GitHub

GitHub is a tool that allows developers to create, store, manage and share their code.

Usage of Github in SSD

  • SSD can run security analysis to identify the GitHub security posture using frameworks such as OpenSSF Score card.

  • It also collects metadata such as repository name, branch, list of commits, approvers etc., to perform supply chain security related analysis and populate it on the DBOM for audit purposes.

To Integrate Github:

  1. Navigate to Config > Integrations.

  2. In the Source panel, click Github.

  1. The Github integration page is displayed.

  1. Enter the API URL and Token values of your Github account.

  2. Click Save. The tool is integrated in the source stage.

  3. You can edit the entered Github values by clicking the Edit option as shown below:

  1. Enter the new URL and token value and click Update.

The new values get updated.

Last updated