Archive
Product Tutorials
-
Transitive Dependencies: How much can you trust friends of your friends?
[vc_row][vc_column width=”1/1″][vc_column_text]Friends of your friends are not necessarily your friends. In this post, we’ll see why it is important to get visibility on dependencies…
-
Good practices when defining the scope of a code scan
[vc_row][vc_column width=”1/1″][vc_column_text]In this post, we have compiled a few good practices to keep in mind when scanning a code base with CAST Highlight in…
-
Software Composition in Highlight: How Open Source component detection works
[vc_row][vc_column width=”1/1″][vc_column_text]CAST consolidates a unique database made of 94M+ Open Source components and 9B+ file fingerprints. This article details the concept and steps in…
-
How OSS licenses are mined and detected in Highlight’s Software Composition Analysis feature
[vc_row][vc_column width=”1/1″][vc_column_text]CAST has developed unique algorithms to mine and detect licenses from Open Source components to let you get a (more accurate) sense of…
-
How to detect apps using Oracle’s JDK 1.8 (and others) at the portfolio level
[vc_row][vc_column width=”1/1″][vc_column_text]As you probably already know, Oracle announced a major change of their release and support rules for Java. This article is not meant…
-
The Power is Yours: Custom Indicators
In case you missed it, the CAST Highlight last release notes announced many great new capabilities. We’re proud and excited to include Software Composition…
-
How to estimate size and health of high frequency code iterations using the delta analysis feature
[vc_row][vc_column width=”1/1″][vc_column_text pl=”0″ pr=”0″ pt=”0″ pb=”0″] The “Application Trends” feature (also known as delta analysis) dramatically increases the value of using Highlight in an…
-
How to configure a Keyword Scan for GDPR (or anything else)
In this product tutorial, we’ll see how to configure and take advantage of the Keyword Scan feature to support a GDPR assessment of your…
-
How to scan a Git repo with the Command Line (using Apache Ant)
Let’s in this article how to clone a repository from Github and run Highlight’s analyzers from Apache Ant, and upload scan results to the…
-
How to integrate Highlight’s Command Line in a Jenkins Pipeline
As the Highlight command line is a real hit across users who want to automate the scan of their code bases, we thought it…