Step 6 - Review Reports
As we reach step six of the Nine Steps for Open Source Governance, it’s a good idea to take a look at everything we’ve already completed:
- Download, Install, and Configure Sonatype CLM Server
- Setup Users and Security
- Create an Organization and Application
- Import Sonatype Policy
- Scan an Application
With the previous step, Scan an Application, we now have what we need to take a look at those results. The results themselves are provided in the form of the Sonatype CLM, or Violations, Report. This report will highlight any components that have violated your policies, as well as include additional information representing the overall risk of components used in your application.
In this guide, we’ll provide an overview of the application composition report, as well as offer tips for interpreting results.