Static Reviewer provides a native Software Configuration Management (SCM) Integration with the following platforms:

GIT
SubVersion (SVN)
Concurrent Versions System (CVS)
Ibm Rational Team Concert (RTC)
Micro Focus PVCS

Other SCM platforms can used in Static Reviewer. This can be done directly from inside the tool, using the ALM Integration feature.

Further, using our DevOps plugins, the DevOps platform will provide the SCM integration, and Static Reviewer or Security Reviewer Software Composition Analysis will integrate them using standard DevOps pipelines.

ALM Configuration

The SCM platform can be selected and configured inside your ALM (Application Lifecycle Management) as follows:

Security Reviewer Knowledge Center > SCM Integration > image-20200425-170601.png

ALM Integration

SCM configuration can be detailed:

Security Reviewer Knowledge Center > SCM Integration > image-20200425-171444.png

Security Reviewer Knowledge Center > SCM Integration > image-20200425-173534.png

ALM Schedule

Once configurated, the SCM will become a task to be scheduled in your ALM workflow:

Security Reviewer Knowledge Center > SCM Integration > image-20200425-173717.png

Any other task type, further than SCM, can be configured in the ALM workflow, including:

Ant, Maven, Gradle, BuildForge, SBT and other Software Composition Analysis
BitBucket, Mercurial and other Static Reviewer - Code Inspection
Static Reviewer - Code Inspection or Software Composition Analysis
Static Analysis results publication to Jenkins, Bamboo or to supported Dashboards
Bugtracking sites, like JIRA, BugZilla or others

For each task a success criteria can be defined as different return status, like OnSuccess or OnFailure, in order to navigate the workflow.