Skip to main content

OSS Index

OSSIndex

An advisor that uses Sonatype's OSS Index to determine vulnerabilities in dependencies.

Configuration​

Example​

{
  "OSSIndex": {
    "options": {
      "serverUrl": "https://ossindex.sonatype.org/"
    },
    "secrets": {
      "username": null,
      "password": null
    }
  }
}

Options​

serverUrl​

STRING Default

The base URL of the OSS Index REST API.

username​

SECRET

The username to use for authentication. If not both [username] and [password] are provided, authentication is disabled.

password​

SECRET

The password to use for authentication. If not both [username] and [password] are provided, authentication is disabled.