|
| 1 | +--- |
| 2 | +title: "Components" |
| 3 | +description: "Tracking third-party libraries and software components in DefectDojo Pro" |
| 4 | +audience: pro |
| 5 | +weight: 1 |
| 6 | +--- |
| 7 | + |
| 8 | +In DefectDojo, Components represent third-party libraries, software components, and modules that potentially have vulnerabilities. |
| 9 | + |
| 10 | +## The Component Table |
| 11 | + |
| 12 | +DefectDojo Pro includes a dedicated table view for Components. Imported Components remain on the table even if all of their associated Findings are Mitigated. When Findings are imported for a specific Component, the Component Table is updated to accurately reflect the new Finding totals. |
| 13 | + |
| 14 | +The Component Table displays the following columns: |
| 15 | + |
| 16 | +* **Component** — the name of the component, populated from scan data. |
| 17 | +* **Version** — the component version, populated from scan data. |
| 18 | +* **Active Findings** — count of Active Findings associated with the component. |
| 19 | +* **Duplicate Findings** — count of Duplicate Findings associated with the component. |
| 20 | +* **Total Findings** — total count of all Findings associated with the component. |
| 21 | + |
| 22 | +The totals for Active Findings, Duplicate Findings, and Total Findings are calculated from the Findings on the instance. |
| 23 | + |
| 24 | +Clicking on the Component Name or the values for Active Findings, Duplicate Findings, or Total Findings opens a filtered list of Findings for the respective field. |
| 25 | + |
| 26 | +A **None** Component is displayed on the table, which shows all Findings that are not associated with any Component. |
| 27 | + |
| 28 | +## Adding Components |
| 29 | + |
| 30 | +Components can be added from a scan import or by manually editing a Finding. Once a Component Name is associated with a Finding, it is added to the Component Table. If the Component is already associated with other Findings on the instance, the totals for Active Findings, Duplicate Findings, and Total Findings are updated accordingly. |
| 31 | + |
| 32 | +## Updating Components |
| 33 | + |
| 34 | +To update a Component Name or Version, all Findings associated with the Component must have their Component Name or Component Version field updated. |
| 35 | + |
| 36 | +## Removing Components |
| 37 | + |
| 38 | +To remove a Component from the Component Table, all Findings associated with the Component must be updated to remove their Component Name and Component Version fields. Components are also removed if all of their associated Findings are deleted. |
| 39 | + |
| 40 | +If all of a Component's Findings are Mitigated, the Component remains on the table but its Active Findings value is set to 0. |
0 commit comments