Issue with Scanning Repository in Mend Bolt (WhiteSource)

[DanyJenishKumar]

Select Topic Area

Question

GitHub Feature Area

Actions

Body

I have been using the Mend Bolt (WhiteSource) application for several days,
But I am currently facing an issue where the tool is not scanning my repository as expected.

Despite multiple attempts, the scan does not initiate or complete, and I’m unable to identify the root cause of the problem.

Could you please assist me in resolving this issue at your earliest convenience?

Thank you for your support.

[dennexequiel]

Hi @DanyJenishKumar,

A few things you can check if Mend Bolt (WhiteSource) is not scanning your repo:

1. Enable the Issues tab
   Mend Bolt posts scan results as GitHub issues. If Issues are disabled, you will not see anything.
   Go to Settings → Features → Issues and make sure it is checked.
   Mend Bolt for GitHub docs

2. Trigger a valid scan
   A scan only runs when you push a change that updates supported files (for example package.json, pom.xml, go.mod, requirements.txt).
   Just pushing a README update will not trigger it.
   Triggering a scan

3. Check the .whitesource config file
   After installing Mend Bolt, you should have an onboarding PR that adds a .whitesource file to the default branch. If it is missing or only exists in another branch, scans will not start.
   Config details

4. Look at logs if scans fail
   Sometimes scans start but stop because of errors like clone issues or unsupported dependency files. Logs in GitHub (under Actions or webhooks) usually show what went wrong.
   Troubleshooting guide

---

It might help if you can share:

• whether the Issues tab is enabled,
• if you have pushed a change to a supported dependency file,
• and whether the .whitesource file is in your default branch.

That should make it easier to figure out what is blocking the scan.

[DanyJenishKumar]

Hi@dennexequiel

Thanks for the pointers!

I’ve enabled the Issues tab as suggested.

To trigger a valid scan, I removed the .whitesource file and added it again.

The .whitesource file is present in the default branch.

However, the scan is still not triggering — it’s showing that "completed 2 days ago in 0s"
I’ve attached the screenshot for reference.

I also have a doubt — could it be that Mend Bolt is currently under maintenance?

[dennexequiel]

Hi @DanyJenishKumar,

Thanks for the update and screenshot. From what it looks like, the scan is not running because Mend Bolt only triggers on valid commits. That means the commit must modify supported dependency files. Simply adding the .whitesource file or updating a README will not trigger a scan.

A few things to check:

1. Review the requirements defined in the screenshot's hyperlink to confirm your commit qualifies as valid.
2. If it still does not run, check Mend Bolt status in case of maintenance or downtime, and review GitHub Actions or webhook logs for errors.

Once a valid commit is pushed to the default branch, the scan should trigger.

[queenofcorgis]

If you're asking how to use the piece of software that you found in a repository on GitHub, the best way to contact the maintainers of that software is to:

• Check the README for instructions on how to operate the software and pointers to documentation or troubleshooting info.
• Check the SUPPORT file, if one exists, for instructions on how to best contact the maintainers for support.
• Check the CONTRIBUTING guide, if one exists. Sometimes if there isn't a SUPPORT file, the CONTRIBUTING guide will give instructions on how to contact the maintainers for support.

All of these documents can be found, if they exist, in the repository where you found the software itself.

Please note: You are more likely to get a useful response if you are posting in the applicable category. The Accessibility category is a place for our community to discuss and provide feedback on the digital accessibility of GitHub products. Digital accessibility means that GitHub tools, and technologies, are designed and developed so that people with disabilities can use them.