Summary

Synopsis

Requirements

• FlexNet Code Insight 6.10+

• A palamida.key with Data Services enabled.

Install

FlexNet Code Insight Analyzer is shipped in FlexNet Code Insight EE/CE version 6.10.3 and later.

For a manual install, follow these steps:

1. Download the appropriate distribution zip (standalone, core, or scanner) for the server.

   • Standalone (core + scan) server
   • Core only servers
   • Scan only servers
   • Auto-update package

2. Unzip the appropriate distribution on the FlexNet Code Insight server(s) from the FlexNet Code Insight installation directory.

3. On each scan server, run the installer script:

   cd $PALAMIDA/scriptRunner/scripts
   ../bin/scriptRunner.sh [...] configurePalamidaAnalyzer.groovy

Discussion

Update

To update FlexNet Code Insight Analyzer, download the update jar and place it on the core server in the config/core/scripts directory.

When the report task runs on the scan server(s) it will automatically download and install the update jar from the core server.

The URL for the update jar is: api-dev.palamida-api.com

Settings

System settings are controlled via a properties file on the core server in config/core/analyzer.properties.

Core Settings

• Analyzer Use Data Services

  NOTE: This requires a license key with Data Services enabled, and outgoing TCP access on port 443.

  Whether to use the Palamida Data Services API for additional analysis techniques. Default is true.

• Analyzer Use RubyGems API

  NOTE: This requires outgoing TCP access on port 443.

  Whether to use the RubyGems public API for additional analysis.

Project Settings

Project settings are controlled via Yes/No Metadata fields. You can create these Metadata fields by running the configurePalamidaAnalyzer.groovy script, as above. The default values are controlled via analyzer.properties.

• Analyzer Auto Schedule

  Whether to auto-schedule to the report task for enabled projects. The default is true. To change the default, set autoScheduleTask in analyzer.properties.

• Analyzer Auto Include

  Whether to select Include in Third-Party Notices for the groups that Repo Analyzer creates. Groups will only be included if they have license text. The default is true. To change the default, set autoIncludeNotices in analyzer.properties.

• Analyzer Override MID rules

  Whether the Analyzer should take files out of MID rule groups with the same component, and delete the groups if they are empty afterwards. The default is false. To change the default, set overrideMidrules in analyzer.properties.

• Analyzer Resolve Transitive Dependencies

  Whether to include transitive dependencies. Current this only affects the POM Analysis. The default is true. To change the default, set transitiveDependencies in analyzer.properties.

Run

To run the Analyzer task on a workspace, select the report from the workspace report menu.

The Palamida Analyzer - Quick Assessment produces a report only, and does not make any modifications to groups. A scan is not required.

The Palamida Analyzer - Group Builder requires a full scan to be completed, and creates the inventory with the associated files.

Current Analyzers

Source Package Repositories:

• CRAN

• NPM

• RubyGems

• Maven

Binary Packages:

• rpm/centos

• RubyGems

• jar

Source Components:

• bind

• busybox

• bzip2

• clamav

• curl

• dbus

• expat

• ffmpeg

• giflib

• glibc

• jquery-ui

• jquery

• libexif

• libgcc

• libjpeg

• libpng

• libtiff

• libungif

• libxml2

• linux-kernel

• openssh

• openssl

• qemu

• samba

• zlib

Additional Information