Network Configuration
Configure the network access that SCA360 needs to run, such as outbound ports, runtime privileges, and external domains used for analysis, uploads, and report downloads. Allow only the services that apply to your environment and enabled features.
Security and Firewall Requirements
TCP/443
SCA360 uses this port to connect to the SBOM360 backend and fetch data from public repositories.
Privileges Configuration
Regular User
SCA360 runs as a regular user. Root or sudo privileges are not required. The user must have a valid home directory.
Network access
SCA360 requires access to external networks on the ports listed in the Firewall Requirements table. Depending on the configuration, SCA360 may also require access to internal source and package repositories.
Execution access
SCA360 executes the following: third-party tools shipped in the third_party folder, and the git client to clone source code.
Domains Requiring Access
Configure this only if the firewall does not allow outgoing HTTPS connections by default.
Lineaje Backend Services
https://*.v2.prod.veedna.com OR
https://data-service-v2-apigw.v2.prod.veedna.com https://notification-service.v2.prod.veedna.com
https://lineaje-gpt-service.v2.prod.veedna.com
https://lineaje-identity-service.v2.prod.veedna.com
https://scim-service.v2.prod.veedna.com
Upload SBOM metadata
https://us-east-1-commercialprod-veedna-opa.s3.amazonaws.com/*
Download reports
https://us-east-1-commercialprod-veedna-sbomreport-bucket.s3.amazonaws.com/* https://us-east-1-commercialprod-veedna-datapipeline.s3.amazonaws.com/*
Local Vulnerability Lookup
https://*.anchore.io OR
https://toolbox-data.anchore.io/ https://grype.anchore.io
Malware Lookup
https://data.reversinglabs.com
Maven and Gradle Package Repository
https://repo.maven.apache.org
https://repo1.maven.org
https://repo.spring.io
https://oss.sonatype.org
https://maven.google.com https://dl.google.com
NPM and JavaScript Package Repository
https://registry.npmjs.org
Python Package Repository
https://pypi.org
Rust Package Repository
https://crates.io
Ruby Package Repository
https://rubygems.org
Dotnet Package Repository
https://api.nuget.org
Go Package Repository
https://sum.golang.org https://proxy.golang.org https://golang.org https://google.golang.org https://pkg.go.dev
Packagist Repository
https://packagist.org
Source Repository
https://github.com
https://bitbucket.org
https://gitlab.com
Ubuntu Container
https://*.ubuntu.com OR https://archive.ubuntu.com
https://security.ubuntu.com
https://old-releases.ubuntu.com
Debian Container
https://*.debian.org OR https://ftp.de.debian.org
Red Hat Container
https://*.redhat.com OR https://sso.redhat.com
https://api.access.redhat.com
https://cdn-ubi.redhat.com
Alpine Container
https://*.alpinelinux.org OR https://build.alpinelinux.org
https://dl-cdn.alpinelinux.org
Amazon Linux Container
https://*.amazonlinux.com OR https://cdn.amazonlinux.com
Last updated