Performing Inventory Searches in the Analysis Workbench

You can filter the Inventory Items list to focus on the inventory you want to examine. The following sections describe the filtering methods:

• Filtering Inventory by Name
• Filtering by Publication Status
• Performing an Advanced Inventory Search

Note:Results from an inventory search (using one or more of these filtering methods) and the results of an inventory search based on associated codebase files are mutually exclusive and will overwrite each other in the Inventory Items pane. (For more information about inventory searches based on an inventory’s associated codebase files, see Showing Inventory Associated to Files Selected in the Codebase List.)

Filtering Inventory by Name

You can filter the inventory by an inventory name or a string within the name.

Note:The name filter you define is automatically copied to the Advanced Inventory Search feature should you use this feature (see Performing an Advanced Inventory Search). Likewise, if you enter a name filter when using the Advanced Inventory Search feature, it is copied to the name-filter field on the Inventory Items pane. This behavior enables you to keep the name filter persistent. In either location, the filter can be removed or replaced as needed.

To filter the inventory by name, perform this step:

In the name filter field above the Inventory Items list, provide the inventory name or a partial-name string. As you type each character in the string, the list is automatically filtered according to the entered characters.

Filtering by Publication Status

You can filter inventory by its published or not published status.

To filter the inventory by its publication status, perform this step:

At the top of the Inventory Items pane, click the Published or Not Published link to filter to the list of published or not-published items, respectively.

Performing an Advanced Inventory Search

Code Insight provides the Advanced Inventory Search dialog that enables you to easily filter the list of inventory items to those of interest based on many available criteria—inventory attributes, selected license attributes, and associated security vulnerabilities, tasks, and security alerts. In this way, you can focus on only those inventory items in which you are interested. The following procedure shows you how to access and use this dialog. Refer also to Performing Advanced Searches for practical applications of this search feature.

Note the following when using the Advanced Inventory Search feature in the Analysis Workbench.

• If the Inventory Items list is filtered by published or not-published items (before or after using an Advanced Inventory search), the resulting inventory list is based on the published/not-published filter AND the Advanced Inventory Search criteria.
• If you entered a name filter on the Inventory Items pane, it is automatically displayed for the Inventory Name filter on the Advanced Inventory Search dialog. (Likewise, if you enter a name filter on the Advanced Inventory Search dialog, it is automatically copied to the Inventory Items pane.) This behavior enables you to keep the name filter persistent. However, you can remove or replace this filter as needed in either location.

To filter inventory in the Analysis Workbench, do the following:

1. Open the Analysis Workbench for the desired project. (For instructions, see Opening the Analysis Workbench.)
2. In the Inventory Items pane, click the Advanced Search button above the list of inventory items.

The Advanced Inventory Search dialog is opened.

3. From this dialog, select search criteria as needed from the following categories. For a detailed description of the search criteria, see Advanced Inventory Search Dialog.
• Inventory Items—Search for inventory items that have a certain name (or string), priority, review status, or age or that have open vulnerability alerts and work items. (For details on alerts and work items, see Managing Security Vulnerability Alerts and Creating and Viewing External Work Items for a Project Inventory Task.)
• Inventory Tasks—Search for inventory items that have been assigned tasks. You can refine the search to locate inventory with open or closed tasks, tasks of a certain age or type (such as manual reviews or source-code remediation), or tasks assigned to a specific user.
• Inventory Custom Fields—Search for inventory whose custom inventory fields contain the value you specify as criteria. Custom inventory fields are defined specifically for your site. If no such fields have been defined this section is not visible.
• Security Vulnerabilities—Search for inventory items that have vulnerabilities of a certain vulnerability ID, CVSS severity, or age. (Note that list of available severities for Security Vulnerability Severity varies depending on the CVSS version being used by Code Insight. The picture above shows the severities for CVSS v3.x. See Working with Security Vulnerabilities for details.)
• Licenses—Search for inventory items that have licenses of a certain of a certain name or license priority.
4. In Apply Criteria field, select the boolean operator to apply to the criteria:
• Or—To be displayed in the search results, an inventory item must contain at least one of the criteria you selected on this dialog.
• And—To be displayed in the search results, an inventory item must meet all the criteria across the advanced search, as selected in this dialog.
5. Click Apply to filter the inventory to display only those inventory items that meet the selected criteria.
6. To refresh the list to show all inventory items, click Show All Items.