[{"_1":2,"_186":-5,"_187":-5},"loaderData",{"_3":4,"_13":14,"_21":22,"_161":162},"root",{"_5":-5,"_6":-7,"_7":8,"_9":-7,"_10":11,"_12":-7},"currentUser","primaryEmail","siteVerification","6LeIxAcTAAAAAJcZVRqyHh71UMIEGNQ_MXjiZKhI","toast","enableDev",false,"incidentStatus","routes/_layout",{"_15":-5,"_16":17,"_18":17,"_19":11,"_20":11},"username","isAskGordonEnabled",true,"isUsingNewTemplate","showMinimalLanding","showHoneypotTrap","routes/_layout.r.$namespace.$reponame",{"_23":24,"_25":-5,"_26":11,"_27":11,"_28":29,"_30":31,"_32":-5,"_33":11,"_34":35,"_84":85,"_105":106,"_154":-5,"_155":11,"_156":17,"_157":11,"_158":-5,"_159":160},"canonicalUrl","https://hub.docker.com/r/boomi/connector-scan/tags","mcpServer","canSeeDockerfile","canSeeAutobuilds","namespace","boomi","reponame","connector-scan","cloudBuildSource","isAutobuildsAvailable","repo",{"_36":37,"_38":39,"_41":42,"_43":44,"_45":11,"_46":47,"_48":49,"_50":51,"_53":31,"_28":29,"_54":55,"_56":40,"_57":58,"_59":60,"_61":62,"_63":-5,"_64":58,"_65":66,"_67":11,"_68":29,"_69":70,"_75":11,"_76":77,"_81":29,"_82":83},"categories",[],"content_types",[40],"image","date_registered","2022-07-07T19:19:55.305001Z","description","","is_private","last_updated","2025-06-10T19:06:02.400265Z","last_modified","2025-06-10T19:07:15.727829Z","media_types",[52],"application/vnd.docker.container.image.v1+json","name","pull_count",2399,"repository_type","star_count",0,"status",1,"status_description","active","source","collaborator_count","full_description","# Overview\n\nThe `connector-scan` image is used to Scan Connector code for eligibility for approval on Boomi AtomSphere.\n\nImage includes:\n\n* A minimal Alpine base image.\n* Code to scan your custom connector for your [Boomi AtomSphere](https://platform.boomi.com/) developer account.\n\n> ***Note:***\n> You must be a [Boomi Technology Partner](https://boomi.com/partners/technology-partner-program/) or an internal Boomi Developer in order to use this image.\n\n## Versioning\n\n* This docker repository contains only 2 tags `development` and `release`.\n* The current supported version is tagged with `release`.\n\n## Prerequisites ##\n\n### Connector Project Requirements ###\nIn order to use the automated scans, there are certain criteria that must be in place:\n\n1. The Connector project must be compiled with Gradle or Maven \n 1. Gradle projects must include the Gradle wrapper (`gradlew` script is present)\n 2. Maven projects must include the Maven wrapper (`mvnw` script is present)\n 1. You can add a wrapper to your existing Maven project:\n 1. To use your current Maven version: `mvn wrapper:wrapper` \n 2. To use a specific Maven version: `mvn wrapper:wrapper -Dmaven=3.3.9`\n2. The Connector must be source controlled in Bitbucket under the OfficialBoomi workspace \n3. Bitbucket pipelines must be enabled for the repository by your administrator \n4. You must have a `bitbucket-pipelines.yml` file in the root directory of your repository\n\n# How to use this image\n\nThis image is intended to be used by internal Boomi Connector developers and Boomi Technology Partners developing Connectors. \nIt should be used in [Boomi's Bitbucket workspace](https://bitbucket.org/officialboomi/workspace/repositories/), within automated CICD pipelines.\n\n## Bitbucket Pipeline Usage\n\nThis image is intended to be used within your Bitbucket repository, with Bitbucket Pipelines CI tools.\n* Here is an example step in your Bitbucket repository's `bitbucket-pipelines.yml` file:\n\n```yaml\n - step:\n name: Connector Scan\n script:\n - pipe: docker://boomi/connector-scan:release\n variables:\n BOOMI_TOKEN: $BOOMI_TOKEN\n services:\n - docker\n```\n> ***Note:***\n> The values that start with a `$` are replacement variables in Bitbucket. They are used to obfuscate secrets and sensitive information.\n\n## Environment Variables\n\nYou can adjust the configurations by passing one or more environment variables on the `docker run` command line\nor the `variables` section of your Bitbucket Pipeline step.\n\n| Variable | Requirement | Description |\n|----------------------|-------------|----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|\n| BOOMI_TOKEN | Required | Token provided by the [Boomi Technology Partner](https://boomi.com/partners/technology-partner-program/) program. Accessible in Bitbucket pipelines with `$BOOMI_TOKEN`. |\n| SOURCES | Optional | Directory of the connector source code. Defaults to `src/main` directory (following typical conventions) |\n| TEST_SOURCES | Optional | Directory of the connector test code. Defaults to `src/test` directory (following typical convention) |\n| DEBUG | Optional | Set to `true` to print out additional `DEBUG` information during execution |\n\n# Scan Artifacts #\n\nThe Generated Scan reports are described below:\n\n### SonarQube Reports ###\nA failing scan with SonarQube indicates that there are `major`, `critical`, or `blocker` issues. \nThese need to be addressed in order to pass.\n

