Mapping of Organizations and Repositories to the Mend AppSec Platform

Overview

The organizations (users) and repositories that are installed in the Developer Platform are mapped to the Mend AppSec Platform once they are scanned.

Note: A “many to one” mapping is supported in regards to organizations, i.e., multiple SCM organizations can be linked to a single Mend organization.

Below is the structure of the mapping in the Developer Platform.

Hierarchy

• Organization

  • Repository

  • Repository

  • Repository

Mapping to the Mend AppSec Platform

Structure

• Mend Org

  • Mend Application = GH_{org name} 

    • Mend Project = GH_{repo name}_{branch name}

Note: {branch name} is default branch or base branch.

Example

• Mend Org = test sandbox

  • Mend Application = GH_test_org

    • Mend Project = GH_repo1_main

    • Mend Project = GH_repo2_main

    • Mend Project = GH_repo2_base1