Stuck in "processing" - no root pom.xml

Sonatype DepShield was added to our github repo yesterday, but according to the badge status is still ‘processing’. I believe this is because we have no root pom, instead maintaining a “parent” folder where the pom lives.

Is there a way to configure the integration to look for the parent pom, or are we out of luck?

Hi @jillrdoty,

You are in luck! Sonatype Lift not only provides the functionality you are looking for (auto-detects nested poms) but provides a more integrated GitHub experience along with additional code quality tools beyond SCA. Please take a look and see if it meets your needs.