You can access the application composition report in your Sonatype CLM Server in two ways:
When you log into the Sonatype CLM Server the Dashboard is displayed by default. Click the Reports icon . If multiple applications have been scanned, you will see all of them here.
You will need to be a member of at least the developer group for the application you wish to see a report for. |
Users of Nexus CLM Edition, do not have access to the Sonatype CLM Dashboard. Because of this, these will not be taken to the dashboard after logging in, nor will they see the dashboard icon. Rather, the reports area will display by default. |
You will notice, that there are several columns:
To access the Application Composition report, click the Violation Summary for the corresponding application and stage.
By default this view will be sorted alphabetically by the application name. In addition to the filter, you can also click on the application or organization columns to sort alphabetically ascending/descending. |
The Application area is the same place where you can manage policy for your application, reviewing policies unique to the application, as well as those inherited from the organization. Located just below the application identifier and organization, you will see three columns:
Release
These represent the Sonatype CLM stage where the report was generated for/from. For example, if you use the Sonatype CLM stand-alone scanner and don’t specify the CLM Stage, it will default to build. When your scan completes and the report is uploaded, it would appear below Build. This is highlighted in Figure 11.3, “Application Area”
Reports can also be accessed via enforcement point tools like Sonatype CLM for CI, and Nexus Pro - Sonatype CLM Edition. However, in each of the tools, they will connect to the Sonatype CLM Server. |
Terms of Service Privacy Policy
Copyright ©
2008-present, Sonatype Inc. All rights reserved. Includes the
third-party code listed here. Sonatype and Sonatype Nexus are trademarks
of Sonatype, Inc. Apache Maven and Maven are trademarks of the Apache
Software Foundation. M2Eclipse is a trademark of the Eclipse Foundation.
All other trademarks are the property of their respective owners.
Sonatype Headquarters - 8161
Maple Lawn Blvd #250, Fulton, MD 20759
Tysons Office - 8251 Greensboro Drive #610, McLean, VA
22102
Australia Office - 5 Martin Place, Level 14, Sydney 2000, NSW, Australia