Skip to content

Eclipse Quick Start

Use this guide for Eclipse or Spring Tools teams that need project scans, problem markers, report history, comparison, and source navigation.

Typical time: 15 minutes. Requires Eclipse or Spring Tools, Java, OpenGrep, the plugin artifact, and an issued license.

1. Confirm the deployment requirements

Have the Eclipse plugin artifact and an issued postq.lic available. This deployment requires Eclipse or Spring Tools, Java, OpenGrep, and a supported embedded browser runtime.

2. Install prerequisites

Use your organization's approved software distribution process, or install from the publisher resources:

Then run the supplied pre-install check:

.\postq-code-scanner-preinstall-check.ps1 -Profile eclipse

If PowerShell blocks the script, see PowerShell blocks the prerequisite checker.

bash ./postq-code-scanner-preinstall-check.sh --profile eclipse

On Windows, ensure the Eclipse SWT Browser can use a current Microsoft Edge WebView2 runtime.

If OpenGrep download is blocked by Microsoft Edge, SmartScreen, or Windows Defender, see OpenGrep download is blocked by Microsoft Edge, SmartScreen, or Defender.

For platform notes and supported versions, see Prerequisites.

3. Install the plugin

  1. Open Help > Install New Software....
  2. Choose Add... > Archive... and select postq-code-scanner-eclipse-plugin-<version>.zip.
  3. Select PostQ Code Scanner, accept the applicable terms, finish the installation, and restart Eclipse when prompted.

For an enterprise dropins deployment, extract the ZIP and copy dropins/postq-code-scanner into the target Eclipse installation's dropins directory before restarting Eclipse.

Open the PostQ perspective:

Window > Perspective > Open Perspective > Other > PostQ Code Scanner

4. Configure activation

Open:

Window > Preferences > PostQ Code Scanner

Set Offline license file to the full path of postq.lic. Set the PostQ scanner, Java, or OpenGrep executable path only when system discovery does not resolve correctly for the Eclipse process. Open the Configuration view and confirm that the license, Java 11+, and OpenGrep rows are green.

5. Scan a project

  1. Download and extract the Java Quick Start project, or choose a representative repository.
  2. Use File > Open Projects from File System to import the extracted postq-java-quickstart directory.
  3. Select the project in Project Explorer or Package Explorer.
  4. Open PostQ Code Scan from the context menu.
  5. Select Scan Project.
  6. Monitor the PostQ console until the scan completes.

6. Review the result

  1. Expand the project in the Reports view.
  2. Double-click the newest completed scan.
  3. Review the PostQ Code Scan Report.
  4. Inspect Crypto Functions and Operation Groups for the inventory, then Assessment for security findings and quantum exposure.
  5. Open a report row to navigate to source when available.

Success checklist

  • The PostQ console reports successful generation.
  • A completed scan appears in the Reports view.
  • The report opens in the embedded browser.
  • Problem markers and source links identify the affected code.

Next: Eclipse usage.