Re: [xpanse-dev] Sonatype lift at Xpanse

[Swaroop Akulu Raghupathy <swaroop.akulu.raghupathy@xxxxxxxxxx>]

Hi Mikael,

 

No, we did not request any such scans from Sonatype.

 

Yes, it would be great if you can deploy the app so that we can get the scanning notifications.

 

Regards,

Swaroop

 

From: xpanse-dev <xpanse-dev-bounces@xxxxxxxxxxx> On Behalf Of Mikael Barbero
Sent: Monday, June 12, 2023 3:28 PM
To: xpanse-dev@xxxxxxxxxxx
Cc: Frederic Gurr <frederic.gurr@xxxxxxxxxxxxxxxxxxxxxx>
Subject: [xpanse-dev] Sonatype lift at Xpanse

 

Hi,

 

For a couple of days, the xpanse bot user at github is receiving notifications with scan results from Sonatype Lift. The scans seem to be triggered by each snapshot sent to OSSRH. Is it something that you specifically requested from Sonatype?

 

FYI, we can deploy the Lift GitHub app on your GitHub organization so that you get the notifications from the scanning processes.

 

Thanks!

 

Mikaël Barbero 

Head of Security | Eclipse Foundation

🐦 @mikbarbero

📅 Book an appointment

Eclipse Foundation: The Platform for Open Innovation and Collaboration