Software Risk Manager User Guide

Software Risk Manager Documentation

Version: latest

Software Risk Manager User Guide
Getting Started with Software Risk Manager
Software Risk Manager Deployment Options
Software Risk Manager Support Information
Running a Basic Analysis with Sample Data
User Configuration Settings (My Settings)
Configuring Software Risk Manager
User Administration
Adding and Configuring Project Metadata Fields
API Keys Administration
Managing User Groups
Triage Approval Workflow
Manual Entry Configuration
Triage Assistant
Polaris Assist (Beta)
Add-In Tools
Assigning Tags to Findings
Server Logs
License Information
Roles
Project Management Overview
Working with Projects
Using Filters to Find Projects
Adding a Project
Configuring a Project Analysis
Configuring Tools for a Project
Configuring Tool Connectors for a Project
Supported Tool Connectors
Qualys VM Tool Connector
Scheduling Auto Update
Analyzing Code in a Git Repository
Issue Tracker Configuration
Advanced Field Configuration
Expression Basics
Expression Logic
Helpers
Enumerable Fields
Issue Tracker Two-way Sync
Automatic Status Updating
Automatic Issue Creation
Configuring Project Metadata
Tool Service Configuration
Orchestrated Analysis
Intelligent Orchestration Overview
Policies Overview
Policy Configuration
Creating and Editing Policies
Applying a Policy to a Project
Applying a Policy to Multiple Projects
Monitoring Policy Violations
Integrations Overview
Analysis Tools
Continuous Integration
Integrated Development Environments
Issue Tracking
Plugins
Source Code Management
Bulk Onboarding with GitHub Repositories
Analyses Overview
Built-In Open Source Code Scanners
Bundled Open Source Tool Versions
Built-In Open Source Dependency Scanners
Importing Scan Results
Aqua SaaS Configuration
JFrog Xray Support
Parasoft Support
SonarQube Support
Starting an Analysis
Starting an Analysis Using the Web Interface
Starting an Analysis Using the API
Tool Orchestration
Resource Requirements
Scan Request File
Adding an AppSec Testing Tool
Tool Status and Severity Mapping
SAST Tools Mapping
DAST Tools Mapping
IAST Tools Mapping
Mobile Tools Mapping
InfraSec Tools Mapping
Threat Modeling Tools Mapping
Component Tools Mapping
Container Tools Mapping
Cloud Infrastructure Tool Mapping
Infrastructure as Code (IaC) Tool Mapping
WAF Tools Mapping
STIG Tools Mapping
Tool First Seen Date
Correlation Overview
Understanding Rule Sets
Understanding Data Normalization
Understanding Location-based Correlation
Understanding Component Correlation
Understanding Hybrid (SAST/DAST) Correlation
Understanding InfraSec Correlation
Understanding Location-less Correlation
Findings Overview
Searching for Specific Findings
Working with Filters
Using Filters to Display Findings Data
Configuring Filters
Using Time Filters
CWE Support
Performing Bulk Operations
Change Status
Change Assignment
Override Severity
Bulk Comment
Issue Tracker Integration
Managing Tags
Set Fix By Date
Findings Table
Analysis Input List
Adding Manual Results
Using Machine Learning with Project Findings
Working with Components
Working with Findings Reports
Generating a Findings Report
Creating a Findings Report Template
Working with Finding Details
Branching
Details Summary
Severity Override
Accessing Additional Training Modules
Activity Stream
Descriptions
Training Video
Standard Violations
Evidence
HTTP Activity
AI Insight Using Polaris Assist
Source Code
Issue Tracker
Predicted Status
Fix By
Attachments
Triage Status Definitions
Finding Status Definitions
Project Dashboard
Global Dashboard
Hybrid Correlation
Agentless Correlation
Agentless Correlation Requirements
Agentless Correlation Known Limitations
Rule Sets
Rule Identifying Information
Rule Criteria
Hosts
Host Scopes
Hosts Table
Visual Log
Visual Log Messages
Visual Log Filters
Webhooks
Software Risk Manager Install Guide
Software Risk Manager Install and Deployment Options
Installation Requirements for the Native Installer
Installation Using the Native Installer
Linux Considerations
Installation Directory
Admin Account
Data Directory
Protocol Configuration
Web Server Ports
MariaDB Database Information
SSL Configuration
Generate an SSL Certificate
Trusting Certificates
Tomcat Port Configuration
Time Expectations
Firewall
License File
Uninstallation or Reinstallation
Upgrading
Restoring to a Previous Version
Manage Software Risk Manager Services
Installation Using Docker Compose
Software Risk Manager Core Deployments
Docker Compose Requirements
Configuration Tasks (Pre-work)
Persistent Storage Pre-work
External Web Database Pre-work
Trust Certificates Pre-work
HTTPS Pre-work
Software Risk Manager Installation
Installation Prerequisites
Volume Naming
Installation without an External Database
Installation with an External Database
Customizing Software Risk Manager
Backup and Restore
Back Up and Restore Prerequisites
Creating a Backup
Backup Retention
Restoring a Backup
Upgrading Software Risk Manager
Running Software Risk Manager After Upgrade
Migrating from the Software Risk Manager Native Installer to Docker Compose
Migration Without an External Database
Migration With an External Database
Uninstall
Installation Using Kubernetes
Manual Installation
Software Risk Manager Configuration
Understanding the AppData Directory
Enabling Intelligent Orchestration
Configuration Files
Database Connection Config
Internet Access
External URL
Active Directory/LDAP Configuration
SAML Configuration
Account Lockout
Password Policy
Header-Based Authentication
External User Auto-Registration
Cookie Config
Session Expiration
EULA Acceptance
Data Retention Configuration
Git Related Configuration
Job Configuration
Analysis Behavior
Report Configuration Templates
PDF Report Configuration
Finding Search
Tool Configuration
JVM System Properties
Proxies
Visual Log Configuration
Tool Orchestration Configuration
Issue Tracker Configuration
Machine Learning Triage Server Memory Usage
Automatic Updating of the Software Risk Manager Prediction Model
Secure Code Warrior
Software Risk Manager Scoring Calculations
SMTP Configuration
Host Normalization
Webhook Configuration
Polaris Assist
Customizing the Report Email Template
Customizing the Policy Email Template
Configuring Automatically Deactivating Users
Project Configuration
Software Risk Manager Plugins Guide
Software Risk Manager Plugins
Jenkins
Installation
Job Configuration
Analysis Results
TeamCity
Installation
Configuration
Analysis Results
Bamboo
Installation
Configuration
Eclipse
Installation
Configuration
Views
Findings View
Finding Details View
Markers
Running an Analysis
Visual Studio
Visual Studio Code
IntelliJ
Burp Suite
Installation
Configuration
Sending Results to Software Risk Manager
OWASP ZAP
Installation
Sending Results to Software Risk Manager
API
Splunk
Installation
Configuration
Using Software Risk Manager with Splunk
GitHub Action
Black Duck Bridge CLI Command Line Interface
Configuring Coverity Thin Client for use with Black Duck Bridge CLI and SRM
Software Risk Manager API Guide

Back to home page