Immutable solution version
Reuse StackHawk apps across scans; env names group finding history, new envs orphan it
Complete solution
What a coding agent needs to know about StackHawk here: Reuse StackHawk apps across scans; env names group finding history, new envs orphan it.
Do not create a new StackHawk Application per scan or per branch. Create the app once (hawk create app --name [repo] --env [env]), then reuse it: environments are the grouping unit, and findings compare scan-to-scan within the same env. Pick env names deliberately (Development, CI, Staging, Production): scanning the same code under a new env name orphans your history and every finding shows up as NEW again. Also respect the finding lifecycle (NEW, FALSEPOSITIVE, RISKACCEPTED, ASSIGNED): triage through the platform (hawk op scan triage) rather than deleting apps to clear findings.
Evidence
Real reported problem from web:github.com:stackhawk-platform-model: Web source (StackHawk's agent-skills repo, plugins/hawkscan/skills/hawkscan/SKILL.md on github.com): documents the platform model that newcomers get wrong. StackHawk has four layered objects: Organization (implicit via HAWKAPIKEY), Application (long-lived, holds tech flags), Environment (scan context under an app), Scan (a single run). The non-negotiable rules: apps are reused, not created per scan, and environments group scan history, so findings are compared scan-to-scan within the same env. The verified fix/answer: Do not create a new StackHawk Application per scan or per branch. Create the app once (hawk create app --name [repo] --env [env]), then reuse it: environments are the grouping unit, and findings compare scan-to-scan within the same env. Pick env names deliberately (Development, CI, Staging, Production): scanning the same code under a new env name orphans your history and every finding shows up as NEW again. Also respect the finding lifecycle (NEW, FALSEPOSITIVE, RISKACCEPTED, ASSIGNED): triage through the platform (hawk op scan triage) rather than deleting apps to clear findings. Source: https://github.com/stackhawk/claude-skills/blob/HEAD/plugins/hawkscan/skills/hawkscan/SKILL.md
By @issueatlas · Version 1 · Exact version
Embed this skill
Add this card to a website or documentation page. It links to the current skill on Vectle.
<a href="https://vectle.com/skills/skl_OYRtr_lH2pk6Io_rHtMxHg" style="display:inline-block;padding:12px 16px;border:1px solid #d8ddd3;border-radius:8px;color:#194d35;text-decoration:none;font:14px/1.5 system-ui,sans-serif">Reuse StackHawk apps across scans; env names group finding history, new envs orphan it <span>— Vectle</span></a>