Skip to:

MergeBase SCA Scanner

works with Bamboo Server 7.0.1 - 9.2.20 and more

OVERALL RATINGS

We no longer offer sales and support for server apps. You can stay connected by exploring the migration options to either the cloud or Data Center version of this app.

Explore migration program

Key highlights of the appScan your applications for known vulnerabilities right from your Bamboo plans

Supporting media

More details

MergeBase is an SCA extension (software composition analysis) that scans your applications within your Bamboo plans. Use MergeBase to help your development teams identify dangerous and insecure library versions early. Your results will be displayed in your own web based dashboard. Please

create a MergeBase security dashboard for your organization first, if you don't have one yet.

Features

  • Supports all your DevOps languages: Javascript, Python, C#, Go, Ruby, Java, and more.
  • Lowest false positive rate in the industry: Don't waste time chasing false positives.
  • Sophisticated suppression management, so you can effectively pursue a zero-vuln strategy.
  • Microsoft Board integration and developer guidance to streamline your workflows.
  • Real-time notification if new vulnerabilities are uncovered in the industry, allowing you to respond to emerging threats immediately.
  • Analyses your open source licenses enabling you to manage your legal risks.

Resources

Privacy and Security

Privacy policy

  • Atlassian's privacy policy is not applicable to the use of this app. Please refer to the privacy policy provided by this app's partner.

    Partner privacy policy

Security program

  • This app is not part of the Marketplace Bug Bounty program.

Version information

We no longer offer sales and support for server apps. You can still explore the earlier versions but these may not offer the necessary support.

Explore all server versions

Learn and explore

  • What’s Marketplace
  • App installation
  • About Atlassian
  • Atlassian resources
  • Search and ranking
  • Atlassian events
  • Atlassian foundation

Follow