carbon-components-vue icon indicating copy to clipboard operation
carbon-components-vue copied to clipboard

chore: Configure Mend for GitHub Enterprise

Open ibm-mend-app[bot] opened this issue 1 year ago • 1 comments

Welcome to Mend for GitHub Enterprise! This is an onboarding PR to help you understand and configure settings before Mend starts scanning your repository for security vulnerabilities.

:vertical_traffic_light: Mend for GitHub Enterprise will start scanning your repository only once you merge this Pull Request. To disable Mend for GitHub Enterprise, simply close this Pull Request.


What to Expect

This PR contains a '.whitesource' configuration file which can be customized to your needs. If no changes were applied to this file, Mend for GitHub Enterprise will use the default configuration.

Before merging this PR, Make sure the Issues tab is enabled. Once you merge this PR, Mend for GitHub Enterprise will scan your repository and create a GitHub Issue for every vulnerability detected in your repository.

If you do not want a GitHub Issue to be created for each detected vulnerability, you can edit the '.whitesource' file and set the 'minSeverityLevel' parameter to 'NONE'.

If Mend Remediate Workflow Rules are set on your repository (from the Mend 'Integrate' tab), Mend will also generate a fix Pull Request for relevant vulnerabilities.


:question: Got questions? Check out Mend for GitHub Enterprise docs. If you need any further assistance then you can also request help here.

ibm-mend-app[bot] avatar May 23 '24 14:05 ibm-mend-app[bot]

@tay1orjones Do you know anything about this PR? The internal docs I found are for mend in github enterprise. Is there a separate instance for github public?

davidnixon avatar Jul 11 '24 08:07 davidnixon

@davidnixon Yeah there is a separate integration here for GHEC orgs like ours. In the carbon monorepo we turned off issue creation because it was just too noisy and duplicated issues already found/surfaced in the "Security" tab

tay1orjones avatar Sep 24 '24 18:09 tay1orjones