Archive
Product Tutorials
-
Transitive Dependencies: How much can you trust friends of your friends?
[vc_row][vc_column width=”1/1″][vc_column_text]Friends of your friends are not necessarily your friends. In this post, we’ll see why it is important to get visibility on dependencies…
-
Good practices when defining the scope of a code scan
[vc_row][vc_column width=”1/1″][vc_column_text]In this post, we have compiled a few good practices to keep in mind when scanning a code base with CAST Highlight in…
-
Software Composition in Highlight: How Open Source component detection works
[vc_row][vc_column width=”1/1″][vc_column_text]CAST consolidates a unique database made of 94M+ Open Source components and 9B+ file fingerprints. This article details the concept and steps in…
-
How OSS licenses are mined and detected in Highlight’s Software Composition Analysis feature
[vc_row][vc_column width=”1/1″][vc_column_text]CAST has developed unique algorithms to mine and detect licenses from Open Source components to let you get a (more accurate) sense of…
-
How to detect apps using Oracle’s JDK 1.8 (and others) at the portfolio level
As you probably already know, Oracle announced a major change of their release and support rules for Java. This article is not meant to…
-
The Power is Yours: Custom Indicators
In case you missed it, the CAST Highlight last release notes announced many great new capabilities. We’re proud and excited to include Software Composition…
-
How to estimate size and health of high frequency code iterations using the delta analysis feature
The “Application Trends” feature (also known as delta analysis) dramatically increases the value of using Highlight in an Agile context. In a nutshell, Highlight…
-
How to configure a Keyword Scan for GDPR (or anything else)
In this product tutorial, we’ll see how to configure and take advantage of the Keyword Scan feature to support a GDPR assessment of your…
-
How to scan a Git repo with the Command Line (using Apache Ant)
Let’s in this article how to clone a repository from Github and run Highlight’s analyzers from Apache Ant, and upload scan results to the…
-
How to integrate Highlight’s Command Line in a Jenkins Pipeline
As the Highlight command line is a real hit across users who want to automate the scan of their code bases, we thought it…