Managing Security Vulnerability Alerts

Code Insight provides the ability to view and clear security vulnerability alerts. When the Electronic Update process is run, it will generate these alerts for any new security vulnerabilities that impact inventory. The alerts allow you to investigate the most recent vulnerabilities and their effect on your project code, if any. Once you have addressed vulnerability impact, either by determining no impact exists or through remediation, you can close the alert.

Note:An alert can be automatically closed when its associated security vulnerability is manually suppressed by a Code Insight System Administrator. See Suppressing/Unsuppressing Security Vulnerabilities for more information.

When the Electronic Update generates security vulnerability alerts, an email notification is sent to the Project Contact of each project containing inventory impacted by the alerts. Additionally, users can view the alerts for a given project from the Inventory Details pane in the Analysis Workbench or from the Project Inventory tab (and from the Inventory view).

Refer to these topics for more information:

•

Accessing Security Vulnerability Alerts

•

Using the Alerts Dialog to Manage Alerts