Scan your AI Codebase with Mend for GitHub Enterprise

Overview

Mend AI in Mend for GitHub Enterprise allows you to scan your private AI codebases for risk, model usage, or governance violations.

Getting it done

Mend AI scans are disabled by default. To enable them, set the following environment variables to ‘true’:

• MEND_SCA_ORCHESTRATOR_ENABLED

• MEND_AI_ENABLE_CODE_CAPABILITIES

Once enabled, Mend AI scans will take place automatically as part of your regular SCA scans and require no additional setup.

Results

Unlike SCA scan results, which are visible in the GitHub UI, the results of the Mend AI scans are only visible in the Mend AppSec Platform UI, under the AI section:
AI Components
AI Models