• English

    • Integrating OSS Index

    In addition to the internal CodeScoring Index database, you can also connect a third-party feed Sonatype OSS Index for advanced analysis.

    Integration is carried out in the Settings -> OSS Index section. To connect, you must fill in the Email and API token received during user registration in Sonatype OSS Index.

    OSS Index

    Data quality disclaimer

    The OSS Index integration uses a third-party Sonatype OSS Index feed. Data from this source may include false positives and inaccuracies, so it is recommended to use it as an additional source and separately validate results before making blocking decisions.

    Important:

    1. OSS Index is used only during SCA startup.
    2. OSS Index will refer to a third-party URL: https://ossindex.sonatype.org/.
    3. SCA speed may decrease when using OSS Index.
    4. When using OSS Index without a token, the system may return data different from authorized requests.
    Was this page helpful?