About Archive Expansion

As described in Performing the Codebase Upload, when preparing to upload a project codebase to the Scan Server, you must specify the level of archive expansion (that is, the depth to which you want to see inside codebase archives) that will be visible once you scan the uploaded codebase. Depending on the level of expanded archives in the Codebase Files tree (in the Analysis Workbench), you can drill down to the files contained within the archive layers and view the specific evidence found within these files. From these files, you can then filter directly to those inventory items associated with the files.

For archives not expanded, you can still view the inventory directly associated with the archive, but you cannot access files within the archive nor view their evidence at the individual file level. Additionally, the file that is associated with a given inventory item is the unexpanded archive, not the actual file containing the evidence within the archive.