Post-scripts on a scan

A scan runs one or more post-scripts after the workflow finishes. They execute once per finding, after de-duplication and ranking.

Selecting them

In the scan form's post-scripts section, check the scripts you want to run. You can pick several:

• The first selected script is stored as the scan's primary post-script.
• All selected scripts run on every finding after ranking.

Where the output goes

• The primary script's output populates the finding's post_script_answer.
• Additional scripts attach their output as separate enrichments on the same finding.
• Reserved keys (_reserved_report, _reserved_poc) become Report and PoC tabs, and _chip_ keys become chips in the findings list.

Note

Post-scripts are chosen per scan, independent of the workflow - so you can reuse the same workflow with different follow-up depending on what you need this run (just grading, or a full report + PoC).

Next: rankers on a scan.