Mend for Github and Github Self-hosted - Get a CSV of the Mend License Check

Overview

With the 25.3.1 Release of the Repository integrations, the Cloud and Self-hosted versions of the Repository integrations allow a user to automatically push the Mend License Check to the repository in a csv format. This allows developers to easily pull information from their license check to communicate with other teams internally.

Mend Configurations

To get the License check csv to push to the repository the setting pushLicenseCheck under checkRunSettings must be set to true. This can be set in the repo-config.json in your global configuration or locally in your .whitesource file

CODE

  "checkRunSettings": {
    "vulnerableCheckRunConclusionLevel": "failure",
    "displayMode": "diff",
    "useMendCheckNames": true,
    "iacCheckRunConclusionLevel": "failure",
    "pushLicenseCheck": true
  }

Github Configurations

If the repository has Branch Protection Rules or the Organization has a Ruleset that prevents merging to the a Mend configured Base Branch, the Mend App will need to be allowed to Bypass the branch restriction for this setting to work. For Cloud integrations this will be Mend for Github.com and for self-hosted integrations, the app name will be different depending on what was set when it was created.

Branch Protection Rules

For Branch Protection Rules, this can be configured by going to Require a pull request before merging checking Allow specified actors to bypass required pull requests and adding the Mend App.

Rule Sets

For Rule Sets, The App must be added to the Bypass list.