Advanced Inventory Search Dialog

Code Insight 2021 R1

The Advanced Inventory Search dialog is opened when you click the Advanced Search button on the Project Inventory tab or the Inventory view. This dialog provides the following options that enable you to search project inventory in a variety of ways:

Advanced Inventory Search Dialog

 

Column/Field

Description

Inventory Items

The following options enable you to filter inventory by inventory attributes.

Inventory Name

Enter the whole or partial inventory name by which to filter the inventory display. For example, if you enter apache in this field, Code Insight will find all inventory items that have the apache string in their names.

Inventory Priority

Select one or more of checkboxes (P1, P2, P3, or P4) to search the inventory by inventory priority.

For more information about inventory priority, see Inventory Priority in the “Using Code Insight” chapter.

 

Inventory Review Status

Select one or more of the following checkboxes to filter the inventory display based on the review status of inventory items:

• Approved—Show only inventory that has been reviewed and approved, either manually by a reviewer or automatically during the auto-publish process.
• Rejected—Show only inventory that has been reviewed and rejected, either manually by a reviewer or automatically during the auto-publish process.
• Not Reviewed—Show only inventory that has not yet been reviewed.

For more information about the review status, see Review Status of Inventory in the “Using Code Insight” chapter.

Dependency Options

Select one of the following options to filter the inventory display based on dependency level:

• All Inventory Items—Show all inventory—that is, all top-level inventory items, along with their first-level and transitive dependencies.
• Only Top-Level Inventory Items—Show all top-level inventory items only. No first-level or transitive dependencies are displayed.
• Only Dependency Inventory Items—Show only first-level and transitive dependencies. No top-level inventory is displayed.

Inventory Age

Select one of the following to filter the inventory display by the time frame in which the inventory items were published:

• Last 1 day—Show inventory published in the last day. For example, if today is Feb 6th, search from Feb 5th 12 AM.
• Last 7 days—Show inventory published in the last week. For example, if today is Feb 6th, search from Jan 30th 12 AM.
• Last month—Show inventory published in the last month. For example, if today is Feb 6th, search from Jan 7th 12 AM (30 days).
• Custom Date Range—Show inventory published within the specified time frame. Select a beginning (From) and ending (To) date from the popup calendar.
• Any—Show all published inventory.

 

Inventory Notifications

Select one or more of the following checkboxes to filter the inventory display based on security vulnerability alerts:

• Inventory with Open Alerts—Show only inventory items that have open vulnerability alerts (that is, alerts for vulnerabilities that were discovered post-publication and have not been closed).
• Inventory Rejected Due to New Non-Compliant Security Vulnerabilities—Show inventory items that have been rejected due to new security alerts that are non-compliant with policy.

Inventory Confidence Level

Select one or more Confidence levels—High, Medium, or Low—by which to filter system-generated inventory items in the inventory display.

The Confidence level is the measure of the strength of the discovery technique used by Code Insight to generate an inventory item. For a description of the Confidence levels and how they are used, see Inventory Confidence in the “Using Code Insight” chapter.

Inventory Tasks

The following options filter inventory to show only those inventory items that have tasks. Refine the search using one or more task attributes—for example, task status, type, age, or owner.

Task Status

Select one of the following to filter the inventory display by the current status of the tasks associated with inventory:

• Open Tasks—Show inventory associated with at least open task.
• Closed Tasks—Show inventory associated with at least one closed task.
• All Tasks—Show all inventory associated with tasks, open or closed.

 

Tasks Type

Select one of the following to filter the inventory display by the type of task associated with inventory:

• Manual inventory review—Show inventory associated with a least one task requesting that a manual legal or security review be performed. (This review is needed to flag the inventory as accepted or rejected.)
• Remediate Inventory—Show inventory (currently or previously rejected) associated with at least one task requesting that software development take some action to make rejected inventory acceptable.
• Miscellaneous—Show inventory associated with at least one task requesting that additional attention of some sort be given to the inventory.
• Any—Show all inventory associated with tasks of any type.

Inventory Tasks Age

Select one of the following to filter the inventory display by the time frame in which tasks associated with inventory items have been created:

• Last day—Show inventory associated with at least one task created within the last day. For example, if today is Feb 6th, search from Feb 5th 12 AM.
• Last 7 days—Show inventory associated with at least one task created within the last week. If today is Feb 6th, search from Jan 30th 12 AM.
• Last month—Show inventory associated with at least one task created within the last month. If today is Feb 6th, search from Jan 7th 12 AM (30 days).
• Custom Date Range—Show inventory associated with at least one task created in the specified time frame. Select a beginning (From) and ending (To) date from the popup calendar.
• Any—Show all inventory associated with tasks, no matter when the tasks were created.

