There are different approaches to start using Signal. Select the approach that best matches your needs and preferences to start scanning your code:
- Signal CLI: Use Signal directly from the command-line and get a SARIF report. For more details, see Signal CLI.
- Coding Assistants: Configure the Signal MCP server and start scanning your code with Coding Assistants support.
- Code Sight integration: Scan active files and code changes using improved analysis options, including dataflow detection and removing invalid or redundant findings, reducing the incidence of false positives with Signal and Code Sight VS Code Extension.
- Bridge and Polaris integration: When using Signal with Bridge, it is possible to create a workflow that enables Signal to be run against local codebases, such as folders or Git project directories, and, when using Project mode, scan findings can be uploaded to a Black Duck platform for centralized visibility. Currently, Project mode supports integration with Polaris. For more details, see Using Bridge CLI with Signal.