SCA Reachability Scope

General

Supported languages and package managers are listed here.

Note: Reachability for Python in the GitHub Enterprise integration is not available by default but can be enabled on demand. Version 24.10.1.1 or above is a prerequisite.

Supported Scan Engines and Integrations

1. GitHub Repo integrations

2. The Mend CLI

3. The Mend Developer Platform

Location of Reachability Analysis Results

1. GitHub Repo integrations (Python starting from 24.10.1.1)

2. The Mend CLI interactive mode + reports

3. The Mend Developer Platform

4. The Mend Platform UI

Use Case Examples

Note: You can scan a multi-language project with no additional configuration.

Mend CLI

Scanning

Visit SCA Reachability in the Mend CLI to learn about setting up Reachability in Mend CLI scans.

Viewing Results

1. Interactive mode

2. CLI reports in a .text file

3. CLI reports in a .json file

See related documentation here.

Repository Integrations

Scanning

Visit Configure SCA Reachability for GitHub Enterprise to learn about setting up Reachability in the Mend for GitHub Enterprise integration.

Visit Configure SCA Reachability for GitHub.com to learn about setting up Reachability in the Mend for GitHub.com integration.

Visit Configure SCA Reachability for Mend Developer Platform to learn about setting up Reachability in the Mend Developer Platform.

Viewing Results

1. Checkrun results (Security Check)

2. GitHub Issue

3. Pull request 

The Mend Platform

Viewing Results

Visit View your SCA Reachability Results in the Mend Platform UI to learn about viewing Reachability analysis results in the Mend AppSec Platform user interface.