Integrate Community with your workflows

Most modern software development projects rely on third-party open-source components and dependencies. To help you keep your software safe from supply chain attacks, ReversingLabs provides official integrations for Spectra Assure Community that you can use in your development environments and CI/CD workflows.

More specifically, Spectra Assure Community can integrate with popular developer tools, including AI assistants, to scan your OSS dependencies for security risks. Depending on the scan results, you can resolve detected issues by using another version of the affected dependency, or by removing it from the project altogether. You can also preserve the scan results in a report file for auditing or further remediation purposes.

Supported integrations

This section lists the official Spectra Assure Community integrations currently provided by ReversingLabs. All integrations come with usage instructions and examples.

An active Community or Portal account is required to use the integrations. Learn more about account types in the usage tiers guide.

JFrog Artifactory plugin ☍

Make sure your artifact repositories are clean from any malicious OSS packages.

The following integrations use rl-protect to retrieve information from Spectra Assure Community. It can also be used as a standalone command-line tool.

Claude Code skills ☍

Teach Claude Code to write safe code and check every installed, updated, downgraded or researched dependency.

MCP Server ☍

Enrich any modern IDE with tools for scanning dependencies and interpreting analysis reports.

GitHub Action ☍

Quickly protect your CI/CD pipelines from being compromised by a malicious dependency.