Assets

Searching for an Asset

To find a specific asset, go to the Assets page and use the search box to enter the name (and version) of your asset. You can also use the search box in the top header of the Manifest App to search for a specific name.

To find an asset that meets specific criteria (e.g. all assets that have a critical vulnerability, or all assets that have license issues), click on the Filter button at the top of the table, directly to the right of the search box. This will open a panel with all available filters on the right side of the app.

Downloading an Asset

1. Select your asset from the Assets page.
2. Click Download in the top right.
   1. If you have applied any edits to the SBOM through Enrichment or after editing any component metadata, click "Download Edited SBOM".
   2. If you would like to download your SBOM in its original state, click "Download Original SBOM"

Sharing Asset SBOMs

To learn about sharing SBOMs using secure email, please read Sharing SBOMs Externally. If you have the Sharing Portal enabled, please check Using the Sharing Portal.

Marking Assets as Active or Inactive

By default, all assets are included in all analysis across Manifest, but you can choose to exclude certain assets by marking them as Inactive.

1. Select your asset from the Assets page.
2. Click on the ⋮ in the top corner, and click "Mark as Inactive".
3. Confirm that the asset is now be labelled inactive in the top left corner.

Adding Labels to Assets

1. On the Assets page, select the row containing your asset. You may select multiple assets if you would like to apply the same label to all of them.
2. In the top right, select "Add labels".
3. In the next view, click on the label you would like to apply to the asset. To create a new label, type the name of the label into the box at the top of the screen and click "Create new label"

Adding Assets to a Product

1. On the Assets page, select the row containing your asset. You may select multiple assets.
2. In the top right, select "Add to Product".
3. In the next view, select the products that you would like to add your assets to.

Understanding 1st and 3rd Party Assets

When SBOMs are uploaded, you have a option to select whether it will be considered 1st party or 3rd party. All assets that were developed by your internal organization are 1st party assets. 1st party assets have additional functionality and may be added to VEX documents. All SBOMs that were not developed internally (i.e. by vendors) are 3rd party assets.

Currently, you cannot change an asset from 1st party to 3rd party. If an asset was mistakenly labeled the wrong party, please delete the SBOM from the Uploads page, and reupload the SBOM with the correct party designation.