I am following a wiki Guide on how to run fixinator, but i can't as i can't install commandbox on a restricted machine and project is old using the Application.cfm files any help much appreciated Please

There are people using CommandBox on very restricted government servers. What issues are you having?

Not issues Its network who have disabled those

Disabled what? I don't understand what you're saying.

you mean that you don’t have network access? If that is the case you can still install the fixinator commandbox command, but you will need the fixinator enterprise server in order to actually run the scan

Thanks @foundeo I was trying to run it without box and could not find a document

so if you are using it without box, then you can still do that but you would just invoke the FixinatorClient cfc directly: https://github.com/foundeo/fixinator/blob/master/models/fixinator/FixinatorClient.cfc

fixinator = new FixinatorClient();
results = fixinator.run(path="/code/folder", config={});

Ok and that config will read all the files and folders from there

you probably also need to call

fixinator.setAPIKey("YOUR_KEY");

before

run()

@foundeo what does this mean Fixinator will send source code to: https://api.fixinator.app/v1/scan for scanning. The code is kept in RAM during scanning and is not persisted. For details see: https://github.com/foundeo/fixinator/wiki/How-Does-Fixinator-Work Note: The enterprise version allows you to run the code scanner fully on your own servers.

@gsr yes, that is correct you need the enterprise version if you want to run it fully on-premises. For finding the unscoped variable issue you need to run fixinator with

confidence=low

were you doing that? If you were and it still didn’t find it, I’d be happy to take a look at a code sample you can email me pete@foundeo.com directly.

Thanks noticed one thing, when i ask it to san Application.cfm, it does not list unscoped variab;les

do you have an example of what the unscoped variable code looks like? feel free to email it to me

sure i will drop an email