Projects
SOOS scans are organized by Projects and then by Branches. If multiple types of scan (such as SCA and DAST) share a project name and branch name the results will be intermingled. If they only share a project name, but have different branches, or one has no branch, they will be organized under the same project but different branches.
Access a project's detail by selecting the project on the Developer dashboard. Alternatively, on most other dashboards, search, or in the news, results will be displayed in the context of a project.
After navigating to a project, the top bar includes information about the project, branch and current scan details.
The list of branches for this project that have scans, changing the branch will show the latest results for the selected branch. SOOS uses some special branch names that you may see, such as No Branch (any scan without a branch will use this name), Manifest/SBOM/SAST Scan (scans originating from the File QuickScan).
Shows the type of scan(s) that have been run for the branch. By default the results below will show the latest results for any scans run for the branch, selecting a specific scan type will filter the results to only that scan type.
Displays the version information passed via the --buildNumber argument. Optionally, this may be manually set. The version information plays a critical role when using Dependent Projects and External SBOM Document References.
Trigger a rescan using the most recently uploaded manifest/SBOM/etc., any new vulnerabilities, and package versions will be included and any updated project or global configurations will be utilized.
If your manifest/SBOM/etc. has changed, the Rescan button will not pick up on those changes. You must trigger a new scan yourself so the updated files are included.
Use the tabs to switch between views of the projects details. The statistics will change based on the view (Issues , Dependencies , Licenses) to reflect information shown below. These statistics provide a quick way to gauge the health of the project and the change since the last scan.
Some Suppressed Issues are not included in the statistics.
Depending on the type of scan run, some tabs and statistics may be disabled (such as Code Issues and Web Vulnerabilities) in the example below.
