Troubleshooting
Solutions for common issues when using OWASP Noir.
No Endpoints Found
Symptom: Noir runs but reports 0 endpoints.
- Check that you are pointing to the correct directory:
noir scan ./your-app - Verify that your framework is supported:
noir list techs - Try scanning with
--verboseto see which technologies were detected - If your framework is not supported, use AI-Powered Analysis to detect endpoints
Scan Takes Too Long
Symptom: Noir takes a long time on large codebases.
- Use
--techsto limit scanning to specific frameworks:noir scan . --techs rails - Use
--exclude-techsto skip known irrelevant frameworks - AI-powered analysis caches responses; subsequent runs on the same codebase will be faster
AI Provider Connection Errors
Symptom: Errors when using --ai-provider.
- Verify your API key is correct:
--ai-key <KEY>or setNOIR_AI_KEYenvironment variable - For local providers (Ollama, vLLM, LM Studio), ensure the server is running
- Check the provider's default host in the AI Providers table
- For custom endpoints, use the full URL:
--ai-provider=http://your-server:port - Enable debug logs with
NOIR_ACP_RAW_LOG=1for ACP providers
Symptom: The AI analysis stalls, or gives up while the model is still working.
- Requests fail after
NOIR_AI_CONNECT_TIMEOUT(default 10s) if the host is unreachable, and afterNOIR_AI_TIMEOUT(default 300s) if the provider accepts the request but never answers - Raise
NOIR_AI_TIMEOUTwhen a slow local model legitimately needs longer to generate; lower--ai-max-tokento send smaller bundles instead - Rate limits (HTTP 429) are retried three times with backoff — if warnings persist, reduce
--concurrency
Docker Permission Issues
Symptom: Permission denied errors when running via Docker.
- Ensure your directory is mounted correctly:
docker run --rm -v $(pwd):/tmp ghcr.io/owasp-noir/noir:latest scan /tmp - On SELinux systems, add
:zto the volume mount:-v $(pwd):/tmp:z
Shell Completion Not Working
Symptom: Tab completion doesn't work after installation.
- If installed via Homebrew, completions are installed automatically
- For manual setup, see Shell Completions
- After setting up, restart your shell or run
source ~/.zshrc(or equivalent)
Still Need Help?
- Open a GitHub Issue
- See the Contact page for more ways to reach the team