> For the complete documentation index, see [llms.txt](https://help.aikido.dev/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://help.aikido.dev/code-scanning.md).

# Code Scanning

- [Code Scanning Overview](https://help.aikido.dev/code-scanning/code-scanning-overview.md)
- [Connect Your Source Code](https://help.aikido.dev/code-scanning/connect-your-source-code.md)
- [Connect GitHub Organization](https://help.aikido.dev/code-scanning/connect-your-source-code/connect-github-account-to-aikido.md)
- [Connect Azure DevOps Projects](https://help.aikido.dev/code-scanning/connect-your-source-code/connect-azure-devops-projects-to-aikido.md)
- [Connect Azure DevOps Self-Managed Server](https://help.aikido.dev/code-scanning/connect-your-source-code/connect-azure-devops-self-managed-server.md)
- [Connect Bitbucket Cloud](https://help.aikido.dev/code-scanning/connect-your-source-code/connect-bitbucket-account-to-aikido.md)
- [Code Scanning with a Workspace Access Token](https://help.aikido.dev/code-scanning/connect-your-source-code/connect-bitbucket-account-to-aikido/code-scanning-with-a-workspace-access-token.md)
- [Connect Bitbucket Data Center](https://help.aikido.dev/code-scanning/connect-your-source-code/connect-bitbucket-data-center.md): Connect your Bitbucket Data Center instance to Aikido for code scanning.
- [Connect Bitbucket Data Center (Broker Set-Up)](https://help.aikido.dev/code-scanning/connect-your-source-code/connect-bitbucket-data-center/connect-bitbucket-data-center-broker-set-up.md)
- [Connect GitLab Account](https://help.aikido.dev/code-scanning/connect-your-source-code/connect-gitlab-account-to-aikido.md)
- [Code Scanning with a Service Account Access Token](https://help.aikido.dev/code-scanning/connect-your-source-code/connect-gitlab-account-to-aikido/code-scanning-with-a-service-account-access-token.md)
- [Code Scanning With a Personal Access Token](https://help.aikido.dev/code-scanning/connect-your-source-code/connect-gitlab-account-to-aikido/code-scanning-with-a-personal-access-token.md)
- [Connecting multiple top-level GitLab groups to a single workspace](https://help.aikido.dev/code-scanning/connect-your-source-code/connect-gitlab-account-to-aikido/connecting-multiple-top-level-gitlab-groups-to-a-single-workspace.md)
- [Connect GitLab Self-Managed Server](https://help.aikido.dev/code-scanning/connect-your-source-code/connect-gitlab-self-managed-server-to-aikido.md)
- [Connect GitLab Self-Managed Server (Broker Set-Up)](https://help.aikido.dev/code-scanning/connect-your-source-code/connect-gitlab-self-managed-server-to-aikido/connect-gitlab-self-managed-server-broker-set-up.md)
- [How to Scan a Personal GitLab Project](https://help.aikido.dev/code-scanning/connect-your-source-code/how-to-scan-a-personal-gitlab-project.md)
- [Connect GitHub Enterprise (Cloud & Server)](https://help.aikido.dev/code-scanning/connect-your-source-code/connect-github-enterprise.md)
- [Transferring Ownership of the Aikido App in Github Enterprise (Cloud & Server)](https://help.aikido.dev/code-scanning/connect-your-source-code/connect-github-enterprise/transferring-ownership-of-the-aikido-app-in-github-enterprise.md)
- [Connect additional organizations to Aikido](https://help.aikido.dev/code-scanning/connect-your-source-code/connect-github-enterprise/connect-additional-organizations-to-aikido.md)
- [Connect GitHub Enterprise (Cloud & Server) (Broker Set-Up)](https://help.aikido.dev/code-scanning/connect-your-source-code/connect-github-enterprise/connect-github-enterprise-cloud-and-server-broker-set-up.md)
- [Local Code Scanning](https://help.aikido.dev/code-scanning/local-code-scanning.md)
- [MDM for macOS](https://help.aikido.dev/code-scanning/local-code-scanning/mdm-for-macos.md)
- [Deploy Local Scanner with Jamf](https://help.aikido.dev/code-scanning/local-code-scanning/mdm-for-macos/deploy-aikido-endpoint-with-jamf.md)
- [PR gating](https://help.aikido.dev/code-scanning/local-code-scanning/pr-gating.md)
- [Jenkins PR gating using Local Scanner](https://help.aikido.dev/code-scanning/local-code-scanning/pr-gating/jenkins-pr-gating-using-local-scanner.md)
- [Azure DevOps PR gating using Local Scanner](https://help.aikido.dev/code-scanning/local-code-scanning/pr-gating/azure-devops-pr-gating-using-local-scanner.md)
