TrendAI Setup Assistant

Configure the TrendAI Security Scanner with API credentials and install required tools.

Setup Flow

Step 1: Detect Operating System

First, detect the OS to use appropriate commands:

bash

uname -s 2>/dev/null || echo "Windows"

•Darwin = macOS
•Linux = Linux
•MINGW/MSYS*/CYGWIN* or command fails = Windows (Git Bash)

Step 2: Ask for Vision One API Key

Use AskUserQuestion to ask the user for their Vision One API token:

Question: "Enter your Vision One API Key" Header: "API Key" Options:

•"I have my API key ready" - User will paste it
•"I need to create one" - Guide them to Vision One console

If they need to create one, tell them:

•Log in to Trend Vision One
•Go to Administration > API Keys
•
Create a new API key with these permissions:
- •Cloud Security > Cloud Posture (for IaC scanning)
- •Artifact Security (for TMAS vulnerability/secret scanning)
•Copy the token

Step 3: Ask for Vision One Region

Use AskUserQuestion to ask which region they use:

Question: "Which Vision One region are you using?" Header: "Region" Options:

•"US (api.xdr.trendmicro.com)"
•"EU (api.eu.xdr.trendmicro.com)"
•"Japan (api.xdr.trendmicro.co.jp)"
•"Singapore (api.sg.xdr.trendmicro.com)"

Step 4: Save Configuration

macOS/Linux

Tell the user to add these to their shell profile (~/.zshrc or ~/.bashrc):

bash

# TrendAI Security Scanner Configuration
export TMAS_API_KEY="<their-api-key>"
export V1_REGION="<their-region-endpoint>"

Then run:

bash

source ~/.zshrc  # or ~/.bashrc

Windows (Git Bash)

On Windows, use setx for persistence AND export for current session:

bash

# Set for future sessions (persistent)
setx TMAS_API_KEY "<their-api-key>"
setx V1_REGION "<their-region-endpoint>"

# Set for current session
export TMAS_API_KEY="<their-api-key>"
export V1_REGION="<their-region-endpoint>"

Note: setx saves for future sessions but does NOT update the current session. The export commands are needed for immediate use.

Step 5: Install TMAS CLI

Check if TMAS is installed

macOS/Linux:

bash

~/.local/bin/tmas version 2>/dev/null || echo "NOT_INSTALLED"

Windows (Git Bash):

bash

"$HOME/.local/bin/tmas.exe" version 2>/dev/null || echo "NOT_INSTALLED"

Install TMAS

macOS/Linux:

bash

OS=$(uname -s)
ARCH=$(uname -m)
mkdir -p ~/.local/bin

if [ "$OS" = "Darwin" ] && [ "$ARCH" = "arm64" ]; then
    curl -L https://cli.artifactscan.cloudone.trendmicro.com/tmas-cli/latest/tmas-cli_Darwin_arm64.zip -o /tmp/tmas.zip
    unzip -o /tmp/tmas.zip -d ~/.local/bin
elif [ "$OS" = "Darwin" ] && [ "$ARCH" = "x86_64" ]; then
    curl -L https://cli.artifactscan.cloudone.trendmicro.com/tmas-cli/latest/tmas-cli_Darwin_x86_64.zip -o /tmp/tmas.zip
    unzip -o /tmp/tmas.zip -d ~/.local/bin
elif [ "$OS" = "Linux" ] && [ "$ARCH" = "x86_64" ]; then
    curl -L https://cli.artifactscan.cloudone.trendmicro.com/tmas-cli/latest/tmas-cli_Linux_x86_64.tar.gz -o /tmp/tmas.tar.gz
    tar -xzf /tmp/tmas.tar.gz -C ~/.local/bin
elif [ "$OS" = "Linux" ]; then
    curl -L https://cli.artifactscan.cloudone.trendmicro.com/tmas-cli/latest/tmas-cli_Linux_arm64.tar.gz -o /tmp/tmas.tar.gz
    tar -xzf /tmp/tmas.tar.gz -C ~/.local/bin
fi

chmod +x ~/.local/bin/tmas
~/.local/bin/tmas version

Windows (Git Bash):

bash

# Create install directory
mkdir -p "$HOME/.local/bin"

# Download TMAS CLI for Windows
curl -L https://cli.artifactscan.cloudone.trendmicro.com/tmas-cli/latest/tmas-cli_Windows_x86_64.zip -o "$HOME/tmas.zip"

# Extract using PowerShell (with execution policy bypass)
powershell -ExecutionPolicy Bypass -Command "Expand-Archive -Force -Path '$HOME/tmas.zip' -DestinationPath '$HOME/.local/bin'"

# Verify installation (use forward slashes and quotes)
"$HOME/.local/bin/tmas.exe" version

# Clean up
rm "$HOME/tmas.zip"

Important Windows notes:

•Use $HOME instead of %USERPROFILE% (Git Bash doesn't expand Windows env vars)
•Use forward slashes (/) not backslashes (\) for paths
•Quote paths containing spaces
•Use -ExecutionPolicy Bypass with PowerShell commands

Step 6: Verify Setup

macOS/Linux:

bash

echo "=== TrendAI Setup Verification ==="
echo ""
echo "TMAS CLI:"
~/.local/bin/tmas version 2>/dev/null && echo "OK" || echo "NOT INSTALLED"
echo ""
echo "API Key:"
[ -n "$TMAS_API_KEY" ] && echo "Configured (${#TMAS_API_KEY} chars)" || echo "NOT SET"
echo ""
echo "Region:"
echo "${V1_REGION:-api.xdr.trendmicro.com (default)}"

Windows (Git Bash):

bash

echo "=== TrendAI Setup Verification ==="
echo ""
echo "TMAS CLI:"
"$HOME/.local/bin/tmas.exe" version 2>/dev/null && echo "OK" || echo "NOT INSTALLED"
echo ""
echo "API Key:"
[ -n "$TMAS_API_KEY" ] && echo "Configured (${#TMAS_API_KEY} chars)" || echo "NOT SET"
echo ""
echo "Region:"
echo "${V1_REGION:-api.xdr.trendmicro.com (default)}"

Success Message

When setup is complete, tell the user:

Setup Complete! You can now use these commands:

•/trendai-scan-tmas - Scan for vulnerabilities and secrets
•/trendai-scan-iac - Scan Terraform/CloudFormation for misconfigs
•/trendai-scan-llm - Test LLM endpoints for prompt injection

For LLM Scanning

If the user plans to use /trendai-scan-llm, they also need to set TARGET_API_KEY:

bash

# The API key for the LLM endpoint being scanned (separate from TMAS_API_KEY)
export TARGET_API_KEY="your-llm-endpoint-api-key"

On Windows, also run:

bash

setx TARGET_API_KEY "your-llm-endpoint-api-key"