Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Empty MobSF Scan Results in Bitbucket Pipeline #89

Open
YuriBanyuwang1 opened this issue Aug 29, 2024 · 0 comments
Open

Empty MobSF Scan Results in Bitbucket Pipeline #89

YuriBanyuwang1 opened this issue Aug 29, 2024 · 0 comments

Comments

@YuriBanyuwang1
Copy link

During the recent execution of our Bitbucket pipeline, which includes a security scan using MobSF (Mobile Security Framework), the generated scan report returned an unexpected result. The report indicates no findings, showing an empty "results": {} object, despite the absence of errors in the scan process. The MobSF CLI version used is 0.3.9, and the scan was performed on an APK generated during the pipeline's release build step.

- step: &install-mobsf
       name: Security Scan with MobSF
       image: python:3.9  # Use Python image to run MobSF
       script:
         - pip install mobsfscan  # Install MobSF CLI
         - mobsfscan --type android --json -o mobsfscan_result.json ./app/build/outputs/apk/development/debug/app-development-arm64-v8a-debug.apk  # Run MobSF scan on the armeabi-v7a APK
       artifacts:
         - mobsfscan_result.json 
         
         
      please help me fix this issue 
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant