Scanning Gradle Projects

A quick guide to scanning Gradle projects using Reshift.

This article explains how to scan Gradle projects using Reshift. If you didn't set up any projects on reshift before, please read Scan Your First Project.

First, start scanning a new repository, there are two ways to do that: 1- By clicking on the "Add Project" card inside the Projects Home screen.

2- By clicking on the "+" button towards the top right hand corner of every screen.

Next, choose your Gradle repository from the list that will pop from the right hand side

Pro Tip: the repositories with the blue shield next to them are already set up.

Next, you will be prompted to choose the projects setting, make sure to choose "Gradle" from the "Build Approach".

Click on "Add New Project Token". The "Project Token" is a way to identify reporting machines (i.e. which machine generated the report).

Next, choose a Project Token that can easily identify the reporting machine.

Click on "Build Instructions" and Copy the snippet into your top build.gradle file.

Next, run your build using the Reshift command line.

After running the build you should get something similar to this:

Go to back to Reshift and a new project will appear at the Projects Home page.

If you have any more questions, please email us at info@reshiftsecurity.com!