Adding a Codebase File to Inventory Associated with a Remote File’s Open-Source Component

When a given codebase file exactly or partially matches a remote file (that is, a file in the Compliance Library), you can use the following procedure to easily add the codebase file to an inventory item based on an open-source or third-party component associated with the remote file.

To add codebase file to an inventory item based on the remote file’s open-source or third-party component, do the following:

1.

Open the Analysis Workbench for the desired project. (For instructions, see Opening the Analysis Workbench.)

2.

Click the Exact or Source matches link in the legend at the top right of the workbench to search for codebase files that are exact or partial matches to files in the Compliance Library. Results are listed in the File Search Results pane.

3.

From the list in File Search Results, locate and click the codebase file you want to add to an inventory item based on a specific component version associated with the file.

4.

Open the File Details tab, and, at the top of the tab, select the Exact Matches or Partial Matches tab.

Additionally, if you are on the Partial Matches tab, select the Source Matches checkbox.

5.

From the Remote Files panel, select the remote file associated with the component on which the inventory item to which you want to add the file is based (or will be based if you need to create an inventory item).

6.

In the Components panel, locate the component version that you believe is the origin of the matching code in the scanned codebase file, and click the Add File to Inventory icon in that component row.

Code Insight searches for existing inventory items associated with the given component version. If one or more inventory items exist, the Add to Inventory dialog is displayed, showing the list of available inventory items. Continue with Step 7.

Otherwise, if no inventory items are currently associated with the given component version, the Lookup Component window is displayed, showing the given component version. From this window, you can register an instance for the component version (by selecting a license), register a new component version, search for a new component altogether, or create a custom component. Once you click Use This Instance for a component version in the Lookup Component window, Code Insight creates the inventory item based on the selected component instance and associates the selected file with the inventory item. The Inventory Details tab is opened for the inventory item. (Ignore the remaining steps in this procedure.)

7.

Click the checkbox next to the inventory item to which you want to add the file.

8.

(Optional) To mark the selected codebase file as reviewed, click Mark file as reviewed.

9.

Click Submit. Code Insight adds the codebase file to the inventory item.