ingeno/Mend Scan

Scan for vulnerabilities and license compliance

Trust Signals

name	description	required	default
api-key	A unique identifier of your organization. Used to identify the organization in plugins.	yes	—
product-token	Unique identifier of the product to update; found on the Integrate page. Required if Project Token is not defined.	yes	—
check-policies	Whether to send the check policies request before updating mend	no	true
update-inventory	Whether to send an update request	no	false
config-file-path	Configuration file name (including file path).	no	./wss-unified-agent.config
yarn-workspaces	True if the project is structured as a monorepo using yarn workspaces	no	false
log-level	Specifies the minimal log level printed to stdout/command line	no	info
locations-to-scan	Comma-separated list of directories and/or files to scan	no	./

no outputs