Configuring Code Insight

After Code Insight had been installed, the Code Insight System Administrator must perform a number of configuration tasks before the user can begin using Code Insight. This chapter describes these configuration tasks:

• Adding or Editing Scan Servers or Checking Server Status

• Managing Users

• Setting Up Electronic Updates

• Managing the Daily Check for New Security Vulnerabilities

• Managing NG-bridge (Digest Data) Updates for Code Insight

• Configuring an Email Server

• Configuring Code Insight for LDAP

• Configuring Code Insight to Use Single Sign-On

• Configuring Extended Logging

• Managing Scan Profiles

• Enabling Calculation of SHA-1 Digests for Scanned Files

• Setting Project Defaults

• Setting the Common Vulnerability Scoring System (CVSS) Version

• Creating and Managing Custom Fields for Inventory

• Creating and Managing Custom Fields for Projects

• Configuring Code Insight for Exports to SBOM Insights

• Accessing Code Insight Server REST API Documentation

• Enabling Cross-Origin Resource Sharing

• Managing Authorization Tokens

• Configuring the Session Timeout

note

The first time you open Code Insight, an Electronic Update will begin. The update can take 4 or more hours to complete. You cannot use the application to scan files until the update finishes. However, you can configure Code Insight while the update is in progress.

For information about the permissions granted to the Code Insight System Administrator role, see the Code Insight User Roles and Permissions chapter.

Optionally, see Accessing Code Insight Server REST API Documentation in this chapter for information about Code Insight REST APIs that enable you to create your own administrative tool for managing scan operations and retrieving data from scan results.