# Manifest Docs Documentation

> Documentation for Manifest Docs

## Guides: Getting Started
- [Welcome to Manifest](https://docs.manifestcyber.com/docs/welcome-to-manifest.md): Manifest Cyber helps organizations secure their software and AI supply chains by automating the creation and management of SBOMs (Software Bills of Materials) and AIBOMs (AI Bills of Materials) to…
- [Getting Started: Product Security](https://docs.manifestcyber.com/docs/getting-started-product-security.md): Welcome to Manifest Product Security for analyzing SBOM and Software Risk! Here is a walkthrough to get you started and maximizing the use of the platform.
- [Getting Started: SBOM Generation ](https://docs.manifestcyber.com/docs/getting-started-sbom-generation-sca.md): A quickstart guide to generating SBOMs for source code and containers. Manifest provides two ways to generate an SBOM: through our Command Line Interface (CLI) tool or Github. We recommend using the…
- [Getting Started: TPRM & C-SCRM](https://docs.manifestcyber.com/docs/quickstart.md)
- [Getting Started: Manifest API](https://docs.manifestcyber.com/docs/getting-started-manifest-api.md)
- [Getting Started: AI Risk Analysis](https://docs.manifestcyber.com/docs/getting-started-ai-risk-analysis.md)
- [Getting Started: Binary Analysis](https://docs.manifestcyber.com/docs/binary-analysis.md)
- [Getting Started: Foreign Risk](https://docs.manifestcyber.com/docs/getting-started-foreign-risk.md)
- [Getting Started: Manifest Insights Agent & MCP](https://docs.manifestcyber.com/docs/getting-started-manifest-insights-agent.md)
- [Getting Started: Supplier Risk](https://docs.manifestcyber.com/docs/supplier-risk.md)

## Guides: Setup and Deployment
- [Setting Up SSO](https://docs.manifestcyber.com/docs/setting-up-sso.md): This ability is limited to team members with the Admin role.
- [Self-Hosted Deployments](https://docs.manifestcyber.com/docs/self-hosted-deployments.md)
  - [Requirements](https://docs.manifestcyber.com/docs/requirements.md)
  - [Credentials Required](https://docs.manifestcyber.com/docs/credentials.md)
  - [Installation](https://docs.manifestcyber.com/docs/installation.md)
  - [Configuration Reference](https://docs.manifestcyber.com/docs/configuration.md)
  - [Encryption & Key Management](https://docs.manifestcyber.com/docs/encryption.md)
  - [DNS Configuration](https://docs.manifestcyber.com/docs/dns.md)
  - [Firewall Configuration](https://docs.manifestcyber.com/docs/firewall.md)
  - [Post-Install](https://docs.manifestcyber.com/docs/post-install.md)
  - [Upgrade](https://docs.manifestcyber.com/docs/upgrade.md): Upgrade an existing self-hosted Manifest 2.x installation to a newer release using the `manifest-installer` CLI.
  - [Air-Gapped Deployments](https://docs.manifestcyber.com/docs/air-gapped-deployments.md)
    - [Build the Air-Gapped Bundle](https://docs.manifestcyber.com/docs/build-bundle.md)
    - [Set Up the Target Host](https://docs.manifestcyber.com/docs/setup.md)
    - [Deploy and Verify](https://docs.manifestcyber.com/docs/deploy.md)
    - [Update an Air-Gapped Install](https://docs.manifestcyber.com/docs/updates.md)
  - [Troubleshooting](https://docs.manifestcyber.com/docs/troubleshooting.md)
  - [Self-Hosted v1 (Legacy)](https://docs.manifestcyber.com/docs/self-hosted-v1-legacy.md)
    - [Migrating from v1 to v2](https://docs.manifestcyber.com/docs/v1-to-v2-migration.md)
    - [Upgrade a v1 Installation](https://docs.manifestcyber.com/docs/v1-upgrade.md): Upgrade an existing managed self-hosted Manifest v1 installation (1.20.0 or later) to a newer v1 release using the `manifest-installer` CLI.
    - [Upgrade from Unmanaged Installation](https://docs.manifestcyber.com/docs/v1-upgrade-from-unmanaged.md): Self-hosted versions of Manifest prior to version 1.20.0 used an "unmanaged" installation. Starting with 1.20.0, the `manifest-installer` utility will manage the installation and upgrade process.
    - [Troubleshooting v1](https://docs.manifestcyber.com/docs/v1-troubleshooting.md)