--> quality-report.json (Optional - Not enforced for Technology Partners)

\n\n The quality report generated by Sonar flags code quality issues (code smell, complexity, test coverage, etc.) defined by `Boomi`.\n \n The root level JSON schema is provided below:\n\n```json\n{\n \"total\": {\n \"type\": \"integer\",\n \"description\": \"Number of quality issues found\"\n },\n \"p\": {\n \"type\": \"integer\"\n },\n \"ps\": {\n \"type\": \"integer\"\n },\n \"paging\": {\n \"type\": \"object\",\n \"pageIndex\": {\n \"type\": \"integer\"\n },\n \"pageSize\": {\n \"type\": \"integer\"\n },\n \"total\": {\n \"type\": \"integer\",\n \"description\": \"Number of quality issues on this page\"\n }\n },\n \"effortTotal\": {\n \"type\": \"integer\"\n },\n \"issues\": {\n \"type\": \"array\",\n \"description\": \"List of issues that should be addressed\"\n },\n \"components\": {\n \"type\": \"array\",\n \"items\": {}\n },\n \"facets\": {\n \"type\": \"array\",\n \"description\": \"List of properties of the scan like severities and statuses of issues\",\n \"items\": {\n \"property\": {\n \"type\": \"string\"\n },\n \"values\": {\n \"type\": \"array\",\n \"items\": {\n \"val\": {\n \"type\": \"string\"\n },\n \"count\": {\n \"type\": \"integer\"\n }\n }\n }\n }\n }\n}\n```\n The important things to look at are the `issues`. \n \n Although the quality metric is not enforced for Technology Partners, but we do recommend sticking to a standard of some kind.\n

--> vulnerability-report.json

\n\n The vulnerability report generated by Sonar shows problems that impact the application’s security that should be fixed immediately.\n\n The root level JSON schema is provided below:\n\n```json\n{\n \"total\": {\n \"type\": \"integer\",\n \"description\": \"Number of vulnerabilities found\"\n },\n \"p\": {\n \"type\": \"integer\"\n },\n \"ps\": {\n \"type\": \"integer\"\n },\n \"paging\": {\n \"type\": \"object\",\n \"pageIndex\": {\n \"type\": \"integer\"\n },\n \"pageSize\": {\n \"type\": \"integer\"\n },\n \"total\": {\n \"type\": \"integer\",\n \"description\": \"Number of vulnerabilities on this page\"\n }\n },\n \"effortTotal\": {\n \"type\": \"integer\"\n },\n \"issues\": {\n \"type\": \"array\",\n \"description\": \"List of issues that should be addressed\"\n },\n \"components\": {\n \"type\": \"array\",\n \"items\": {}\n },\n \"facets\": {\n \"type\": \"array\",\n \"description\": \"List of properties of the scan like severities and statuses of issues\",\n \"items\": {\n \"property\": {\n \"type\": \"string\"\n },\n \"values\": {\n \"type\": \"array\",\n \"items\": {\n \"val\": {\n \"type\": \"string\"\n },\n \"count\": {\n \"type\": \"integer\"\n }\n }\n }\n }\n }\n}\n```\n The important things to look at are the `issues`.\n

--> hotspot-report.json

\n\n The hotspot report generated by Sonar highlights security-sensitive pieces of code that the developer needs to review.\n\n The root level JSON schema is provided below:\n\n```json\n{\n \"paging\": {\n \"pageIndex\": {\n \"type\": \"integer\"\n },\n \"pageSize\": {\n \"type\": \"integer\"\n },\n \"total\": {\n \"type\": \"integer\"\n }\n },\n \"hotspots\": {\n \"type\": \"array\",\n \"description\": \"List of hotspots that were detected in the scan\"\n },\n \"components\": {\n \"type\": \"array\"\n }\n}\n```\n The important things to look at are the `issues`.\n

