Scan your open source components (SCA) with Mend Developer Platform
Overview
The Mend Developer Platform covers Mend SCA, Mend SAST, and Mend Renovate engines, ensuring a comprehensive solution for your development needs. With a unified approach, you can seamlessly manage your repositories and access powerful features tailored to enhance your workflow.
You will gain valuable insights into your integration process with logs for all scan jobs available directly within the UI. Also, keep track of the state of scan engines across all repositories, allowing you to stay informed about the health and performance of your integrations.
Main Dashboard
In the main dashboard, you can see the list of all installed repositories, configure the global configuration settings for the entire project/workspace, and also track each engine status.
Engine Status
Unavailable - This engine requires a Mend license, and it was not provided, or the one that was provided doesn’t cover this engine.
Off - This engine is disabled, to enable it go to the settings.
Silent - This engine is enabled, but Checks, Issues, and Pull Requests will not be created or updated in the repository. Scan job logs will be available in the “Recent jobs” table. Scan results will be available in the Mend Platform application.
Interactive - This engine is enabled, and scan results will also be presented in the repository based on the configuration.
Onboarding - Possible only on the repository level. Indicates that there is a pending Renovate onboarding PR that should be merged for Renovate to work.
Repository Dashboard
The repository dashboard presents a high-level overview of recent engine jobs with their status.
By clicking on each job section, you’ll be navigated to the Job Overview screen, where you can see more information.
Job Overview
You can expand each engine job by clicking on it to access detailed information about the engine scan. This information includes fields such as the commit SHA, scan duration, and more.
Additionally, you can choose which Log Level you want to view: Debug or Info. This will help you gain insights into the status of scan engines across all repositories, and easily view job logs to track progress.
To access more log details, simply click the More Details toggle.
Job Status
The Mend Developer Platform has several status indicators to track the progress of a job:
RUNNING - The scan is currently running.
PENDING - The scan was enqueued and is currently waiting to be picked up by a scanner.
PENDING_RETRY - Scan was attempted and failed but is going to be retried. It is currently waiting to be picked up by a scanner.
FAILED - Scan attempts have failed more times than our retry count. The scan will not be attempted again.
DONE - The scan was completed successfully.
Renovate Updates
Repositories will be scanned when enabled in Interactive mode, and Renovate will automatically create issues and pull requests.
In order to retry/rebase ones that have already been created, check the relevant boxes, then press Create/Rebase.
Detected Dependencies
This view displays a list of dependencies detected in your project, including any Renovate updates that have been created.