 

Inventory Task Owner

Select one of the following to filter the inventory display by the user who is assigned to tasks associated with inventory items:

• Only Mine—Show inventory associated with at least one task assigned to you (the current user).
• Specific User—Show inventory associated with at least one task assigned to the specified user. (A Select user pop-up enables you to select the user.)
• Any—Show all inventory associated with tasks, no matter to whom the tasks are assigned.

Security Vulnerabilities

The following options enable you to filter inventory by the attributes of the security vulnerabilities associated with inventory items.

If you accessed this dialog from the Inventory View, setting any of the following security-vulnerability criteria might increase the inventory search time significantly.

Security Vulnerability ID

Enter the complete valid ID for the security vulnerability by which to filter the inventory display to show only those inventory items associated with the specified vulnerability.

 

Security Vulnerability Severity

Select one or more vulnerability severity levels by which to filter the inventory display to show only those inventory items associated with at least one vulnerability that has one of the selected severities.

The severity-level options differ depending on the CVSS version used by Code Insight.

If CVSS v3.x (3.0 and 3.1) is used, the following severity options are available:

• Critical (CVSS score 9.0 - 10.0)
• High (CVSS score 7.0 - 8.9)
• Medium (CVSS score 4.0 - 6.9)
• Low (CVSS score 0.1 - 3.9)
• None (CVSS score = 0)

If CVSS v2 is used, these severity options are available:

• High (CVSS score 7.0 - 10.0)
• Medium (CVSS score 4.0 - 6.9)
• Low (CVSS score 0.1 - 3.9)
• Unknown (N/A)

For more information about vulnerability severities, see Security Vulnerabilities Associated with Inventory in the “Using Code Insight” chapter.

 

Security Vulnerability Age

Select one of the following options to filter the inventory display by the time frame in which security vulnerabilities associated with inventory items were detected.

Note:The detection date is either the inventory creation date (if a vulnerability was reported when the inventory was created) or the date that a new vulnerability applicable to this inventory was delivered by the update service.

• Last day—Show inventory associated with at least one vulnerability detected within the last day. For example, if today is Feb 6th, search from Feb 5th 12 AM.
• Last 7 days—Show inventory associated with at least one vulnerability detected within the last week. For example, if today is Feb 6th, search from Jan 30th 12 AM.
• Last 30 days—Show inventory associated with at least one vulnerability detected within the last month. For example, if today is Feb 6th, search from Jan 7th 12 AM.
• Custom Date Range—Show inventory associated with at least one vulnerability detected within a specific time frame. Select a beginning (From) and ending (To) date from the popup calendar.
• Any—Show all inventory associated with security vulnerabilities, no matter when the vulnerabilities were detected.

Licenses and Versions

The following options enable you to filter inventory by attributes of the selected license for inventory items.

If you accessed this dialog from the Inventory View, setting any of the following license criteria might increase the inventory search time significantly.

License Name

Enter the full or partial license name by which to filter the inventory display. For example, if you enter bsd in this field, Code Insight will find all inventory items whose Selected License value has the bsd string in its name.

 

License Priority

Select one or more license priorities by which to filter the inventory display. The display will show only those inventory items whose Selected License has one of the priorities you select:

• P1— Viral/Strong Copyleft
• P2—Weak Copyleft/Commercial/Uncommon
• P3—Permissive/Public Domain
• No License Found

For more information about license priority, see Auditing Scan Results in the Analysis Workbench in the “Using Code Insight” chapter.

No Associated Version

Select this option filter to those licenses to which no version has been associated.

Actions

The following are actions you can take to define criteria logic and apply the filters.

Apply And |Or Criteria

Select the boolean operator to apply to the search criteria:

• Or—To appear in the search results, an inventory item must contain at least one of the criteria you selected on this dialog. This is the default operator.
• And—To appear in the search results, an inventory item must meet all the criteria selected on this dialog.

Apply

Click this button to apply the selected search criteria and return to the Inventory Items page to view the results. The title bar of the Inventory Items page denotes that the display shows only filtered results.

Clear Form

Click this button to return the search criteria configuration to its default state.

Close

Click this button to close this dialog and return to the Inventory Items page without applying your search criteria.