Skip to content

Active release monitoring

Aura uses active release information to support workspace-level monitoring, analysis coverage, and some compliance workflows.

The workspace Overview shows a count of active releases.

For workspace aggregate metrics, Aura uses each product’s latest successfully uploaded, non-archived release, once per product.

This release is used as the current source for workspace-level metrics such as:

  • component occurrences;
  • vulnerability occurrences;
  • Critical findings;
  • High findings;
  • policy violations;
  • analysis coverage.

Aura’s Overview explains that workspace totals use:

each product’s latest successfully uploaded, non-archived release, once per product

This prevents multiple releases from the same product from being counted at the same time in workspace aggregate metrics.

The Compliance area includes an Active releases section.

The interface allows users to select an authorised release for its internal compliance workflow.

Access to this workflow can depend on the current Aura plan.

Aura explicitly identifies the Compliance workflow as an internal workflow.

The records support internal decisions and do not by themselves:

  • certify legal compliance;
  • determine regulatory applicability;
  • replace organisational compliance responsibility.

The workspace Overview can show:

  • total products;
  • active releases;
  • products with eligible uploads;
  • metric coverage;
  • products and analysis coverage.

If Aura cannot use a release as a healthy source for workspace metrics, the Overview may indicate missing, failed, or ineligible sources.

Active release monitoring does not replace historical release records.

Aura preserves uploads as separate releases so previous release data remains available for history and future comparison workflows.