Source Code Management (SCM)

Generate SBOMs directly from your source code repositories. Safeguard supports both public and private repositories across multiple SCM platforms.

Supported Platforms

Public vs Private Repositories

Public Repositories

For public repositories, you only need to provide the repository URL. No authentication is required.

Workflow:

1. Click Connect on the SCM integration card
2. Select Public tab
3. Enter the repository URL
4. Click Add then Next
5. Review and configure project settings
6. Click Connect

Private Repositories

Private repositories require authentication credentials to access the code.

Workflow:

1. Click Connect on the SCM integration card
2. Select Private tab
3. Enter configuration name and credentials
4. Click Verify Credentials
5. Select workspace (if applicable) and repositories
6. Configure project settings
7. Click Connect

Credential Requirements

Best Practices

• Use dedicated service accounts - Create tokens specifically for Safeguard integration
• Minimum permissions - Grant only read access to repositories
• Token rotation - Regularly rotate access tokens
• Monitor access - Review connected repositories periodically