Xygeni User Guides
  • Welcome to Xygeni
  • Getting Started
    • Create a Free Trial Account
    • Quick start with your code repository
    • Quick start with Xygeni CLI
    • Quick start with a preloaded project
    • Log in to Xygeni
    • Subscribe to Xygeni
  • Introduction to Xygeni
    • Key Concepts
      • Projects in Xygeni
      • Project Baseline
      • Detected Issues
      • Remediation Actions
      • Policies
      • Risk Level
      • SDLC Inventory
      • Standards Compliance
      • GuardRails
    • Xygeni Products
    • How Xygeni works
    • Xygeni Web UI Overview
      • Projects Screen
        • Risk Level
    • Integrating Xygeni into your Workflow
    • Prioritization Funnels
      • Custom Funnels
      • Prioritization Criteria (Stages)
        • Reachability
        • Exploitability
        • Fixable
    • Guardrails
    • Generate a SBOM
    • Reports
      • Trends
      • Scan History
    • Supported Integrations
    • Customizations
  • Xygeni Products
    • Application Security Posture Management (ASPM)
      • ASPM User Interface Guide
      • Projects
      • All Risks
        • Statistics
        • Issues Evolution
        • Issue Comparison Between Different Scans
      • Governance
      • Inventory
        • All Assets
        • Repositories
        • Components
        • CI/CD Assets
        • Delivery Assets
        • Systems & Tools
        • Collaborators
      • Health Check
      • Inventory Scanner
        • Inventory Scanner Configuration
        • Inventory Collaborators Scan
      • Importing reports from 3rd party tools
        • External Scanners Supported
          • Report upload for Kiuwan
            • ExportRule (.java)
    • Code Security (SAST)
      • Code Security (SAST) User Interface Guide
        • Risks (SAST)
        • Malicious Code
      • Malware Scanner
        • Malware Scanner Configuration
        • Malware Detectors
      • SAST Scanner
        • SAST Scanner Configuration
    • Open Source (SCA)
      • Open Source (SCA) User Interface Guide
      • Open Source Components
      • Supported Package Managers for dependency resolution
      • Risks (SCA)
      • OSS Prioritization Funnels
      • OSS Auto-Remediation
      • Malware Early Warning (MEW)
        • How Malware Early Warning works
        • Common types of Malware found in open source packages
      • Dependency Scanner
        • Dependency scanner configuration
        • Dependency Analyzers
      • Suspect Dependencies Scanner
        • Suspect Deps Scanner Configuration
        • Suspect Deps Detectors
    • CI/CD Security
      • CI/CD Security User Interface Guide
      • CI/CD Details
      • Build Attestations
      • CI/CD Scanner
        • CI/CD Misconfigurations Scanner Configuration
      • Compliance Scanner
        • Supported compliance standards
    • Secrets Security
      • Secrets User Interface Guide
      • Secrets Scanner
        • Secrets scanner configuration
      • Secret Leaks Handling
        • Secret Leaks Handling
        • How to Prevent Hard-Coded Secrets
        • Secret Leaks Handling CheatSheet
      • Secrets Auto-Remediation
    • IaC Security
      • IaC User Interface Guide
      • IaC Scanner
        • IaC Scanner Configuration
    • Malware
    • Build Security
      • Build Security Concepts
      • Build Attestations
      • Attestation format
      • How SALT works
      • Installing Salt CLI
      • Salt Command-Line Reference
      • SALT Architecture
      • SALT How To…​
    • Anomalous Activity Detection
      • Anomalous Activity Detection User Interface Guide
      • Xygeni Sensors
        • Xygeni Sensor for Azure
        • Xygeni Sensor for BitBucket
        • Xygeni Sensor for GitHub
          • GitHub Audit Log Processing
        • Xygeni Sensor for GitLab
        • Xygeni Sensor for Jenkins
        • Anomaly Detection's Detectors
      • Code Tampering Scanner
        • Code Tampering Scanner Configuration
    • Compliance & Malware Insights
      • SSCS Compliance
      • Malicious Packages DB
  • Scan Management
    • Manage Scans
      • Manage Scans FAQ
    • Scan History
  • Xygeni Scanner CLI
    • Xygeni Scanners
    • Xygeni CLI Overview
      • Xygeni CLI Prerequisites
      • Xygeni CLI Installation
      • Xygeni CLI Docker Image
      • Xygeni CLI Authentication
        • CLI Authentication with Xygeni
      • SCM, CI/ CD and Container Registry tokens
      • Xygeni CLI Operation Modes
        • Single scan
          • Scanning a docker image
        • Multi Scan
        • Organization scan
      • Xygeni CLI Configuration options
      • Xygeni CLI Output Formats
      • Exporting Xygeni results to 3rd party tools
      • Automatic Remediation
      • Generate SBOM with the Xygeni CLI
      • CLI utils
        • Credentials Encryption
        • Central Configuration
      • Xygeni Guardrails
        • CI/CD Audit Analysis
      • Xygeni CLI Error Codes
      • Xygeni Scanner Reference
  • Xygeni Administration
    • Platform Administration
      • Profile
      • Subscription
      • Users Management
      • Projects Management
      • Groups Management
      • Policies
      • Integrations
        • Xygeni Single Sign-On (SSO) Authentication
          • SSO - OKTA
          • SSO - Microsoft Entra ID
        • Integrate Scanner CLI into CI/CD Systems
          • Azure Pipelines Integration
          • BitBucket Integration
          • CircleCI Integration
          • GitHub Actions Integration
          • GitLab Runner Integration
          • Jenkins Integration
          • Travis CI Integration
        • Git Hooks with Xygeni
        • Collaboration & communication Tools
        • Ticketing Systems
        • Remediation systems
      • Notifications
    • Rest API
  • Support
  • Changelog
    • Version 5.11 - April 11, 2025
    • Version 5.9 – March 26, 2025
Powered by GitBook
On this page
  • Findings by Category
  • Projects
  • Components
  • System and Tools
  • Collaborators
  • Pipelines
  • Coverage
  • Projects by Size
Export as PDF
  1. Xygeni Products
  2. Application Security Posture Management (ASPM)

