NCM - NodeSource installs statistics

The NCM integration with GitHub (Gates/Deployment protection rules) provides users with a tool to ensure the quality and security of their dependencies. This integration catches issues early in the development process, reducing the risk of security vulnerabilities. This integration aims to configure NCM and its integration with GitHub through a section in the NodeSource Accounts portal.

NCM Operations

In the accounts portal, users can view the results of NCM's analysis for each action (Pull Request or Deployment) in their repositories. This section provides a summary of the analysis and a detailed report.

To see the detailed report, click on "View Details" This will redirect users to the page where users can view the detailed report.

Deployment Approval

NCM validates every deployment flow configured in GitHub and approves or rejects it according to NCM's configured rules. If the deployment is rejected, NCM will provide a detailed report explaining the reasons for the rejection. Webhook events from GitHub will trigger NCM and analyze the deployment based on the configured rules for NCM.

NCM Pull Request Checks

NCM checks each pull request created in a repository with the NCM GitHub App installed. NCM will attach a report marking the pull request status green or red based on the issues found. The report will provide recommendations on how to fix them.