Antra
How it worksStar1Get Started
Star1
Antra
How it worksStar1Get Started
Star1
Documentation
  • Introduction
  • Installation
  • Quick start
  • Configuration basics
  • Monorepos
  • Trust boundaries
  • Findings and severity
  • Schema providers
  • Suppressions and baselines
  • antra init
  • antra scan
  • antra sync
  • antra doctor
  • antra baseline
  • antra trace
  • antra watch
  • antra fix
  • antra query
  • antra studio
  • Studio
  • Launching Studio
  • Reading the graph
  • Configuration reference
  • BG-001: Server-to-client leak
  • BG-002: Unvalidated input
  • BG-003: Opaque object pass
  • BG-004: Secret in markup
  • GitHub Actions
  • Introduction
  • Installation
  • Quick start
  • Configuration basics
  • Monorepos
  • Trust boundaries
  • Findings and severity
  • Schema providers
  • Suppressions and baselines
  • antra init
  • antra scan
  • antra sync
  • antra doctor
  • antra baseline
  • antra trace
  • antra watch
  • antra fix
  • antra query
  • antra studio
  • Studio
  • Launching Studio
  • Reading the graph
  • Configuration reference
  • BG-001: Server-to-client leak
  • BG-002: Unvalidated input
  • BG-003: Opaque object pass
  • BG-004: Secret in markup
  • GitHub Actions

Studio

The local dashboard for reading findings and triaging them.

Studio is a local web dashboard over the findings your scans recorded. It exists because a terminal report is good at telling you that something crossed and bad at letting you browse.

What it is not

It is not a scanner. Studio reads .antra/antra-findings.sqlite, the database that antra scan writes into, and shows you what is already there. If you have just changed code, scan first:

antra scan && antra studio

It is also not a chat interface or a question-answering tool. Everything it shows comes from the analysis you already ran; there is no model in the loop.

What you get from it

  • The findings, filtered and browsable, with the rule, location, sink, and trace each one carries.
  • The graph: the project as nodes, with boundary edges drawn where a value crosses from one side of a trust boundary to the other.
  • Triage: the place to decide what to do about a finding you have looked at, by following the path it took or recording that you accept it.

Local by design

Studio binds to localhost and serves the same data the CLI already had. Nothing is uploaded, and there is no account.

Next

  • Launching Studio
  • Reading the graph
Previous
antra studio
Next
Launching Studio
On this page
  • What it is not
  • What you get from it
  • Local by design
  • Next