SAFE Viewer
The SAFE Viewer is a standalone application developed by ReversingLabs for working with the SAFE report in the RL-SAFE archive format. The RL-SAFE archive contains the full SAFE report and all other supported report formats for a software package analyzed with Spectra Assure. The archive can be created with a CLI tool, downloaded from the Portal UI, or exported with the Portal API.
When you open the archive in the SAFE Viewer, it looks and behaves the same as a standalone report generated with the rl-secure report rl-html command, or the report you open directly on the Portal and share with others via Portal UI.
The SAFE Viewer is available for download to anyone and can be used without a Spectra Assure license or an Internet connection.
Current version of the SAFE Viewer is 1.4.8. To update to this version, download the installer for your platform.
With SAFE Viewer, you can open the SAFE report in the portable archive format (.rl-safe) and export parts of the report in their designated formats.
The Viewer is most suitable for the following use-cases:
Sharing RL-SAFE archives with teams and organizations who don't have a Portal account or a CLI license. They can use the SAFE Viewer to open the archive and view the analysis reports on their local system.
Working with large reports that cannot be opened due to limited system resources or file size restrictions in place.
Auditing and storing reports as snapshots of software analysis at a specific point in time. Spectra Assure users can export the RL-SAFE archive for analyzed software versions, and preserve the results even if the versions are later removed from their Portal or CLI projects or reprocessed. Having these reports on hand at all times enables organizations to implement the audit process in ways they see fit.
Even though the SAFE Viewer processes are sandboxed to minimize damage from potentially malicious code, do not open any RL-SAFE archives from unknown or unreliable sources.
Get SAFE Viewer
The SAFE Viewer is a self-contained Electron application that supports the following operating systems:
For Windows, the Viewer is distributed only as an installation package, while for Linux, it's available both as an installation package and a ready-to-run portable executable.
You can open and extract installation packages with any file archiver utility to access the ReversingLabs transparency report in the docs/Transparency folder.
The transparency report is itself an RL-SAFE archive created by ReversingLabs after analyzing that specific version of the SAFE Viewer.
The full SAFE report and the SBOM in the archive help you verify that each Viewer version is secure.
Linux
For Linux, you can download the latest version of the SAFE Viewer in any of the formats listed in the following table. SHA-256 checksums for installer packages are included in the table for integrity verification purposes.
| Format | Download links | SHA-256 checksum |
|---|---|---|
| AppImage (x64) | Download | 478bed707ad8a99cae5eeb68d1c66154213a5c73193ed630c3f17fb323a0c573 |
| AppImage (arm64) Experimental | Download | 05bf918f885889e9c52b3df5fc5c649895ee05abe8f4f3cc23cfea273b913f12 |
| DEB (x64) | Download | 50dd06484724f8456945c03ee0a7278b8d0dbbfc0420923f6aee91ca812b7a0c |
| DEB (arm64) Experimental | Download | 22d171db93e8ffffb4f74b1822a633f75181cceec3586adca90b798ac85fd534 |
| RPM (x64) | Download | 9f2581a1bcb80465a4ba578e3ba6e7f9687b88936281352f7851e544ee3cc625 |
| RPM (arm64) Experimental | Download | 710e7d8e1ca648edfb91db40c290344f2314f11d65d2ee5ac93b30de0ede16db |
| SNAP (x64) | Download | c3e5b2cadb474a791cec8dfc41618da4383d569343d12d76183685d0b17eae4c |
Ubuntu 24 LTS is not supported due to some major changes in that version that affect Electron applications.
Windows
For Windows, you can download the latest version of the SAFE Viewer in any of the formats listed in the following table. SHA-256 checksums for installer packages are included in the table for integrity verification purposes.
| Format | Download links | SHA-256 checksum |
|---|---|---|
| Windows Installer (x64) | Download | 04742b31de743128203ea7fca9b009b9c22b8192ae31eee834c99d007cf8c6d5 |
| Windows Installer (arm64) Experimental | Download | b861af1aa3c242ef02d9229e3f7767b7efb18ddececccd0150eccba419b466f9 |
macOS
For macOS, you can download the latest version of the SAFE Viewer in any of the formats listed in the following table. SHA-256 checksums for installer packages are included in the table for integrity verification purposes.
| Format | Download links | SHA-256 checksum |
|---|---|---|
| macOS Installer (x64) | Download | bd756e6139600eb5a1e79efd684260a5c1a429dfc3dbe440f7035aa527fbd842 |
| macOS Installer (arm64) | Download | d9fe4837a6c7e9063b6a849d2a349389a8493e67d9a85949010b06e500e39a06 |
Prerequisites
Complete the following tasks before installing the SAFE Viewer:
- Make sure you have the supported OS version. Check the Known issues section for more details.
- Download the installation package or a portable executable from any of the official sources and save it somewhere on your system where you can easily access it.
Install SAFE Viewer
In this step, you're going to install the SAFE Viewer.
Linux installation
- AppImage
- DEB
- RPM
- SNAP
If you downloaded an AppImage, you first need to mark it as an executable. This is done in any of the following ways:
From the UI
- Locate the file.
- Right-click on the icon and select
Properties > Executable as Program. - After that, double-click on the icon to launch it.
