When attempting to exclude an item in Highlight - a popup appears which indicates that the Portfolio Manager needs to approve the exclusion.
Details
Yes, the pop up is correct. Please refer below-
Users can request the exclusion of an SCA component if they consider this component is not used by the application.
As this exclusion will remove this component across other applications of the portfolio, exclusion requests must be validated and processed by a portfolio manager. from the menu MANAGE PORTFOLIO > Manage Component Catalog.
Click on the tab "Component Exclusions" to see all the exclusion requests, status, requester, requested date and applications impacted by this component exclusion.
To process, click on Validate & Process.
This will remove the component from SCA results across the portfolio and re-compute Open Source Safety scores for the impacted applications (especially if this component had CVEs or license compliance issues).
NB : Subdomain users can only request the exclusion of a component. Only root-level portfolio managers can validate and process this exclusion request.
Related Articles
CAST HIGHLIGHT - SCA - How to exclude a third party component
Additional Resources
CAST Highlight Troubleshooting Guides
CAST Highlight Product Documentation
Zendesk Ticket Number
# 26552, 41573
Comments