Data ingestion methods

Concert ingests different types of data to build your application topology as well as to help you assess and improve the operational health of your application lifecycle. The topics in this section provide details for using the various data ingestion methods you can use to upload data.

  • Using the Concert toolkit, you can automate data ingestion as part of your CI/CD pipeline. This is the recommended approach as it helps ensure your application and environment data stays up to date.
  • The Concert API includes a data ingestion endpoint you can use to upload SBOM files, scans, and other data types.
  • Integrate directly with third-party tools and services by establishing a connection and creating an ingestion job. Each run updates your inventory with the latest component details (images, repositories, libraries, etc.) you can use to define your applications and environments.
  • Upload files from the Concert UI.
Note: When uploading an SBOM file with new data for an existing application, the image (name of the Docker image) must be the same to avoid duplicate CVE entries. Only the digest value should be unique.