Scanning With The Unified Agent
The Unified Agent is a Java command-line tool that scans open source components for vulnerable libraries and source files, as well as license compliance, and uploads the results to the Mend Web-Based Application. The Unified Agent scans 200+ languages (source and binary files), and seamlessly integrates with repositories, multiple package managers, build tools, containerized environments, and CI/CD tools.
Note: The Mend AppSec Platform will automatically have a sourceUrl
tag for your scans and projects. This is applicable for Unified Agent, Mend CLI, and repository integration scans.
This is especially useful for binding different scans to the same project in the Mend AppSec Platform.