Documentation Index

Fetch the complete documentation index at: https://help.nucleussec.com/llms.txt

Use this file to discover all available pages before exploring further.

Black Duck SCA

  • 1 minute(s) read
Prev Next

Overview

Nucleus enables you to ingest projects and vulnerabilities from Black Duck SCA directly into your Nucleus console using an automated connector. The connector uses the APIs provided by Black Duck SCA to seamlessly sync data into your Nucleus project for use in analysis, triage, automation, and reporting.

The Black Duck connector supports importing project versions and vulnerabilities from Black Duck SCA.

Connector Setup

Connector Setup Checklist

Follow the steps in this checklist to successfully set up this connector:

  1. API Access
    Create an API Token in Black Duck SCA.

  2. Connector Configuration
    Create and configure the connector in your Nucleus project.

  3. Data Ingestion
    Create an ingest rule to ingest projects from Black Duck SCA.

1. API Access

Account Access
We recommend creating a separate user account to act as a service account instead of a regular user account to ensure maximum security and uninterrupted integration.
  1. Login to Black Duck SCA.
  2. In the top right of the menu bar, select the dropdown box for your user name and select Access Tokens.
  3. Select + Create Token.
  4. Give the token a meaningful name, set the Scope to Ready Access Only and then click Create.
  5. Make a copy of the API Token for use when configuring the connector.

2. Connector Configuration

  1. Open Nucleus and go to Integration Hub > Connector Setup.
  2. Under the Scanners section, click the Black Duck icon. You will see the following popup:
  3. In the Setup Black Duck Connector popup, enter the following information:
FieldDescription
NameEnter an optional name for your connector.
DescriptionEnter an optional description for your connector.
Instance URLEnter the URL to your instance of Black Duck.
API TokenEnter the API Token you created in API Access.
  1. Click Verify Credentials.
  2. Click Save.

3. Data Ingestion

  1. Go to Integration Hub > Import via Connector.
  2. Select the Black Duck connector you just created.
  3. Select the method that you want to import:
    1. All Projects (all project versions) - In this method we ingest all project versions that exist for the project.
    2. All Projects (latest created version only) - In this method we ingest only the most recently created project version per project.
  4. Select a schedule to import data into the project.
  5. Click Save & Finish.