Products and releases
Aura organises software-security information around products and releases.
A product is the main container for SBOM uploads and the security information derived from them.
Each successful SBOM upload creates a new release inside the product.
How products and releases fit together
Section titled “How products and releases fit together”The basic relationship is:
Workspace ↓Product ↓Upload SBOM ↓Release ↓Inventory and analysisA workspace can contain multiple products.
A product can contain multiple releases.
Product
Section titled “Product”A product represents the software or product area you want to track in Aura.
Products help keep related:
- SBOM uploads;
- releases;
- software inventory;
- vulnerability findings;
- dependency information;
- license information;
- policy results
grouped together.
Release
Section titled “Release”A release is created when an SBOM is successfully uploaded to a product.
Each upload creates a new release, including when another SBOM is uploaded for the same software version.
This allows Aura to keep release-specific inventory and security information over time.
Typical workflow
Section titled “Typical workflow”A common workflow is:
- Create a product.
- Open the product.
- Upload a supported SBOM.
- Wait for Aura to process the upload.
- Review the release when its status becomes READY.
- Review inventory and security information associated with the release.
- Upload another SBOM when you want to create another release.