Known Issues and Limitations for Mend Developer Platform

Bitbucket rate limit

There is a 1000 calls/hour rate limit that is applied to the workspace for all of its apps. In some cases (e.g., several apps are using this API) Mend is going to hit a rate limit and will stop working as expected for some time

Mend will inform in the Developer Portal when this incident occurs. Additionally, it is now possible to disable creation of some commit comments to reduce the API usage (see “Only print results" Open-Source Security > Checks)

Renovate and Remediate PRs are hard to distinguish

They use the same name pattern with no difference

This is planned to be fixed and also we might add a parameter to let users control the naming of PRs

Base branches parameter in the portal doesn't apply to Renovate

This parameter is currently only available through renovate.json

Scan Details report (strictMode in legacy Bitbucket integration) is not supported

Host rules that are being set in the portal are not consumed by Renovate

At the moment they only work for SCA scans. For setting up host rules for Renovate purposes - use Renovate configuration file.

Reachability is not currently supported for SCA scans

Project tags are not being populated with details about repo and latest scan.

(Azure Repos) Custom work item types and custom work Iiems fields are not yet supported.

Planned to be implemented in Q4 2024