Projects Management

Introduction

A project is the target for the scans. It can be any unit of software that can be analyzed independently, with any granularity. It could correspond with an application, module, service, microservice, container image, library, component…​

A project typically is under version control, and it physically has a set of source files, often grouped as a repository in a Source Code Management (SCM) System.

So, in short, a project is the analysis unit in Xygeni, can match any software item that is analyzed independently (library, application etc.) and often is a repository under version control.

Projects have the following properties:

  • Business Value, one of CRITICAL, HIGH, MEDIUM, LOW or INFO.

  • Business Area, organization-specific.

  • Architecture, organization-specific.

  • Tags, arbitrary labels that could be added to a project for grouping and classification purposes.

Other common properties are Provider, which could be used to track your software suppliers' risk, and Product Unit, which help organizing scanned modules into aggregated software products.

You can also create your own Custom Properties. See Custom Properties for further details.

A Policy could be assigned to a project. If no explicit policy is set for the project, the default policy will be used.

Choosing project or group in Dashboard

In the top bar of the Dashboard there is a project selector for choosing an individual project or a group of projects

The Projects Selector is a UI feature that allows to select a project subset among the available ones in the Xygeni organization. Almost every UI page’s data is related to the selected Project(s).

The subset of projects can vary from a unique project to All projects, passing for any defined subset.

See Projects Selector for further details

Projects can be aggregated into groups defined dynamically via their properties. Projects can be tagged with labels that allow to group them in arbitrary collections.

Projects are scanned for analyzing Software Supply Chain Security issues; the scan findings are uploaded to the Xygeni service. The Dashboard shows such findings for an individual project or aggregated at any group.

There is a special group including the full software assets in the organization, the default All group.

Projects Management

Project Management page can be found at Settings >> Project Management

In order to browse through the existing projects, you can use the Filter fields.

Clicking on New Project button allows you to create a project. When creating a new project, you will see that some properties are General (i.e. out-of-the-box properties, those marked with a (*) are mandatory ) and others are Custom (i.e. defined by the Xygeni administrator).

A very important mandatory field is the Policy (i.e. the custom configuration to be applied to the project).

Project's Out-of-the-box Properties

Xygeni comes with some out-of-the-box project properties (i.e. properties that are common for all the projects and part of the predefined Xygeni configuration). Out-of-the-box properties cannot be deleted (although you can freely assign values to them)

Together with these properties, you can define you own custom properties, as it's explained in next section.

Project's Custom Properties

Under the Custom Properties, you can click on the Add property link to define the new Custom Property.

Provide a name and the values for the custom property.

After saving, you will be able to see the new property added to the Custom Properties section.

Just select the appropriate value for the edited project and click on Update button to save changes.

The new custom property will appear in all your projects. Until you assign a specific value for a project, the value of the custom property for that project will be empty (no value)

To delete a custom property, just click on the trash button that appears to the right of the property.

Once you have created a custom property, that property can be used as a filter in the Prioritization Funnels. Please see Prioritization Funnels for further info.

Last updated