---
title: Secure
slug: secure
docTags: 
createdAt: 2026-05-28T13:01:35.271Z
---

Secure supported tools assist team members in obtaining data that displays details of the vulnerability in the environment.

These tools provide scores for overall risk, security-related build delays, and security findings during the build process with services like Static Scan that show vulnerabilities aggregated according to the day-month timeline, Open Source License Compliance to show all Licenses detected, and a compliance detail table to find dependencies between applications this provides an overall real-time estimation of the security data of the organization or a specific team.

Follow these steps to access the Tools Configurations page:

From the Kyndryl Bridge main menu :inlineImage[]{src="https://api.archbee.com/api/optimize/QU1TIK52ntw5Jsos0uOt5/NK7Yw9tQgnlqBGwu7eG4H-20260601-205917.svg" alt caption width="57" height="57"}, go to **Services** → **Platform Services** → **Toolchain & Pipeline **→ **DevOps Intelligence **→ **Settings & Utilities **→ **Tools Configuration**.

For more information, see [Supported tools](docId\:cRuTgj1F0ko53NYZhEIXu).

**Tools supported in Secure:**

- [Qualys Container security tool configuration](docId\:iisktx7GQKV8hwPI9s8Nb): Provides centralized, continuous discovery and tracking for containers and images.  
- [Dependency Track configuration](docId\:H73fhs8PJ-oKDOPoVvZwd): Scans components for known flaws. 
- [SonarQube Enterprise Edition configuration](docId\:l6KMPPnIuAPFxsi9MEE_7): Inspects the code quality and security of codebases and guiding development teams during Code Reviews.
- [CodeQL configuration](docId\:MQ6-Wog8o1L9vpT5cjyKO): Enables the discovery of vulnerabilities across your codebase. 
- [GitLab SAST configuration](docId:2DJmIn8WXBpQ8GtuAouUn): Checks your source code for known vulnerabilities 
- [JFrog configuration](docId\:m2QAQnjRQbXqvVzUoj5Zq): The process of setting up a connection between your platformand JFrog tools such as JFrog Artifactory and JFrog Security Essentials (Xray and JFrogOSS).
- [Mend.io configuration](docId\:ylp2rkaXmQWTMAoZO5uK3): Securely manage open-source risks, license compliance, and AI-generated code. 
- [GCP Cloud Build configuration](docId\:PuMeSYVf67mJYI49-3-JV): Inspects the code quality and security of codebases and guiding development teams during code reviews.
- [CodeQL configuration](docId\:MQ6-Wog8o1L9vpT5cjyKO): Semantic code analysis engine that enables the discovery of vulnerabilities across your codebase.
- [GitLab SAST configuration](docId:2DJmIn8WXBpQ8GtuAouUn): Reviews your source code for known vulnerabilities.