[ancheetah]

JIRA Ticket

https://pingidentity.atlassian.net/browse/SDKS-5468

Description

• Adds Mend SAST and SCA scans that only scan the packages/ directory to generate security reports for releases
• Will be triggered manually with optional inputs (workflow_dispatch)
• Full repo scan (including dev/test deps) remains triggered automatically on push to main by Mend GitHub integration app
• TODO: test manual trigger (after merge)

Note: These scans are tied to my personal user key

[changeset-bot]

⚠️ No Changeset found

Latest commit: ec33dec

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[nx-cloud]

🤖 Nx Cloud AI Fixes are not enabled for draft PRs

Self-healing CI was disabled for draft pull requests for this workspace at the time this CI pipeline execution was created. To enable automatic fixes for draft PRs, visit workspace settings.

---

View your CI Pipeline Execution ↗ for commit ec33dec

Command	Status	Duration	Result
nx affected -t build lint test docs e2e-ci	✅ Succeeded	34s	View ↗
nx-cloud record -- nx format:check --verbose	✅ Succeeded	<1s	View ↗

💡 Verify your cache is correct by running tasks in a sandbox. Read docs ↗

---

☁️ Nx Cloud last updated this comment at 2026-10-21 14:45:13 UTC

[pkg-pr-new]

Open in StackBlitz

pnpm add https://pkg.pr.new/ForgeRock/forgerock-javascript-sdk/@forgerock/javascript-sdk@601

pnpm add https://pkg.pr.new/ForgeRock/forgerock-javascript-sdk/@forgerock/ping-protect@601

pnpm add https://pkg.pr.new/ForgeRock/forgerock-javascript-sdk/@forgerock/token-vault@601

commit: 8b6f871

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 56.58%. Comparing base (ab5f42e) to head (8b6f871).

Additional details and impacted files

@@           Coverage Diff            @@
##           develop     #601   +/-   ##
========================================
  Coverage    56.58%   56.58%           
========================================
  Files          105      105           
  Lines        28534    28534           
  Branches      1644     1644           
========================================
  Hits         16145    16145           
  Misses       12389    12389           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.