Defining an application from components

One method for defining your applications is to select relevant images and repositories from your component library. The component library is populated based on existing data ingestion jobs or SBOM files that pull application component and lifecycle data from your third-party tools and services.

Before you begin

Ensure that you have created the ingestion jobs to pull data from third-party tools and services or uploaded SBOM files in ConcertDef and CycloneDX formats.

Procedure

  1. Select Inventory > Applications.
  2. Click Define application > From components.
  3. Enter a name for the application definition.
  4. Optional: Enter a description for internal reference.
  5. Adjust the version number as needed.
  6. Optional: Apply one or more tags to this environment definition.
  7. Click Next.
  8. Select the relevant Repositories, if applicable.
  9. Click Next.
  10. Select the relevant Images, if applicable.
    Note: Certain images must be listed automatically based on your selected repositories. Removing images from the list also removes the corresponding repositories.
  11. Click Next.
  12. Select the relevant Environments, if applicable.
  13. Click Next.
  14. Review the summary, then click Create.

Results

The new application definition appears in the list. You can click the application name to view associated components (images, repositories) and any impacting CVEs and their corresponding tickets.

What to do next

Grant access to other Concert users in your organization to view or edit the application definition that you created. See Managing access to your applications and environments for instructions.