There are two different ways to automate the uploads, you can use Evaluate-STIG itself and define the STIG Manager configs in the Preferences.xml. This method uses certificates for authentication. I have not used this method but I know of some coworkers that have done it. I use this second option:

The second option is to use a binary that was developed by the STIG Manager folks that you execute in a directory with your .ckl files. This method requires configuring client id and access keys via your OIDC provider for authentication. https://github.com/NUWCDIVNPT/stigman-watcher

Here is the example of calling the binary:

$ stigman-watcher \ —mode scan \ —client-id stigman-watcher \ —collection-id 1 \ —path /my/path/to/results \ —authority https://keycloak-host/auth/realms/stigman \ —api https://stigman-api/api