Sonatype CLM Server - Policy Management Guide
The Application Composition Report provides the results of an evaluation of your application. The results are broken into three key categories:
- Policy Violations
- Security Vulnerabilities
- License Issues.
As mentioned previously, this will be the same report, whether you are using the stand-alone scanner, the CLM Maven plugin, the manual evaluation, or and of the integrated enforcement points (e.g. Sonatype CLM for CI, IDE, Nexus Pro).
Let’s take a look at how to access the report first.
Note
Depending on the enforcement point, or the stage options you manually selected, your report may be listed under different stages in the Reporting area of the Sonatype CLM Server. For example, the default location for the stand alone scanner, is the build stage.