# Direct use of Auditor

If you are using Auditor **without** the AppSec Portal, **directly**: 

1. **Preconfigure Auditor**

if you are using your own images for job (scanners), [**preconfigure**](/auditor/features/settings/direct-use-of-the-auditor/docker-credentials.md) Auditor 

2. **Create pipeline**

On the dashboard page click on <img src="/files/KvNkzd5YYrfD6xMX8W9S" alt="" data-size="line"> button

<figure><img src="/files/24O7iN4EFUmQTexaQJjG" alt=""><figcaption></figcaption></figure>

3. **Add Jobs**

Click on the **Jobs** field and create a sequence of jobs (scanners) by selecting the required jobs from the drop-down list&#x20;

Scanning will be performed sequentially based on the selected set of jobs

<figure><img src="/files/4Kta0kMyfzjEdrutaB1o" alt=""><figcaption></figcaption></figure>

4. **Add environment variables**

The variables **require** you to specify information about your product and its location&#x20;

| Name                                                 | Description                                                                                                                        |
| ---------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------- |
| <mark style="color:blue;">`PRODUCT_NAME`</mark>      | name of your product                                                                                                               |
| <mark style="color:blue;">`PORTAL_IMPORT_URL`</mark> | address where reports will be sent (delivery point)                                                                                |
| <mark style="color:blue;">`PORTAL_TOKEN`</mark>      | credentials for delvery point                                                                                                      |
| <mark style="color:blue;">`REPOSITORY`</mark>        | URL of the cloned repository to be scanned, where the **code** will be checked in                                                  |
| <mark style="color:blue;">`DOCKER_IMAGE`</mark>      | reference to a list of your docker **images**, e.g. *registry.gitlab.com/whitespots-public/appsec-portal/back/appsecportal:latest* |
| <mark style="color:blue;">`DOMAIN`</mark>            | domain of your **web** product                                                                                                     |
| <mark style="color:blue;">`HOST`</mark>              | IP address of your **web** product                                                                                                 |

Optionally you can specify other variables that you need to set

<figure><img src="/files/Zz6yPKYZbOQGKQhyyeh7" alt=""><figcaption></figcaption></figure>

5. **Run pipline**

Click Run pipeline

The scanning of your product will commence.\
After all the jobs in your pipeline have finished their work, the status of the Pipeline will change from     **`In progress`** to **`Finished`**

<figure><img src="/files/XxK5wFUfEJUAzM4b8wgy" alt=""><figcaption></figcaption></figure>

6. **Get Results**

At the location specified by the environment variable (PORTAL\_URL), retrieve reports from each scanner in your pipeline

Clicking on a pipeline provides information about the Jobs in it, as well as Logs for each of them

<figure><img src="/files/VuLALHWQKh8kC9KvI6J4" alt=""><figcaption></figcaption></figure>

You can bulk delete all pipelines by clicking on the button <img src="/files/gt6gB27n0FUf9rrlOX16" alt="" data-size="line">

<figure><img src="/files/HLG209aJ3acccqDYiVU8" alt=""><figcaption></figcaption></figure>

{% hint style="success" %}
When scanning a code with Auditor, if the code is not loaded by the technical scanner, the pipelines are automatically killed.
{% endhint %}

You can also filter the available pipelines by clicking on the filter button in the right panel. \
You can filter your results by Job name and/or status

<figure><img src="/files/uBFXtlsZeHDxX1tP4Xjr" alt=""><figcaption></figcaption></figure>


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.whitespots.io/auditor/features/run-audit/direct-use-of-auditor.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.