\n\n### Snyk Reports ###\nA failing scan with Snyk indicates that there are `high` or `critical` issues. \nThese need to be addressed in order to pass.\n

--> security-report.json

\n\n The security report generated by Snyk is a static code analysis report.\n\n The root level JSON schema is provided below:\n\n```json\n{\n \"$schema\": {\n \"type\": \"string\"\n },\n \"version\": {\n \"type\": \"string\"\n },\n \"runs\": {\n \"type\": \"array\",\n \"items\": {\n \"tool\": {\n \"driver\": {\n \"name\": {\n \"type\": \"string\"\n },\n \"semanticVersion\": {\n \"type\": \"string\"\n },\n \"version\": {\n \"type\": \"string\"\n },\n \"rules\": {\n \"type\": \"array\",\n \"description\": \"Rules used in the scan\"\n }\n }\n },\n \"results\": {\n \"type\": \"array\",\n \"description\": \"List of evaluations made by the tool\"\n },\n \"properties\": {\n \"coverage\": {\n \"type\": \"array\",\n \"description\": \"Batches of files that were scanned\"\n }\n }\n }\n }\n}\n```\n Exhaustive schema can be found [here](https://raw.githubusercontent.com/oasis-tcs/sarif-spec/master/Schemata/sarif-schema-2.1.0.json).\n\n The important things to look at are the `results`:\n\n```json\n{\n \"runs\": [\n {\n \"results\": []\n }\n ]\n}\n```\n

--> dependency-report.json

\n\n The dependency report generated by Snyk will provide detailed information about security issues with your projects dependencies.\n\n The root level JSON schema is provided below:\n\n```json\n{\n \"ok\": {\n \"type\": \"boolean\",\n \"description\": \"Whether or not the scan passed a vulnerability check\"\n },\n \"issues\": {\n \"type\": \"array\",\n \"description\": \"List of vulnerabilities and their severity levels\"\n },\n \"issueCountBySeverity\": {\n \"type\": \"object\",\n \"description\": \"Shows number of issues detected for each severity level\"\n },\n \"name\": {\n \"type\": \"string\",\n \"description\": \"Name of project in Snyk\"\n },\n \"id\": {\n \"type\": \"string\",\n \"description\": \"Project identifier\"\n },\n \"created\": {\n \"type\": \"string\",\n \"description\": \"Date/Time of analysis\"\n },\n \"origin\": {\n \"type\": \"string\"\n },\n \"type\": {\n \"type\": \"string\",\n \"description\": \"Project type (i.e. maven)\"\n },\n \"readOnly\": {\n \"type\": \"boolean\"\n },\n \"testFrequency\": {\n \"type\": \"string\",\n \"description\": \"How often this project is analyzed by Snyk (i.e. daily)\"\n },\n \"totalDependencies\": {\n \"type\": \"integer\",\n \"description\": \"Number of dependencies found\"\n },\n \"remoteRepoUrl\": {\n \"type\": \"string\"\n },\n \"imageTag\": {\n \"type\": \"string\"\n },\n \"hostName\": {\n \"type\": \"string\"\n },\n \"lastTestedDate\": {\n \"type\": \"string\"\n },\n \"browseUrl\": {\n \"type\": \"string\",\n \"description\": \"Snyk UI link for this project\"\n },\n \"owner\": {\n \"type\": \"string\"\n },\n \"importingUser\": {\n \"type\": \"object\",\n \"description\": \"Information about how this project was imported into Snyk\"\n },\n \"isMonitored\": {\n \"type\": \"boolean\",\n \"description\": \"Whether this project is being continuously monitored by Snyk\"\n },\n \"tags\": {\n \"type\": \"array\"\n },\n \"attributes\": {\n \"type\": \"object\"\n },\n \"remediation\": {\n \"type\": \"object\",\n \"description\": \"Suggested course of action to remedy issues\"\n },\n \"branch\": {\n \"type\": \"string\"\n },\n \"targetReference\": {\n \"type\": \"string\"\n }\n}\n```\n The important things to look at are the `issues` and the `remediation`.\n

