Skip to content

Software Composition Updates #10490

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
OlufunkeMoronfolu wants to merge 1 commit into
base: development
Choose a base branch
from
Draft

Software Composition Updates #10490

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
76 changes: 38 additions & 38 deletions content/en/docs/deployment/general/software-composition.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -78,19 +78,19 @@ The following options are available above the list of deployment packages:

The list contains the following information:

* **Deployment Package** — The name of the deployment package.
* **Environment** — The name of the environment where the package is deployed.
* **Runtime** — The Mendix Runtime version.
* **Findings** — The number of findings of each type, color-coded according to severity level.
* **Deployment Package** – The name of the deployment package.
* **Environment** – The name of the environment where the package is deployed.
* **Runtime** – The Mendix Runtime version.
* **Findings** – The number of findings of each type, color-coded according to severity level.
{{% alert color="warning" %}}Findings are calculated for all software packages that are built. However, if a package is not deployed, we will stop updating its findings after 30 days. These findings will be grayed out and displayed as 0.{{% /alert %}}
* **Version** — The version of the deployment package on this app environment.
* **Technical Contact** — The Technical Contact of the app.
* **Target Cloud** — The type of cloud where the deployment package is deployed. Currently, the following types of cloud are supported:
* **Version** – The version of the deployment package on this app environment.
* **Technical Contact** – The Technical Contact of the app.
* **Target Cloud** – The type of cloud where the deployment package is deployed. Currently, the following types of cloud are supported:
* Mendix Free Cloud
* Mendix Cloud (including Mendix Cloud Dedicated)
* Mendix on Kubernetes (connected)
* Column customization ({{% icon name="view" %}}) — You can customize the columns in the list by clicking the {{% icon name="view" %}} icon and selecting or deselecting options.
* **View details** — Clicking this opens the [Deployed Package Details](#deployed-package-details) page, if it is available. The **View details** button is grayed out when an SBOM is not available for the selected deployment package. Ensure you are on a compatible runtime version and create a new deployment package in order to get component visibility here.
* **View details** – Clicking this opens the [Deployed Package Details](#deployed-package-details) page, if it is available. The **View details** button is grayed out when an SBOM is not available for the selected deployment package. Ensure you are on a compatible runtime version and create a new deployment package in order to get component visibility here.

### Deployment Package Details {#deployed-package-details}

Expand Down Expand Up @@ -126,9 +126,9 @@ The **Components** tab gives an overview of all the unique components deployed i

The **Insights** cards display the following details:

* **Marketplace** — The number of private and public Marketplace components used throughout your apps.
* **Support type** — The number of Marketplace components divided into content support categories.
* **Summary** — The number of findings in each severity category, along with a rolling average of how the number of findings has evolved over the past 30 days, expressed as a percentage.
* **Marketplace** – The number of private and public Marketplace components used throughout your apps.
* **Support type** – The number of Marketplace components divided into content support categories.
* **Summary** – The number of findings in each severity category, along with a rolling average of how the number of findings has evolved over the past 30 days, expressed as a percentage.

### Component List

Expand All @@ -140,25 +140,25 @@ The following options are available above the list of components:

The component list contains the following information:

* **Component** — The name of the component.
* **Type** — The type of component, which can be one of the following:
* **Component** – The name of the component.
* **Type** – The type of component, which can be one of the following:

* **Module** — Standard marketplace module imported from the Marketplace, such as [Community Commons](https://marketplace.mendix.com/link/component/170), or a module created by the developer.
* **Widget** — User interface elements downloaded from the Marketplace, such as [Charts](https://marketplace.mendix.com/link/component/105695), or a widget created by the developer.
* **Framework** — The Mendix Runtime version, for example 10.12.0
* **Jar** — Java libraries imported into your app using [Managed Dependencies](/refguide/managed-dependencies/), or those manually added in the **userlib** folder depending on the Studio Pro version used, such as `org.apache.commons.io`.
* **npms** — `npm` libraries that are used in your [JavaScript actions](/refguide/javascript-actions/).
* **Unknown** — When the type of the component is none of the above and hence undetermined.
* **Module** – Standard marketplace module imported from the Marketplace, such as [Community Commons](https://marketplace.mendix.com/link/component/170), or a module created by the developer.
* **Widget** – User interface elements downloaded from the Marketplace, such as [Charts](https://marketplace.mendix.com/link/component/105695), or a widget created by the developer.
* **Framework** – The Mendix Runtime version, for example 10.12.0
* **Jar** – Java libraries imported into your app using [Managed Dependencies](/refguide/managed-dependencies/), or those manually added in the **userlib** folder depending on the Studio Pro version used, such as `org.apache.commons.io`.
* **npms** – `npm` libraries that are used in your [JavaScript actions](/refguide/javascript-actions/).
* **Unknown** – When the type of the component is none of the above and hence undetermined.

