Your First Security Scan

Learn how to run your first security scan with Alprina.

Create a Test File

Let’s create a file with intentional vulnerabilities:

test.py


# test.py - Sample vulnerable code
import os
 
# Hardcoded secret (vulnerability)
API_KEY = "sk-1234567890abcdef"
 
# SQL injection vulnerability
def get_user(username):
    query = f"SELECT * FROM users WHERE name = '{username}'"
    return db.execute(query)
 
# Debug mode enabled (security risk)
DEBUG = True

Run the Scan

Scan the file with Alprina:


alprina scan test.py

Understanding the Output

Alprina will identify the vulnerabilities:


🔍 Starting scan on: test.py

⚠ Found 3 issues

┏━━━━━━━━━━━━┳━━━━━━━━━━━━━━━━━┳━━━━━━━━━━━━━━━━━━━━━━━━━━━━━┓
┃ Severity   ┃ Type            ┃ Description                 ┃
┡━━━━━━━━━━━━╇━━━━━━━━━━━━━━━━━╇━━━━━━━━━━━━━━━━━━━━━━━━━━━━━┩
│ HIGH       │ Hardcoded Secret│ API key exposed in code    │
│ HIGH       │ SQL Injection   │ Unsanitized user input     │
│ MEDIUM     │ Debug Mode      │ Debug mode in production   │
└────────────┴─────────────────┴─────────────────────────────┘

Get Detailed Information

View more details about the findings:


alprina scan test.py --verbose

Generate a Report

Create a comprehensive report:


alprina report --format html

Next Steps

CLI Commands - Explore all commands
Fixing Vulnerabilities - Learn how to fix issues
CI/CD Integration - Automate scanning