From the Terminal
- Locate the file and run the following from the Terminal:
chmod a+x rl-safe-viewer-linux-x86_64.AppImage
- Next, launch the application:
rl-safe-viewer
If you downloaded a DEB file, you can install it in any of the following ways:
From the UI
- Locate the file.
- Double-click on the icon and install it with the Software installation application.
- After that, double-click on the icon to launch it.
From the Terminal
- Locate the file and run the following from the Terminal:
sudo dpkg install rl-safe-viewer-linux-amd64.deb
- Next, launch the application:
rl-safe-viewer
If you downloaded an RPM file, you can install it in any of the following ways:
From the UI
- Locate the file.
- Double-click on the icon and install it with the Software installation application.
- After that, double-click on the icon to launch it.
From the Terminal
- Locate the file and run the following from the Terminal:
sudo dnf install rl-safe-viewer-linux-x86_64.rpm
- Next, launch the application:
rl-safe-viewer
If you downloaded a SNAP file, you can install it in any of the following ways:
From the UI
- Locate the file.
- Double-click on the icon and install it with the Software installation application.
- After that, double-click on the icon to launch it.
From the Terminal
- Locate the file and run the following from the Terminal:
sudo snap install rl-safe-viewer-linux-amd64.snap
- Next, launch the application:
rl-safe-viewer
Windows installation
- Extract the contents of the installation package (the downloaded ZIP file).
- Locate the installer EXE file.
- Double-click on it and follow the installation instructions in the wizard that opens.
macOS installation
- Extract the contents of the installation package (the downloaded ZIP file).
- Locate the installer DMG file.
- Select the file and drag its icon into the Applications folder in the window that opens.
Update SAFE Viewer
The SAFE Viewer is backwards-compatible. This means that if you have the latest version of the Viewer, you can open RL-SAFE archives generated with older versions of Spectra Assure products.
However, this does not work the other way around. If you have an old version of the Viewer, but the archive you want to open was generated with the latest version of the CLI or Portal, an error will occur due to compatibility issues.
To make sure you can open all RL-SAFE archives, it is essential to always use the latest version of the SAFE Viewer.
The SAFE Viewer does not auto-update. Every time a new version is available, you need to download and install it to your machine. You can find your current version information in the lower left corner of the Viewer launch screen. To check if a new version is available, use the Help menu in the Viewer navbar.
Work with the RL-SAFE archive
To get started with the SAFE Viewer, you can download the example RL-SAFE archives by clicking any of the following cards:
Open the RL-SAFE archive
To open the SAFE report in the .rl-safe archive format, first open the Viewer and drag and drop the file into the designated spot.
If this is not your preferred method, use any of the following buttons:
Choose a File, in the middle of the drag-and-drop areaFile > Open Report, from the menu located in the application navbar
Alternatively, you can double-click on the RL-SAFE archive file saved on your machine.
This automatically opens both the Viewer and the report.
If this does not work, manually set the file format association for the .rl-safe format on your system.
No matter how you open the report, the Viewer performs integrity verification before displaying the report contents. Usually, the verification process is done instantly, but may take a while for large reports.
The report opens automatically if the integrity verification passes. If it fails, an error message pops up and you cannot view the report contents. In case this happens, check whether you have the latest version of the SAFE Viewer.
When you open a report, it's added to the list of recently viewed reports and can be quickly accessed from there the next time you run the Viewer. You can have multiple reports open at the same time, but each one is displayed in its own application window.
Open a password-protected report
The SAFE Viewer can open password-protected RL-SAFE archives.
To view a password-protected report for a package, open the RL-SAFE archive and provide a password when prompted to decrypt the report contents. You can view the report only if you provide the correct password.
When sharing password-protected RL-SAFE archives with others, make sure to send them the correct password.
Export a part of the report
If you want to save a certain part of the report in the desired format to your machine, you can do so either with the Export option in the navbar or directly from any report page available for export.
Only the following parts of the report can be exported from the SAFE Viewer:
- xBOM in either the
CycloneDXorSPDXformat (SPDX excludes CBOM) - Issues, in the
SARIFformat - Vulnerabilities, in the
RL-CVEformat - Networking, in the
RL-URIformat
Differences in the SAFE reports between products
Although the SAFE report looks and behaves consistently across all Spectra Assure products, some slight differences do exist:
1. Amount of diff versions per file
On the Portal Projects page, only a single diff can be created for each package version. This is due to the fact that for each package version you upload to the Projects page, you can choose only one predecessor (i.e., the older version it derived from).
On the other hand, the CLI allows you to create multiple diffs for each package version. In this case, multiple diff checks are listed in the Performed checks section of the report Summary page.
If your RL-SAFE archive was generated with the CLI and contains multiple diff reports, the SAFE Viewer allows you to switch between them from the Select Diff menu in the navbar.
2. Inclusion of the binary
In Portal Projects, it's possible to download the software package (binary file) directly from the report page. If this option is enabled when generating a share link for the report, every user that receives the report link can also download the binary.
On the other hand, the RL-SAFE archive does not include the binary of the analyzed package version - only its report. The binary of the package version cannot be exported from the SAFE Viewer app, no matter which Spectra Assure product the archive is generated with.
Known issues
To offer you the best possible experience with the SAFE Viewer, this section contains a list of issues with the application we're aware of. If you run into an issue while using the Viewer, first check the following list:
- Drag and drop works randomly for SAFE Report Viewer on Debian 12 ("Bookworm") version.