Antra
How it worksStar1Get Started
Star1
Antra
How it worksStar1Get Started
Star1
Documentation
  • Introduction
  • Installation
  • Quick start
  • Configuration basics
  • Monorepos
  • Trust boundaries
  • Findings and severity
  • Schema providers
  • Suppressions and baselines
  • antra init
  • antra scan
  • antra sync
  • antra doctor
  • antra baseline
  • antra trace
  • antra watch
  • antra fix
  • antra query
  • antra studio
  • Studio
  • Launching Studio
  • Reading the graph
  • Configuration reference
  • BG-001: Server-to-client leak
  • BG-002: Unvalidated input
  • BG-003: Opaque object pass
  • BG-004: Secret in markup
  • GitHub Actions
  • Introduction
  • Installation
  • Quick start
  • Configuration basics
  • Monorepos
  • Trust boundaries
  • Findings and severity
  • Schema providers
  • Suppressions and baselines
  • antra init
  • antra scan
  • antra sync
  • antra doctor
  • antra baseline
  • antra trace
  • antra watch
  • antra fix
  • antra query
  • antra studio
  • Studio
  • Launching Studio
  • Reading the graph
  • Configuration reference
  • BG-001: Server-to-client leak
  • BG-002: Unvalidated input
  • BG-003: Opaque object pass
  • BG-004: Secret in markup
  • GitHub Actions

Launching Studio

Ports, options, and what has to be true first.

antra studio

Run it from your project root. It starts a server on localhost and opens a browser at it.

Flags

FlagDefaultWhat it does
--port <port>8080Port to listen on. Localhost only.
--no-openoffDoesn't open the browser.
antra studio --port 3000
antra studio --no-open

Before you launch

Studio displays findings; it does not produce them. Two things have to be true:

  1. You have scanned. antra studio reads .antra/antra-findings.sqlite, which a scan writes. On a project you have just initialized, run antra scan first, otherwise there is nothing to show.
  2. The scan stored its results. antra scan --no-store deliberately skips recording, so a scan run that way leaves Studio with no new data to display.

If the port is taken

Pass a different one:

antra studio --port 8081

--no-open is the flag for a headless machine: you get the server and the URL, and you forward the port or open it from wherever your browser is.

Warning

The server is bound to localhost and is not built to be exposed. Don't reach for port forwarding beyond your own machine or a host you control.

Previous
Studio
Next
Reading the graph
On this page
  • Flags
  • Before you launch
  • If the port is taken