Integrations & Extensibility
Customize your workflows to fit your SDLC for continuous open source risk management.
Software Composition Analysis Tools That Work With Yours
While FossID tools can be used detached from the Software Development Lifecycle (SDLC), its impact can be increased by fitting it into your SDLC toolchain. Our flexible integrations optimize the experience for your Auditors while helping you build workflows that satisfy Scan, Gate, and Notify use cases.
Scan
Scan your code to view results locally or in FossID Workbench.
Gate
Notify
Inform relevant stakeholders when findings require attention.
Scan Directly from Your Git SCM
Use the Git Integration in FossID Workbench to import and scan code from Git-based platforms such as GitHub, GitLab, and Bitbucket. This helps you audit your codebase for compliance and security risks without interrupting developer workflows.
Integrate Scans and Gates into Your CI/CD Pipelines
Integration into CI/CD Pipelines is the most flexible and powerful way to integrate FossID into your SDLC.
FossID CI/CD
Use context from git to Scan and compare new code changes to their previous state.
Opt to Gate pipelines when findings occur and Notify via Pull Request Annotations.
FossID Workbench Agent
The Workbench Agent brings Workbench-powered Scans and Gates to CI/CD pipelines.
Learn more by exploring the Workbench Agent GitHub Repo.
FossID Workbench API
Total control over Workbench to build custom workflows that Scan, Gate, and Notify.
Shift-Left Testing
Developers can use the tools that plug FossID into CI/CD pipelines in their workstations to scan their code as they’re working on it. This helps them see what will be caught by scans that happen later in the SDLC, providing assurance that there won’t be surprise findings after they check in the code they’re working on.
Both the FossID Workbench and the FossID CI/CD Diff Scanner help developers quickly check their work prior to pushing code changes and seeing the most relevant results that will appear in Workbench.
FossID and Your Toolchain
More Product Information
FossID tools offer many features that help you build a comprehensive inventory of components in your software and more.
Powerful SCA Features
FossID tools offer many features that help you build a comprehensive inventory of components in your software and more.
Secure and Scalable Deployment
FossID’s Hybrid and Offline deployment models support even the strictest data privacy and confidentiality requirements.
Services to Fast-Track Your Success
FossID’s Audit Services team is available to help you accelerate onboarding and adoption of FossID tools in your environment.
Talk to a Software Supply Chain Ninja
Book a discovery call with one of our experts to discuss your business needs and how our tools and services can help.