Building your inventory
The quality and completeness of your organization’s application definitions are essential
for IBM® Concert ’s ability to surface
vulnerabilities, compliance issues, and other details about your operational health. You can define
your applications and environments from ingested components or generate SBOM files in the supported
formats. With this information, Concert provides a
holistic view of your application and environment topology.
Access control for applications, repositories, and build artifacts Concert applies role-based access control (RBAC) across applications, repositories, and build artifacts. Access to these assets is determined by the user’s role (L1 admin or L1 user) and their assigned access to specific applications or environments.Application and environment name restrictions Concert API.Generating ConcertDef SBOMs ConcertDef (Concert -defined) schema containing details about your application components and dependencies.Defining applications in IBM Concert Updating an application definition Defining an environment from resources Importing data to Concert Concert instance. You can choose the approach that best fits your workflow, automated ingestion, API-based uploads, or UI-guided configuration.Ingesting data at scale in Concert Concert instance, for example, large code scans or many SBOM files, you may experience delays or failures if your deployment is not configured to support high throughput. This topic provides customer‑facing best practices for configuring Concert and its database to reliably ingest data at scale.Creating a data ingestion job Concert 's ability to surface vulnerabilities, compliance issues, and other valuable insights. One way to share your application-related data with Concert is by creating an ingestion job.Exporting an application or environment Concert instance, and then import it into a new Concert instance as part of a migration or replication process. The output of the export will be a .tar file and is stored in the LZ bucket.Importing an application or environment .tar file), you can import it into a new Concert instance as part of a migration or replication process. Upon import, the data is reassessed and appears in your Inventory and Arena view . Viewing a history of applications and components Concert , including the associated build artifacts and repositories. This feature provides a comprehensive view of the changes to build artifacts and repositories over time, as well as the associated scans and trends.