Known Issues and Limitations for Mend Developer Platform

Bitbucket rate limit

There is a 1000 calls/hour rate limit that is applied to the workspace for all of its apps. In some cases (e.g., several apps are using this API) Mend is going to hit a rate limit and will stop working as expected for some time

Mend will inform you in the Developer Portal when this incident occurs. Additionally, it is now possible to disable the creation of some commit comments to reduce the API usage (see “Only print results" Open-Source Security > Checks)

GitHub supports only Renovate

SCA and SAST are currently not supported in the GitHub Integration in the Developer Platform

Planned to be resolved in 2025

Renovate and Remediate PRs are hard to distinguish

They use the same name pattern with no difference

This is planned to be fixed and also we might add a parameter to let users control the naming of PRs

Base branches parameter in the portal doesn't apply to Renovate

This parameter is currently only available through renovate.json

Host rules that are being set in the portal are not consumed by Renovate

At the moment they only work for SCA scans. For setting up host rules for Renovate purposes - use the Renovate configuration file.

Project tags are not being populated with details about the repo and the latest scan.