Health Check

PreviousCollaboratorsNextInventory Scanner

Last updated 1 month ago

The Health Check page displays useful metrics and details about your Xygeni projects.

There are several sections within the Health Check page:

Findings by Category

The Findings by Category chart shows a 5-axis spider chart where there is a relevant score for each axis.

Projects

The Projects section displays two types of information:

  1. Inactive Projects, i.e. xygeni projects whose last code change is older than XXXX (TBD)

If you click on the Inactive View >> link, you will see the inactive projects as well as the applied filters:

  1. Obsolete Branches, i.e. repository branches whose last code change is older than XXXX (TBD)

If you click on the Obsolete Branches View >> link, you will see the inactive branches as well as the applied filters:

Components

The Components section displays several types of information related to your components.

Licensing Issues refers to the number of components with some kind of issues related to the component's license (mainly, use of a copyleft license).

With different versions refers to the number of components that are used in 2 or more different versions.

Out of date Versions refers to the number of components that have a new version is available.

Obsolete components refers to the number of components whose newer version is older than XXX (TBD), possibly meaning that those components are abandoned or out of maintenance and you should consider using another component.

If you click on any of the View >> links, you will see the components as well as the applied filters:

A component may be repeated because it appears in several projects because the table lists all the combinations of component-project with the applied filters.

System and Tools

The System and Tools section displays your SCM system, build/cicd tools.

Collaborators

The Collaborators section displays two types of information:

  1. Inactive Collaborators, i.e. repo users whose last activity is older than XXXX (TBD)

If you click on the Inactive View >> link, you will see the inactive projects as well as the applied filters:

  1. Over-privileged Collaborators, i.e. users whose actions performed do not need granted permissions (TBD)

If you click on the Over privileged View >> link, you will see the over privileged collaborators as well as the applied filters:

Pipelines

The Pipelines section displays information about the total number of pipelines and how many of them are inactive (i.e. not executed in the last XXXX TBD)

If you click on the View >> link, you will see the inactive pipelines as well as the applied filters:

Coverage

The Coverage section shows the total number of projects lacking Inventory information, indicating that an Inventory scan was not executed on these projects.

Click the View >> link to see non-inventoried projects and applied filters:

Projects by Size

This section provides details on the average project size and the count of projects that exceed this average. Oversized projects often contain large binary artifacts that should not be stored in the SCM. Identifying these artifacts helps in understanding the cause of excessive project size.

Click the View link to see over-sized projects and the applied filters.

By clicking on the icon you will be able to open a 3rd-party ticket on the integrated ticketing system

Visit the page for further details

By clicking on the icon, you will see all the details of the selected project.

By clicking on the icon, you will see all the details of the selected component:

To open a ticket using the integrated ticketing system, click on the ticketing icon(see for further details)

By clicking on the icon, you will see all the details of the inactive collaborator (latest activity, permissions and issues)

By clicking on the icon you can open a ticket on the integrated ticketing system (see for further details)

By clicking on the icon, you will see all the details of the over-privileged collaborator (latest activity, permissions, issues and audit trail)

By clicking on the you will be able to open a ticket on the integrated ticketing system (see for further details)

By clicking on the icon, , you'll find all details of the oversized project (including recent activities, file count, size, access level, and all associated assets).

Ticketing systems
Ticketing systems
Ticketing systems
Ticketing systems
Findings by Category
Projects
Components
System and Tools
Collaborators
Pipelines
Coverage