This process allows users to easily associate files with a component. By doing this, any associated file will produce a result in the scan interface to quickly perform identifications. In this way, auditors can quickly select components for which they know an intake has been created for.
During the scanning process, locally analyzed files will match against intaked files only if they have same hash (full match).
The component intake processor role
Any existing user can become an intake processor by having the permission ‘Components - Access component intake interface’. This user will be able to hash and associate files with any existing component.
Requirements
- The component intake permission needs to be assigned to the desired users by the administrator.
- The parameter ‘webapp_intake_repository’ needs to be configured in the fossid.conf file within the ‘Workbench’ section.
This parameter will point to a storage destination where the associated packages will reside. The WebServer must have the appropriate permissions to have access and write in the destination path.
The component intake interface
Once the requirements are fulfilled, users will have access to the intake interface in the components grid. Only users with the appropriate permission will be able to access this interface.
The grid will also show the current intake status in the ‘Intake Status’ column.
The hashing interface allow users to create the association of binaries, files or packages with a component.
Users can download files specifying a download url using the ‘Download from url’ option or they can upload files to the server using the upload option.
Any package file will be unpacked to perform the hashing operation. If a non-package file is specified, a simple association with that file will be created. This is useful when associating binaries.
Once you have started the process either specifying a URL or uploading a file to the WebServer, an association entry will be created for that file or files and the component.
When the process is successfully completed, users will be able to see the status in the components grid.
Intake packages added to FossID Workbench components can be downloaded directly from the intake interface.
A component intake can also be deleted from the hashing interface to remove the existing association.
The scan interface
When a component has any associated files and if those files are part of the scan, the auditor will be presented with an ‘intake’ match type result at the beginning of the results grid.
Users can now quickly view at the match and apply the file identification.
This will populate the file identification panel with the intake match result information.
