Welcome to Ossprey Docs

Welcome to the Ossprey documentation. This guide will help you get started with Ossprey's software supply chain security platform, configure your integrations, interpret scan results, and make the most of the tools available to you.

What's in these docs

• Getting Started — Create your account and run your first scan in minutes.
• Understanding Your Dashboard — Navigate the Ossprey dashboard, review scan history, and explore verdict details.
• Scan Results — Read and act on findings: threat cards, severity, TTPs, and triage.
• CLI Tool — Install and use the Ossprey CLI for scanning from your terminal or CI/CD.
• Artifact Caches — See what your builds actually pulled, not just what your manifests declare.
• Notifications & Alerts — Route findings to email, Slack, or incident.io with alert rules.
• Data Export — Download your scans, findings, and audit trail as CSV.
• GitHub Integration — Connect your repositories, manage settings, and understand how automated scanning works.
• Security & API Keys — Managing API keys, MFA, quotas, data handling, and security guidance.
• API and Development — How to integrate with our API, including the quickstart and MCP server.
• Glossary — Key terms and concepts used throughout Ossprey.
• FAQ & Troubleshooting — Common questions and solutions to known issues.

👍

New to Ossprey?

Start with the Getting Started guide to create your account and run your first scan.

📘

What's new

Ossprey ships continuously. The changelog in the dashboard lists everything we've released, and the roadmap shows what's coming — you can vote for what you want next.