## Guides: GENERATING SBOMs
- [Generating SBOMs: Overview](https://docs.manifestcyber.com/docs/generating-sboms.md)
- [Using the CLI](https://docs.manifestcyber.com/docs/using-the-cli.md)
- [Using the Github App](https://docs.manifestcyber.com/docs/connecting-to-github.md)
- [Generating SBOMs in CI/CD Pipelines](https://docs.manifestcyber.com/docs/generating-sboms-in-ci.md)
  - [Integrating the CLI with Azure DevOps](https://docs.manifestcyber.com/docs/integrating-the-cli-with-azure-devops.md)
  - [Integrating with Jenkins](https://docs.manifestcyber.com/docs/integrating-with-jenkins.md)
- [Using Third-Party Generators](https://docs.manifestcyber.com/docs/using-3rd-party-generators.md)
- [Supported Languages and Artifacts](https://docs.manifestcyber.com/docs/supported-languages-and-artifacts.md)
  - [C++ and C Based Languages](https://docs.manifestcyber.com/docs/c-and-c-based-languages.md)
  - [Container Images](https://docs.manifestcyber.com/docs/container-images.md)
  - [Full Disk Images: Linux Based](https://docs.manifestcyber.com/docs/full-disk-images-linux-based.md)
  - [Full Disk Images: Windows Based](https://docs.manifestcyber.com/docs/full-disk-images-windows-based.md)
  - [SquashFS Archive Files](https://docs.manifestcyber.com/docs/squashfs-archive-files.md)

## Guides: SBOM Management
- [Uploading SBOMs, Product SBOMs, VEX, and VDR Documents](https://docs.manifestcyber.com/docs/uploading-sboms.md): This ability is limited to team members with Admin and/or Member roles.
- [Enriching SBOMs](https://docs.manifestcyber.com/docs/enriching-sboms.md)
- [Scanning Open Source Software Repositories](https://docs.manifestcyber.com/docs/ingesting-open-source-software-oss.md): This ability is limited to team members with Admin and/or Member roles.
- [Requesting SBOMs from Third Parties (Vendors)](https://docs.manifestcyber.com/docs/requesting-sboms-from-3rd-parties.md): This ability is limited to team members with Admin and/or Member roles.
- [Editing SBOMs](https://docs.manifestcyber.com/docs/editing-sbom-metadata.md): This ability is limited to team members with Admin and/or Member roles.
- [Comparing SBOM Versions](https://docs.manifestcyber.com/docs/comparing-sbom-versions.md): Compare two versions of an asset to see which components, vulnerabilities, and licenses changed between them.
- [Comparing SBOM Versions with the API](https://docs.manifestcyber.com/docs/comparing-sbom-versions-with-the-api.md): Compare two versions of an asset with the Manifest API: summary totals, component, vulnerability, and license changes, and an XLSX export.

## Guides: Navigating the Object Model
- [The Manifest Object Model](https://docs.manifestcyber.com/docs/the-manifest-object-model.md)
- [Products](https://docs.manifestcyber.com/docs/products.md)
  - [Creating a Product Hierarchy](https://docs.manifestcyber.com/docs/creating-a-product-hierarchy.md)
  - [Adding Products using the CLI](https://docs.manifestcyber.com/docs/adding-products-using-the-cli.md)
  - [Product and Vulnerability Sharing](https://docs.manifestcyber.com/docs/product-and-vulnerability-sharing.md)
  - [VDR Uploads and Downloads with the API](https://docs.manifestcyber.com/docs/vdr-uploads-and-downloads-api.md): Upload Manifest VDR documents, check their processing status, and download uploaded VDR files with the Manifest API.
- [Assets](https://docs.manifestcyber.com/docs/assets.md)
- [Components](https://docs.manifestcyber.com/docs/components.md)
  - [Understanding Direct and Transitive Dependencies](https://docs.manifestcyber.com/docs/understanding-direct-and-transitive-dependencies.md)
- [Vulnerabilities](https://docs.manifestcyber.com/docs/the-vulnerabilities-page.md)

## Guides: AI Risk
- [Understanding Manifest AI Risk](https://docs.manifestcyber.com/docs/understanding-manifest-ai-risk.md): Manifest AI Risk offers full visibility into the AI models and data powering your software so you can govern AI use at every level. AI Risk continuously monitors both open-source and custom models to…
- [Analyzing AI Risk Models](https://docs.manifestcyber.com/docs/analyzing-ai-risk-models.md)
- [Managing Your AI Model Inventory](https://docs.manifestcyber.com/docs/managing-your-ai-model-inventory.md)
- [Configuring AI Risk Policies](https://docs.manifestcyber.com/docs/ai-risk-analysis-governance.md)
- [Secure Development with Python Plugin](https://docs.manifestcyber.com/docs/secure-development-with-notebook-plugin.md): The Manifest Notebook Plugin enables teams to integrate AI risk management directly into their existing workflows. By installing Manifest's MAIS plugin, every cell in your notebook is automatically…
- [Detecting Shadow AI in Source Code Using the CLI](https://docs.manifestcyber.com/docs/detecting-shadow-ai-in-source-code-using-the-cli.md): This feature requires an subscription to the Manifest AI Risk Module. For more information, reach out to support@manifestcyber.com.