\n\n# Links\n\n* [Boomi Source Code (Internal Link)](https://bitbucket.org/officialboomi/connector-pipeline)\n* [Official Boomi Connectors](https://bitbucket.org/officialboomi/workspace/projects/BCP)\n","has_starred","hub_user","immutable_tags_settings",{"_71":11,"_72":73},"enabled","rules",[74],".*","is_automated","permissions",{"_78":17,"_79":11,"_80":11},"read","write","admin","user","storage_size",12451654739,"orgData",{"_86":87,"_88":89,"_90":91,"_92":29,"_93":44,"_94":44,"_95":96,"_97":98,"_99":100,"_101":44,"_102":44,"_103":44,"_104":17},"id","3e54488c74c011e4bea40242ac11001b","uuid","3e54488c-74c0-11e4-bea4-0242ac11001b","type","organization","orgname","full_name","location","company","Boomi","profile_url","https://boomi.com/","date_joined","2014-06-12T18:39:13.486068Z","gravatar_url","gravatar_email","badge","is_active","recentTags",[107,144],{"_108":40,"_109":110,"_111":112,"_113":114,"_86":115,"_116":117,"_46":132,"_133":110,"_134":135,"_136":52,"_53":137,"_138":139,"_140":123,"_141":132,"_142":62,"_143":17},"content_type","creator",229110,"digest","sha256:97c7a726697ef31e7812bc6e8412719921de70443d267b84d50f7bd57fae0e45","full_size",290955178,279210816,"images",[118],{"_119":120,"_111":112,"_121":44,"_122":123,"_124":125,"_126":127,"_128":44,"_129":-5,"_130":114,"_59":62,"_131":-5},"architecture","amd64","features","last_pulled","2026-09-21T01:36:26.318202029Z","last_pushed","2025-06-10T19:06:00.842048456Z","os","linux","os_features","os_version","size","variant","2025-06-10T19:06:01.319924Z","last_updater","last_updater_username","dellboomi","media_type","release","repository",17539655,"tag_last_pulled","tag_last_pushed","tag_status","v2",{"_108":40,"_109":110,"_111":145,"_113":146,"_86":147,"_116":148,"_46":152,"_133":110,"_134":135,"_136":52,"_53":153,"_138":139,"_140":150,"_141":152,"_142":62,"_143":17},"sha256:d98d3f1f0dbfd939788a73331f7122110e8d0c13dab0f9f7d52a5753caa34814",290955650,249541524,[149],{"_119":120,"_111":145,"_121":44,"_122":150,"_124":151,"_126":127,"_128":44,"_129":-5,"_130":146,"_59":62,"_131":-5},"2026-09-20T17:02:08.931310561Z","2025-06-10T16:12:37.002944202Z","2025-06-10T16:12:37.394233Z","development","sbxKitMetadata","isPotentialSpam","isHubSbxKitsEnabled","displaySecurityMetadata","tagAttestations","tagsHaveAttestations",[],"routes/_layout.r.$namespace.$reponame.tags",{"_34":163,"_170":171,"_159":184,"_185":11},{"_36":164,"_38":165,"_41":42,"_43":44,"_45":11,"_46":47,"_48":49,"_50":166,"_53":31,"_28":29,"_54":55,"_56":40,"_57":58,"_59":60,"_61":62,"_63":-5,"_64":58,"_65":66,"_67":11,"_68":29,"_69":167,"_75":11,"_76":169,"_81":29,"_82":83},[],[40],[52],{"_71":11,"_72":168},[74],{"_78":17,"_79":11,"_80":11},"tags",{"_172":173,"_174":-5,"_175":-5,"_176":177},"count",2,"next","previous","results",[178,181],{"_108":40,"_109":110,"_111":112,"_113":114,"_86":115,"_116":179,"_46":132,"_133":110,"_134":135,"_136":52,"_53":137,"_138":139,"_140":123,"_141":132,"_142":62,"_143":17},[180],{"_119":120,"_111":112,"_121":44,"_122":123,"_124":125,"_126":127,"_128":44,"_129":-5,"_130":114,"_59":62,"_131":-5},{"_108":40,"_109":110,"_111":145,"_113":146,"_86":147,"_116":182,"_46":152,"_133":110,"_134":135,"_136":52,"_53":153,"_138":139,"_140":150,"_141":152,"_142":62,"_143":17},[183],{"_119":120,"_111":145,"_121":44,"_122":150,"_124":151,"_126":127,"_128":44,"_129":-5,"_130":146,"_59":62,"_131":-5},[],"canDeleteTags","actionData","errors"]

boomi/connector-scan

Tags for boomi/connector-scan