If an authorization error similar to the one below appears:
RuntimeWarning: An exception was thrown trying to get the tenant data:
<HttpError 403 ... returned "Not Authorized to access this resource/api">
Ensure that you consented to the following API scopes as a user with the proper permissions to consent and have enabled the required APIs and Services.
When ScubaGoggles is run and it needs to re-authorize you using your Google
credentials, it makes a connection using port 8080. If you receive a permission
error with the text An attempt was made to access a socket in a way forbidden by its access permissions
, it is likely that another process on your system is
using that port.
The following PowerShell command, when run as an Adminstrator, may help to locate the process using the port. Once you've determined how the port is being used, you can evaluate whether something may be done to temporarily relinquish the port for ScubaGoggles use or whether you might need to try running ScubaGoggles on a system where the port is available.
Get-Process -Id (Get-NetTCPConnection -LocalPort 8080).OwningProcess
If you are unable to view the HTML report in a browser window, the results of the conformance scan can be viewed in their raw JSON format.
We recommend running the conformance report in quiet mode to stop the web
browser from being opened automatically. This can be done with the --quiet
parameter:
scubagoggles gws --quiet
Once the scan is complete, navigate to the output folder. Within the output folder, you can access the generated HTML reports, or view the results in JSON format.
To view the results as JSON, open the ScubaResults.json
file.
The output will resemble the following:
{
"Summary": {
"sites": {
"Manual": 0,
"Passes": 1,
"Errors": 0,
"Failures": 0,
"Warnings": 0,
"Omit": 0
}
},
"Results": {
"sites": [
{
"GroupName": "Sites Service Status",
"GroupNumber": "1",
"GroupReferenceURL": "https://github.com/cisagov...",
"Controls": [
{
"Control ID": "GWS.SITES.1.1",
"Requirement": "Sites Service SHOULD be disabled for all users.",
"Result": "Pass",
"Criticality": "Should",
"Details": "Requirement met in all OUs and groups."
}
]
}
]
},...
- Return to Documentation Home