> ## Documentation Index
> Fetch the complete documentation index at: https://docs.leen.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Black Duck Coverity

> Instructions on how to configure API access for Black Duck Coverity to fetch static analysis security findings.

## Supported Data Models

* [Vulnerability Findings V2](/integrations/v2/vulnerability-findings-v2)
  * type: `code`

* [Issues (AppSec)](/integrations/application-security)
  * type: `code`

* Resources
  * type: `repository`

## Onboarding Black Duck Coverity

Follow the steps below to onboard your Coverity Connect environment to Leen.

<Steps>
  <Step title="Identify Your Coverity Connect Server URL">
    Locate the URL of your self-hosted Coverity Connect instance (e.g., `https://coverity.example.com`). This will be required as the **Server URL** during configuration.
  </Step>

  <Step title="Prepare a Coverity User Account">
    Leen authenticates to Coverity Connect using **HTTP Basic Auth** (username and password). We recommend creating a dedicated read-only service account for this integration.

    Ensure the account has the following permissions:

    * **Read** access to all relevant projects and streams
      * Access to issue search endpoints (`/issueOccurrences/search`)
      * Access to project listing endpoints

    <Warning>
      Avoid using a personal admin account. A dedicated service account with minimal read permissions is strongly recommended.
    </Warning>
  </Step>

  <Step title="Enter Configuration Parameters in Leen">
    In your Leen integration configuration, provide the following:

    | Parameter      | Description                                                             | Required |
    | -------------- | ----------------------------------------------------------------------- | -------- |
    | **Server URL** | Your Coverity Connect server URL (e.g., `https://coverity.example.com`) | Yes      |
    | **Username**   | Coverity Connect username for Basic Auth.                               | Yes      |
    | **Password**   | Coverity Connect password for Basic Auth.                               | Yes      |
  </Step>
</Steps>

## Data Synced

The Black Duck Coverity integration syncs the following data:

* **Issue Occurrences**: Static analysis findings from all accessible project streams, including checker name, category, impact, triage status, file location, and CWE references
* **Projects**: Coverity project metadata used as resource records

For any additional information about our field mappings or integrations, please contact us.