## Guides: Vulnerabilities & Risks
- [Configuring Policies](https://docs.manifestcyber.com/docs/configuring-policies.md): Policies evaluate each newly uploaded SBOM against predefined risk criteria and notify designated recipients when policy conditions are met. This reduces time to detection for vulnerability and…
- [Managing Vulnerability Alerts](https://docs.manifestcyber.com/docs/managing-notifications.md): This ability is limited to admins only.
- [License Detection](https://docs.manifestcyber.com/docs/license-detection.md)
- [Vulnerabilities Overview](https://docs.manifestcyber.com/docs/vulnerabilities.md)
- [Vulnerability Scoring](https://docs.manifestcyber.com/docs/how-manifest-scores-risk.md)
- [Triaging Vulnerabilities](https://docs.manifestcyber.com/docs/triaging-vulnerabilities.md): This ability is limited to team members with Admin and/or Member roles.
- [VEX & VDR Documents](https://docs.manifestcyber.com/docs/creating-vex-documents.md): This ability is limited to team members with Admin and/or Member roles.
- [Custom Vulnerabilities API](https://docs.manifestcyber.com/docs/custom-vulnerabilities.md): Organization administrators have the ability to push custom vulnerabilities into their organization's instance.

## Guides: Reporting & Sharing
- [Generating Reports](https://docs.manifestcyber.com/docs/generating-reports.md)
- [Downloading SBOMs](https://docs.manifestcyber.com/docs/downloading-sboms.md)
- [Sharing SBOMs Externally](https://docs.manifestcyber.com/docs/sharing-externally.md): This ability is limited to team members with Admin and/or Member roles.
- [Using the Sharing Portal](https://docs.manifestcyber.com/docs/using-the-sharing-portal.md): This ability is limited to team members with Admin and/or Member roles.
- [Vulnerability Notifications](https://docs.manifestcyber.com/docs/notifications.md)

## Guides: Settings and Administration
- [Integrations](https://docs.manifestcyber.com/docs/integrations.md)
  - [Connecting to JIRA](https://docs.manifestcyber.com/docs/connecting-to-jira.md): This ability is limited to team members with the Admin role only.
  - [Connecting to ServiceNow](https://docs.manifestcyber.com/docs/connecting-to-servicenow.md): This ability is limited to team members with the Admin role only.
  - [Connecting to Linear](https://docs.manifestcyber.com/docs/connecting-to-linear.md): This ability is limited to team members with the Admin role only.
- [Managing Users](https://docs.manifestcyber.com/docs/managing-users.md): This guide walks you through adding or deleting users who would need access to the Manifest platform. By the end of this guide, you'll know how to properly provision or revoke access, helping your…
- [Managing Sub-Organizations](https://docs.manifestcyber.com/docs/managing-sub-organizations.md): This ability is limited to team members with the Admin role only.
- [Managing API Tokens](https://docs.manifestcyber.com/docs/creating-api-keys.md): Manifest's APIs allow you to easily bring all of Manifest's functionality to your automated workflows. This ability is limited to team members with Admin or Member roles.
  - [ API Token Scopes Reference](https://docs.manifestcyber.com/docs/api-token-scopes-reference.md)
- [Managing Labels](https://docs.manifestcyber.com/docs/managing-labels.md): This ability is limited to team members with Admin and/or Member roles.
- [Managing Roles](https://docs.manifestcyber.com/docs/managing-roles.md): This ability is limited to team members with the Admin role only.
- [Guides](https://docs.manifestcyber.com/docs/guides.md): Access downloadable guides and resources for Manifest security and administration.

## Guides: Release Notes & General FAQs
- [Release Notes Log](https://docs.manifestcyber.com/docs/release-notes.md): Manifest's release notes provide updates about the newest functionality available to our users. For any questions, reach out to Mike McDonel at [mike@manifestcyber.com](mailto:mike@manifestcyber.com)…

## Changelog
- [Welcome to Manifest Docs](https://docs.manifestcyber.com/changelog/welcome-to-manifest-docs.md)