Breadcrumbs

View Vulnerable Code Results for Mend for GitHub Enterprise

Overview

The Vulnerable Code section can expand for each CWE to see the code snippet in your project and the details of each vulnerability. This information will help you and your developers confront real findings within the code without ever leaving your GitHub environment.

Getting it Done

The Vulnerable Code section can be found on both the Mend Code Security Check after a scan

code sec check.png

and on the 10 most relevant findings of the Code Security Report on the GitHub Issues tab.

top 10 finding.png

Click on Vulnerable Code to see the details of each finding.

vuln code findings.png

Vulnerable Code: Provides information on the location within the code where data can cause harm (also known as the Sink).

  • # Data Flow/s detected: Number of data flows detected that lead to the finding.

  • View Data Flow #: View each step of the specified data flow that leads to the finding.