* **Support type** — The support type of the Marketplace component. This can be **Mendix**, **Partner**, or **Community**.
* **Support type** – The support type of the Marketplace component. This can be **Mendix**, **Partner**, or **Community**.
For more information, refer to [Content Support Categories](/appstore/marketplace-content-support/#category).
* **Version** — The version of the component that is being used.
* **Findings** — This shows the number of findings of each type, color-coded according to severity level.
* **License** — For components derived from the Mendix Marketplace, this is the end-user license for the component.
* **Version** – The version of the component that is being used.
* **Findings** – This shows the number of findings of each type, color-coded according to severity level.
* **License** – For components derived from the Mendix Marketplace, this is the end-user license for the component.
* **Marketplace** – Whether the component is **Public** or **Private**. A public component is available to the whole Mendix community in the Marketplace, while a private component is available only via your [Company Content](/appstore/home-page/#company-content) page.
* **Latest version** — The latest version of the component.
* **Latest version** – The latest version of the component.
* **Publisher** — The name of the organization that published the component.
* **View details** — Clicking this opens the [Component App Details](#component-usage) page.
* **View details** – Clicking this opens the [Component App Details](#component-usage) page.
* Column customization ({{% icon name="view" %}}) – You can customize the columns of the list by clicking the {{% icon name="view" %}} icon and selecting or deselecting options.

To export the information corresponding to selected items in the list to an Excel file, select the checkboxes of the items in the list, then click **Selection Export** that appears at the bottom of the page.
Expand Down Expand Up @@ -191,17 +191,17 @@ The following options are available above the list:

The finding list contains the following information:

* **Severity** — The severity of the finding related to that component.
* **Finding Type** — The type of finding, which can be **Outdated** or **Deprecated**.
* **Deployment Package** — The deployment package in which the component is identified as a risk.
* **Environment** — The name of the environment where the app is running.
* **Target Cloud** — The type of cloud where the deployment package is deployed.
* **Age** — The number of days that the finding has been applicable, computed as follows:
* **Severity** – The severity of the finding related to that component.
* **Finding Type** – The type of finding, which can be **Outdated** or **Deprecated**.
* **Deployment Package** – The deployment package in which the component is identified as a risk.
* **Environment** – The name of the environment where the app is running.
* **Target Cloud** – The type of cloud where the deployment package is deployed.
* **Age** – The number of days that the finding has been applicable, computed as follows:

* Deprecated components: The current date - The date when the component was deprecated
* Outdated components: The current date - The publish date of the first higher runtime compatible version

* Column customization ({{% icon name="view" %}}) — You can customize the columns in the list by clicking the {{% icon name="view" %}} icon and selecting or deselecting options.
* Column customization ({{% icon name="view" %}}) – You can customize the columns in the list by clicking the {{% icon name="view" %}} icon and selecting or deselecting options.

#### Component Usage {#component-component-usage}

Expand All @@ -215,9 +215,9 @@ The following options are available above the list:

The component usage list contains the following information:

* **Deployment Package** — The name of the deployment package where the component is used.
* **Environment** — The name of the environment where the app using the component is deployed.
* **Runtime** — The runtime version to which the component is compatible.
* **Version** — The version of the impacted deployment package.
* **Target Cloud** — The type of cloud where the deployment package is deployed.
* Column customization ({{% icon name="view" %}}) — You can customize the columns in the list by clicking the {{% icon name="view" %}} icon and selecting or deselecting options.
* **Deployment Package** – The name of the deployment package where the component is used.
* **Environment** – The name of the environment where the app using the component is deployed.
* **Runtime** – The runtime version to which the component is compatible.
* **Version** – The version of the impacted deployment package.
* **Target Cloud** – The type of cloud where the deployment package is deployed.
* Column customization ({{% icon name="view" %}}) – You can customize the columns in the list by clicking the {{% icon name="view" %}} icon and selecting or deselecting options.
2 changes: 1 addition & 1 deletion content/en/docs/releasenotes/deployment/mendix-cloud.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -20,7 +20,7 @@ For information on the current status of deployment to Mendix Cloud and any plan

#### Improvements

* We enhanced the security infrastructure with stronger access controls for internal data objects
* We enhanced the security infrastructure with stronger access controls for internal data objects.

### December 06, 2025

Expand Down