- [Bitbucket PR gating using Local Scanner](https://help.aikido.dev/code-scanning/local-code-scanning/pr-gating/bitbucket-pr-gating-using-local-scanner.md)
- [GitHub PR gating using Local Scanner](https://help.aikido.dev/code-scanning/local-code-scanning/pr-gating/github-pr-gating-using-local-scanner.md)
- [GitLab PR Gating using Local Scanner](https://help.aikido.dev/code-scanning/local-code-scanning/pr-gating/gitlab-pr-gating-using-local-scanner.md)
- [Ephemeral Code Scanning](https://help.aikido.dev/code-scanning/local-code-scanning/ephemeral-code-scanning.md)
- [Account Creation for Local Scanning](https://help.aikido.dev/code-scanning/local-code-scanning/account-creation-for-local-scanning-on-aikido.md)
- [CLI Options for local code scanning](https://help.aikido.dev/code-scanning/local-code-scanning/cli-options-for-local-scanner.md)
- [PR Gating for Code Using Local Scanner](https://help.aikido.dev/code-scanning/local-code-scanning/pr-gating-for-code-using-local-scanner.md)
- [Release Gating for Code Using Local Scanner](https://help.aikido.dev/code-scanning/local-code-scanning/release-gating-for-code-using-local-scanner.md)
- [Performing Nightly Scans Using Local Scanner](https://help.aikido.dev/code-scanning/local-code-scanning/performing-nightly-scans-using-the-aikido-local-scanner.md)
- [Local Scanning in Existing SCM-Integrated Workspaces](https://help.aikido.dev/code-scanning/local-code-scanning/local-scanning-in-existing-scm-integrated-workspaces.md)
- [GitLab Self Managed Setup for Local Code Scanning](https://help.aikido.dev/code-scanning/local-code-scanning/gitlab-self-managed-setup-for-local-code-scanning.md)
- [Azure DevOps Server Setup for Local Code Scanning](https://help.aikido.dev/code-scanning/local-code-scanning/azure-devops-server-setup-for-local-code-scanning.md)
- [Bitbucket Pipeline Setup for Local Code Scanning](https://help.aikido.dev/code-scanning/local-code-scanning/bitbucket-pipeline-setup-for-local-code-scanning.md)
- [CircleCI Setup for Local Code Scanning](https://help.aikido.dev/code-scanning/local-code-scanning/circleci-setup-for-local-code-scanning.md)
- [GitHub Action Setup for Local On-Prem Code Scanning](https://help.aikido.dev/code-scanning/local-code-scanning/github-action-setup-for-local-code-scanning.md)
- [Jenkins Setup for Local Code Scanning](https://help.aikido.dev/code-scanning/local-code-scanning/jenkins-setup-for-local-code-scanning.md)
- [Bamboo Setup for Local Code Scanning](https://help.aikido.dev/code-scanning/local-code-scanning/bamboo-setup-for-local-code-scanning.md)
- [Linux Setup for Local Code Scanning](https://help.aikido.dev/code-scanning/local-code-scanning/linux-setup-for-local-code-scanning.md)
- [Mac Setup for Local Code Scanning](https://help.aikido.dev/code-scanning/local-code-scanning/mac-setup-for-local-code-scanning.md)
- [Windows Setup for Local Code Scanning](https://help.aikido.dev/code-scanning/local-code-scanning/windows-setup-for-local-code-scanning.md)
- [TeamCity Pipeline Setup for Local Code Scanning](https://help.aikido.dev/code-scanning/local-code-scanning/teamcity-pipeline-setup-for-local-code-scanning.md)
- [AWS CodePipeline Setup for Local Code Scanning](https://help.aikido.dev/code-scanning/local-code-scanning/aws-codepipeline-setup-for-local-code-scanning.md)
- [Troubleshooting Local Scanner connectivity issues](https://help.aikido.dev/code-scanning/local-code-scanning/troubleshooting-local-scanner-connectivity-issues.md)
- [Scanning Best Practices](https://help.aikido.dev/code-scanning/scanning-practices.md)
- [Access Control Checks](https://help.aikido.dev/code-scanning/scanning-practices/enhancing-security-with-access-control-checks.md)
- [Custom Rules Overview](https://help.aikido.dev/code-scanning/scanning-practices/custom-rules.md)
- [Custom Code Context for SAST Rules](https://help.aikido.dev/code-scanning/scanning-practices/custom-code-context-for-sast-rules.md)
- [Add Custom SAST & IaC Rules](https://help.aikido.dev/code-scanning/scanning-practices/add-custom-sast-iac-rules.md)
- [External Vulnerability Databases Used in Our SCA Engine](https://help.aikido.dev/code-scanning/scanning-practices/external-vulnerability-databases-used-in-our-sca-engine.md)
- [Custom CVE Vulnerabilities](https://help.aikido.dev/code-scanning/scanning-practices/custom-vulnerabilities.md): Define vulnerabilities for internal or private packages that are not in public CVE databases.
