SCA Reachability Scope

General

Reachability is available for:

1. Java

2. JavaScript

3. Python (beta)

Note: Reachability for Python in the GitHub Enterprise integration is not available by default but can be enabled on demand. Version 24.10.1.1 or above is a prerequisite.

It can be scanned via the:

1. GitHub Repo integrations (Java/JS starting from version 24.3.2, Python starting from 24.10.1.1)

2. The Mend CLI

Results are available via:

1. The Mend CLI interactive mode + reports

2. GitHub Repo integrations (Java/JS starting from version 24.3.2, Python starting from 24.10.1.1)

3. The Mend Platform UI

Use Cases

Mend CLI

Scanning

1. Scanning a Java project with the Mend CLI *

2. Scanning a JavaScript project with the Mend CLI *

3. Scanning a Python project with the Mend CLI

   * NOTE: You can scan a multi-language project with no additional configuration.

Viewing Results

1. Interactive mode

2. CLI reports in a .text file

3. CLI reports in a .json file

See related documentation here.

Repository Integrations

Scanning

1. Scanning a Java project with the Repository Integration (GitHub.com, GitHub Enterprise).

2. Scanning a JavaScript project with the Repository Integration (GitHub.com, GitHub Enterprise).

3. Scanning a Python project with the Repository Integration (GitHub.com, GitHub Enterprise).

Viewing Results

1. Checkrun results (Security Check)

2. GitHub Issue

3. Pull request 

The Mend Platform

1. Viewing results in the Mend Platform UI