Debricked Q&A

19 Topics

M
Mighty_FoggyShip Member
asked in Q&A

Maven Dependency files

We were able to insert Debricked CLI into our ADO pipeline and run the resolve command to generate the proper .lock files for maven. However when running and FoD scan we are still receiving and error saying that the dependency files cannot be found and the open source scan is rejected. Is that attached image part ofthe problem?

1
Benedita
Community Manager
1 month ago
M
Mighty_FoggyShip Member
asked in Q&A

Debricked CLI not Recognizing .Net in my Path

I’m trying to preform a resolve scan on a .Net project on my local machine. I’ve edited my environment variable to try and get .Net into my %PATH% so debricked CLI will recognize it but the results still say it cannot find the dotnet exe. How do I properly create the correct %PATH% for .Net?

3
emilwareus
Debricked crew
1 month ago
K
KavinShip Member
asked in Q&A

include -e flag in docker run

We are running debricked-scan with docker in Azure Devops.This is the pipeline-command we are using and added the -e flag to exclude the test folder. But debricked still scans the folder.sudo docker run -v $HOME:$HOME --env-file ./env.list --entrypoint "/azure-devops.sh" debricked/debricked-scan:latest -e "**/test/**"

1
J
2 months ago
N
NevyXusShip Member
asked in Q&A

Root fixes for C#

Hello,Our backend is mainly written in C# while our frontend is in JS - i was wondering - when will you add root fixes to C# too? Is that planned?

2
Benedita
Community Manager
6 months ago
cyberlunar23
cyberlunar23Ship Member
asked in Q&A

Separating repos

Hi there, I have just integrated ~20 repos with the GitHub integration. I am now trying to separate some of our external facing and internal facing repositories. How can I achieve that?

3
C
6 months ago
B
bryanstOSShip Member
asked in Q&A

Using enterprise SSO - existing users

What happens with existing users if I start using enterprise SSO: will they be able to use GitHub SSO or use user and password?

1
Benedita
Community Manager
8 months ago
P
pepfallShip Member
asked in Q&A

Contributing developers in Debricked

How do you define a contributing developer in your tool?

1
Benedita
Community Manager
8 months ago
F
felixShip Member
asked in Q&A

Error generating rule

Hi, i keep getting an error when setting up rules: “Error generating rule”

1
Benedita
Community Manager
9 months ago
B
bryanstOSShip Member
asked in Q&A

Joining a company account

Hi there,I have just created an account as my team is using Debricked and would like to join a company account, what steps should you take now?

1
Benedita
Community Manager
9 months ago
F
felixShip Member
asked in Q&A

Pull request support with gradle

Hi, there is no pull request support for gradle as in: Is there an ETA for pull request support with gradle? Or are there workarounds?Thanks

2
felix.kruuse
Debricked crew
10 months ago
S
StatusDyingShip Member
asked in Q&A

Docker Debricked CLI Github

Hello!I am really new at Docker, can you please write me an example od Debricked CLI command  to scan GitHub repository?In documentation is this, but it is only for local file... Can you please help me?  Thank you so much for everything.docker run -it --rm -v $PWD:/data debricked/debricked-cli debricked:scan user@example.com password myrepository mycommit null cli

2
Benedita
Community Manager
11 months ago
F
fgraf-ecocoachShip Member
asked in Q&A

Managing multiple projects in one repository

As far as I can tell, projects and repositories are used pretty much interchangeably throughout most of the documentation. We develop a .NET micro services SaaS application and for simplicity’s sake, we have one repository for all of our backend services (projects are located in a sub path .\solution of the repo and referring scripts in a sub path .\build_scripts of the repo during CI).Is there a way in Debricked to properly manage multiple projects within a single repository that I haven’t discovered yet? Scanning the repository finds all the dependencies and vulnerabilities of all projects, however exporting an SBOM for said repository results in an empty file (except for basic structure) and the “Overview” shows 0 vulnerabilities even though there are several.

1
Benedita
Community Manager
1 year ago
S
shmillsShip Member
asked in Q&A

Legal notice report

Does the tool have the ability to generate a legal notice report or compliance artifact?

3
Benedita
Community Manager
1 year ago
J
joao998Ship Member
asked in Q&A

Can Debricked deploy privately?

Hello! I did not find any indications but thought I would ask: Can Debricked deploy privately?

1
Benedita
Community Manager
1 year ago
T
tomonariShip Member
asked in Q&A

“health data" of SBOM

What does the “health data” mean below?I cannot find it in SBOM, so far.  

2
T
1 year ago
T
tomonariShip Member
asked in Q&A

Supported File Formats of SBOM

Where can we choose “.xml“ format of SBOM?

2
T
1 year ago
G
gilsearaShip Member
asked in Q&A

What would be the best way to scan a Java application that is not using any package manager?

Hi, I would like to know if there’s any best practice or recommended way to scan an application written in Java that is not using any package manager. Thanks in advance for any guidance!

1
emilwareus
Debricked crew
1 year ago
O
os.hugoShip Member
asked in Q&A

Repository access in Debricked

Do you have a solution where your service won't need integrated access to our repositories? We just want to generate the result, and upload them?

1
R
1 year ago
R
rocketship17Space Cadet
asked in Q&A

Role-base access control

Hello there!Can the Automation menu item be made visible only for a group of people and not all of the people having access to the platform?

1
Benedita
Community Manager
1 year ago

Latest achievements

Show all badges
Terms & ConditionsCookie settings