- Open Autofix pull requests or merge requests.
- Generate Upgrade guidance for Supply Chain findings.
- Run a Managed Scan for a project using Maven registries.
Sign in to Semgrep AppSec Platform.
In the dialog that appears, provide the following information:
- The Name of your registry.
- The .
- The Authentication method. If none is required, select None (public registry).
- Username and password: provide the required Username and Password.
- API token: provide the required token value.
Optional: if your registry is only accessible from your private network, select Use network broker for registry access. This option requires a Semgrep Network Broker deployed within your network.When enabled, Semgrep routes registry traffic through the broker, allowing Semgrep to access registries that are not publicly accessible on the internet.
For the broker to reach your registry, its allowlist must include the registry URL. See Use Semgrep Network Broker for private registry access.