Skip to main content
Projects in Endor Labs represent your source code repositories. When you scan a repository, Endor Labs creates a corresponding project. Select Projects from the left sidebar to view a list of all projects in your namespace. Projects You can view the following details in the Projects list:
  • Source Code Management Platform - The icon that represents the source code management platform like GitHub, GitLab, Azure DevOps and Bitbucket.
  • Project - The name of the project, shown as SCM Organization/Project Name.
  • Findings - The condensed view of the number of critical, high, medium, and low severity findings in the project.
  • Tags - The tags associated with the project.
  • Packages - The number of packages in the project.
  • Dependency Resolution Status - The percentage of packages that have been fully analyzed with no dependency resolution errors.
  • Reachability Analysis Status - The percentage of packages eligible for reachability analysis that have been fully analyzed with no call graph errors.
  • Last Scan - The elapsed time since the project was last analyzed by Endor Labs.
To sort projects by any column, click the column header. The sort order toggles between ascending (A–Z or oldest to newest) and descending (Z–A or newest to oldest), depending on the column type.

​
View project details

Select a row to view the project details, such as the project metadata, finding details, and tools associated with the project. Project Details

​
Track a repository version

Add a branch or tag to a project’s Monitored Versions list so Endor Labs scans it going forward.
  1. Select Projects from the left sidebar and select a project.
  2. Go to Settings.
  3. Under Monitored Versions, click Track Repository Version.
  4. Enter the branch or tag name and click Save.
Endor Labs validates the ref against your source code management (SCM) provider before adding it to Monitored Versions.
Validation requires a project connected through an SCM App installation. Versions created by a scan, such as an endorctl scan in CI, skip validation, since the scan itself confirms the ref exists. If Endor Labs can’t complete the validation lookup — for example, if it times out — it still saves the version rather than blocking it.
Only branch and tag names are supported. Commit SHAs are not valid monitored versions. See Set a default branch to choose which monitored version Endor Labs uses for dashboard reporting.

​
View project findings

Click on Project to view the project findings. See Findings for more information. You can also scan your projects for AI models. See AI model findings for more information.

​
View packages in a project

Select Packages under Inventory to view the list of all packages maintained as part of your project. See Packages for more information.

​
Review past scan details

You can view the history of scans performed on a project, which enables you to review the security posture of your project over time. See Scan history for more information.

​
View dependencies

You can view all the dependencies associated with all the projects in your namespace. See Dependencies for more information.

​
Filter projects

Filters refine the projects view by applying conditions based on project metadata and scan results. For example, you can filter projects by name, tags, scan date, or number of critical findings. You can combine multiple filters to narrow down results based on multiple conditions in a single query. See Project filters to learn how to implement these filters effectively.