Appearance
Repository Management β
The Repository Management dashboard is your command center for configuring, monitoring, and governing source code analysis. From here, you can control how the analysis engine treats your code and how findings are handled across your team.
1. Execution & Monitoring β
Triggering a Scan β
- Manual Scan: Click the three dots (...) on your repository card and select Scan Repository.
- Remote Scan: For repositories configured as "Remote," scans are triggered exclusively via the CLI Pipeline Script.
- π Full Scanning Workflow Guide β
Scan History & Detailed Logs β
Investigate past performance or troubleshoot scan failures by selecting Scan History from the context menu. You will see a chronological log of every engine stage.
Real-time Log Example:
text
17:52:30 | Scan Request Queued
17:53:03 | Scanner Started
17:53:20 | Parsing Completed (C++)
17:55:29 | Issue Detection Started (SCA)
17:56:38 | INFO: Total 1062 code issues were found.
17:56:50 | Scan Completed2. Advanced Scan Configuration β
Tailor the analysis engine to ignore noise and focus on critical paths.
- Exclusions & Inclusions: Define file patterns (e.g.,
**/vendor/**or**/dist/**) to skip third-party code or focus on specific modules. - Code Checker Configuration: Enable or disable specific engines (e.g., PMD, Checkstyle, Spotbugs) and customize rules for languages like Java, C++, and more.
- Pipeline Script: Access pre-configured scripts for seamless CI/CD integration.
- π CLI Scanner Reference & Command Options β
3. Governance & Workflow β
Suppression Workflows β
Control how issues are "silenced" based on your team's hierarchy:
- Enabled (Approval Required): Developers request suppression; a Lead/Admin must approve or reject it.
- Disabled (Direct): Users can suppress issues immediately without an approval chain.
- Disallow Suppression: Completely lock down the repositoryβno issues can be suppressed or grouped.
Cross-Repository Linking β
If you have multiple repositories sharing the same source (e.g., a "Core" repo mirrored in two projects), link them. Scanning one will automatically import all suppressions and groupings from the other, preventing duplicate triage work.
Quality Gate Profiles β
Assign a specific Quality Gate Profile to enforce strict Pass/Fail thresholds (e.g., "Block merge if Critical Issues > 0").
4. Lifecycle & Maintenance β
Edit Repository β
Modify metadata or migrate repository types. You can change the Name, Language, or even switch the Type (e.g., migrating a ZIP upload to a live Git URL).
Critical Operations β
| Action | Overview | Data Impact |
|---|---|---|
| Get RepoUID | Retrieve the unique identifier for API/CLI calls. | Informational |
| Unlink Repo | Remove the repo from the project view while keeping data. | History Preserved |
| Delete Repo | Permanently wipe the repository and its entire history. | Permanent Loss |
Identifying the RepoUID β
The RepoUID is required for all CLI integrations.
Unlinking a Repository β
Use this to hide a repository from a project without losing your scan history.
Deleting a Repository β
Caution: This action is irreversible and aborts any ongoing scans.
5. External Integrations β
Issue Tracker Integration (Jira) β
Bridge the gap between finding a bug and fixing it.
- Setup: Go to Repository Settings β Issue Tracking.
- Workflow: Create and sync tickets directly from the UI into your task manager.
- π Issue Tracking Setup Guide β
Supported Sources β
- Cloud/Git: GitHub, Bitbucket, GitLab, Azure DevOps.
- Legacy: SVN, RTC (Rational Team Concert).
- Local/Custom: ZIP uploads, Remote CLI, and VCA (Version Control Accounts).
Best Practices β
- Incremental Scans: Use for rapid PR feedback.
- Full Scans: Schedule weekly on the main branch for a total quality "health check."
- Path Pruning: Keep exclusion lists current to ensure scan times remain fast and relevant.
Related Documentation β
Project Setup & Configuration β
- οΈ Projects & Repositories Overview - Create projects and find Repository UID
- οΈ Scan Configuration - Default exclusions and file patterns
- Environment Setup - Server configuration options
Analysis & Scanning β
- Analysis Workflows - Complete scanning guide and options
- Language Support - Supported programming languages
- Scans & Snapshots - Understanding scan results and history
Quality Governance β
- οΈ Quality Gates - Automated quality enforcement and thresholds
Integration & Automation β
- CLI Scanner - Command-line analysis and pipeline integration
- CI/CD Integration - DevOps pipeline configuration
- Issue Tracking - Jira and workflow integration
Access Control β
- User Roles & Permissions - RBAC configuration
- Access Tokens - API authentication for CLI scans
- SSO Integration - Enterprise authentication setup
