Module

Under Code -> Repositories -> Repository, you are able to drill down into different views for each Module. Specifically:

• Security

• Dependencies

• API Endpoints

• Contributors

• Guardrail Executions

These views provide insight into Module security weaknesses, identification of dependencies with relevant findings and remediations, API endpoints, contributors, and finally what, if any, Guardrail executions are in place and have activated.

Security

Similar to Catalog -> Service -> Security, there are different views available for Security under Modules:

• Dependency Remediations

• Active Findings

• Fixed Findings

• Deployed Findings

• Source Findings

The description and details for each view can be found under Catalog -> Service -> Security, but are scoped to Modules rather than Services.

Dependencies

Dependencies lists the individual dependencies with aggregated information including version, license, number of findings by severity, link to the dependency path, and classification, which includes first/third party, direct/transitive, open source/vendor, reachability, unmaintained, unpinned, unapproved license, etc.

Dependency details are accessible via link for each Dependency showing an overview and list of its Findings.

API Endpoints

API Endpoints lists the method and path of individual endpoints with additional information like file location of the endpoint definition, link to its location in the repository, and when it was first seen.

Contributors

Contributors lists the individuals who have roles, e.g., developers, reviewers, commenters, related to committing code to the specific Module of the repository.

Guardrail Executions

Guardrail Executions provides an audit trail of when individual Guardrails were executed against changesets and their results: Passed, Failed, Pending. Each entry also includes a link to view the Guardrail execution in the repository.

In addition, for each Guardrail execution, there are details on the Guardrail definition, i.e., rule parameters, scope parameters, and violations found, if any.