Other Methods for Accessing a Codebase to Scan

Uploading a codebase is not the only method available for accessing a codebase to scan in Code Insight. However, for the purpose of keeping the getting-started process streamlined, this document focuses on the upload process only. The other methods you can use to access a codebase for a project are briefly described here:

• Synchronize with your Source Control Management system—An alternative to uploading a codebase to the Scan Server is to synchronize a codebase repository from a Source Control Management application (such Perforce, Git, Subversion, or TFS) to the Scan Server for scanning. For more information, refer to “Configuring Source Code Management” in the Code Insight User Guide.

• Scan a codebase on a remote server—Instead of uploading or synchronizing codebases to the Scan Server, you can install a Code Insight scan-agent plugin on a remote system to directly scan a codebase on that system. The results of the remote scan are sent to an existing project on the Code Insight Core Server. For more information, refer to the Code Insight Plugins Guide.

Whether your project’s codebase is uploaded or synchronized to the Scan Server or resides on a remote system on which a plugin is installed (or is a combination of code files from two or more of these methods), the results of all scans on the complete codebase will be available in your Code Insight project. Within the project, you can then perform further analyses of the codebase files and review, remediate, and finalize the inventory of the open-source and third-party software findings.