Skip to content

securityScan ​

Command: securityScan
Category: Security
Status: Production Ready

Description ​

Scan for common security issues across users, passwords, privileges, encryption, and auditing. Optionally include detailed findings and attempt automated fixes (where available).

Syntax ​

bash
hana-cli securityScan [options]

Aliases ​

  • secscan
  • scan

Command Diagram ​

Parameters ​

Positional Arguments ​

This command does not accept positional arguments.

Options ​

OptionAliasTypeDefaultDescription
--category-cstringallScan category. Choices: all, users, passwords, privileges, encryption, audit
--detailed-dbooleanfalseInclude informational findings.
--fix-fbooleanfalseAttempt automated fixes when available.

Connection Parameters ​

OptionAliasTypeDefaultDescription
--admin-abooleanfalseConnect via admin (default-env-admin.json)
--conn-string-Connection filename to override default-env.json

Troubleshooting ​

OptionAliasTypeDefaultDescription
--disableVerbose--quietbooleanfalseDisable verbose output
--debug-dbooleanfalseEnable debug output

For the runtime-generated option list, run:

bash
hana-cli securityScan --help

Examples ​

Basic Usage ​

bash
hana-cli securityScan --category all --detailed

Run a full security scan and include informational findings.

  • pwdPolicy - Review password policy summaries
  • users - List database users
  • healthCheck - Run general health checks

See the Commands Reference for other commands in this category.

See Also ​