2k6vnNH1gZqYn7RwP" %}
[Jfrog Xray step configuration](/security-testing-orchestration/use-sto/sto-scanner-configuration/xray-scanner-reference.md)
{% endcontent-ref %}

{% content-ref url="/pages/I76KKXiNrhBU9iwwHZml" %}
[Zed Attack Proxy (ZAP)](/security-testing-orchestration/use-sto/sto-scanner-configuration/zap.md)
{% endcontent-ref %}

{% content-ref url="/pages/7mWcEeuFiYp4swpkPXfS" %}
[STO step settings](/security-testing-orchestration/use-sto/sto-scanner-configuration/security-step-settings-reference.md)
{% endcontent-ref %}

{% content-ref url="/pages/gcUXbxwLYjjlRD8Mnrxq" %}
[Shared](/security-testing-orchestration/use-sto/sto-scanner-configuration/shared.md)
{% endcontent-ref %}