GitHub
GitHub is a tool that allows developers to create, store, manage and share their code.
Usage of Github in SSD
SSD can run security analysis to identify the GitHub security posture using frameworks such as OpenSSF Scorecard.
It also collects metadata such as repository name, branch, list of commits, approvers etc., to perform supply chain security-related analysis and populate it on the DBOM for audit purposes.
It can run security scans such as SAST, Secret Scan and license scan on GitHub repositories.
To Integrate Github:
Navigate to Setup > Integrations.
In the Source panel, click Github.
The Github integration page is displayed.
Enter the API URL and Token values of your Github account.
Click Save. The tool is integrated in the source stage.
You can edit the entered Github values by clicking the Edit option as shown below:
Enter the new URL and token value and click Update.
The new values get updated.
Last updated
