Skip to main content

Working with Insights

With Insights, you get a high-level overview of issues present in the Projects of your group. This feature is available to all users in a Portal instance, regardless of their user role.

From the Insights page, you can do the following:

Use Quick searchesโ€‹

To begin working with Insights and get a good grasp of the feature, start with Quick searches. They are used to search across the group that's currently selected in the Portal header.

From the sidebar, expand any of the existing categories (Malware, Tampering, Secrets, Vulnerabilities, Hunting, License). Each category has a list of default searches specifically designed to cover the most prominent use-cases.

You have two options:

  • from the list, select the most appropriate search for your use-case, and check if there are any major concerns in any of the packages uploaded to Portal Projects for your group, or
  • go through the entire list to see if any of the searches yielded results you can promptly triage

To start a new search with your own filters, select Start New Search at the top of the page sidebar.

This opens a new Unsaved Search page where you can add as many filters as needed. A new dialog opens, prompting you to first choose a search term from the list:

  • Group - Project Name, Project Version
  • Version - Version Platform, Version Category, Version Released, Version Status, Version Approval, Latest Released, Reproducibility, Release Date
  • Component - Component Name, Component PURL, Component Path, Component Publisher, Component License, Component Tags
  • Report - SAFE Assessment, SAFE Level Blockers
  • Issues - Issue Category, Issue Status, Issue Priority, Issue Identifier
  • Vulnerabilities - CVE Identifier, Vulnerability Name, Vulnerability Severity, Vulnerability Tags, CWE Identifier
  • Malware - Malware Verdict, Malware Platform, Malware Type, Malware Family
  • Secrets - Secret Identifier, Secret Endpoint, Secret Liveness
  • Licenses - License SPDX ID, License Family

With each filter you add, the set of results is narrowed down, and only the items that match every filter are displayed. Due to this, some filter combinations may not return any matches.

Depending on the filter, the following Operators are available:

  • is
  • is not
  • is any
  • is not any
  • all of
  • before and after (in terms of date)

When you've decided on the filter and the operator, either type in the value or, if available, select it from the list.

An issue that matches your search will show up on the page. If no such issues exist, the page remains blank. However, if the search yields multiple results, you can sort them by affected packages, affected versions, or effort needed to resolve them.

To save the search you've created for future use, select the Save Search button in the upper right corner of the page.

Your search is saved to the My Searches section in the sidebar. Depending on the selected filters, your search will be available from either the Use in any group or the Current group dropdown.

Search is group-specific if any of the filters from Group category have been selected. Filters from other categories are used to search for general issues and can be used in any of your groups on the Portal instance.

Edit search detailsโ€‹

Your search details can be updated at any time from the Insights page sidebar.

Select the Actions menu next to the search you want to edit. This menu is represented by three dots (โ‹ฎ) and from there, you can do the following:

  • Rename Search, prompting you to type in the new search name
  • Delete Search, asking you to confirm the search deletion
  • Copy Search Link, instantly copying the direct search link to the clipboard. You can then send it to other members of your Portal organization so they can use it on their profile

Edit search filtersโ€‹

If you want to refine your saved search, you can do so by using:

  • the Add Filter button at the top of the Insights page
  • the clickable filters in the insight card header or the issue description and policy violations sections to specifically focus on the issue on the card

Once you've chosen the additional filters or removed the ones you do not need anymore, you have two choices - upadate the existing search or save these filters to a new search. This is available only for user-specific searches.

Quick searches cannot be altered in any way. If you add or remove filters from a quick search of your choice, it will always prompt you to save it as a new search.