Skip to main content

Releasing the Product with a Notices Report

After Engineering has completed the remediation plan, resolving all rejected inventory items, the codebase is rescanned until it is approved for release. When the codebase is approved for release, you can generate a Notices Report to accompany the software application. This report identifies all open-source/third-party components that the application contains. (Only published inventory items are included in the Notices Report.)

This Notices Report satisfies the attribution requirements of most open-source licenses.

To generate a Notices Report:

  1. Click the Reports tab for the project.

    • The tab opens, showing the list of standard and custom reports available for the project.

  2. Select Notices Report.

  3. Click Generate Report. A dialog box opens stating that the report will be generated as a background process.

  4. Click OK. Once the generation of the report has successfully completed, links are displayed in the View Report and Download Report columns for the report.

  5. To view the HTML version of the report in a web browser, click View. The report opens in a web browser with the following information displayed for each published inventory item:

    • Inventory name—The component name, version, and governing license name is listed.

    • Inventory URL—The associated component’s URL is listed, if available.

    • Inventory notices text—The associated component’s license text is listed, if available.

  6. Click Download to download a ZIP file containing the report data as a .txt file. (The text format enables you to reformat the report data as you want.)

note

You can manually add the final text to include in the Notices Report by entering it on the Notices Text tab for the inventory item in Analysis Workbench or Project Inventory. Refer to “Finalizing the Notices Text for the Notices Report” in the Code Insight User Guide.