How do I tell the difference between a CLI based scan vs App-based scan executed in Endor's cloud?

Last updated: April 27, 2026

Context

Users may isolate scan results between a scan within and outside of Endor's SCM App integrations (Endor Labs Documentation: SCM Integrations).

Answer

In a ScanResult object, filter for this attribute:

spec.environment.config.RunBySystem

image.png

  • false indicates the scan was in Endor Labs' environment as indicated by the cloud icon in the UI

  • endorctl command:

    endorctl api list -r ScanResult --filter spec.environment.config.RunBySystem==true

image.png

  • true indicates it was a customer environment as indicated by the terminal icon in the UI

  • endorctl command:

    endorctl api list -r ScanResult --filter spec.environment.config.RunBySystem==false