Test a Slang project

After a Slang project has been exported to SCAP (XML), the project can be tested by running an assessment against a live system.

Before you begin

• Complete Slang Quickstart guide.
• Open project.slang and check the platform you have selected. If the platform is:
  • Matching the system Slang is running on — Use LOCALHOST.

    Tip: Use the --elevate CLI parameter to skip the Scan as Administrator prompt. For details, run slangexport -h.

  • Windows — Scan a remote system for Windows Remote Management (WinRM), using the IP or hostname and an administrator username and password. For more information about WinRM configuration, see Unable to sign in to a Windows device using Risk Scan Engine.
  • MacOS, Linux, or Cisco — Scan a remote system that is running SSH using the IP or hostname and an SSH credential.

Steps

1. Create a Slang scan configuration.
2. Test the Slang project.
3. View the scan results.

Step 1: Create a scan configuration

To create a Slang scan configuration, you need a target system to scan that matches the platform your project is written for. You can create multiple scan configurations by completing the steps and giving each configuration a unique name.

1. In Visual Studio Code (VS Code), select File > Open Folder and navigate to the project.
2. Run this command to export the project to SCAP as XML and run a scan configuration:

   slang export <project_name> <project_name>.xml --scan_config <config_name>

3. Follow the prompts to configure the scan.

Step 2: Test the Slang project

1. Edit your Slang.

2. Run this command:

   slang export <project_name> <project_name>.xml --scan_config <config_name>

   Slang saves your configuration and will not prompt you to do it again.

Step 3: View the scan results

1. In your project, locate and select the scan_configs/<project_name> file.
2. Open the HTML report scan_configs/<project_name> in your browser.

   Tip: The report can be opened from the Terminal. Run start <filepath>.html on Windows and open <filepath>.html on macOS.

Next steps

• Add Profiles and Parameters

See also

• Slang Authoring Toolkit Quickstart Tutorial
• Create Script-Based Checks
• Import and Updating SCAP (XML)