- [Support for Dependency Scanning by Language (SCA)](https://help.aikido.dev/code-scanning/scanning-practices/support-for-dependency-scanning-by-language.md)
- [C/C++ Lockfile-Less Scanning](https://help.aikido.dev/code-scanning/scanning-practices/c-c-lockfile-less-scanning.md)
- [Java/Scala/Kotlin Projects Using Gradle: Security Scanning Best Practices](https://help.aikido.dev/code-scanning/scanning-practices/java-scala-kotlin-projects-using-gradle-security-scanning-best-practices.md)
- [Python Projects: Security Scanning Best Practices](https://help.aikido.dev/code-scanning/scanning-practices/python-projects-security-scanning-best-practices.md)
- [NET Projects: Security Scanning Best Practices](https://help.aikido.dev/code-scanning/scanning-practices/net-projects-security-scanning-best-practices.md)
- [Scala: Dependency Management and Scanning for build.sbt](https://help.aikido.dev/code-scanning/scanning-practices/scala-dependency-management-and-scanning-for-buildsbt.md)
- [Vulnerability Scanning on Private Packages - Maven](https://help.aikido.dev/code-scanning/scanning-practices/vulnerability-scanning-on-private-packages-maven.md)
- [Scanning Dev Dependencies for CVEs](https://help.aikido.dev/code-scanning/scanning-practices/scanning-dev-dependencies-for-cves.md)
- [Malware Detection in Open-Source Dependencies and Containers](https://help.aikido.dev/code-scanning/scanning-practices/malware-detection-in-open-source-dependencies.md)
- [Live Secret Detection](https://help.aikido.dev/code-scanning/scanning-practices/live-secret-detection.md)
- [Configure scanning with .aikido files](https://help.aikido.dev/code-scanning/scanning-practices/ignore-via-code-with-aikido-files.md)
- [Ignoring Secrets via Code Comments](https://help.aikido.dev/code-scanning/scanning-practices/ignoring-secrets-via-code-comments.md)
- [Excluding SAST Findings Using Comments](https://help.aikido.dev/code-scanning/scanning-practices/excluding-sast-findings-using-comments.md)
- [Dependency Scanning for Bazel](https://help.aikido.dev/code-scanning/scanning-practices/dependency-scanning-for-bazel.md)
- [Multi-File / Cross-File Vulnerability Tracing](https://help.aikido.dev/code-scanning/scanning-practices/multifile-vulnerability-tracing.md)
- [Denoise via SAST AutoTriage](https://help.aikido.dev/code-scanning/scanning-practices/sast-autotriage.md)
- [Denoise via Secret Keyword Filter](https://help.aikido.dev/code-scanning/scanning-practices/denoise-via-secret-keyword-filter.md)
- [SAST/IaC: Supported Languages and Security Focus](https://help.aikido.dev/code-scanning/scanning-practices/sast-by-aikido-supported-languages-and-security-focus.md)
- [Repository Configurations](https://help.aikido.dev/code-scanning/miscellaneous.md)
- [Scheduled Scan Frequencies](https://help.aikido.dev/code-scanning/miscellaneous/scanning-frequencies.md)
- [Improve Risk Scoring for Repositories and Containers](https://help.aikido.dev/code-scanning/miscellaneous/improve-risk-scoring-for-repositories-and-containers.md)
- [Allowing IP Addresses for Code and Container Scanning](https://help.aikido.dev/code-scanning/miscellaneous/allowing-ip-addresses-for-code-container-scanning.md)
- [Ensuring Aikido Scans New Repositories](https://help.aikido.dev/code-scanning/miscellaneous/ensuring-aikido-scans-new-repositories.md)
- [Scanned Branches in Aikido](https://help.aikido.dev/code-scanning/miscellaneous/scanned-branches-in-aikido.md)
- [Support for Multi-Branch Scanning](https://help.aikido.dev/code-scanning/miscellaneous/support-for-multi-branch-scanning.md)
- [Support for Specific Branch Scanning](https://help.aikido.dev/code-scanning/miscellaneous/support-for-specific-branch-scanning.md)
- [Split Your Monorepo Per Path](https://help.aikido.dev/code-scanning/miscellaneous/split-your-monorepo-per-path.md)
- [Exploit Intelligence with KEV and EPSS](https://help.aikido.dev/code-scanning/miscellaneous/use-epss-values-to-further-reduce-noise.md): Learn how Aikido uses EPSS and the CISA KEV catalog to prioritize dependency CVEs, and how to configure optional EPSS-based noise reduction.
- [Why Does Aikido Not Find a Specific Vulnerability or CVE Inside a Dependency](https://help.aikido.dev/code-scanning/miscellaneous/why-does-aikido-not-find-a-specific-vulnerability-or-cve-inside-a-dependency.md)
- [Generate SBOM Based on Open-Source Packages](https://help.aikido.dev/code-scanning/miscellaneous/generate-sbom-based-on-open-source-packages.md)
- [Safe Chain: Prevent Malware Installs](https://help.aikido.dev/code-scanning/aikido-malware-scanning.md)


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://help.aikido.dev/code-scanning.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.